last executing test programs: 2m4.779157109s ago: executing program 3 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2m4.571668742s ago: executing program 3 (id=556): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x124840, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)={@link_local, @local, @val, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @remote, @dev}, @address_reply={0x12, 0x0, 0x0, 0x67ce}}}}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x47, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000180), 0x0}, 0x20) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) 1m59.592227801s ago: executing program 3 (id=582): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05690200000000000109022400010000"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x5, 0x9, 0x60, @empty, @mcast2, 0x80, 0x700, 0x4, 0x3}}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/37, 0x25, 0x1, 0x0}, &(0x7f0000000240)=0x40) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@grpjquota}, {@sysvgroups}]}, 0x21, 0x632, &(0x7f0000000600)="$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") syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a00837967e4e3a70f6"], 0x0}, 0x0) 1m59.421476833s ago: executing program 32 (id=582): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05690200000000000109022400010000"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x5, 0x9, 0x60, @empty, @mcast2, 0x80, 0x700, 0x4, 0x3}}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) shutdown(r1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/37, 0x25, 0x1, 0x0}, &(0x7f0000000240)=0x40) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x83, &(0x7f00000005c0)={[{@norecovery}, {@grpjquota}, {@sysvgroups}]}, 0x21, 0x632, &(0x7f0000000600)="$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") syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a00837967e4e3a70f6"], 0x0}, 0x0) 10.610949562s ago: executing program 1 (id=1256): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x1, 0x3) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x80, &(0x7f0000000d80)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x4a, 0x3a, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x23}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffffffd, [{0x5}, {0x0, 0x7, "06aa85616177c61bc943afcb8461975540394630730a18d5c38cf7dcad830f2dc8674b87ba8b58d61ece27975cc39e595e9af90b4fe9"}]}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 9.241353574s ago: executing program 1 (id=1259): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000280)={[], [{@measure}, {@permit_directio}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0xfe, 0x490, &(0x7f0000000e00)="$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") creat(0x0, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0xb68, 0x240) creat(0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'veth1\x00', {0x1}, 0x2}) syz_open_dev$usbfs(0x0, 0x205, 0x2581) syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000001340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xf8, 0x8, 0x6, 0x0, 0xff}, 0x1cc, &(0x7f0000001680)=ANY=[]}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'tunl0\x00', &(0x7f00000005c0)=@ethtool_test={0x1a, 0x8, 0x6}}) 8.426284226s ago: executing program 5 (id=1265): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x4, 0x7, 0xf41a, 0x9, 0xfff3, 0x4, 0x7, 0x7, 0xfff, 0x200, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0x31, 0x32, {0x32, 0x2b, "d814052b1ec95e2a85da34937526ed40b6da1fcc03b661bb8e2357b86b025dac8bb0607d175bec1cda72744fb125219e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') socket$inet6_udp(0xa, 0x2, 0x0) 5.111170559s ago: executing program 2 (id=1274): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x51, 0x8000, 0x5, {0x80, 0x1}, {0x6c, 0x7}, @rumble={0xafe4, 0x30e7}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioprio_get$pid(0x1, r2) syz_socket_connect_nvme_tcp() 5.110757359s ago: executing program 5 (id=1275): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB="5a0352538aecbc828c15d71b16043fee6aee155bb3f9030dbfc0113fc153f63e368e8fafd0e5e2bc3de5cae7592de3eddad2b5e8ae80635bb8a7bafe4b9715b5287230c800b28d72416fa745329869d4131da47776720d58275946d4fa6821d242889c8618214e088b3fa503686e997425"]}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4.701595966s ago: executing program 4 (id=1281): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xfb2514f08c55c983, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_emit_ethernet(0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e) 4.348644561s ago: executing program 0 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 4.348163452s ago: executing program 1 (id=1283): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103", @ANYRESOCT=0x0], 0x0) pipe2$9p(&(0x7f0000000200), 0x80) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 4.347754982s ago: executing program 0 (id=1284): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="75746644e01cea757466383d302c757466383d302c636865636b3d7374726963742c696f636861727365743d6b6f69382d752c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c696f636861727365743d6d61636963656c616e642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c756e695f786c6174653d312c00"], 0x26, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f00000001c0), 0x0) syz_clone(0xc0008100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.052471706s ago: executing program 2 (id=1285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4.036351086s ago: executing program 2 (id=1286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0xa8, 0x0, 0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000240)=@x86={0x3, 0x6, 0x9, 0x0, 0x5, 0x23, 0xff, 0x0, 0x1, 0xa, 0x4, 0xad, 0x0, 0x0, 0x8, 0x8, 0x8, 0x1, 0x7f, '\x00', 0x2, 0x7}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.504101684s ago: executing program 0 (id=1287): getpid() syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.503129854s ago: executing program 4 (id=1288): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x31) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/vmallocinfo\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)={0x30, 0x2e, 0x1, 0x70bd2b, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r2, r1, 0x0, 0xfffffffc) 3.337441637s ago: executing program 4 (id=1289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200002ed, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, 0x0, 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.310463758s ago: executing program 4 (id=1290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000002000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.284367128s ago: executing program 4 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.263816648s ago: executing program 4 (id=1292): openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/oops_count', 0x101080, 0x13) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 2.710702627s ago: executing program 2 (id=1293): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.655229358s ago: executing program 2 (id=1294): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESHEX], 0x1, 0x2ee, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @mcast1={0xff, 0x0}, @loopback={0x0, 0xffff888101827518}, 0x7, 0x700}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)={0x5, 0x8, 0x3, 0x7, 0x7, 0x2, 0x3}, 0xc) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080), 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xa1) 2.248636424s ago: executing program 0 (id=1295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.923273499s ago: executing program 0 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.391689008s ago: executing program 1 (id=1297): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x104) getdents64(r3, 0x0, 0x18) 1.390832308s ago: executing program 5 (id=1298): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="75746644e01cea757466383d302c757466383d302c636865636b3d7374726963742c696f636861727365743d6b6f69382d752c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c696f636861727365743d6d61636963656c616e642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c757466383d302c756e695f786c6174653d312c00"], 0x26, 0x336, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) writev(r5, &(0x7f00000001c0), 0x0) syz_clone(0xc0008100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.390244228s ago: executing program 0 (id=1299): syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000006c0)={[{@nodiscard}, {}, {@adaptive_mode}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@background_gc_on}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@io_bits={'io_bits', 0x3d, 0x71}}, {@jqfmt_vfsold}, {@acl}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000092c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet(0x2, 0x2, 0x1) read$FUSE(r1, 0x0, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000001640)) 1.389872788s ago: executing program 1 (id=1300): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.384043328s ago: executing program 2 (id=1301): chdir(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x82a}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) open(0x0, 0x14d27e, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r4, 0x80000000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.376700098s ago: executing program 1 (id=1302): socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10880, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) 180.262367ms ago: executing program 5 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 166.128187ms ago: executing program 5 (id=1304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 0s ago: executing program 5 (id=1305): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) syz_open_dev$tty1(0xc, 0x4, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000300)='./file0\x00', 0x1000848, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x385, &(0x7f0000006400)="$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") open(0x0, 0x40, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): dm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.827641][ T1911] loop4: detected capacity change from 0 to 256 [ 86.988451][ T28] audit: type=1400 audit(1743280571.055:917): avc: denied { append } for pid=1901 comm="syz.4.569" name="loop7" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.237472][ T1907] loop2: detected capacity change from 0 to 40427 [ 87.276776][ T1907] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.337043][ T1907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.344495][ T28] audit: type=1400 audit(1743280571.585:918): avc: denied { mount } for pid=1906 comm="syz.2.571" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.385466][ T1929] loop3: detected capacity change from 0 to 2048 [ 87.403124][ T1932] loop4: detected capacity change from 0 to 512 [ 87.445953][ T28] audit: type=1400 audit(1743280571.685:919): avc: denied { execute } for pid=1906 comm="syz.2.571" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.453207][ T1932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 87.483512][ T28] audit: type=1400 audit(1743280571.715:920): avc: denied { execute_no_trans } for pid=1906 comm="syz.2.571" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.518047][ T1929] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.554491][ T1932] EXT4-fs (loop4): 1 truncate cleaned up [ 87.566146][ T28] audit: type=1400 audit(1743280571.805:921): avc: denied { mounton } for pid=1928 comm="syz.3.578" path="/122/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.589247][ T1932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.608463][ T1929] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 87.633698][ T295] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 87.636701][ T294] syz-executor: attempt to access beyond end of device [ 87.636701][ T294] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.692018][ T1917] loop0: detected capacity change from 0 to 40427 [ 87.736915][ T295] EXT4-fs (loop3): unmounting filesystem. [ 87.782883][ T1917] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.937866][ T1917] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.252606][ T293] syz-executor: attempt to access beyond end of device [ 88.252606][ T293] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.355880][ T1951] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.376716][ T1951] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.392044][ T1951] device bridge_slave_0 entered promiscuous mode [ 88.399491][ T198] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.422829][ T198] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.577930][ T296] EXT4-fs (loop4): unmounting filesystem. [ 88.644555][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.651864][ T1951] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.661249][ T1951] device bridge_slave_1 entered promiscuous mode [ 90.292384][ T1988] loop1: detected capacity change from 0 to 256 [ 90.324112][ T1988] FAT-fs (loop1): Directory bread(block 64) failed [ 90.339023][ T1988] FAT-fs (loop1): Directory bread(block 65) failed [ 90.356905][ T1988] FAT-fs (loop1): Directory bread(block 66) failed [ 90.364002][ T1988] FAT-fs (loop1): Directory bread(block 67) failed [ 90.370929][ T1988] FAT-fs (loop1): Directory bread(block 68) failed [ 90.377824][ T1988] FAT-fs (loop1): Directory bread(block 69) failed [ 90.388898][ T1988] FAT-fs (loop1): Directory bread(block 70) failed [ 90.395274][ T1988] FAT-fs (loop1): Directory bread(block 71) failed [ 90.404699][ T1988] FAT-fs (loop1): Directory bread(block 72) failed [ 90.411386][ T1988] FAT-fs (loop1): Directory bread(block 73) failed [ 90.418700][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.887984][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.089653][ T1997] loop4: detected capacity change from 0 to 512 [ 