last executing test programs: 25.503091779s ago: executing program 32 (id=219): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@bsdgroups}, {@noquota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000023a000/0x1000)=nil) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 20.071214607s ago: executing program 3 (id=323): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000b00), 0x91) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) splice(r1, 0x0, r0, &(0x7f0000000080)=0x8008, 0x6b, 0x7) 20.043811528s ago: executing program 3 (id=325): syz_io_uring_setup(0x141c, &(0x7f0000000080)={0x0, 0x5d90, 0x800, 0x1, 0x3}, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x8000000) 19.95303241s ago: executing program 3 (id=327): prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./cfg\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./cfg/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './cfg/usb_gadget/g1'}, 0x17) 19.836934682s ago: executing program 3 (id=330): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) 19.563497819s ago: executing program 3 (id=332): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syslog(0x2, 0xfffffffffffffffd, 0xd) 19.52800791s ago: executing program 3 (id=334): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 19.468444711s ago: executing program 33 (id=334): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 8.440040771s ago: executing program 4 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x3f, 0x69, 0xfd, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0xff, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0x8, 0x8, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x41000, 0xfffc}, 0xddf8ffdb, 0x0, 0x100000, 0x110, 0x0, 0xf801, 0xeeee0000, [0x80000000, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.235442266s ago: executing program 4 (id=560): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000100)) 8.119436019s ago: executing program 4 (id=566): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0xc21c2, 0x9c37611dc13d0d3f) 8.03460755s ago: executing program 4 (id=568): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x440, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000001180)=""/4093, 0xffd) 7.879264034s ago: executing program 4 (id=572): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x64000600) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 7.275330569s ago: executing program 5 (id=592): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0xffffffffffff8001, 0x40) 7.20339776s ago: executing program 5 (id=593): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$uac3(0x3, 0x98, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004000002050004000a001f24", @ANYRES16=r1, @ANYRES64=r0], 0x0) 6.881630548s ago: executing program 4 (id=594): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6.76984596s ago: executing program 34 (id=594): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.979470939s ago: executing program 5 (id=603): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x20c0, 0x0) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 5.051306221s ago: executing program 5 (id=622): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xa, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$FUSE_BMAP(r0, &(0x7f00000026c0)={0x18, 0x7b3620c31cc0b28a}, 0x18) 4.959243173s ago: executing program 5 (id=625): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0x5434, 0x0) 4.858943475s ago: executing program 5 (id=627): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) prctl$PR_SET_NAME(0xf, 0x0) 4.789994777s ago: executing program 35 (id=627): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) prctl$PR_SET_NAME(0xf, 0x0) 4.621543471s ago: executing program 6 (id=634): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) setrlimit(0x0, &(0x7f0000000640)={0x10, 0xffffffffffffffff}) 4.569771572s ago: executing program 6 (id=635): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup3(r0, r1, 0x80000) 4.25132535s ago: executing program 6 (id=639): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000080)={[{@abort}, {@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable}, {@usrquota}, {@noacl}]}, 0x0, 0x492, &(0x7f00000001c0)="$eJzs3M1vFOUfAPDvzG7LDwqUnyIqiFTR2PjS2oLKwYMavWlioge8mNS2EGQBQ0sihIRqDB4NiUcTY2JijP4FnvRi1JOJV70bEqLEBPSga2Z3ZtmW7tL3bd3PJ5nleWae5Xm+nXlmnplndwPoWgPZSxKxNSJ+joj+enZ2gYH6P9evnh//8+r58SSq1Vd+S2rlrl09P14ULd7Xl2cG04j0vSSvZLaps+eOj1Uqk6fz/PD0ibeGp86ee+zYibGjk0cnT44eOnTwwMhTT44+sSJxZnFd230hIsqvXXpp/PClN77/shwRu/bWtzfHsSxpXyM5kAX+e7VmbrEHV6Sy9WNbUzopd7AhLEop6xER0VPr//1Rihs7rz9eeLejjQNWVXZt2tR680wV+A9LotMtADqjuNBn97/FsvDRw8xyhx8dd+XZ+g1QFvf1fKlvKUeal+lZxfrviojDM399nC2R74e/t85T8O6+VWwFANBNvs7GP4/ON/5LY1dTue35HMqOTz9qrLs9InZGxB0RtbJ35uOZxahPDZUa+ZvHn+nlJYS1YNn47+l8bmv2+K8++qtWq/+U8ty2LP7oSY4cq0w+nv9NBqNnU5YfaVPHN8//9MGcVaPFwHugafyXLVn9xVgwb8fl8pwHdBNj02MrNSi98k7E7vJ88SeNmYAkG35GxO7F/dfbi8Sxhz+/p1WhW8ffxgrMM1U/iXiovv9nYk78haT9/OTw/6LSG8PFUXGzH368+HKr+pcV/wrI9v+W2cf/nBL9fyTN87VTi6/j4i/vt7ynXOrx35u8Wpuz7s3XvT02PX16JKI3ebGWn7V+9MZ7i3xRPot/cH9T/Jsb9cZteSqLf09EZAfx3oi4NyL25W2/LyLuj4j9beL/7rkH3lx6/Ksri39i3vNf4/jfMXv/Lz5ROv7tV63qX9j+P1hLDeZraue/W2jdnKhMZqf1JR/NAAAAsPGkEbE1knSokU7ToaH6Z/h3xpa0cmpq+pEjp86cnKh/R2BH9KTFk67+/Hlodrc9khSfBag/Hx2tbbvxvPRARPw/Ij4sba7lh8ZPVSY6HDt0u74W/T/za6nTrQNWne9rQfea2//TDrUDWHuu/9C9Wvb/8jNr2xBgzbn+Q/dq6v9fnLm4p5a4UHvd19gw71xAm18OATYG13/oXvo/dC/9H7qX/g9daTnf61/fid710YzFJz7rWRfNuFUi0nZlXo81b1gssPDGOuaTtj9msYqJTp+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVsa/AQAA//8qG/DQ") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e24000014000500"], 0x1f0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 4.131226713s ago: executing program 6 (id=641): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x47a, &(0x7f00000028c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0xeaff) 3.548732597s ago: executing program 8 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) unshare(0x6020400) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents(r0, 0x0, 0x0) 3.515037717s ago: executing program 8 (id=648): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) 3.239238804s ago: executing program 8 (id=652): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r0, 0x7, &(0x7f0000000540)={0x0, 0x0, 0xe5, 0x74}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) 3.238758474s ago: executing program 6 (id=655): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x891}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.180472915s ago: executing program 8 (id=657): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x2280834, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) 3.111537356s ago: executing program 6 (id=660): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_submit(0x0, 0x0, 0x0) 3.022370019s ago: executing program 36 (id=660): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_submit(0x0, 0x0, 0x0) 3.000870259s ago: executing program 8 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68814}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="110304000100090104006bd648c610112f01fe80000000000000000000000000002eff020000000000000000000000000001"], 0x1043) 2.9512221s ago: executing program 8 (id=667): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2.893056302s ago: executing program 37 (id=667): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2.777290855s ago: executing program 1 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/conf/all/accept_source_route\x00', 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.910343475s ago: executing program 1 (id=679): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.788959118s ago: executing program 1 (id=680): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r2}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.768813948s ago: executing program 1 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaf9) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}, 0xd, 0x400000000007, 0x7fffffffff7ffffe}) 1.68741521s ago: executing program 1 (id=683): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffa, 0x25dfdbfd, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x0, 0xff, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x14, 0x100001002, 0x2, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2}, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0xc}}}, 0xb8}, 0x1, 0x0, 0x0, 0x400}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.6789942s ago: executing program 1 (id=684): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x20, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x200004, 0x0, 0x4}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x4}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x30, 0x10, 0x10, 0x10, 0x10, 0x7, 0x0, 0x10, 0x12, 0x1a69, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 1.429783936s ago: executing program 7 (id=690): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(r0, &(0x7f0000002840)={0x2020}, 0x2020) 1.364760768s ago: executing program 7 (id=693): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x0, 0x1, 0x6, 0x3}, 0x14, [0x4, 0xa, 0x6, 0x0, 0x4, 0x8, 0x6, 0x3, 0x2, 0x3, 0x6, 0x7aa, 0x8000, 0xfffffff8, 0x4, 0x7, 0x2, 0x5, 0x800, 0x8000, 0xffffffc5, 0x3, 0x1, 0xffff, 0x1ff, 0x2, 0xff, 0x9, 0x8, 0xb003, 0x5, 0xdab, 0x7fff, 0x6, 0x2, 0x1, 0xffffffff, 0x73d, 0x5c0e, 0x0, 0x401, 0x10e, 0x2, 0x3745cb10, 0x6, 0x1000, 0x0, 0x0, 0x3, 0x7f, 0x48e, 0x9, 0x0, 0xb09, 0x49, 0xffffad55, 0x5, 0xfffffa29, 0x4, 0x4, 0x2, 0x4, 0x9, 0x6], [0x4, 0x9, 0x9, 0x7e, 0x6, 0xe96a, 0x1ff, 0x96, 0x80, 0xffff, 0xb6b6, 0x8, 0x4, 0x8, 0x564, 0x3ff, 0x47c9, 0x8, 0xa2e, 0x1f71bdde, 0x7, 0x2, 0x0, 0x64380000, 0x7, 0x4cdb2f3b, 0x5, 0x2, 0xf, 0x7fffffff, 0x9, 0x800, 0x6, 0x9000000, 0x4, 0x7, 0xffffffff, 0x6, 0x8, 0x6, 0x3, 0x4, 0x4, 0xfffffffb, 0x100, 0x8, 0x4, 0x9, 0x0, 0x0, 0x9, 0xe1fa, 0x5, 0xe, 0x1, 0x5, 0x1d, 0x2, 0x1, 0x5ee8, 0x8, 0x1ff, 0xffffff00, 0xe], [0x100000, 0x6, 0x6, 0x2, 0x0, 0x10, 0xb, 0x1, 0x4, 0xfff, 0x7, 0x2, 0x81, 0x4, 0x0, 0x40, 0x7, 0x0, 0x3, 0x8, 0x7, 0x5, 0x430a, 0xa, 0x0, 0x8, 0x7fffffff, 0xffffffff, 0x2000000, 0x1, 0x6, 0x8, 0x83, 0x7fffffff, 0x1, 0xb3, 0x1, 0x2, 0x9, 0xffff, 0x7, 0x3ff, 0xf0f4, 0x9000, 0x1000, 0x9a49, 0x7fff, 0xdb3, 0x2, 0x77, 0x10001, 0xffff8001, 0x8, 0x0, 0x7, 0x800, 0x8001, 0x8, 0x9, 0x8000, 0x1, 0xffff244c, 0x0, 0x25694f00], [0x3, 0x0, 0x8, 0x8, 0x8a0, 0x5, 0xfffffff7, 0x10, 0x8, 0x101, 0x1, 0x8, 0x3, 0x0, 0x6, 0xc, 0x9, 0x400, 0x7, 0x2, 0x9, 0xd, 0x4f, 0x5b, 0x6, 0x4, 0xd3, 0x799, 0x8, 0x8, 0x7, 0xfffff357, 0x7ff, 0xa, 0x4, 0x7, 0x7, 0x1, 0x4, 0x4, 0xffff, 0xf820, 0xe, 0x6, 0x6, 0x2, 0x1, 0x80000000, 0x40, 0x7, 