91.114824][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.256724][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.277366][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.284264][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.301454][ T1997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.302715][ T28] audit: type=1400 audit(1743280575.545:922): avc: denied { ioctl } for pid=1986 comm="syz.1.592" path="/dev/input/event2" dev="devtmpfs" ino=271 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.336589][ T28] audit: type=1400 audit(1743280575.555:923): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.352927][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.405898][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.419140][ T1997] EXT4-fs (loop4): 1 truncate cleaned up [ 91.425065][ T1997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.458425][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.472589][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.479510][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.578824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.587402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.627002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.636572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.678375][ T1951] device veth0_vlan entered promiscuous mode [ 91.684496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.711793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.728822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.742368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.756177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.763670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.258184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.311409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.389820][ T1951] device veth1_macvtap entered promiscuous mode [ 92.399868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.419871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.431713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.509478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.517997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.533604][ T28] audit: type=1400 audit(1743280576.775:924): avc: denied { mount } for pid=1951 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.879497][ T2033] loop1: detected capacity change from 0 to 4096 [ 93.685935][ T28] audit: type=1400 audit(1743280577.905:925): avc: denied { mounton } for pid=1951 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 93.792100][ T2045] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.976831][ T28] audit: type=1400 audit(1743280577.905:926): avc: denied { getopt } for pid=2035 comm="syz.0.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.026903][ T2033] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.072009][ T296] EXT4-fs (loop4): unmounting filesystem. [ 94.127323][ T2058] loop5: detected capacity change from 0 to 256 [ 94.133998][ T2058] FAT-fs (loop5): Unrecognized mount option "utfDàêutf8=0" or missing value [ 94.192884][ T292] EXT4-fs (loop1): unmounting filesystem. [ 94.328161][ T28] audit: type=1400 audit(1743280578.575:927): avc: denied { ioctl } for pid=2062 comm="syz.4.614" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 95.328708][ T2081] device wg2 entered promiscuous mode [ 95.375247][ T2089] loop5: detected capacity change from 0 to 512 [ 95.390498][ T2089] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 95.402456][ T2089] EXT4-fs (loop5): 1 truncate cleaned up [ 95.408294][ T2089] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 96.352471][ T2110] loop2: detected capacity change from 0 to 256 [ 96.378043][ T2110] FAT-fs (loop2): Unrecognized mount option "utfDàêutf8=0" or missing value [ 96.392831][ T2117] syz.4.635[2117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.392910][ T2117] syz.4.635[2117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.437008][ T317] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.452089][ T2125] loop0: detected capacity change from 0 to 512 [ 96.617052][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 97.018457][ T2125] EXT4-fs (loop0): 1 orphan inode deleted [ 97.032486][ T2125] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.041779][ T2125] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.086412][ T28] audit: type=1400 audit(1743280581.325:928): avc: denied { connect } for pid=2124 comm="syz.0.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 97.116675][ T293] EXT4-fs (loop0): unmounting filesystem. [ 98.669936][ T2164] loop2: detected capacity change from 0 to 512 [ 98.704907][ T2164] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.730850][ T2172] loop4: detected capacity change from 0 to 256 [ 98.741499][ T2168] loop1: detected capacity change from 0 to 512 [ 98.763746][ T2164] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.647: casefold flag without casefold feature [ 98.766392][ T2168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.785917][ T2164] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.647: couldn't read orphan inode 15 (err -117) [ 98.798427][ T2164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.826480][ T28] audit: type=1400 audit(1743280583.075:929): avc: denied { create } for pid=2156 comm="syz.2.647" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 98.867857][ T2168] EXT4-fs (loop1): 1 truncate cleaned up [ 98.874533][ T2168] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.887450][ T28] audit: type=1400 audit(1743280583.135:930): avc: denied { create } for pid=2183 comm="syz.0.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.152668][ T28] audit: type=1400 audit(1743280583.395:931): avc: denied { read } for pid=2183 comm="syz.0.656" path="socket:[21221]" dev="sockfs" ino=21221 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.296430][ T294] EXT4-fs (loop2): unmounting filesystem. [ 99.349355][ T2203] loop4: detected capacity change from 0 to 8192 [ 99.409644][ T28] audit: type=1400 audit(1743280583.565:932): avc: denied { read } for pid=2191 comm="syz.4.658" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.491782][ T28] audit: type=1400 audit(1743280583.565:933): avc: denied { open } for pid=2191 comm="syz.4.658" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.595675][ T28] audit: type=1400 audit(1743280583.565:934): avc: denied { ioctl } for pid=2191 comm="syz.4.658" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.978399][ T292] EXT4-fs (loop1): unmounting filesystem. [ 99.998090][ T2214] device pim6reg1 entered promiscuous mode [ 100.202655][ T2235] netlink: 80 bytes leftover after parsing attributes in process `syz.1.674'. [ 100.252639][ T2235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.674'. [ 100.262442][ T2235] tipc: MTU too low for tipc bearer [ 100.271243][ T2238] loop0: detected capacity change from 0 to 512 [ 100.285310][ T2238] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.492555][ T2237] loop4: detected capacity change from 0 to 512 [ 100.510646][ T28] audit: type=1400 audit(1743280584.565:935): avc: denied { read } for pid=2229 comm="syz.4.672" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.557368][ T2237] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.617947][ T2237] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.672: casefold flag without casefold feature [ 100.632261][ T2237] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.672: couldn't read orphan inode 15 (err -117) [ 100.646298][ T2237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.688906][ T28] audit: type=1400 audit(1743280584.565:936): avc: denied { open } for pid=2229 comm="syz.4.672" path="net:[4026532551]" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.727304][ T2238] EXT4-fs (loop0): 1 truncate cleaned up [ 100.734085][ T2238] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.758915][ T2251] device pim6reg1 entered promiscuous mode [ 100.996221][ T296] EXT4-fs (loop4): unmounting filesystem. [ 101.299697][ T2280] loop4: detected capacity change from 0 to 1024 [ 101.318300][ T2280] EXT4-fs: Ignoring removed orlov option [ 101.328388][ T2280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.367620][ T2280] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.507501][ T293] EXT4-fs (loop0): unmounting filesystem. [ 101.514762][ T296] EXT4-fs (loop4): unmounting filesystem. [ 101.696425][ T2299] loop5: detected capacity change from 0 to 512 [ 101.703437][ T2299] EXT4-fs (loop5): Test dummy encryption mode enabled [ 101.721712][ T2299] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.694: casefold flag without casefold feature [ 101.736075][ T2299] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.694: couldn't read orphan inode 15 (err -117) [ 101.748118][ T2299] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 101.782995][ T28] audit: type=1400 audit(1743280586.025:937): avc: denied { unlink } for pid=2301 comm="syz.0.699" name="#1" dev="tmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 101.871873][ T28] audit: type=1400 audit(1743280586.025:938): avc: denied { getattr } for pid=2301 comm="syz.0.699" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 101.913617][ T2314] loop0: detected capacity change from 0 to 256 [ 101.920234][ T2314] FAT-fs (loop0): Unrecognized mount option "utfDàêutf8=0" or missing value [ 102.007375][ T2318] syz.4.701[2318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.007990][ T2318] syz.4.701[2318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.044318][ T2318] loop4: detected capacity change from 0 to 512 [ 102.063419][ T2318] ext3: Unknown parameter 'measure' [ 102.617332][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 102.705182][ T2322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.296154][ T2151] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 103.527612][ T2151] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.635258][ T2151] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.688414][ T2151] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.715944][ T2151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.738014][ T2151] usb 6-1: Product: syz [ 103.742018][ T2151] usb 6-1: Manufacturer: syz [ 103.760708][ T2151] usb 6-1: SerialNumber: syz [ 103.773067][ T2151] cdc_ncm 6-1:1.0: skipping garbage [ 103.852744][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 103.852765][ T28] audit: type=1326 audit(1743280588.095:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2336 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 103.881804][ T28] audit: type=1326 audit(1743280588.095:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2336 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 103.906057][ T28] audit: type=1326 audit(1743280588.145:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2336 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 103.929463][ T28] audit: type=1326 audit(1743280588.145:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2336 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 104.003055][ T28] audit: type=1326 audit(1743280588.145:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2336 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 104.031644][ T2344] syz.2.712[2344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.032375][ T2344] syz.2.712[2344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.076654][ T2344] loop2: detected capacity change from 0 to 512 [ 104.096196][ T2344] ext3: Unknown parameter 'measure' [ 105.187558][ T28] audit: type=1326 audit(1743280588.145:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2336 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 105.195677][ T2327] loop5: detected capacity change from 0 to 512 [ 105.224718][ T2327] EXT4-fs (loop5): orphan cleanup on readonly fs [ 105.236877][ T28] audit: type=1400 audit(1743280588.175:998): avc: denied { write } for pid=2340 comm="syz.1.713" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 105.292723][ T28] audit: type=1400 audit(1743280589.225:999): avc: denied { write } for pid=2340 comm="syz.1.713" name="event2" dev="devtmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 105.318377][ T28] audit: type=1326 audit(1743280589.405:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 105.321269][ T2327] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.706: bg 0: block 248: padding at end of block bitmap is not set [ 105.344932][ T28] audit: type=1326 audit(1743280589.405:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2306 comm="syz.4.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 105.380950][ T2327] EXT4-fs error (device loop5): ext4_acquire_dquot:6782: comm syz.5.706: Failed to acquire dquot type 1 [ 105.392636][ T2327] EXT4-fs (loop5): 1 truncate cleaned up [ 105.398499][ T2327] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 105.531677][ T2360] loop0: detected capacity change from 0 to 2048 [ 105.558015][ T2360] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.579917][ T293] EXT4-fs (loop0): unmounting filesystem. [ 105.604337][ T2361] loop1: detected capacity change from 0 to 512 [ 105.611657][ T2361] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.629050][ T2361] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.717: casefold flag without casefold feature [ 105.641763][ T2361] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.717: couldn't read orphan inode 15 (err -117) [ 105.653863][ T2361] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 105.677078][ T2371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.238643][ T2401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.379377][ T292] EXT4-fs (loop1): unmounting filesystem. [ 106.396908][ T2151] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 106.494002][ T2151] cdc_ncm 6-1:1.0: bind() failure [ 106.500688][ T2151] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 106.508134][ T2151] cdc_ncm 6-1:1.1: bind() failure [ 106.513913][ T2151] usb 6-1: USB disconnect, device number 2 [ 106.613602][ T2409] syz.1.734[2409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.614221][ T2409] syz.1.734[2409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.650868][ T2409] loop1: detected capacity change from 0 to 512 [ 106.670084][ T2409] ext3: Unknown parameter 'measure' [ 107.723030][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 108.366214][ T2151] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.376963][ T2415] loop4: detected capacity change from 0 to 40427 [ 108.394987][ T2415] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 108.402680][ T2415] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 108.419897][ T2415] F2FS-fs (loop4): invalid crc value [ 108.434127][ T2415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.484995][ T2415] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 108.492300][ T2415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.540367][ T380] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 108.552451][ T380] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 108.565477][ T2435] loop5: detected capacity change from 0 to 512 [ 108.573061][ T2435] EXT4-fs (loop5): Test dummy encryption mode enabled [ 108.601290][ T2435] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.744: casefold flag without casefold feature [ 108.613876][ T2435] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.744: couldn't read orphan inode 15 (err -117) [ 108.625513][ T2151] usb 3-1: Using ep0 maxpacket: 16 [ 108.626705][ T2151] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.631744][ T2435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.641674][ T2151] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.660589][ T2151] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.671103][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.679354][ T2151] usb 3-1: Product: syz [ 108.683565][ T2151] usb 3-1: Manufacturer: syz [ 108.688273][ T2151] usb 3-1: SerialNumber: syz [ 108.733685][ T2441] loop0: detected capacity change from 0 to 512 [ 108.746052][ T2441] EXT4-fs (loop0): Test dummy encryption mode enabled [ 108.823504][ T2441] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.745: casefold flag without casefold feature [ 108.838812][ T2441] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.745: couldn't read orphan inode 15 (err -117) [ 108.854072][ T2441] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.622603][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 109.751619][ T293] EXT4-fs (loop0): unmounting filesystem. [ 109.765762][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 109.765793][ T28] audit: type=1326 audit(1743280594.005:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 109.795067][ T28] audit: type=1326 audit(1743280594.015:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 109.909079][ T28] audit: type=1326 audit(1743280594.035:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 109.938127][ T28] audit: type=1326 audit(1743280594.035:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 109.964166][ T28] audit: type=1326 audit(1743280594.035:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 109.987815][ T28] audit: type=1326 audit(1743280594.035:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 110.011250][ T28] audit: type=1326 audit(1743280594.035:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 110.039361][ T2455] syz.5.747[2455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.039975][ T2455] syz.5.747[2455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.081308][ T2455] loop5: detected capacity change from 0 to 512 [ 110.101213][ T2455] ext3: Unknown parameter 'measure' [ 110.229859][ T28] audit: type=1326 audit(1743280594.035:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 110.625525][ T28] audit: type=1326 audit(1743280594.035:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 110.649849][ T28] audit: type=1326 audit(1743280594.035:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.5.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d66b8d169 code=0x7ffc0000 [ 110.746262][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.947705][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.959280][ T2151] usb 3-1: 0:2 : does not exist [ 111.086480][ T2151] usb 3-1: USB disconnect, device number 3 [ 111.127485][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.259946][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 111.276640][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 111.285617][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.304374][ T24] usb 1-1: config 0 descriptor?? [ 111.368867][ T2468] loop4: detected capacity change from 0 to 256 [ 111.383370][ T2467] loop1: detected capacity change from 0 to 512 [ 111.391761][ T2468] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 111.409209][ T2467] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 111.463482][ T2467] loop1: detected capacity change from 0 to 512 [ 111.496740][ T2467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.510971][ T2467] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.445286][ T292] EXT4-fs (loop1): unmounting filesystem. [ 112.567806][ T2491] loop4: detected capacity change from 0 to 8192 [ 112.643475][ T2493] syz.1.760[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.644209][ T2493] syz.1.760[2493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.686977][ T2493] loop1: detected capacity change from 0 to 512 [ 112.706654][ T2493] ext3: Unknown parameter 'measure' [ 113.468179][ T24] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input4 [ 113.648237][ T24] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input5 [ 113.769736][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input6 [ 113.816688][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0001/input/input7 [ 113.901090][ T24] uclogic 0003:256C:006D.0001: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 113.952599][ T24] usb 1-1: USB disconnect, device number 2 [ 114.307503][ T2506] loop5: detected capacity change from 0 to 512 [ 114.327047][ T2506] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 114.334854][ T2506] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 114.343176][ T2506] System zones: 0-2, 18-18, 34-35 [ 114.348834][ T2506] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.376729][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 114.446123][ T2151] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.649585][ T2518] fuse: root generation should be zero [ 115.330163][ T2528] loop2: detected capacity change from 0 to 40427 [ 115.343614][ T2528] F2FS-fs (loop2): Unrecognized mount option "active_zogs=4" or missing value [ 115.920855][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 115.920878][ T28] audit: type=1326 audit(1743280600.095:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 115.934253][ T2151] usb 5-1: Using ep0 maxpacket: 16 [ 115.957313][ T2151] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.967625][ T2151] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.976585][ T28] audit: type=1326 audit(1743280600.095:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2487 comm="syz.1.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 116.001057][ T2151] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.011845][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.020663][ T2151] usb 5-1: Product: syz [ 116.025213][ T2151] usb 5-1: Manufacturer: syz [ 116.029799][ T2151] usb 5-1: SerialNumber: syz [ 116.204669][ T2537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.770'. [ 116.213536][ T2537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.770'. [ 116.268078][ T2537] device veth3 entered promiscuous mode [ 116.893951][ T2547] loop5: detected capacity change from 0 to 1024 [ 116.910229][ T2547] EXT4-fs: Ignoring removed orlov option [ 116.921897][ T2547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.938230][ T2547] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 117.006825][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 117.029530][ T2557] loop5: detected capacity change from 0 to 512 [ 117.042949][ T2557] EXT4-fs (loop5): orphan cleanup on readonly fs [ 117.046434][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.057091][ T2557] EXT4-fs error (device loop5): __ext4_iget:5057: inode #3: block 127754: comm syz.5.778: invalid block [ 117.069721][ T2557] EXT4-fs error (device loop5): ext4_quota_enable:6976: comm syz.5.778: Bad quota inode: 3, type: 0 [ 117.081014][ T2557] EXT4-fs warning (device loop5): ext4_enable_quotas:7017: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 117.095942][ T2557] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 117.103040][ T2557] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 117.147131][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 117.301957][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 117.344341][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.525628][ T2151] usb 5-1: 0:2 : does not exist [ 117.671850][ T2151] usb 5-1: USB disconnect, device number 3 [ 117.730711][ T28] audit: type=1326 audit(1743280601.975:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 117.803821][ T28] audit: type=1326 audit(1743280601.995:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 117.827317][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.838663][ T28] audit: type=1326 audit(1743280601.995:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 117.843392][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.873095][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.882685][ T28] audit: type=1326 audit(1743280601.995:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 117.885116][ T24] usb 2-1: config 0 descriptor?? [ 117.912116][ T28] audit: type=1326 audit(1743280602.005:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 117.966116][ T28] audit: type=1326 audit(1743280602.005:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 117.993419][ T28] audit: type=1326 audit(1743280602.005:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 118.428611][ T2579] loop4: detected capacity change from 0 to 512 [ 118.436933][ T2579] ext3: Unknown parameter 'measure' [ 118.798461][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 118.869888][ T28] audit: type=1326 audit(1743280602.005:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2571 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 119.071078][ T2578] syz.4.784[2578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.071185][ T2578] syz.4.784[2578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.203578][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 119.249045][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input8 [ 119.272219][ T2590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.786'. [ 119.281009][ T2590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'. [ 119.629899][ T2591] loop0: detected capacity change from 0 to 512 [ 119.637904][ T2590] device veth5 entered promiscuous mode [ 119.666793][ T2591] EXT4-fs (loop0): Test dummy encryption mode enabled [ 119.723953][ T2591] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.788: casefold flag without casefold feature [ 119.738676][ T2591] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.788: couldn't read orphan inode 15 (err -117) [ 119.751907][ T2591] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.819543][ T24] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 120.432652][ T293] EXT4-fs (loop0): unmounting filesystem. [ 120.449580][ T2608] loop5: detected capacity change from 0 to 512 [ 120.464595][ T2608] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.476352][ T2608] EXT4-fs (loop5): 1 truncate cleaned up [ 120.482094][ T2608] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 121.276230][ T1575] usb 2-1: USB disconnect, device number 2 [ 121.396228][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 121.396245][ T28] audit: type=1400 audit(1743280605.645:1142): avc: denied { append } for pid=2619 comm="syz.2.799" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 121.493805][ T2625] loop0: detected capacity change from 0 to 256 [ 122.101402][ T2645] device pim6reg1 entered promiscuous mode [ 122.123309][ T2647] loop2: detected capacity change from 0 to 512 [ 122.130259][ T2647] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.153220][ T2647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.162490][ T2647] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.191098][ T28] audit: type=1400 audit(1743280606.435:1143): avc: denied { map } for pid=2639 comm="syz.0.804" path="socket:[23690]" dev="sockfs" ino=23690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.237794][ T28] audit: type=1400 audit(1743280606.435:1144): avc: denied { read } for pid=2639 comm="syz.0.804" path="socket:[23690]" dev="sockfs" ino=23690 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 122.378630][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 122.427845][ T28] audit: type=1326 audit(1743280606.675:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 122.636275][ T28] audit: type=1326 audit(1743280606.695:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 122.666272][ T28] audit: type=1326 audit(1743280606.695:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 122.906346][ T2660] syz.1.809[2660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.906452][ T2660] syz.1.809[2660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.258675][ T2660] loop1: detected capacity change from 0 to 512 [ 123.276112][ T2660] ext3: Unknown parameter 'measure' [ 124.840628][ T28] audit: type=1326 audit(1743280606.695:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 125.178483][ T28] audit: type=1326 audit(1743280606.695:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 125.201821][ T28] audit: type=1326 audit(1743280606.695:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 125.224953][ T28] audit: type=1326 audit(1743280606.695:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2654 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 