0x6, 0x4, 0x10000, 0x101, 0x7, 0x0, 0x5559, 0x1243ff7c, 0x2, 0x10000, 0xc, 0xffffffff, 0x116a, 0xffff8000]}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000a80)={0x1e, {0x2, 0x1, 0x38f, 0x7, 0x2}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080), 0x0}, 0x20) 1.350433028s ago: executing program 7 (id=694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9, 0x2}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 1.2831894s ago: executing program 7 (id=696): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1000, 0x10000, 0x4, 0xf, 0xfd, 0x99, 0x40, 0x7, 0x0, 0x2b, 0x16}, {0x200000, 0xeeee8000, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x7, 0x7, 0x3, 0xb5}, {0xeeef0000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x4}, {0x80a0000, 0xeeee0000, 0x8, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xf}, {0x10000, 0xe000, 0x2, 0x3, 0x3, 0x6, 0xab, 0x7e, 0x7, 0x2, 0xdb}, {0x1000, 0x100000, 0xc, 0x7, 0xb1, 0x8, 0x21, 0x80, 0x80, 0x0, 0x1}, {0x3000, 0x8000000, 0x4, 0x1, 0x2, 0x5, 0x7, 0x3, 0x5, 0x81, 0x1, 0xf0}, {0x100000, 0xd000, 0xa, 0x5, 0xd4, 0x4, 0xc, 0x36, 0x2, 0x9, 0xb0, 0x9}, {0x4, 0x1000}, {0x2000, 0x5}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x500, 0x3000, [0xf90000000000, 0x4, 0x80, 0xfff]}) 1.067116164s ago: executing program 7 (id=699): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r1, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, 0x0, 0x1, 0x0, 0x0) 883.209509ms ago: executing program 7 (id=702): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@noblock_validity}, {@usrquota}, {@noblock_validity}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x28242, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000580)="9e9e", 0x2}], 0x1, 0x5000, 0x0, 0xa) 798.420281ms ago: executing program 0 (id=703): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f00000000c0), 0x8) close(r0) open$dir(0x0, 0x80003, 0x10) 688.321364ms ago: executing program 0 (id=704): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f00000000c0)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xf}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x1, 0x4fe, &(0x7f0000000180)="$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") write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x20006, 0xf, 0x2}}, 0x30) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x5393, &(0x7f0000000100)=0x3) 555.431977ms ago: executing program 0 (id=705): r0 = syz_io_uring_setup(0xa95, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x149}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_dev_info_sqe={0x2e, 0x12, 0x0, r5, 0x80207502, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 515.864838ms ago: executing program 0 (id=708): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 428.57502ms ago: executing program 0 (id=710): sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfffff000) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 329.567092ms ago: executing program 2 (id=714): socket(0x840000000002, 0x3, 0x100) recvmsg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d0000000000003f000a00000000000006"], 0x30}}, 0x4004890) 231.345085ms ago: executing program 9 (id=716): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x4}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x4}, 0x80) 231.031935ms ago: executing program 2 (id=717): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c362023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x39bc) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r0, 0xc96c1000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000c80)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') 230.925825ms ago: executing program 9 (id=718): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0x9, 0xffffffff00000000, 0xbec, 0x3, 0x920, 0x3ff, 0x100000001, 0x1}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8}) shutdown(r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b, 0x700}) 223.135084ms ago: executing program 2 (id=719): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x38003, 0x20f000, 0x2, 0x0, 0x7}) 178.952825ms ago: executing program 0 (id=720): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x1000008, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setuid(0xee01) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 115.437658ms ago: executing program 9 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000200)=0x100000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r2}, 0x10) 115.246818ms ago: executing program 9 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) mknod(&(0x7f0000000040)='./file0/../file0\x00', 0x1, 0x12) 115.117787ms ago: executing program 2 (id=723): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x4d91, &(0x7f0000000000)={0x0, 0x4a47, 0x8, 0x0, 0x351}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) 102.987147ms ago: executing program 9 (id=724): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = gettid() tkill(r1, 0x16) 81.232548ms ago: executing program 2 (id=725): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x80487436, 0x0) 10.8115ms ago: executing program 2 (id=726): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 9 (id=727): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x5b9, &(0x7f0000000680)="$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") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x82000, 0xe1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x12, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) kernel console output (not intermixed with test programs): ady [ 26.541498][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.549772][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.558340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.566823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.584166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.595056][ T294] device veth1_macvtap entered promiscuous mode [ 26.615734][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 26.622918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.634381][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.642764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.651564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.659800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.677048][ T291] device veth1_macvtap entered promiscuous mode [ 26.685584][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.694779][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.703493][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.717445][ T293] device veth1_macvtap entered promiscuous mode [ 26.739173][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.755386][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.784082][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.794011][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.811723][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.823851][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.842507][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.855608][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.864098][ T325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.982617][ T332] syz.1.2 (332) used greatest stack depth: 20928 bytes left [ 26.998010][ T337] loop1: detected capacity change from 0 to 256 [ 27.011209][ T298] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.032088][ T339] incfs_lookup_dentry err:-13 [ 27.095113][ T347] loop4: detected capacity change from 0 to 128 [ 27.135528][ T350] overlayfs: failed to set xattr on upper [ 27.146635][ T347] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 27.169296][ T347] FAT-fs (loop4): Filesystem has been set read-only [ 27.188801][ T347] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 27.226563][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.243654][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.279610][ T364] SELinux: failed to load policy [ 27.292099][ T298] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 27.303446][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.331778][ T371] syz.3.23[371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.331908][ T371] syz.3.23[371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 27.345305][ T298] usb 1-1: config 0 descriptor?? [ 27.418989][ T377] loop1: detected capacity change from 0 to 512 [ 27.426742][ T379] loop2: detected capacity change from 0 to 1024 [ 27.460573][ T377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 27.470833][ T379] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.479970][ T377] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.511480][ T293] EXT4-fs (loop2): unmounting filesystem. [ 27.549804][ T386] loop2: detected capacity change from 0 to 256 [ 27.558396][ T291] EXT4-fs (loop1): unmounting filesystem. [ 27.582473][ T298] usbhid 1-1:0.0: can't add hid device: -71 [ 27.588537][ T298] usbhid: probe of 1-1:0.0 failed with error -71 [ 27.606325][ T298] usb 1-1: USB disconnect, device number 2 [ 27.651220][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.842468][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 27.861361][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.881106][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 27.902360][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 27.921191][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.939799][ T24] usb 4-1: Product: syz [ 27.944195][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.951858][ T24] usb 4-1: Manufacturer: syz [ 27.956474][ T24] usb 4-1: SerialNumber: syz [ 27.974346][ T24] usb 4-1: selecting invalid altsetting 1 [ 27.980396][ T24] usb 4-1: unit 6 not found! [ 27.987977][ T397] loop1: detected capacity change from 0 to 40427 [ 28.003251][ T397] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 28.021219][ T397] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.032616][ T397] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 28.040553][ T397] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.089341][ T397] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 28.096911][ T397] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.122762][ T370] loop4: detected capacity change from 0 to 131072 [ 28.141569][ T397] xt_hashlimit: size too large, truncated to 1048576 [ 28.151481][ T39] usb 3-1: Using ep0 maxpacket: 32 [ 28.157490][ T370] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 28.166487][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.178984][ T298] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.187244][ T370] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.195588][ T39] usb 3-1: config 1 has no interfaces? [ 28.201720][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 28.211523][ T370] F2FS-fs (loop4): invalid crc value [ 28.216897][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.236077][ T370] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.286715][ T370] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.294106][ T370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 28.382269][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.401125][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.420626][ T298] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 28.433042][ T39] usb 3-1: string descriptor 0 read error: -71 [ 28.441544][ T39] usb 3-1: USB disconnect, device number 2 [ 28.461752][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.480665][ T298] usb 1-1: config 0 descriptor?? [ 28.775502][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 28.775533][ T28] audit: type=1400 audit(1786393424.786:170): avc: denied { name_bind } for pid=424 comm="syz.4.39" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.811530][ T28] audit: type=1400 audit(1786393424.826:171): avc: denied { create } for pid=426 comm="syz.4.41" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.833552][ T28] audit: type=1400 audit(1786393424.826:172): avc: denied { map } for pid=426 comm="syz.4.41" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.857878][ T28] audit: type=1400 audit(1786393424.826:173): avc: denied { read write } for pid=426 comm="syz.4.41" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.882469][ T28] audit: type=1400 audit(1786393424.826:174): avc: denied { map } for pid=426 comm="syz.4.41" path="socket:[16128]" dev="sockfs" ino=16128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 28.898583][ T298] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 28.914299][ T298] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 28.931281][ T298] input: failed to attach handler kbd to device input5, error: -5 [ 28.953538][ T28] audit: type=1400 audit(1786393424.966:175): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=596 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.966105][ T298] usb 1-1: USB disconnect, device number 3 [ 28.995537][ T28] audit: type=1400 audit(1786393424.966:176): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=596 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.019545][ T24] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 29.041910][ T24] usb 4-1: USB disconnect, device number 2 [ 29.051008][ T28] audit: type=1400 audit(1786393425.056:177): avc: denied { create } for pid=433 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.051306][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.071584][ T28] audit: type=1400 audit(1786393425.056:178): avc: denied { setopt } for pid=433 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.114090][ T28] audit: type=1400 audit(1786393425.126:179): avc: denied { bind } for pid=433 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.165824][ T441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.45'. [ 29.176229][ T441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.45'. [ 29.241643][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.292319][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.303296][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.313174][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.326117][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.335195][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.344175][ T6] usb 2-1: config 0 descriptor?? [ 29.411201][ T60] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.461141][ T39] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 29.573444][ T452] loop3: detected capacity change from 0 to 512 [ 29.591265][ T452] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 29.601207][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.610964][ T452] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.618338][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 29.636767][ T60] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 64 [ 29.646985][ T60] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.653356][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.672109][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.683858][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.684171][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.697937][ T39] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 29.706016][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.723845][ T60] usb 3-1: Product: syz [ 29.729161][ T452] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.50: Failed to acquire dquot type 1 [ 29.740662][ T60] usb 3-1: Manufacturer: syz [ 29.743610][ T452] EXT4-fs (loop3): 1 truncate cleaned up [ 29.745652][ T60] usb 3-1: SerialNumber: syz [ 29.756398][ T452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.765967][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.771860][ T6] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 29.793442][ T39] usb 5-1: config 0 descriptor?? [ 29.801508][ T6] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 29.805389][ T452] EXT4-fs (loop3): shut down requested (0) [ 29.836971][ T448] syz.0.48 (448) used greatest stack depth: 19936 bytes left [ 29.865154][ T292] EXT4-fs (loop3): unmounting filesystem. [ 29.993178][ T437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 30.023618][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 30.029656][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 30.040127][ T39] usb 5-1: USB disconnect, device number 2 [ 30.331228][ T456] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.512759][ T456] usb 4-1: unable to get BOS descriptor or descriptor too short [ 30.522410][ T456] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.532851][ T456] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.544714][ T456] usb 4-1: string descriptor 0 read error: -22 [ 30.551018][ T456] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 30.560479][ T456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.574113][ T456] usb 4-1: selecting invalid altsetting 1 [ 30.580906][ T456] usb 4-1: unit 6 not found! [ 30.791315][ T473] Illegal XDP return value 4294965632 on prog (id 4) dev syz_tun, expect packet loss! [ 30.802804][ T437] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.015747][ T60] cdc_ncm 3-1:1.0: bind() failure [ 31.023414][ T60] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 31.030252][ T60] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 31.047043][ T60] usb 3-1: USB disconnect, device number 3 [ 31.078427][ T471] loop4: detected capacity change from 0 to 131072 [ 31.085606][ T471] ======================================================= [ 31.085606][ T471] WARNING: The mand mount option has been deprecated and [ 31.085606][ T471] and is ignored by this kernel. Remove the mand [ 31.085606][ T471] option from the mount to silence this warning. [ 31.085606][ T471] ======================================================= [ 31.133639][ T471] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 31.140474][ T471] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 31.149266][ T471] F2FS-fs (loop4): invalid crc value [ 31.154777][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 31.164487][ T471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.203903][ T471] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.211155][ T471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 31.226890][ T471] F2FS-fs (loop4): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 31.342689][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.353837][ T19] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.363106][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.384692][ T19] usb 1-1: config 0 descriptor?? [ 31.549511][ T486] loop2: detected capacity change from 0 to 256 [ 31.556543][ T486] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.567346][ T486] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 31.582953][ T456] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 31.593891][ T486] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 31.607526][ T456] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 31.621825][ T456] usb 4-1: USB disconnect, device number 3 [ 31.670071][ T490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=490 comm=syz.1.63 [ 31.719787][ T491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=491 comm=syz.1.63 [ 31.721434][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.733034][ T491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=491 comm=syz.1.63 [ 31.792968][ T19] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 31.802826][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input6 [ 31.861670][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.884428][ T19] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 31.904718][ T438] usb 2-1: USB disconnect, device number 2 [ 31.931111][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 31.937420][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.951145][ T39] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 31.965198][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 31.972405][ T39] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 31.982004][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.990692][ T39] usb 5-1: config 0 descriptor?? [ 32.006245][ T39] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 32.031187][ T308] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.110650][ T497] loop3: detected capacity change from 0 to 256 [ 32.123099][ T497] FAT-fs (loop3): Directory bread(block 64) failed [ 32.129721][ T497] FAT-fs (loop3): Directory bread(block 65) failed [ 32.136533][ T497] FAT-fs (loop3): Directory bread(block 66) failed [ 32.143456][ T497] FAT-fs (loop3): Directory bread(block 67) failed [ 32.150055][ T497] FAT-fs (loop3): Directory bread(block 68) failed [ 32.157193][ T497] FAT-fs (loop3): Directory bread(block 69) failed [ 32.163916][ T497] FAT-fs (loop3): Directory bread(block 70) failed [ 32.170526][ T497] FAT-fs (loop3): Directory bread(block 71) failed [ 32.177225][ T497] FAT-fs (loop3): Directory bread(block 72) failed [ 32.183900][ T497] FAT-fs (loop3): Directory bread(block 73) failed [ 32.204398][ T497] xt_hashlimit: size too large, truncated to 1048576 [ 32.212587][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.231120][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.240923][ T308] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.250348][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.260983][ T308] usb 3-1: config 0 descriptor?? [ 32.539322][ T504] loop3: detected capacity change from 0 to 16 [ 32.548123][ T504] erofs: (device loop3): mounted with root inode @ nid 36. [ 32.599905][ T509] binder: 508:509 ioctl c018620c 0 returned -14 [ 32.725572][ T298] usb 5-1: USB disconnect, device number 3 [ 32.748552][ T517] loop4: detected capacity change from 0 to 256 [ 32.766574][ T519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 32.784274][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 32.795217][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.803252][ T517] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 32.816350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 32.829356][ T438] usb 1-1: USB disconnect, device number 4 [ 32.834293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.853868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.871166][ T308] usb 3-1: language id specifier not provided by device, defaulting to English [ 32.890937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.915284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.923863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.231128][ T438] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.311165][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.377252][ T533] loop1: detected capacity change from 0 to 256 [ 33.384240][ T533] exfat: Deprecated parameter 'utf8' [ 33.393438][ T533] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 33.414185][ T438] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 33.429130][ T438] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 33.451167][ T438] usb 1-1: config 220 has no interface number 2 [ 33.457565][ T438] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 33.472580][ T308] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 33.489877][ T308] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 33.498701][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 33.510861][ T308] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 33.519117][ T438] usb 1-1: config 220 interface 0 has no altsetting 0 [ 33.519806][ T308] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 33.530515][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.534975][ T308] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 33.551189][ T438] usb 1-1: config 220 interface 76 has no altsetting 0 [ 33.558856][ T308] usb 3-1: USB disconnect, device number 4 [ 33.567588][ T438] usb 1-1: config 220 interface 1 has no altsetting 0 [ 33.581107][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 33.601194][ T19] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.611570][ T438] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 33.620642][ T438] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.628941][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.637460][ T438] usb 1-1: Product: syz [ 33.641666][ T438] usb 1-1: Manufacturer: syz [ 33.646277][ T438] usb 1-1: SerialNumber: syz [ 33.655458][ T19] usb 4-1: config 0 descriptor?? [ 33.743835][ T540] Zero length message leads to an empty skb [ 33.788151][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 33.788167][ T28] audit: type=1400 audit(1786393429.796:230): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.816707][ T546] loop1: detected capacity change from 0 to 256 [ 33.831374][ T28] audit: type=1400 audit(1786393429.836:231): avc: denied { mount } for pid=547 comm="syz.4.87" name="/" dev="ramfs" ino=16936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.862654][ T28] audit: type=1400 audit(1786393429.876:232): avc: denied { create } for pid=545 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.878996][ T438] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 33.892326][ T28] audit: type=1400 audit(1786393429.876:233): avc: denied { write } for pid=545 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 33.912162][ T438] usb 1-1: No valid video chain found. [ 33.920809][ T28] audit: type=1400 audit(1786393429.926:234): avc: denied { lock } for pid=549 comm="syz.4.89" path="socket:[16348]" dev="sockfs" ino=16348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 33.929382][ T438] usb 1-1: selecting invalid altsetting 0 [ 33.960406][ T552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.90'. [ 33.983653][ T438] usb 1-1: USB disconnect, device number 5 [ 34.077984][ T19] HID 045e:07da: Invalid code 65791 type 1 [ 34.094087][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input7 [ 34.124595][ T19] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 34.180412][ T555] loop1: detected capacity change from 0 to 40427 [ 34.191962][ T555] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 34.200487][ T555] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 34.232717][ T555] F2FS-fs (loop1): invalid crc value [ 34.245969][ T555] F2FS-fs (loop1): Found nat_bits in checkpoint [ 34.304433][ T555] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 34.311675][ T555] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 34.357001][ T28] audit: type=1400 audit(1786393430.366:235): avc: denied { write } for pid=554 comm="syz.1.91" path="/23/file0/file0" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.380195][ T28] audit: type=1400 audit(1786393430.366:236): avc: denied { ioctl } for pid=554 comm="syz.1.91" path="/23/file0/file0" dev="loop1" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.446634][ T28] audit: type=1400 audit(1786393430.456:237): avc: denied { ioctl } for pid=568 comm="syz.0.95" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16378 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.536209][ T28] audit: type=1400 audit(1786393430.546:238): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.573308][ T28] audit: type=1400 audit(1786393430.576:239): avc: denied { create } for pid=574 comm="syz.0.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.622161][ T438] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.812544][ T593] loop1: detected capacity change from 0 to 16 [ 34.819569][ T438] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 34.841129][ T438] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 34.857801][ T593] erofs: (device loop1): mounted with root inode @ nid 36. [ 34.872838][ T438] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 34.897028][ T438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.917222][ T438] usb 3-1: Product: syz [ 34.924017][ T308] usb 4-1: USB disconnect, device number 4 [ 34.924260][ T438] usb 3-1: Manufacturer: syz [ 34.944818][ T438] usb 3-1: SerialNumber: syz [ 34.955964][ T564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.968843][ T564] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 34.995585][ T438] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 35.017177][ T438] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 35.045495][ T438] usbserial_generic 3-1:1.0: generic converter detected [ 35.062872][ T438] usb 3-1: generic converter now attached to ttyUSB0 [ 35.147524][ T607] loop4: detected capacity change from 0 to 16 [ 35.154464][ T607] erofs: (device loop4): mounted with root inode @ nid 36. [ 35.165331][ T607] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 35.174841][ T607] erofs: (device loop4): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 35.184097][ T607] syz.4.112: attempt to access beyond end of device [ 35.184097][ T607] loop4: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 35.198567][ T607] syz.4.112: attempt to access beyond end of device [ 35.198567][ T607] loop4: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 35.200767][ T597] loop0: detected capacity change from 0 to 40427 [ 35.213116][ T607] syz.4.112: attempt to access beyond end of device [ 35.213116][ T607] loop4: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 35.233622][ T438] usb 3-1: USB disconnect, device number 5 [ 35.240924][ T438] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 35.245951][ T597] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 35.256923][ T438] usbserial_generic 3-1:1.0: device disconnected [ 35.268578][ T597] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 35.281918][ T597] F2FS-fs (loop0): invalid crc value [ 35.296140][ T597] F2FS-fs (loop0): Found nat_bits in checkpoint [ 35.327442][ T597] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 35.331419][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.334891][ T597] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 35.440790][ T620] loop4: detected capacity change from 0 to 4096 [ 35.463065][ T620] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.471902][ T620] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.480477][ T620] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 35.489649][ T620] System zones: 0-5 [ 35.509081][ T620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.534230][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 35.543974][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.561025][ T24] usb 2-1: config 0 descriptor?? [ 35.570150][ T294] EXT4-fs (loop4): unmounting filesystem. [ 35.611473][ T630] capability: warning: `syz.0.118' uses deprecated v2 capabilities in a way that may be insecure [ 35.647103][ T635] netlink: 96 bytes leftover after parsing attributes in process `syz.0.123'. [ 35.678473][ T640] input: syz0 as /devices/virtual/input/input8 [ 35.853514][ T651] user requested TSC rate below hardware speed [ 35.896414][ T648] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 35.904341][ T648] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 35.913906][ T648] F2FS-fs (loop2): invalid crc value [ 35.920819][ T648] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.976025][ T648] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 35.983208][ T648] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 36.066968][ T663] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.099357][ T294] EXT4-fs (loop4): unmounting filesystem. [ 36.209532][ T669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 36.220428][ T669] System zones: 1-3, 19-19, 35-36 [ 36.226342][ T669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.235255][ T669] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.281652][ T294] EXT4-fs (loop4): unmounting filesystem. [ 36.358685][ T681] erofs: (device loop4): mounted with root inode @ nid 36. [ 36.416395][ T685] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.426473][ T685] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.142: inode #1: comm syz.4.142: iget: illegal inode # [ 36.440059][ T685] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.142: error while reading EA inode 1 err=-117 [ 36.453952][ T685] EXT4-fs (loop4): 1 orphan inode deleted [ 36.458111][ T687] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 36.459750][ T685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.492943][ T685] xt_hashlimit: size too large, truncated to 1048576 [ 36.733322][ T702] exfat: Deprecated parameter 'namecase' [ 36.753376][ T702] exfat: Deprecated parameter 'utf8' [ 36.771200][ T24] usb 2-1: Cannot set autoneg [ 36.775378][ T702] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 36.780033][ T24] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 36.827600][ T24] usb 2-1: USB disconnect, device number 3 [ 36.858378][ T698] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 36.872056][ T698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 36.888465][ T698] F2FS-fs (loop3): invalid crc value [ 36.904654][ T698] F2FS-fs (loop3): Found nat_bits in checkpoint [ 36.934124][ T294] EXT4-fs (loop4): unmounting filesystem. [ 36.952071][ T698] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 36.959225][ T698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.147914][ T711] set_capacity_and_notify: 9 callbacks suppressed [ 37.147931][ T711] loop4: detected capacity change from 0 to 40427 [ 37.185643][ T711] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 37.203169][ T711] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 37.222961][ T711] F2FS-fs (loop4): Image doesn't support compression [ 37.234260][ T723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 37.244315][ T711] F2FS-fs (loop4): Image doesn't support compression [ 37.261905][ T711] F2FS-fs (loop4): invalid crc value [ 37.271297][ T711] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 37.310261][ T728] input: syz1 as /devices/virtual/input/input9 [ 37.333585][ T711] F2FS-fs (loop4): Start checkpoint disabled! [ 37.340235][ T711] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 37.347919][ T711] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 37.362672][ T711] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 37.383318][ T309] kworker/u4:3: attempt to access beyond end of device [ 37.383318][ T309] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.425343][ T711] VFS:Filesystem freeze failed [ 37.499480][ T741] loop3: detected capacity change from 0 to 512 [ 37.548301][ T741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.577974][ T741] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.627644][ T292] EXT4-fs (loop3): unmounting filesystem. [ 37.666377][ T756] loop2: detected capacity change from 0 to 512 [ 37.700052][ T756] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.727550][ T756] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 37.743089][ T756] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.167: bg 0: block 248: padding at end of block bitmap is not set [ 37.758498][ T756] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.167: Failed to acquire dquot type 1 [ 37.787678][ T756] EXT4-fs (loop2): 1 truncate cleaned up [ 37.801159][ T756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.842557][ T748] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.167: deleted inode referenced: 12 [ 37.862360][ T775] device ip6gre1 entered promiscuous mode [ 37.875558][ T293] EXT4-fs (loop2): unmounting filesystem. [ 37.877249][ T456] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 37.889122][ T456] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 37.895270][ T775] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 37.905406][ T456] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 37.966602][ T783] tipc: Started in network mode [ 37.975316][ T783] tipc: Node identity ac1414aa, cluster identity 4711 [ 37.982427][ T783] tipc: Enabled bearer , priority 10 [ 37.989636][ T787] device syz_tun entered promiscuous mode [ 37.998529][ T785] xt_hashlimit: size too large, truncated to 1048576 [ 38.021760][ T787] device syz_tun left promiscuous mode [ 38.061037][ T795] loop2: detected capacity change from 0 to 512 [ 38.071197][ T456] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 38.081354][ T795] EXT4-fs: Ignoring removed nobh option [ 38.104934][ T795] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 38.131152][ T795] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 38.174959][ T795] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #13: comm syz.2.184: inode has both inline data and extents flags [ 38.209654][ T795] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.184: couldn't read orphan inode 13 (err -117) [ 38.229553][ T456] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 38.251619][ T795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.285513][ T795] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 38.326660][ T293] EXT4-fs (loop2): unmounting filesystem. [ 38.517561][ T824] loop1: detected capacity change from 0 to 2048 [ 38.541875][ T824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.559643][ T824] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 38.575832][ T824] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.588217][ T824] EXT4-fs (loop1): This should not happen!! Data will be lost [ 38.588217][ T824] [ 38.601262][ T824] EXT4-fs (loop1): Total free blocks count 0 [ 38.608666][ T824] EXT4-fs (loop1): Free/Dirty block details [ 38.615042][ T824] EXT4-fs (loop1): free_blocks=66060288 [ 38.620680][ T824] EXT4-fs (loop1): dirty_blocks=32 [ 38.625953][ T824] EXT4-fs (loop1): Block reservation details [ 38.632124][ T824] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 38.644039][ T831] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 38.657008][ T833] loop0: detected capacity change from 0 to 128 [ 38.687449][ T835] loop3: detected capacity change from 0 to 256 [ 38.720962][ T839] loop0: detected capacity change from 0 to 256 [ 38.739414][ T839] FAT-fs (loop0): bogus logical sector size 2057 [ 38.757346][ T839] FAT-fs (loop0): Can't find a valid FAT filesystem [ 38.797783][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 38.797798][ T28] audit: type=1400 audit(1786393434.806:282): avc: denied { create } for pid=846 comm="syz.3.204" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.831300][ T28] audit: type=1400 audit(1786393434.846:283): avc: denied { mounton } for pid=846 comm="syz.3.204" path="/39/file0" dev="tmpfs" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.862233][ T850] loop0: detected capacity change from 0 to 512 [ 38.864936][ T28] audit: type=1400 audit(1786393434.876:284): avc: denied { setopt } for pid=848 comm="syz.1.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.869659][ T850] EXT4-fs: Ignoring removed oldalloc option [ 38.895536][ T850] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.922639][ T850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 38.932547][ T850] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.948109][ T28] audit: type=1400 audit(1786393434.956:285): avc: denied { append } for pid=849 comm="syz.0.206" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.091954][ T287] EXT4-fs (loop0): unmounting filesystem. [ 39.102690][ T438] tipc: Node number set to 2886997162 [ 39.129079][ T863] loop0: detected capacity change from 0 to 256 [ 39.134118][ T865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 39.145338][ T865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 39.147907][ T863] exfat: Deprecated parameter 'utf8' [ 39.163321][ T863] exfat: Deprecated parameter 'namecase' [ 39.169469][ T863] exfat: Deprecated parameter 'utf8' [ 39.178882][ T863] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 39.204647][ T28] audit: type=1400 audit(1786393435.216:286): avc: denied { write } for pid=866 comm="syz.4.212" name="mcfilter6" dev="proc" ino=4026532497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.206586][ T863] incfs: ino conflict with backing FS 1 [ 39.247006][ T28] audit: type=1400 audit(1786393435.216:287): avc: denied { mounton } for pid=862 comm="syz.0.209" path=2F33312FE91F7189591E9233614B2F627573 dev="loop0" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.274244][ T28] audit: type=1400 audit(1786393435.246:288): avc: denied { remove_name } for pid=862 comm="syz.0.209" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="incremental-fs" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.332519][ T28] audit: type=1400 audit(1786393435.246:289): avc: denied { rmdir } for pid=862 comm="syz.0.209" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="incremental-fs" ino=1048614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.383471][ T28] audit: type=1400 audit(1786393435.256:290): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="loop0" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.416209][ T873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.426089][ T873] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.440696][ T28] audit: type=1400 audit(1786393435.446:291): avc: denied { setattr } for pid=872 comm="syz.4.216" path="/57/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.468249][ T873] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #18: comm syz.4.216: corrupted inode contents [ 39.500729][ T873] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #18: comm syz.4.216: mark_inode_dirty error [ 39.512421][ T873] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #18: comm syz.4.216: corrupted inode contents [ 39.524638][ T873] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2945: inode #18: comm syz.4.216: mark_inode_dirty error [ 39.537040][ T873] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2948: inode #18: comm syz.4.216: mark inode dirty (error -117) [ 39.567104][ T873] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 39.585094][ T294] EXT4-fs (loop4): unmounting filesystem. [ 39.612385][ T885] device batadv_slave_1 entered promiscuous mode [ 39.619384][ T884] device batadv_slave_1 left promiscuous mode [ 39.678202][ T891] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 39.686240][ T891] FAT-fs (loop3): error, corrupted file size (i_pos 51, 8960) [ 39.796036][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.803342][ T893] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.813171][ T893] device bridge_slave_0 entered promiscuous mode [ 39.821639][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.828764][ T893] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.836505][ T893] device bridge_slave_1 entered promiscuous mode [ 