125.706865][ T2677] loop4: detected capacity change from 0 to 512 [ 125.715186][ T294] EXT4-fs (loop2): unmounting filesystem. [ 125.741024][ T2677] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.751154][ T2677] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.778829][ T2686] loop2: detected capacity change from 0 to 256 [ 125.792709][ T2688] loop0: detected capacity change from 0 to 512 [ 125.806533][ T2688] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.811233][ T2690] loop1: detected capacity change from 0 to 128 [ 125.823711][ T2688] EXT4-fs (loop0): 1 truncate cleaned up [ 125.832494][ T2688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.843120][ T296] EXT4-fs (loop4): unmounting filesystem. [ 125.849274][ T2690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.863152][ T2690] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.465934][ T2700] loop4: detected capacity change from 0 to 4096 [ 126.472808][ T2700] ext4: Unknown parameter 'nouser_xattr' [ 126.554112][ T2704] loop5: detected capacity change from 0 to 2048 [ 126.570200][ T2706] device pim6reg1 entered promiscuous mode [ 126.580354][ T2704] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 126.598392][ T2704] System zones: 0-4 [ 126.602609][ T2704] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 126.619862][ T2704] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.707646][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 126.707664][ T28] audit: type=1326 audit(1743280610.955:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 126.794839][ T411] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm kworker/u4:5: bg 0: block 345: padding at end of block bitmap is not set [ 126.822889][ T411] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 241 with error 117 [ 126.862159][ T28] audit: type=1326 audit(1743280611.035:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 126.888703][ T411] EXT4-fs (loop5): This should not happen!! Data will be lost [ 126.888703][ T411] [ 126.923424][ T28] audit: type=1326 audit(1743280611.065:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 126.956010][ T28] audit: type=1326 audit(1743280611.065:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 126.964974][ T411] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 257 with max blocks 1 with error 117 [ 126.984872][ T28] audit: type=1326 audit(1743280611.065:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 127.019544][ T2719] syz.4.827[2719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.019990][ T2719] syz.4.827[2719] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.055879][ T2719] loop4: detected capacity change from 0 to 512 [ 127.075136][ T2719] ext3: Unknown parameter 'measure' [ 127.155199][ T28] audit: type=1326 audit(1743280611.065:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 127.226528][ T28] audit: type=1326 audit(1743280611.065:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 127.250697][ T317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.302402][ T28] audit: type=1326 audit(1743280611.065:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 127.645724][ T28] audit: type=1326 audit(1743280611.065:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 127.695924][ T411] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.695924][ T411] [ 127.989680][ T28] audit: type=1326 audit(1743280611.065:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2712 comm="syz.4.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 128.064119][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 128.448800][ T2725] loop5: detected capacity change from 0 to 128 [ 128.482966][ T2725] syz.5.829 (2725): attempted to duplicate a private mapping with mremap. This is not supported. [ 128.600441][ T292] EXT4-fs (loop1): unmounting filesystem. [ 128.638803][ T293] EXT4-fs (loop0): unmounting filesystem. [ 129.179929][ T2737] loop0: detected capacity change from 0 to 40427 [ 129.186857][ T2737] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 129.193694][ T2737] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.206909][ T2737] F2FS-fs (loop0): invalid crc value [ 129.214886][ T2737] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.252774][ T2737] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.259843][ T2737] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.673627][ T2764] syz.0.833: attempt to access beyond end of device [ 129.673627][ T2764] loop0: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 129.693475][ T2764] syz.0.833: attempt to access beyond end of device [ 129.693475][ T2764] loop0: rw=2049, sector=79880, nr_sectors = 2040 limit=40427 [ 129.713064][ T2764] syz.0.833: attempt to access beyond end of device [ 129.713064][ T2764] loop0: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 129.732945][ T2764] syz.0.833: attempt to access beyond end of device [ 129.732945][ T2764] loop0: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 129.752859][ T2764] syz.0.833: attempt to access beyond end of device [ 129.752859][ T2764] loop0: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 129.771361][ T2764] syz.0.833: attempt to access beyond end of device [ 129.771361][ T2764] loop0: rw=2049, sector=59392, nr_sectors = 1512 limit=40427 [ 129.775898][ T2772] loop1: detected capacity change from 0 to 512 [ 129.834776][ T2772] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.847089][ T2772] EXT4-fs (loop1): 1 truncate cleaned up [ 129.852570][ T2772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.900746][ T293] syz-executor: attempt to access beyond end of device [ 129.900746][ T293] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 130.366957][ T2778] loop5: detected capacity change from 0 to 512 [ 130.387614][ T2778] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 130.397956][ T2778] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.444528][ T2778] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #19: comm syz.5.846: corrupted inode contents [ 130.464781][ T2778] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #19: comm syz.5.846: mark_inode_dirty error [ 130.484543][ T2778] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #19: comm syz.5.846: corrupted inode contents [ 130.518047][ T2778] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2954: inode #19: comm syz.5.846: mark_inode_dirty error [ 130.540299][ T2778] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2957: inode #19: comm syz.5.846: mark inode dirty (error -117) [ 130.554999][ T2778] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 130.788051][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 130.799535][ T2790] loop4: detected capacity change from 0 to 256 [ 130.833150][ T2792] loop5: detected capacity change from 0 to 256 [ 130.857240][ T2792] FAT-fs (loop5): Directory bread(block 1285) failed [ 130.863835][ T2792] FAT-fs (loop5): Directory bread(block 1286) failed [ 130.874255][ T2792] FAT-fs (loop5): Directory bread(block 1287) failed [ 130.882065][ T2792] FAT-fs (loop5): Directory bread(block 1288) failed [ 130.888805][ T2792] FAT-fs (loop5): Directory bread(block 1289) failed [ 130.895877][ T2792] FAT-fs (loop5): Directory bread(block 1290) failed [ 130.902600][ T2792] FAT-fs (loop5): Directory bread(block 1291) failed [ 130.917396][ T2792] FAT-fs (loop5): Directory bread(block 1292) failed [ 130.932525][ T2792] FAT-fs (loop5): Directory bread(block 1293) failed [ 130.940773][ T2792] FAT-fs (loop5): Directory bread(block 1294) failed [ 130.952814][ T2798] device pim6reg1 entered promiscuous mode [ 131.112112][ T292] EXT4-fs (loop1): unmounting filesystem. [ 131.131521][ T2805] loop1: detected capacity change from 0 to 2048 [ 131.193429][ T2806] syz.2.853[2806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.194013][ T2806] syz.2.853[2806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.256136][ T313] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 131.456196][ T313] usb 6-1: Using ep0 maxpacket: 8 [ 131.464193][ T313] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 131.526221][ T313] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 131.570108][ T313] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 132.077504][ T313] usb 6-1: config 250 has no interface number 0 [ 132.191684][ T313] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 132.230739][ T2812] loop4: detected capacity change from 0 to 512 [ 132.313895][ T313] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 132.332736][ T2812] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.856: inode #1: comm syz.4.856: iget: illegal inode # [ 132.347046][ T313] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 26214, setting to 1024 [ 132.360287][ T2812] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.856: error while reading EA inode 1 err=-117 [ 132.373486][ T313] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 132.390436][ T2812] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.856: inode #1: comm syz.4.856: iget: illegal inode # [ 132.404168][ T313] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 132.419019][ T2812] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.856: error while reading EA inode 1 err=-117 [ 132.432099][ T313] usb 6-1: config 250 interface 228 has no altsetting 0 [ 132.440651][ T2812] EXT4-fs (loop4): 1 orphan inode deleted [ 132.449538][ T2812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.460114][ T313] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 132.482101][ T313] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 132.497081][ T313] usb 6-1: Product: syz [ 132.511594][ T2814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.517349][ T313] usb 6-1: SerialNumber: syz [ 132.552819][ T313] hub 6-1:250.228: bad descriptor, ignoring hub [ 132.562232][ T2805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.580070][ T313] hub: probe of 6-1:250.228 failed with error -5 [ 132.587803][ T296] EXT4-fs (loop4): unmounting filesystem. [ 132.641483][ T2822] loop4: detected capacity change from 0 to 4096 [ 132.661377][ T2822] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.700891][ T296] EXT4-fs (loop4): unmounting filesystem. [ 132.752385][ T313] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 3 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 132.792314][ T292] EXT4-fs (loop1): unmounting filesystem. [ 133.040927][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 133.040956][ T28] audit: type=1400 audit(1743280617.285:1247): avc: denied { read write } for pid=2791 comm="syz.5.848" name="lp0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 133.107167][ T2837] device pim6reg1 entered promiscuous mode [ 133.114881][ T28] audit: type=1400 audit(1743280617.305:1248): avc: denied { open } for pid=2791 comm="syz.5.848" path="/dev/usb/lp0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 133.146839][ C1] usblp0: nonzero read bulk status received: -71 [ 133.161326][ T2839] loop1: detected capacity change from 0 to 512 [ 133.176180][ T24] usb 6-1: USB disconnect, device number 3 [ 133.185492][ T2839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.197049][ T24] usblp0: removed [ 133.213037][ T28] audit: type=1400 audit(1743280617.455:1249): avc: denied { map } for pid=2840 comm="syz.4.865" path="socket:[23991]" dev="sockfs" ino=23991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 133.237208][ T2839] EXT4-fs (loop1): 1 truncate cleaned up [ 133.242922][ T2839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 134.129496][ T2859] loop5: detected capacity change from 0 to 256 [ 134.156643][ T2859] FAT-fs (loop5): Unrecognized mount option "utfDàêutf8=0" or missing value [ 134.877169][ T317] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.795861][ T292] EXT4-fs (loop1): unmounting filesystem. [ 135.826564][ T2889] device pim6reg1 entered promiscuous mode [ 136.058784][ T2914] loop5: detected capacity change from 0 to 512 [ 136.071060][ T2914] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.085672][ T2914] EXT4-fs (loop5): 1 truncate cleaned up [ 136.091731][ T2914] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 136.190431][ T2916] loop2: detected capacity change from 0 to 512 [ 136.200709][ T2916] EXT4-fs (loop2): Test dummy encryption mode enabled [ 136.220402][ T2916] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.886: casefold flag without casefold feature [ 136.233817][ T2916] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.886: couldn't read orphan inode 15 (err -117) [ 136.247846][ T2916] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.066751][ T2926] loop1: detected capacity change from 0 to 256 [ 137.094451][ T2926] FAT-fs (loop1): Unrecognized mount option "utfDàêutf8=0" or missing value [ 137.105504][ T28] audit: type=1326 audit(1743280621.345:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6998d169 code=0x7ffc0000 [ 137.131233][ T294] EXT4-fs (loop2): unmounting filesystem. [ 137.133789][ T28] audit: type=1326 audit(1743280621.375:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6998d169 code=0x7ffc0000 [ 137.160787][ T28] audit: type=1326 audit(1743280621.385:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbb6998d169 code=0x7ffc0000 [ 137.185219][ T28] audit: type=1326 audit(1743280621.385:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6998d169 code=0x7ffc0000 [ 137.220994][ T28] audit: type=1326 audit(1743280621.385:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6998d169 code=0x7ffc0000 [ 137.269127][ T28] audit: type=1326 audit(1743280621.385:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbb6998d169 code=0x7ffc0000 [ 137.306127][ T28] audit: type=1326 audit(1743280621.385:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2927 comm="syz.0.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6998d169 code=0x7ffc0000 [ 137.688904][ T2935] syz.0.892[2935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.689179][ T2935] syz.0.892[2935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.703579][ T2935] loop0: detected capacity change from 0 to 512 [ 137.721597][ T2935] ext3: Unknown parameter 'measure' [ 138.376570][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 138.376597][ T28] audit: type=1326 audit(1743280622.615:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 138.951418][ T2943] loop1: detected capacity change from 0 to 512 [ 138.959312][ T2943] ext3: Unknown parameter 'measure' [ 139.030702][ T2942] syz.1.894[2942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.031260][ T2942] syz.1.894[2942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.178380][ T28] audit: type=1326 audit(1743280622.655:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 139.212936][ T28] audit: type=1326 audit(1743280622.665:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 139.597672][ T28] audit: type=1326 audit(1743280622.685:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 139.910093][ T28] audit: type=1326 audit(1743280622.685:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 140.187946][ T28] audit: type=1326 audit(1743280622.705:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 140.270655][ T28] audit: type=1326 audit(1743280622.715:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 140.294561][ T28] audit: type=1326 audit(1743280622.735:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 140.322887][ T28] audit: type=1326 audit(1743280622.745:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 140.346212][ T28] audit: type=1326 audit(1743280622.745:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2939 comm="syz.1.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 140.444377][ T2956] loop2: detected capacity change from 0 to 8192 [ 140.457776][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 140.973025][ T2971] loop4: detected capacity change from 0 to 256 [ 140.980365][ T2971] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 141.064562][ T2962] loop5: detected capacity change from 0 to 40427 [ 141.088275][ T2962] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 141.095124][ T2962] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 141.104417][ T2962] F2FS-fs (loop5): invalid crc value [ 141.111944][ T2962] F2FS-fs (loop5): Found nat_bits in checkpoint [ 141.148889][ T2962] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 141.155806][ T2962] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 142.809391][ T2992] syz.5.901: attempt to access beyond end of device [ 142.809391][ T2992] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 142.835857][ T2992] syz.5.901: attempt to access beyond end of device [ 142.835857][ T2992] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 142.913614][ T2992] syz.5.901: attempt to access beyond end of device [ 142.913614][ T2992] loop5: rw=2049, sector=57344, nr_sectors = 20480 limit=40427 [ 142.942762][ T2992] syz.5.901: attempt to access beyond end of device [ 142.942762][ T2992] loop5: rw=2049, sector=81920, nr_sectors = 2080 limit=40427 [ 143.089703][ T1951] syz-executor: attempt to access beyond end of device [ 143.089703][ T1951] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 144.233240][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 144.233268][ T28] audit: type=1326 audit(1743280627.355:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 144.273672][ T28] audit: type=1326 audit(1743280627.355:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 144.368053][ T3007] syz.2.911[3007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.368495][ T3007] syz.2.911[3007] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.606811][ T28] audit: type=1326 audit(1743280627.355:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 145.109395][ T28] audit: type=1326 audit(1743280627.455:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 145.229747][ T28] audit: type=1326 audit(1743280627.455:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 145.597284][ T28] audit: type=1326 audit(1743280628.475:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 146.061575][ T28] audit: type=1326 audit(1743280628.475:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 146.104994][ T28] audit: type=1326 audit(1743280628.475:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 146.146144][ T28] audit: type=1326 audit(1743280628.475:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 146.206042][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.212220][ T28] audit: type=1326 audit(1743280628.475:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 146.294006][ T3030] loop5: detected capacity change from 0 to 512 [ 146.300790][ T3030] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 146.340835][ T3030] EXT4-fs (loop5): 1 truncate cleaned up [ 146.349992][ T3030] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 146.416022][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 146.423174][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.463026][ T3024] loop2: detected capacity change from 0 to 40427 [ 146.466969][ T6] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.479678][ T2456] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.487201][ T3024] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 146.496259][ T3024] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.507500][ T3024] F2FS-fs (loop2): invalid crc value [ 146.513931][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.524260][ T3024] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.533971][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.550833][ T6] usb 5-1: Product: syz [ 146.559751][ T6] usb 5-1: Manufacturer: syz [ 146.569761][ T6] usb 5-1: SerialNumber: syz [ 146.629880][ T3024] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.646052][ T3024] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.686127][ T2456] usb 1-1: Using ep0 maxpacket: 8 [ 146.692590][ T2456] usb 1-1: unable to get BOS descriptor or descriptor too short [ 146.706972][ T2456] usb 1-1: config 2 has an invalid interface number: 161 but max is 0 [ 146.725564][ T2456] usb 1-1: config 2 has an invalid descriptor of length 128, skipping remainder of the config [ 146.746079][ T2456] usb 1-1: config 2 has no interface number 0 [ 146.753321][ T2456] usb 1-1: config 2 interface 161 altsetting 16 has an invalid endpoint descriptor of length 5, skipping [ 146.775282][ T2456] usb 1-1: config 2 interface 161 has no altsetting 0 [ 146.790172][ T2456] usb 1-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=69.47 [ 146.806042][ T2456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.821563][ T2456] usb 1-1: Product: syz [ 146.828745][ T2456] usb 1-1: Manufacturer: syz [ 146.837339][ T2456] usb 1-1: SerialNumber: syz [ 147.053783][ T3026] fuse: Bad value for 'fd' [ 147.074059][ T3026] incfs: Error allocating mount info. -12 [ 147.080015][ T3026] incfs: mount failed -12 [ 147.543755][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 147.742300][ T2456] usb 1-1: bad CDC descriptors [ 147.750702][ T2456] usb 1-1: USB disconnect, device number 3 [ 148.010555][ T3061] loop1: detected capacity change from 0 to 2048 [ 148.063597][ T3058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.268830][ T6] usb 5-1: 0:2 : does not exist [ 148.282032][ T6] usb 5-1: USB disconnect, device number 4 [ 148.296525][ T3061] Alternate GPT is invalid, using primary GPT. [ 148.302775][ T3061] loop1: p1 p2 p3 [ 148.356829][ T102] Alternate GPT is invalid, using primary GPT. [ 148.372004][ T102] loop1: p1 p2 p3 [ 148.503183][ T3075] syz.5.929[3075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.503665][ T3075] syz.5.929[3075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.834977][ T2504] udevd[2504]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 148.870806][ T2502] udevd[2502]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 148.910250][ T324] udevd[324]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 150.067434][ T3087] device pim6reg1 entered promiscuous mode [ 150.096694][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.107378][ T3092] loop4: detected capacity change from 0 to 512 [ 150.151651][ T3092] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.200319][ T3092] EXT4-fs (loop4): 1 truncate cleaned up [ 150.205940][ T3092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.992534][ T3109] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 152.001328][ T3110] loop5: detected capacity change from 0 to 512 [ 152.030330][ T3110] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 152.094490][ T3110] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.941: corrupted in-inode xattr [ 152.116221][ T448] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 152.166807][ T3110] EXT4-fs (loop5): Remounting filesystem read-only [ 152.173447][ T3110] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.941: couldn't read orphan inode 15 (err -117) [ 152.222451][ T3110] EXT4-fs (loop5): Remounting filesystem read-only [ 152.297951][ T3110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.316058][ T448] usb 3-1: Using ep0 maxpacket: 16 [ 152.341572][ T448] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.496041][ T448] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 152.728044][ T448] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.741189][ T448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.753278][ T448] usb 3-1: Product: syz [ 152.759427][ T448] usb 3-1: Manufacturer: syz [ 152.766124][ T448] usb 3-1: SerialNumber: syz [ 152.860751][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 152.897120][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 152.897213][ T28] audit: type=1400 audit(1743280637.125:1368): avc: granted { setsecparam } for pid=3126 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 153.341080][ T296] EXT4-fs (loop4): unmounting filesystem. [ 153.443869][ T3149] loop4: detected capacity change from 0 to 256 [ 153.459439][ T3149] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 153.605537][ T3151] loop0: detected capacity change from 0 to 1024 [ 153.621948][ T3151] EXT4-fs: Ignoring removed orlov option [ 153.627913][ T3151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.638168][ T3151] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 154.171277][ T28] audit: type=1400 audit(1743280638.385:1369): avc: denied { rename } for pid=3150 comm="syz.0.954" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.428286][ T3166] loop4: detected capacity change from 0 to 512 [ 154.434962][ T448] usb 3-1: 0:2 : does not exist [ 154.476296][ T3166] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 154.494502][ T448] usb 3-1: USB disconnect, device number 4 [ 154.500887][ T28] audit: type=1400 audit(1743280638.385:1370): avc: denied { unlink } for pid=3150 comm="syz.0.954" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 154.501027][ T293] EXT4-fs (loop0): unmounting filesystem. [ 154.550739][ T3166] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.958: corrupted in-inode xattr [ 154.576265][ T3166] EXT4-fs (loop4): Remounting filesystem read-only [ 154.582818][ T3166] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.958: couldn't read orphan inode 15 (err -117) [ 154.602420][ T3166] EXT4-fs (loop4): Remounting filesystem read-only [ 154.609262][ T3166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.624315][ T3173] loop5: detected capacity change from 0 to 512 [ 154.634024][ T3173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.734214][ T3173] EXT4-fs (loop5): 1 truncate cleaned up [ 154.756442][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 154.761538][ T3173] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 154.905228][ T3191] loop1: detected capacity change from 0 to 1024 [ 154.924429][ T3191] ext2: Unknown parameter 'euid<00000000000000000000' [ 154.966698][ T324] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 154.991757][ T3178] kvm: emulating exchange as write [ 155.051411][ T3200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.092110][ T3204] device pim6reg1 entered promiscuous mode [ 155.163523][ T3206] loop1: detected capacity change from 0 to 512 [ 155.208395][ T3206] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 155.217791][ T3206] ext4 filesystem being mounted at /196/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.239958][ T3206] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #2: comm syz.1.972: corrupted inode contents [ 155.252122][ T448] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 155.270374][ T3206] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #2: comm syz.1.972: mark_inode_dirty error [ 155.282278][ T3206] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #2: comm syz.1.972: corrupted inode contents [ 155.294615][ T3206] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.972: mark_inode_dirty error [ 155.317362][ T296] EXT4-fs (loop4): unmounting filesystem. [ 155.375262][ T28] audit: type=1400 audit(1743280639.615:1371): avc: denied { rename } for pid=3205 comm="syz.1.972" name="file0" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 155.437652][ T292] EXT4-fs (loop1): unmounting filesystem. [ 155.456222][ T448] usb 1-1: Using ep0 maxpacket: 32 [ 155.476968][ T448] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.504838][ T448] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.532304][ T448] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.544140][ T448] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.560556][ T448] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.591603][ T448] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.612033][ T448] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.621110][ T448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.637648][ T3232] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.664223][ T448] usb 1-1: config 0 descriptor?? [ 156.091363][ T3244] netlink: 56 bytes leftover after parsing attributes in process `syz.2.984'. [ 156.399620][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 156.405452][ T448] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.429542][ T448] usb 1-1: USB disconnect, device number 4 [ 156.443520][ T3252] loop1: detected capacity change from 0 to 128 [ 156.445149][ T3250] loop5: detected capacity change from 0 to 512 [ 156.459032][ T448] usblp0: removed [ 156.475418][ T3250] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 156.492751][ T3250] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.527572][ T3250] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #19: comm syz.5.988: corrupted inode contents [ 156.552231][ T3250] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #19: comm syz.5.988: mark_inode_dirty error [ 156.563989][ T3250] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #19: comm syz.5.988: corrupted inode contents [ 156.616093][ T3250] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2954: inode #19: comm syz.5.988: mark_inode_dirty error [ 156.697732][ T3250] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2957: inode #19: comm syz.5.988: mark inode dirty (error -117) [ 156.884681][ T3250] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 156.990938][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 157.158435][ T3257] loop4: detected capacity change from 0 to 40427 [ 157.171719][ T3257] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 157.175119][ T3272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.182040][ T3257] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.226172][ T3267] loop5: detected capacity change from 0 to 8192 [ 157.234053][ T3257] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.235158][ T3275] device pim6reg1 entered promiscuous mode [ 157.283141][ T3282] loop2: detected capacity change from 0 to 256 [ 157.295123][ T3282] FAT-fs (loop2): Unrecognized mount option "utfDàêutf8=0" or missing value [ 157.392533][ T3257] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 157.401513][ T317] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.411418][ T3257] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 158.364054][ T3257] syz.4.990: attempt to access beyond end of device [ 158.364054][ T3257] loop4: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 158.672780][ T3309] loop5: detected capacity change from 0 to 256 [ 159.189927][ T3328] loop2: detected capacity change from 0 to 256 [ 159.208495][ T3328] FAT-fs (loop2): Unrecognized mount option "utfDàêutf8=0" or missing value [ 159.261929][ T3330] loop0: detected capacity change from 0 to 8192 [ 159.416961][ T3335] loop5: detected capacity change from 0 to 256 [ 159.431719][ T3335] FAT-fs (loop5): Unrecognized mount option "utfDàêutf8=0" or missing value [ 160.005893][ T3349] overlayfs: missing 'lowerdir' [ 160.320615][ T3371] loop4: detected capacity change from 0 to 512 [ 160.616841][ T3371] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 160.627426][ T3371] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 160.636808][ T3371] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.1031: Failed to acquire dquot type 0 [ 160.649203][ T3371] EXT4-fs (loop4): Remounting filesystem read-only [ 160.655821][ T3371] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 160.666155][ T3371] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 160.675395][ T3371] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.1031: Failed to acquire dquot type 0 [ 160.688064][ T3371] EXT4-fs (loop4): Remounting filesystem read-only [ 160.696002][ T3371] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 160.706384][ T3371] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 160.715628][ T3371] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.1031: Failed to acquire dquot type 0 [ 160.727610][ T3371] EXT4-fs (loop4): Remounting filesystem read-only [ 160.734227][ T3371] EXT4-fs (loop4): 1 orphan inode deleted [ 160.739844][ T3371] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.755542][ T3371] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.827181][ T28] audit: type=1400 audit(1743280645.065:1372): avc: denied { connect } for pid=3362 comm="syz.4.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.889820][ T3378] loop5: detected capacity change from 0 to 256 [ 161.595042][ T296] EXT4-fs (loop4): unmounting filesystem. [ 161.666102][ T28] audit: type=1400 audit(1743280645.855:1373): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.530931][ T3396] loop0: detected capacity change from 0 to 256 [ 162.549374][ T3396] FAT-fs (loop0): Unrecognized mount option "utfDàêutf8=0" or missing value [ 162.656041][ T317] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.714434][ T3405] loop4: detected capacity change from 0 to 256 [ 163.022471][ T3400] loop2: detected capacity change from 0 to 8192 [ 163.033501][ T3405] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 164.420299][ T3415] loop5: detected capacity change from 0 to 2048 [ 164.584334][ T3415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 164.634253][ T28] audit: type=1400 audit(1743280648.875:1374): avc: denied { mounton } for pid=3413 comm="syz.5.1046" path="/79/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 164.702374][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 164.712898][ T28] audit: type=1400 audit(1743280648.905:1375): avc: denied { setattr } for pid=3413 comm="syz.5.1046" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 164.810983][ T3440] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1048'. [ 164.845284][ T3442] device pim6reg1 entered promiscuous mode [ 165.053207][ T3448] loop5: detected capacity change from 0 to 512 [ 165.089088][ T3448] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 165.098513][ T3448] ext4 filesystem being mounted at /82/bus/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.181651][ T3455] loop2: detected capacity change from 0 to 256 [ 165.188500][ T3455] FAT-fs (loop2): Unrecognized mount option "utfDàêutf8=0" or missing value [ 166.468997][ T3463] loop4: detected capacity change from 0 to 256 [ 166.475835][ T3463] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 166.534923][ T324] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.559639][ T3467] loop2: detected capacity change from 0 to 8192 [ 166.583259][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 167.486458][ T449] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.826353][ T3485] device pim6reg1 entered promiscuous mode [ 167.875438][ T3489] device pim6reg1 entered promiscuous mode [ 167.927121][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.943877][ T3494] loop5: detected capacity change from 0 to 128 [ 167.950802][ T449] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.988552][ T449] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 167.998799][ T449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.214834][ T449] usb 1-1: config 0 descriptor?? [ 168.417719][ T3502] loop4: detected capacity change from 0 to 256 [ 169.457366][ T3502] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 169.835252][ T449] usb 1-1: string descriptor 0 read error: -22 [ 169.842247][ T3510] xt_hashlimit: size too large, truncated to 1048576 [ 169.977823][ T448] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 170.254019][ T449] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input9 [ 170.457595][ T449] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input10 [ 170.489813][ T449] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input11 [ 170.523755][ T449] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0003/input/input12 [ 170.544880][ T3521] loop2: detected capacity change from 0 to 256 [ 170.577693][ T449] uclogic 0003:256C:006D.0003: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 170.594877][ T3518] loop4: detected capacity change from 0 to 8192 [ 170.644123][ T449] usb 1-1: USB disconnect, device number 5 [ 170.748750][ T3527] loop2: detected capacity change from 0 to 256 [ 171.937245][ T448] usb 6-1: unable to get BOS descriptor or descriptor too short [ 171.959224][ T448] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 171.969107][ T448] usb 6-1: can't read configurations, error -71 [ 172.436070][ T3550] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1074'. [ 173.258167][ T3558] loop2: detected capacity change from 0 to 512 [ 173.268821][ T3558] EXT4-fs (loop2): Test dummy encryption mode enabled [ 173.288249][ T3558] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1085: casefold flag without casefold feature [ 173.302015][ T3558] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1085: couldn't read orphan inode 15 (err -117) [ 173.315101][ T3558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.848962][ T3571] device pim6reg1 entered promiscuous mode [ 173.920060][ T3577] loop5: detected capacity change from 0 to 256 [ 173.933640][ T3577] FAT-fs (loop5): Unrecognized mount option "utfDàêutf8=0" or missing value [ 173.946066][ T449] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 174.013611][ T294] EXT4-fs (loop2): unmounting filesystem. [ 174.022269][ T3584] loop0: detected capacity change from 0 to 256 [ 174.497945][ T449] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.529719][ T449] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 174.581318][ T449] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 174.655349][ T449] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 174.709551][ T449] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.920646][ T449] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.936022][ T449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.944132][ T449] usb 2-1: Product: syz [ 174.951652][ T449] usb 2-1: Manufacturer: syz [ 174.956616][ T449] usb 2-1: SerialNumber: syz [ 175.076227][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.105648][ T3613] device pim6reg1 entered promiscuous mode [ 175.168821][ T449] usb 2-1: USB disconnect, device number 3 [ 175.183521][ T3620] loop5: detected capacity change from 0 to 256 [ 175.190856][ T3620] FAT-fs (loop5): Unrecognized mount option "utfDàêutf8=0" or missing value [ 175.206310][ T3623] loop4: detected capacity change from 0 to 256 [ 175.212792][ T3623] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 175.238224][ T324] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.276056][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 175.297219][ T6] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 175.310834][ T6] usb 3-1: config 0 has no interface number 0 [ 175.318368][ T2504] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.327359][ T6] usb 3-1: config 0 interface 184 has no altsetting 0 [ 175.338339][ T3628] loop0: detected capacity change from 0 to 2048 [ 175.351415][ T6] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 175.365143][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.379206][ T6] usb 3-1: Product: syz [ 175.383518][ T6] usb 3-1: Manufacturer: syz [ 176.492947][ T6] usb 3-1: SerialNumber: syz [ 176.518139][ T6] usb 3-1: config 0 descriptor?? [ 176.525128][ T3637] loop5: detected capacity change from 0 to 16 [ 176.534752][ T6] smsc75xx v1.0.0 [ 176.557295][ T2504] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.589052][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 176.600292][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 176.723791][ T3645] usb usb8: usbfs: process 3645 (syz.0.1114) did not claim interface 0 before use [ 177.117751][ T3655] device pim6reg1 entered promiscuous mode [ 177.174785][ T3663] loop1: detected capacity change from 0 to 256 [ 177.175620][ T3660] loop4: detected capacity change from 0 to 256 [ 177.202681][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 177.213880][ T3660] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 177.221539][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 177.224768][ T3666] loop0: detected capacity change from 0 to 256 [ 177.245316][ T3666] FAT-fs (loop0): Unrecognized mount option "utfDàêutf8=0" or missing value [ 177.431599][ T2504] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.032153][ T3668] loop5: detected capacity change from 0 to 512 [ 178.038987][ T3668] EXT4-fs (loop5): Test dummy encryption mode enabled [ 178.144362][ T3683] syz.1.1129[3683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.144551][ T3683] syz.1.1129[3683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.010749][ T3668] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1128: casefold flag without casefold feature [ 179.027548][ T3668] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1128: couldn't read orphan inode 15 (err -117) [ 179.039989][ T3668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 179.203681][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 179.239190][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 179.261078][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 179.288339][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 179.306283][ T6] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 179.325793][ T6] usb 3-1: USB disconnect, device number 5 [ 179.491717][ T3712] loop4: detected capacity change from 0 to 256 [ 179.508033][ T3712] FAT-fs (loop4): Unrecognized mount option "utfDàêutf8=0" or missing value [ 179.522487][ T3715] loop1: detected capacity change from 0 to 512 [ 179.532711][ T3715] EXT4-fs (loop1): 1 truncate cleaned up [ 179.538914][ T3715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 179.562269][ T3715] raw_sendmsg: syz.1.1142 forgot to set AF_INET. Fix it! [ 179.570747][ T3715] syz.1.1142 uses obsolete (PF_INET,SOCK_PACKET) [ 179.589694][ T292] EXT4-fs (loop1): unmounting filesystem. [ 179.998669][ T3726] device pim6reg1 entered promiscuous mode [ 180.160402][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 180.160419][ T28] audit: type=1400 audit(1743280664.405:1380): avc: denied { accept } for pid=3727 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 181.379458][ T3752] loop1: detected capacity change from 0 to 512 [ 181.804989][ T28] audit: type=1400 audit(1743280666.045:1381): avc: denied { create } for pid=3759 