39.884902][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.892007][ T893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.899314][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.906408][ T893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.930706][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.947466][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.956490][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.961498][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 39.982009][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.990490][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.997619][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.005502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.013986][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.021018][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.035683][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.043581][ T298] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.060448][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.078675][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.094507][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.103703][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.112894][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.121514][ T893] device veth0_vlan entered promiscuous mode [ 40.129198][ T322] device bridge_slave_1 left promiscuous mode [ 40.135907][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.144044][ T322] device bridge_slave_0 left promiscuous mode [ 40.146076][ T916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.150415][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.159660][ T916] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.167877][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 40.183793][ T322] device veth1_macvtap left promiscuous mode [ 40.189868][ T322] device veth0_vlan left promiscuous mode [ 40.196455][ T24] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 40.211820][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.213531][ T292] EXT4-fs (loop3): unmounting filesystem. [ 40.231128][ T24] usb 5-1: config 0 has no interface number 0 [ 40.239497][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 40.257502][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.275851][ T24] usb 5-1: Product: syz [ 40.281273][ T298] usb 2-1: Using ep0 maxpacket: 32 [ 40.287602][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.298643][ T24] usb 5-1: Manufacturer: syz [ 40.304954][ T24] usb 5-1: SerialNumber: syz [ 40.311294][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.322095][ T24] usb 5-1: config 0 descriptor?? [ 40.327708][ T298] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 40.337566][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.365648][ T298] usb 2-1: config 0 descriptor?? [ 40.381765][ T298] hub 2-1:0.0: USB hub found [ 40.430568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.439253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.449378][ T893] device veth1_macvtap entered promiscuous mode [ 40.486313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.494693][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.504316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.531574][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.542253][ T24] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 40.548695][ T24] usb 5-1: No valid video chain found. [ 40.550718][ T923] F2FS-fs (loop3): invalid crc value [ 40.566088][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.574554][ T298] hub 2-1:0.0: 1 port detected [ 40.596061][ T24] usb 5-1: USB disconnect, device number 4 [ 40.610020][ T923] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.681566][ T923] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.007170][ T959] mmap: syz.3.246 (959) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.188217][ T298] hub 2-1:0.0: activate --> -90 [ 41.245535][ T979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.260519][ T979] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.273265][ T979] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.254: corrupted inode contents [ 41.285296][ T979] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.254: mark_inode_dirty error [ 41.297420][ T979] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.254: corrupted inode contents [ 41.325072][ T292] EXT4-fs (loop3): unmounting filesystem. [ 41.407519][ T994] process 'syz.3.257' launched './file0' with NULL argv: empty string added [ 41.547798][ T1009] EXT4-fs: Ignoring removed oldalloc option [ 41.555066][ T1009] EXT4-fs: Ignoring removed i_version option [ 41.562009][ T1009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.581693][ T1009] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.264: invalid block [ 41.601483][ T925] usb 2-1: USB disconnect, device number 4 [ 41.608402][ T298] usb 2-1-port1: cannot disable (err = -71) [ 41.627705][ T1008] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.628799][ T1009] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.264: invalid indirect mapped block 4294967295 (level 1) [ 41.649615][ T1008] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.653294][ T1009] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.264: invalid indirect mapped block 4294967295 (level 1) [ 41.678664][ T1009] EXT4-fs (loop5): 2 truncates cleaned up [ 41.691388][ T1009] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 41.704123][ T1009] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.5.264: path /2/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=0, rec_len=0, size=60 fake=0 [ 41.839018][ T893] EXT4-fs (loop5): unmounting filesystem. [ 41.878589][ T1015] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.266: Freeing blocks not in datazone - block = 0, count = 16 [ 41.929010][ T309] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set [ 41.954118][ T309] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.978793][ T309] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.978793][ T309] [ 41.999225][ T309] EXT4-fs (loop3): Total free blocks count 0 [ 42.008438][ T309] EXT4-fs (loop3): Free/Dirty block details [ 42.017105][ T309] EXT4-fs (loop3): free_blocks=16 [ 42.022854][ T309] EXT4-fs (loop3): dirty_blocks=16 [ 42.029677][ T309] EXT4-fs (loop3): Block reservation details [ 42.038382][ T309] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 42.047571][ T292] EXT4-fs (loop3): unmounting filesystem. [ 42.294201][ T1055] set_capacity_and_notify: 7 callbacks suppressed [ 42.294220][ T1055] loop3: detected capacity change from 0 to 512 [ 42.314018][ T1055] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.562987][ T1024] loop4: detected capacity change from 0 to 131072 [ 42.575644][ T1024] F2FS-fs (loop4): Invalid log sectorsize (0) [ 42.581865][ T925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.589968][ T1024] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 42.606968][ T1024] F2FS-fs (loop4): invalid crc value [ 42.622770][ T1024] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.663539][ T1024] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 42.670982][ T1024] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 42.678758][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.762173][ T925] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 42.770493][ T925] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 42.801177][ T925] usb 3-1: config 220 has no interface number 2 [ 42.807503][ T925] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 42.841209][ T925] usb 3-1: config 220 interface 0 has no altsetting 0 [ 42.848050][ T925] usb 3-1: config 220 interface 76 has no altsetting 0 [ 42.862526][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.871183][ T925] usb 3-1: config 220 interface 1 has no altsetting 0 [ 42.880763][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.891683][ T925] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 42.900774][ T925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.901435][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 42.921175][ T925] usb 3-1: Product: syz [ 42.931169][ T925] usb 3-1: Manufacturer: syz [ 42.935824][ T925] usb 3-1: SerialNumber: syz [ 42.944102][ T19] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.981115][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.000336][ T19] usb 2-1: config 0 descriptor?? [ 43.081559][ T1061] loop3: detected capacity change from 0 to 131072 [ 43.090125][ T1061] F2FS-fs (loop3): Test dummy encryption mode enabled [ 43.120344][ T1061] F2FS-fs (loop3): invalid crc value [ 43.155718][ T925] uvcvideo 3-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 43.167825][ T1061] F2FS-fs (loop3): Found nat_bits in checkpoint [ 43.177471][ T925] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 43.190522][ T925] usb 3-1: No valid video chain found. [ 43.269381][ T925] usb 3-1: selecting invalid altsetting 0 [ 43.299509][ T925] usb 3-1: USB disconnect, device number 6 [ 43.319378][ T1061] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 43.346409][ T1061] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 43.464251][ T19] plantronics 0003:047F:FFFF.0005: unbalanced collection at end of report description [ 43.478529][ T19] plantronics 0003:047F:FFFF.0005: parse failed [ 43.487090][ T19] plantronics: probe of 0003:047F:FFFF.0005 failed with error -22 [ 43.529191][ T1090] loop5: detected capacity change from 0 to 256 [ 43.610456][ T1095] binder: 1094:1095 ioctl 4018620d 0 returned -22 [ 43.665242][ T24] usb 2-1: USB disconnect, device number 5 [ 43.671655][ T1097] binder: 1094:1097 ioctl c0306201 0 returned -14 [ 43.918235][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 43.918252][ T28] audit: type=1400 audit(1786393439.926:322): avc: denied { read write } for pid=1107 comm="syz.2.302" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 43.950989][ T456] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 43.963133][ T456] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.008758][ T28] audit: type=1400 audit(1786393439.966:323): avc: denied { open } for pid=1107 comm="syz.2.302" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.200673][ T1115] netlink: 'syz.1.304': attribute type 12 has an invalid length. [ 44.208746][ T1115] netlink: 'syz.1.304': attribute type 29 has an invalid length. [ 44.217301][ T1115] netlink: 148 bytes leftover after parsing attributes in process `syz.1.304'. [ 44.226790][ T1115] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 44.234740][ T1115] netlink: 