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 181.826320][ T3752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.890730][ T28] audit: type=1400 audit(1743280666.135:1382): avc: denied { mount } for pid=3759 comm="syz.0.1156" name="/" dev="configfs" ino=13333 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 181.927820][ T3766] input: syz0 as /devices/virtual/input/input14 [ 182.002677][ T3752] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.217955][ T3773] loop4: detected capacity change from 0 to 512 [ 183.178185][ T3773] EXT4-fs (loop4): Test dummy encryption mode enabled [ 183.262351][ T3773] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1157: casefold flag without casefold feature [ 183.276084][ T3773] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1157: couldn't read orphan inode 15 (err -117) [ 183.289869][ T3773] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.830257][ T296] EXT4-fs (loop4): unmounting filesystem. [ 183.836948][ T292] EXT4-fs (loop1): unmounting filesystem. [ 184.043331][ T3789] loop1: detected capacity change from 0 to 512 [ 184.109624][ T3789] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 184.118066][ T3789] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 184.128698][ T3789] System zones: 0-2, 18-18, 34-35 [ 184.143390][ T3789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.292038][ T292] EXT4-fs (loop1): unmounting filesystem. [ 184.474483][ T3797] loop1: detected capacity change from 0 to 512 [ 184.607360][ T3797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 184.626455][ T3797] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.690928][ T292] EXT4-fs (loop1): unmounting filesystem. [ 184.802058][ T3805] loop0: detected capacity change from 0 to 256 [ 184.848368][ T3805] FAT-fs (loop0): Directory bread(block 64) failed [ 184.871689][ T3800] loop5: detected capacity change from 0 to 40427 [ 184.878123][ T3805] FAT-fs (loop0): Directory bread(block 65) failed [ 184.885316][ T3800] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 184.893590][ T3805] FAT-fs (loop0): Directory bread(block 66) failed [ 184.898258][ T3800] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 184.908139][ T3805] FAT-fs (loop0): Directory bread(block 67) failed [ 184.914592][ T3805] FAT-fs (loop0): Directory bread(block 68) failed [ 184.922648][ T3805] FAT-fs (loop0): Directory bread(block 69) failed [ 184.929185][ T3805] FAT-fs (loop0): Directory bread(block 70) failed [ 184.935672][ T3805] FAT-fs (loop0): Directory bread(block 71) failed [ 184.943469][ T3805] FAT-fs (loop0): Directory bread(block 72) failed [ 184.950155][ T3805] FAT-fs (loop0): Directory bread(block 73) failed [ 184.967945][ T3800] F2FS-fs (loop5): Found nat_bits in checkpoint [ 185.060896][ T3814] loop0: detected capacity change from 0 to 4096 [ 185.082224][ T3800] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 185.091810][ T3800] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 185.094943][ T3814] EXT4-fs (loop0): Test dummy encryption mode enabled [ 185.133384][ T3814] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.165768][ T3800] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 185.165794][ T3800] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 185.176161][ T3800] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 185.183556][ T3800] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 185.190952][ T3814] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 185.191273][ T3800] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 185.205612][ T3800] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 185.219279][ T3800] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 185.561061][ T293] EXT4-fs (loop0): unmounting filesystem. [ 186.445501][ T3849] loop5: detected capacity change from 0 to 1024 [ 186.456311][ T3849] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 186.468878][ T3849] SELinux: Context system_u:object_r:xconsole_device_t:s0 is not valid (left unmapped). [ 186.478968][ T28] audit: type=1400 audit(1743280670.725:1383): avc: denied { relabelto } for pid=3848 comm="syz.5.1181" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:xconsole_device_t:s0" [ 186.555754][ T28] audit: type=1400 audit(1743280670.795:1384): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 186.556805][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 186.582850][ T3853] loop2: detected capacity change from 0 to 16 [ 186.609754][ T3853] erofs: (device loop2): mounted with root inode @ nid 36. [ 186.736864][ T3864] loop5: detected capacity change from 0 to 2048 [ 186.767940][ T3864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 186.886843][ T3867] input: syz1 as /devices/virtual/input/input15 [ 186.916038][ T6] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 187.447222][ T28] audit: type=1326 audit(1743280671.695:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 187.608583][ T3889] syz.4.1191[3889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.608686][ T3889] syz.4.1191[3889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.623177][ T3889] loop4: detected capacity change from 0 to 512 [ 187.640909][ T3889] ext3: Unknown parameter 'measure' [ 187.652730][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 187.668525][ T28] audit: type=1326 audit(1743280671.715:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 187.718987][ T317] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.756389][ T28] audit: type=1326 audit(1743280671.725:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 187.780558][ T28] audit: type=1326 audit(1743280671.725:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 187.804688][ T3895] loop5: detected capacity change from 0 to 512 [ 187.811091][ T28] audit: type=1326 audit(1743280671.725:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 187.840917][ T6] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 187.849190][ T6] usb 2-1: config 0 has no interface number 0 [ 187.855201][ T3895] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.865760][ T6] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.877085][ T28] audit: type=1326 audit(1743280671.725:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 187.901547][ T6] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.913986][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 187.923173][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.931318][ T28] audit: type=1326 audit(1743280671.725:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 187.955573][ T6] usb 2-1: config 0 descriptor?? [ 187.963689][ T3895] EXT4-fs (loop5): 1 truncate cleaned up [ 187.974474][ T3895] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 187.988226][ T28] audit: type=1326 audit(1743280671.725:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa64f58d169 code=0x7ffc0000 [ 188.738644][ T3913] loop0: detected capacity change from 0 to 512 [ 188.745047][ T3913] ext3: Unknown parameter 'measure' [ 190.679300][ T6] magicmouse 0003:05AC:0269.0004: unbalanced collection at end of report description [ 190.696259][ T6] magicmouse 0003:05AC:0269.0004: magicmouse hid parse failed [ 190.703590][ T6] magicmouse: probe of 0003:05AC:0269.0004 failed with error -22 [ 190.726447][ T3919] loop4: detected capacity change from 0 to 2048 [ 190.777346][ T3919] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.832018][ T449] usb 2-1: USB disconnect, device number 4 [ 190.884672][ T3925] loop1: detected capacity change from 0 to 512 [ 190.915508][ T3925] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.1205: Failed to acquire dquot type 0 [ 190.932745][ T3925] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.1205: Failed to acquire dquot type 0 [ 190.946220][ T3925] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.1205: Failed to acquire dquot type 0 [ 190.966265][ T3925] EXT4-fs (loop1): 1 orphan inode deleted [ 190.971955][ T3925] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.981731][ T3925] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.000578][ T3925] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.1205: Failed to acquire dquot type 0 [ 191.030243][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 191.127598][ T292] EXT4-fs (loop1): unmounting filesystem. [ 191.304934][ T3919] EXT4-fs (loop4): unmounting filesystem. [ 191.379134][ T3946] device pim6reg1 entered promiscuous mode [ 191.536949][ T3949] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.740151][ T449] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 192.036428][ T449] usb 2-1: Using ep0 maxpacket: 8 [ 192.049706][ T449] usb 2-1: unable to get BOS descriptor or descriptor too short [ 192.096859][ T3965] loop2: detected capacity change from 0 to 512 [ 192.123923][ T449] usb 2-1: config 2 has an invalid interface number: 161 but max is 0 [ 192.138234][ T449] usb 2-1: config 2 has an invalid descriptor of length 128, skipping remainder of the config [ 192.139558][ T3965] EXT4-fs (loop2): orphan cleanup on readonly fs [ 192.148616][ T449] usb 2-1: config 2 has no interface number 0 [ 192.160896][ T449] usb 2-1: config 2 interface 161 altsetting 16 has an invalid endpoint descriptor of length 5, skipping [ 192.172954][ T449] usb 2-1: config 2 interface 161 has no altsetting 0 [ 192.180241][ T3965] __quota_error: 61 callbacks suppressed [ 192.180259][ T3965] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 192.196317][ T3965] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 192.203541][ T3973] syz.0.1221[3973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.205563][ T3973] syz.0.1221[3973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.207684][ T449] usb 2-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=69.47 [ 192.217530][ T3965] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.1218: Failed to acquire dquot type 1 [ 192.227818][ T449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.227846][ T449] usb 2-1: Product: syz [ 192.227860][ T449] usb 2-1: Manufacturer: syz [ 192.227872][ T449] usb 2-1: SerialNumber: syz [ 192.294390][ T3965] EXT4-fs (loop2): 1 truncate cleaned up [ 192.306134][ T3965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 192.361701][ T3965] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.1218: deleted inode referenced: 12 [ 192.414992][ T294] EXT4-fs (loop2): unmounting filesystem. [ 192.438593][ T3947] fuse: Bad value for 'fd' [ 192.596877][ T3982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.730698][ T3983] incfs: Error allocating mount info. -12 [ 192.731928][ T3983] incfs: mount failed -12 [ 192.784638][ T3989] loop5: detected capacity change from 0 to 16 [ 192.791289][ T3989] erofs: (device loop5): mounted with root inode @ nid 36. [ 192.794610][ T3988] device pim6reg1 entered promiscuous mode [ 192.800135][ T28] audit: type=1326 audit(1743280677.045:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.800222][ T28] audit: type=1326 audit(1743280677.045:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.800371][ T28] audit: type=1326 audit(1743280677.045:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.800775][ T28] audit: type=1326 audit(1743280677.045:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.800848][ T28] audit: type=1326 audit(1743280677.045:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.801005][ T28] audit: type=1326 audit(1743280677.045:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.801076][ T28] audit: type=1326 audit(1743280677.045:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.801202][ T28] audit: type=1326 audit(1743280677.045:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3986 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82678d169 code=0x7ffc0000 [ 192.942272][ T3993] syz.2.1226[3993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.942385][ T3993] syz.2.1226[3993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.945743][ T3993] loop2: detected capacity change from 0 to 512 [ 192.946124][ T3993] ext3: Unknown parameter 'measure' [ 192.977253][ T324] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.548223][ T4008] Invalid ELF header magic: != ELF [ 193.770366][ T3974] loop4: detected capacity change from 0 to 131072 [ 193.785927][ T3974] F2FS-fs (loop4): Invalid log_blocksize (32), supports only 12 [ 193.795513][ T3974] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 193.813090][ T3974] F2FS-fs (loop4): Found nat_bits in checkpoint [ 193.817351][ T4016] loop0: detected capacity change from 0 to 512 [ 193.869876][ T3974] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 193.877076][ T3974] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 193.906201][ T4016] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.915132][ T4016] ext4 filesystem being mounted at /255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.939615][ T4016] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #2: comm syz.0.1237: corrupted inode contents [ 193.956680][ T4016] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #2: comm syz.0.1237: mark_inode_dirty error [ 193.968616][ T4016] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #2: comm syz.0.1237: corrupted inode contents [ 193.988384][ T4016] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1237: mark_inode_dirty error [ 194.020714][ T293] EXT4-fs (loop0): unmounting filesystem. [ 194.058012][ T449] usb 2-1: bad CDC descriptors [ 194.064159][ T449] usb 2-1: USB disconnect, device number 5 [ 194.091953][ T4030] device pim6reg1 entered promiscuous mode [ 194.120788][ T4026] loop5: detected capacity change from 0 to 8192 [ 194.180420][ T4032] loop1: detected capacity change from 0 to 256 [ 194.194949][ T4032] incfs: Can't find or create .incomplete dir in ./file0 [ 194.202544][ T4032] incfs: mount failed -28 [ 195.564172][ T4051] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.906106][ T4057] loop4: detected capacity change from 0 to 2048 [ 195.980224][ T4057] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.190228][ T4068] input: syz1 as /devices/virtual/input/input16 [ 196.413075][ T4071] loop5: detected capacity change from 0 to 512 [ 196.438590][ T4071] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 196.447645][ T4071] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.483883][ T1951] EXT4-fs (loop5): unmounting filesystem. [ 196.536064][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 196.726016][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 196.732094][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.760949][ T4077] 9pnet_fd: Insufficient options for proto=fd [ 196.769273][ T296] EXT4-fs (loop4): unmounting filesystem. [ 196.774988][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.795988][ T819] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 196.820934][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.832438][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.986134][ T819] usb 6-1: Using ep0 maxpacket: 8 [ 196.994680][ T819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 197.066840][ T819] usb 6-1: config 2 has an invalid interface number: 161 but max is 0 [ 197.213009][ T819] usb 6-1: config 2 has an invalid descriptor of length 128, skipping remainder of the config [ 197.239070][ T4081] loop1: detected capacity change from 0 to 8192 [ 197.255581][ T819] usb 6-1: config 2 has no interface number 0 [ 197.556425][ T819] usb 6-1: config 2 interface 161 altsetting 16 has an invalid endpoint descriptor of length 5, skipping [ 197.568363][ T819] usb 6-1: config 2 interface 161 has no altsetting 0 [ 197.580549][ T819] usb 6-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=69.47 [ 197.686802][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.788622][ T6] usb 3-1: config 0 descriptor?? [ 197.794655][ T6] hub 3-1:0.0: USB hub found [ 197.794710][ T819] usb 6-1: Product: syz [ 197.803528][ T819] usb 6-1: Manufacturer: syz [ 197.808333][ T819] usb 6-1: SerialNumber: syz [ 197.996713][ T6] hub 3-1:0.0: 1 port detected [ 198.026973][ T4075] fuse: Bad value for 'fd' [ 198.085527][ T4075] incfs: Error allocating mount info. -12 [ 198.104504][ T4075] incfs: mount failed -12 [ 198.113867][ T4093] loop4: detected capacity change from 0 to 4096 [ 198.126434][ T4093] EXT4-fs: Ignoring removed orlov option [ 198.137250][ T4093] EXT4-fs (loop4): Test dummy encryption mode enabled [ 198.155520][ T4093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.189442][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 198.189460][ T28] audit: type=1400 audit(1743280682.435:1476): avc: denied { reparent } for pid=4092 comm="syz.4.1258" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 198.218686][ T6] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 198.225898][ T6] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 198.233890][ T4093] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz.4.1258: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 198.249709][ T28] audit: type=1326 audit(1743280682.495:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.264152][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 198.286642][ T28] audit: type=1326 audit(1743280682.495:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.316152][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 198.326722][ T4093] EXT4-fs (loop4): Remounting filesystem read-only [ 198.353480][ T4093] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz.4.1258: directory missing '..' [ 198.355018][ T28] audit: type=1326 audit(1743280682.495:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.388254][ T28] audit: type=1326 audit(1743280682.495:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.397149][ T6] usb 3-1: USB disconnect, device number 6 [ 198.411960][ T28] audit: type=1326 audit(1743280682.495:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.440700][ T28] audit: type=1326 audit(1743280682.495:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.442051][ T296] EXT4-fs (loop4): unmounting filesystem. [ 198.470059][ T4099] syz.1.1259[4099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.470172][ T4099] syz.1.1259[4099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.481936][ T28] audit: type=1326 audit(1743280682.495:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.484755][ T4099] loop1: detected capacity change from 0 to 512 [ 198.519142][ T28] audit: type=1326 audit(1743280682.495:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.519179][ T28] audit: type=1326 audit(1743280682.495:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.1.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb619f8d169 code=0x7ffc0000 [ 198.572270][ T4099] ext3: Unknown parameter 'measure' [ 198.694198][ T4105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 198.731731][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1262'. [ 198.737149][ T819] usb 6-1: bad CDC descriptors [ 198.763499][ T819] usb 6-1: USB disconnect, device number 6 [ 199.022670][ T4116] 9pnet_fd: Insufficient options for proto=fd [ 199.240003][ T4118] loop2: detected capacity change from 0 to 256 [ 199.300158][ T4118] FAT-fs (loop2): Directory bread(block 64) failed [ 199.306675][ T4118] FAT-fs (loop2): Directory bread(block 65) failed [ 199.313530][ T4118] FAT-fs (loop2): Directory bread(block 66) failed [ 199.320354][ T4118] FAT-fs (loop2): Directory bread(block 67) failed [ 199.327362][ T4118] FAT-fs (loop2): Directory bread(block 68) failed [ 199.333814][ T4118] FAT-fs (loop2): Directory bread(block 69) failed [ 199.340468][ T4118] FAT-fs (loop2): Directory bread(block 70) failed [ 199.347008][ T4118] FAT-fs (loop2): Directory bread(block 71) failed [ 199.353689][ T4118] FAT-fs (loop2): Directory bread(block 72) failed [ 199.360142][ T4118] FAT-fs (loop2): Directory bread(block 73) failed [ 200.536125][ T2154] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 200.727570][ T2154] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.738873][ T2154] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.752830][ T2154] usb 6-1: config 1 has no interface number 0 [ 200.760747][ T2154] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.782710][ T2154] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 200.810469][ T2154] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.825043][ T2154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.833464][ T2154] usb 6-1: Product: syz [ 200.838143][ T2154] usb 6-1: Manufacturer: syz [ 200.842826][ T2154] usb 6-1: SerialNumber: syz [ 202.306031][ T2154] cdc_ncm 6-1:1.1: bind() failure [ 202.318576][ T2154] usb 6-1: USB disconnect, device number 7 [ 202.913224][ T4172] loop0: detected capacity change from 0 to 256 [ 202.926400][ T4172] FAT-fs (loop0): Unrecognized mount option "utfDàêutf8=0" or missing value [ 203.337691][ T819] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.876109][ T819] usb 2-1: Using ep0 maxpacket: 32 [ 203.924182][ T819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 203.975247][ T819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 203.992173][ T819] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.996088][ T2154] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 204.001614][ T819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.071052][ T819] usb 2-1: config 0 descriptor?? [ 204.077980][ T819] hub 2-1:0.0: USB hub found [ 204.167596][ T4199] loop4: detected capacity change from 0 to 512 [ 204.182332][ T4199] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 204.192230][ T2154] usb 6-1: Using ep0 maxpacket: 16 [ 204.202716][ T2154] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.210122][ T2154] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 204.219345][ T2154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.229237][ T2154] usb 6-1: config 0 descriptor?? [ 204.245323][ T4199] loop4: detected capacity change from 0 to 512 [ 204.268699][ T4199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 204.279848][ T819] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 204.293708][ T4199] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.641328][ T2154] hid (null): unknown global tag 0xd [ 204.652852][ T2154] hid (null): report_id 8472 is invalid [ 204.683391][ T819] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 204.781154][ T4209] loop2: detected capacity change from 0 to 128 [ 204.887989][ T819] usb 6-1: USB disconnect, device number 8 [ 205.116865][ T39] usb 2-1: USB disconnect, device number 6 [ 205.788955][ T4220] loop5: detected capacity change from 0 to 256 [ 205.842417][ T4220] FAT-fs (loop5): Unrecognized mount option "utfDàêutf8=0" or missing value [ 207.277758][ T4236] device pim6reg1 entered promiscuous mode [ 207.333988][ T4238] hub 6-0:1.0: USB hub found [ 207.338944][ T4238] hub 6-0:1.0: 1 port detected [ 207.401641][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.095278][ T4242] loop5: detected capacity change from 0 to 256 [ 208.137323][ T4242] FAT-fs (loop5): Directory bread(block 64) failed [ 208.143823][ T4242] FAT-fs (loop5): Directory bread(block 65) failed [ 208.150488][ T4242] FAT-fs (loop5): Directory bread(block 66) failed [ 208.157124][ T4242] FAT-fs (loop5): Directory bread(block 67) failed [ 208.163738][ T4242] FAT-fs (loop5): Directory bread(block 68) failed [ 208.170178][ T4242] FAT-fs (loop5): Directory bread(block 69) failed [ 208.176803][ T4242] FAT-fs (loop5): Directory bread(block 70) failed [ 208.183226][ T4242] FAT-fs (loop5): Directory bread(block 71) failed [ 208.189757][ T4242] FAT-fs (loop5): Directory bread(block 72) failed [ 208.196183][ T4242] FAT-fs (loop5): Directory bread(block 73) failed [ 208.630250][ T4247] loop2: detected capacity change from 0 to 4096 [ 208.643236][ T4222] loop0: detected capacity change from 0 to 40427 [ 208.651068][ T296] EXT4-fs (loop4): unmounting filesystem. [ 208.678787][ T4222] F2FS-fs (loop0): fault_type options not supported [ 208.687653][ T4247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.697784][ T4222] ================================================================================ [ 208.725741][ T4222] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:919:5 [ 208.733852][ T4222] shift exponent 75 is too large for 64-bit type 'unsigned long' [ 208.741726][ T4222] CPU: 1 PID: 4222 Comm: syz.0.1299 Tainted: G W 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 208.752837][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.762732][ T4222] Call Trace: [ 208.765851][ T4222] [ 208.768631][ T4222] dump_stack_lvl+0x151/0x1b7 [ 208.773146][ T4222] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 208.778439][ T4222] dump_stack+0x15/0x18 [ 208.782430][ T4222] __ubsan_handle_shift_out_of_bounds+0x3e1/0x440 [ 208.788686][ T4222] parse_options+0x4b19/0x4b30 [ 208.793353][ T4222] ? mount_bdev+0x282/0x3b0 [ 208.797617][ T4222] ? f2fs_mount+0x34/0x40 [ 208.801796][ T4222] ? default_options+0xc60/0xc60 [ 208.806565][ T4222] ? kstrdup+0x54/0x70 [ 208.810468][ T4222] ? memcpy+0x56/0x70 [ 208.814299][ T4222] f2fs_fill_super+0x23bc/0x6dc0 [ 208.819071][ T4222] ? kill_f2fs_super+0x3c0/0x3c0 [ 208.823829][ T4222] ? set_blocksize+0x1cb/0x360 [ 208.828430][ T4222] ? sb_set_blocksize+0xa8/0xf0 [ 208.833129][ T4222] mount_bdev+0x282/0x3b0 [ 208.837285][ T4222] ? kill_f2fs_super+0x3c0/0x3c0 [ 208.842058][ T4222] f2fs_mount+0x34/0x40 [ 208.846050][ T4222] legacy_get_tree+0xf1/0x190 [ 208.850565][ T4222] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 208.856669][ T4222] vfs_get_tree+0x88/0x290 [ 208.860922][ T4222] do_new_mount+0x2ba/0xb30 [ 208.865256][ T4222] ? do_move_mount_old+0x160/0x160 [ 208.870199][ T4222] ? security_capable+0x87/0xb0 [ 208.874903][ T4222] ? ns_capable+0x89/0xe0 SYZFAIL: failed to send rpc fd=3 want=4464 sent=0 n=-1 (errno 32: Broken pipe) [ 208.879058][ T4222] path_mount+0x671/0x1070 [ 208.883311][ T4222] ? user_path_at_empty+0x14e/0x1a0 [ 208.888346][ T4222] __se_sys_mount+0x2c4/0x3b0 [ 208.892859][ T4222] ? __x64_sys_mount+0xd0/0xd0 [ 208.897457][ T4222] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 208.903444][ T4222] __x64_sys_mount+0xbf/0xd0 [ 208.907875][ T4222] x64_sys_call+0x49d/0x9a0 [ 208.912216][ T4222] do_syscall_64+0x3b/0xb0 [ 208.916463][ T4222] ? clear_bhb_loop+0x55/0xb0 [ 208.920977][ T4222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.926706][ T4222] RIP: 0033:0x7fbb6998e90a [ 208.930958][ T4222] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.950400][ T4222] RSP: 002b:00007fbb6a820e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.958790][ T4222] RAX: ffffffffffffffda RBX: 00007fbb6a820ef0 RCX: 00007fbb6998e90a [ 208.966598][ T4222] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 00007fbb6a820eb0 [ 208.974410][ T4222] RBP: 0000200000000240 R08: 00007fbb6a820ef0 R09: 0000000000000000 [ 208.979687][ T294] EXT4-fs (loop2): unmounting filesystem. [ 208.982214][ T4222] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 208.995589][ T4222] R13: 00007fbb6a820eb0 R14: 0000000000005505 R15: 00002000000006c0 [ 209.003408][ T4222] [ 209.137059][ T4222] ================================================================================ [ 209.168309][ T4222] F2FS-fs (loop0): Not support 2048, larger than 256 [ 209.310065][ T6] usb 2-1: device descriptor read/all, error -71 [ 209.746869][ T1599] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.754143][ T1599] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.627584][ T1599] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.634882][ T1599] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.642967][ T1599] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.650723][ T1599] device bridge_slave_1 left promiscuous mode [ 210.656779][ T1599] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.663961][ T1599] device bridge_slave_0 left promiscuous mode [ 210.670122][ T1599] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.679122][ T1599] device veth1_macvtap left promiscuous mode [ 210.685016][ T1599] device veth0_vlan left promiscuous mode [ 210.692494][ T1599] device veth1_macvtap left promiscuous mode [ 210.698348][ T1599] device veth0_vlan left promiscuous mode