'syz.1.304': attribute type 2 has an invalid length. [ 44.242729][ T1115] netlink: 11 bytes leftover after parsing attributes in process `syz.1.304'. [ 44.358309][ T1121] loop4: detected capacity change from 0 to 1024 [ 44.375356][ T1123] loop1: detected capacity change from 0 to 512 [ 44.393476][ T1121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 44.402337][ T1121] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.403816][ T1123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.421967][ T1123] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.439487][ T1121] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.307: lblock 0 mapped to illegal pblock 0 (length 6) [ 44.459547][ T28] audit: type=1400 audit(1786393440.466:324): avc: denied { rename } for pid=1122 comm="syz.1.308" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.459775][ T1123] EXT4-fs error (device loop1): ext4_get_first_dir_block:3583: inode #12: comm syz.1.308: Directory hole found for htree leaf block 0 [ 44.491655][ T1121] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 44.504855][ T28] audit: type=1400 audit(1786393440.466:325): avc: denied { reparent } for pid=1122 comm="syz.1.308" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.530798][ T1123] EXT4-fs (loop1): Remounting filesystem read-only [ 44.543231][ T28] audit: type=1400 audit(1786393440.546:326): avc: denied { block_suspend } for pid=1132 comm="syz.3.310" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.564972][ T1121] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.564972][ T1121] [ 44.590000][ T291] EXT4-fs (loop1): unmounting filesystem. [ 44.597665][ T1136] loop3: detected capacity change from 0 to 512 [ 44.604401][ T43] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 5) [ 44.626418][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 44.641897][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.641897][ T43] [ 44.652445][ T43] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 44.660445][ T1136] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.676384][ T1136] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.687662][ T43] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 44.700421][ T43] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.700421][ T43] [ 44.706699][ T28] audit: type=1400 audit(1786393440.716:327): avc: denied { create } for pid=1135 comm="syz.3.311" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 44.721500][ T43] EXT4-fs (loop4): Total free blocks count 0 [ 44.736594][ T43] EXT4-fs (loop4): Free/Dirty block details [ 44.742818][ T43] EXT4-fs (loop4): free_blocks=0 [ 44.768049][ T28] audit: type=1400 audit(1786393440.776:328): avc: denied { getopt } for pid=1142 comm="syz.5.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.788711][ T28] audit: type=1400 audit(1786393440.796:329): avc: denied { read write } for pid=1135 comm="syz.3.311" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 44.811312][ T28] audit: type=1400 audit(1786393440.796:330): avc: denied { open } for pid=1135 comm="syz.3.311" path="/69/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 44.815326][ T1143] loop5: detected capacity change from 0 to 256 [ 44.855166][ T292] EXT4-fs (loop3): unmounting filesystem. [ 44.871143][ T28] audit: type=1400 audit(1786393440.856:331): avc: denied { write } for pid=1145 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.904934][ T1143] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 44.995934][ T1170] loop2: detected capacity change from 0 to 1024 [ 45.031380][ T1170] EXT4-fs: Ignoring removed oldalloc option [ 45.053020][ T1170] EXT4-fs: Ignoring removed bh option [ 45.076924][ T1170] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.089877][ T1170] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.111564][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.322: lblock 3 mapped to illegal pblock 3 (length 3) [ 45.126090][ T1170] EXT4-fs (loop2): Remounting filesystem read-only [ 45.133711][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.322: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.148000][ T1170] EXT4-fs (loop2): Remounting filesystem read-only [ 45.155399][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.322: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.183884][ T1170] EXT4-fs (loop2): Remounting filesystem read-only [ 45.191023][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.322: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.192281][ T1161] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 4: comm syz.2.322: lblock 4 mapped to illegal pblock 4 (length 2) [ 45.220041][ T1170] EXT4-fs (loop2): Remounting filesystem read-only [ 45.227104][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.322: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.241571][ T1170] EXT4-fs (loop2): Remounting filesystem read-only [ 45.248277][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.322: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.265778][ T1191] loop3: detected capacity change from 0 to 1024 [ 45.281440][ T1191] EXT4-fs: Ignoring removed bh option [ 45.289420][ T1161] EXT4-fs (loop2): Remounting filesystem read-only [ 45.292471][ T1170] EXT4-fs (loop2): Remounting filesystem read-only [ 45.297171][ T1161] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 4: comm syz.2.322: lblock 4 mapped to illegal pblock 4 (length 2) [ 45.317160][ T1170] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.322: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.332351][ T1161] EXT4-fs (loop2): Remounting filesystem read-only [ 45.339002][ T1161] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 4: comm syz.2.322: lblock 4 mapped to illegal pblock 4 (length 2) [ 45.354162][ T1191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.383487][ T1170] EXT4-fs (loop2): Remounting filesystem read-only [ 45.432785][ T1191] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.504135][ T292] EXT4-fs (loop3): unmounting filesystem. [ 45.510731][ T1193] kmmpd-loop3: attempt to access beyond end of device [ 45.510731][ T1193] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 45.524498][ T1193] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 45.751117][ T298] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 45.789098][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.796253][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.804355][ T1206] device bridge_slave_0 entered promiscuous mode [ 45.814126][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.821278][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.828878][ T1206] device bridge_slave_1 entered promiscuous mode [ 45.972451][ T1199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.985209][ T1199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.997353][ T298] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.012351][ T298] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 46.024540][ T1206] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.030897][ T298] usb 5-1: can't read configurations, error -71 [ 46.031666][ T1206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.045332][ T1206] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.052492][ T1206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.077459][ T8] device bridge_slave_1 left promiscuous mode [ 46.085057][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.103436][ T8] device bridge_slave_0 left promiscuous mode [ 46.109931][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.125477][ T8] device veth0_vlan left promiscuous mode [ 46.127397][ T1225] input: syz0 as /devices/virtual/input/input10 [ 46.263144][ T1185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.271651][ T1232] FAT-fs (loop2): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 46.282047][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.289746][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.311909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.320515][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.327613][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.335765][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.344111][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.351205][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.370724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.379417][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.395668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.410333][ T1206] device veth0_vlan entered promiscuous mode [ 46.418339][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.427526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.435313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.451805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.467854][ T1206] device veth1_macvtap entered promiscuous mode [ 46.489195][ T1233] syz.2.347: attempt to access beyond end of device [ 46.489195][ T1233] loop2: rw=34817, sector=349, nr_sectors = 966 limit=512 [ 46.514414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.525880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.578270][ T1235] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.348: missing EA_INODE flag [ 46.602275][ T10] kworker/u4:1: attempt to access beyond end of device [ 46.602275][ T10] loop2: rw=1, sector=1320, nr_sectors = 3784 limit=512 [ 46.616547][ T1235] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.348: error while reading EA inode 2 err=-117 [ 46.641443][ T1235] EXT4-fs (loop4): 1 orphan inode deleted [ 46.656212][ T1235] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.658995][ T10] kworker/u4:1: attempt to access beyond end of device [ 46.658995][ T10] loop2: rw=1, sector=5104, nr_sectors = 8944 limit=512 [ 46.702537][ T10] kworker/u4:1: attempt to access beyond end of device [ 46.702537][ T10] loop2: rw=1, sector=14048, nr_sectors = 2416 limit=512 [ 46.722298][ T10] FAT-fs (loop2): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 46.733711][ T294] EXT4-fs (loop4): unmounting filesystem. [ 46.812474][ T1249] erofs: (device loop6): mounted with root inode @ nid 36. [ 46.960403][ T1264] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 47.039061][ T1267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 47.059246][ T1267] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.123761][ T1267] fs-verity: sha512 using implementation "sha512-avx2" [ 47.140742][ T1274] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 47.158984][ T1274] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.176600][ T1278] xt_hashlimit: size too large, truncated to 1048576 [ 47.188421][ T294] EXT4-fs (loop4): unmounting filesystem. [ 47.244023][ T1206] EXT4-fs (loop6): unmounting filesystem. [ 47.272021][ T1230] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 47.279972][ T1230] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 47.288847][ T1230] F2FS-fs (loop5): invalid crc value [ 47.319745][ T1230] F2FS-fs (loop5): Found nat_bits in checkpoint [ 47.388325][ T1291] set_capacity_and_notify: 8 callbacks suppressed [ 47.388346][ T1291] loop6: detected capacity change from 0 to 512 [ 47.409151][ T1291] EXT4-fs: Ignoring removed nobh option [ 47.432228][ T1230] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 47.439413][ T1230] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 47.458284][ T1291] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 47.468619][ T1291] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.497847][ T1291] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.367: corrupted inode contents [ 47.523222][ T1291] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #2: comm syz.6.367: mark_inode_dirty error [ 47.537067][ T1291] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.367: corrupted inode contents [ 47.551169][ T1291] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.367: mark_inode_dirty error [ 47.589924][ T1291] incfs: ino conflict with backing FS 2 [ 47.602612][ T1291] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.367: corrupted inode contents [ 47.647622][ T1291] EXT4-fs error (device loop6): ext4_dirty_inode:6158: inode #2: comm syz.6.367: mark_inode_dirty error [ 47.667006][ T1291] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.367: corrupted inode contents [ 47.711833][ T1291] EXT4-fs error (device loop6): ext4_do_update_inode:5281: inode #2: comm syz.6.367: corrupted inode contents [ 47.765947][ T1291] EXT4-fs error (device loop6): ext4_rmdir:3258: inode #2: comm syz.6.367: mark_inode_dirty error [ 47.781425][ T1307] loop2: detected capacity change from 0 to 256 [ 47.825737][ T1290] EXT4-fs (loop6): unmounting filesystem. [ 47.835141][ T1310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.375'. [ 47.979818][ T1318] syz.5.368[1318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.979926][ T1318] syz.5.368[1318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.082824][ T1314] loop2: detected capacity change from 0 to 40427 [ 48.107098][ T1314] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 48.114432][ T1312] loop6: detected capacity change from 0 to 40427 [ 48.117388][ T1314] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.133872][ T1312] F2FS-fs (loop6): invalid crc value [ 48.139420][ T1314] F2FS-fs (loop2): invalid crc value [ 48.147405][ T1312] F2FS-fs (loop6): Found nat_bits in checkpoint [ 48.154769][ T1314] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.171782][ T19] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.220967][ T1314] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.230718][ T1314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.258580][ T1312] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 48.281399][ T1312] syz.6.376: attempt to access beyond end of device [ 48.281399][ T1312] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.322864][ T1206] syz-executor: attempt to access beyond end of device [ 48.322864][ T1206] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 48.361135][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 48.374361][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.395845][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.418894][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 48.437441][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.454891][ T19] usb 2-1: SerialNumber: syz [ 48.469854][ T19] usb 2-1: 0:2 : does not exist [ 48.524979][ T1341] loop5: detected capacity change from 0 to 1024 [ 48.535715][ T1341] EXT4-fs: Ignoring removed bh option [ 48.552944][ T1341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 48.659400][ T893] EXT4-fs (loop5): unmounting filesystem. [ 48.696406][ T1368] program syz.5.393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.913836][ T1390] loop6: detected capacity change from 0 to 128 [ 48.955289][ T1387] kvm [1384]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xbe702111 [ 49.071723][ T19] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 49.107296][ T19] usb 2-1: USB disconnect, device number 7 [ 49.261491][ T1398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 49.466438][ T1375] loop4: detected capacity change from 0 to 131072 [ 49.473843][ T1375] F2FS-fs (loop4): Test dummy encryption mode enabled [ 49.485925][ T1375] F2FS-fs (loop4): invalid crc value [ 49.494543][ T1377] loop5: detected capacity change from 0 to 131072 [ 49.502794][ T1377] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 49.513152][ T1375] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.531172][ T1377] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 49.559828][ T1377] F2FS-fs (loop5): invalid crc value [ 49.605175][ T1377] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.610518][ T1375] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.652508][ T1377] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 49.659883][ T1377] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 49.674783][ T1375] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 49.719361][ T1423] raw_sendmsg: syz.2.417 forgot to set AF_INET. Fix it! [ 49.861097][ T298] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 50.051118][ T298] usb 2-1: Using ep0 maxpacket: 16 [ 50.058865][ T298] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 50.074279][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.091713][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.101616][ T298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 50.115280][ T298] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 50.133692][ T1450] loop6: detected capacity change from 0 to 16 [ 50.141174][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.150497][ T1450] erofs: (device loop6): mounted with root inode @ nid 36. [ 50.171707][ T298] usb 2-1: config 0 descriptor?? [ 50.189637][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 50.189669][ T28] audit: type=1400 audit(1786393446.196:361): avc: denied { bind } for pid=1451 comm="syz.4.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.309159][ T1457] loop2: detected capacity change from 0 to 512 [ 50.333125][ T1457] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.346683][ T1457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.362935][ T1457] EXT4-fs (loop2): 1 truncate cleaned up [ 50.376016][ T1457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.406334][ T28] audit: type=1400 audit(1786393446.416:362): avc: denied { watch watch_reads } for pid=1456 comm="syz.2.432" path="/94/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.437035][ T1468] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 50.472638][ T28] audit: type=1400 audit(1786393446.486:363): avc: denied { append } for pid=1467 comm="syz.6.436" path="/20/file0/memory.current" dev="loop6" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.497396][ T28] audit: type=1400 audit(1786393446.516:364): avc: denied { map } for pid=1467 comm="syz.6.436" path="/20/file0/memory.current" dev="loop6" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.539126][ T28] audit: type=1400 audit(1786393446.546:365): avc: denied { mount } for pid=1471 comm="syz.6.438" name="/" dev="ramfs" ino=21677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.563699][ T293] EXT4-fs (loop2): unmounting filesystem. [ 50.582741][ T298] hid (null): global environment stack underflow [ 50.600991][ T298] kye 0003:0458:5013.0007: unknown main item tag 0x6 [ 50.614518][ T298] kye 0003:0458:5013.0007: global environment stack underflow [ 50.624838][ T298] kye 0003:0458:5013.0007: item 0 0 1 11 parsing failed [ 50.632095][ T298] kye 0003:0458:5013.0007: parse failed [ 50.637774][ T298] kye: probe of 0003:0458:5013.0007 failed with error -22 [ 50.692932][ T1489] file system registered [ 50.697643][ T28] audit: type=1400 audit(1786393446.706:366): avc: denied { create } for pid=1488 comm="syz.6.446" name="ffs.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 50.781816][ T1496] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 50.788474][ T924] usb 2-1: USB disconnect, device number 8 [ 50.827711][ T1206] EXT4-fs (loop6): unmounting filesystem. [ 50.958662][ T1511] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.000769][ T1511] EXT4-fs (loop5): 1 truncate cleaned up [ 51.007104][ T1511] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 51.023473][ T28] audit: type=1400 audit(1786393447.036:367): avc: denied { map } for pid=1510 comm="syz.5.455" path="/40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.068041][ T1495] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 51.078403][ T1495] F2FS-fs (loop2): invalid crc value [ 51.096610][ T1495] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.120947][ T893] EXT4-fs (loop5): unmounting filesystem. [ 51.139628][ T1495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.147348][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 51.191583][ T1495] input: syz0 as /devices/virtual/input/input11 [ 51.201195][ T28] audit: type=1400 audit(1786393447.206:368): avc: denied { accept } for pid=1519 comm="syz.5.458" path="socket:[21741]" dev="sockfs" ino=21741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.362132][ T24] usb 5-1: config 127 has an invalid interface number: 57 but max is 0 [ 51.376054][ T24] usb 5-1: config 127 has no interface number 0 [ 51.392716][ T24] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 51.404352][ T1531] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.407257][ T24] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 51.433526][ T1531] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 51.443147][ T1531] FAT-fs (loop6): Filesystem has been set read-only [ 51.459693][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.480569][ T24] usb 5-1: Product: syz [ 51.489830][ T24] usb 5-1: Manufacturer: syz [ 51.499072][ T24] usb 5-1: SerialNumber: syz [ 51.521453][ T1540] EXT4-fs: Ignoring removed bh option [ 51.527780][ T1509] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 51.543453][ T1540] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 51.585177][ T28] audit: type=1400 audit(1786393447.596:369): avc: denied { execute } for pid=1539 comm="syz.6.465" path="/31/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.593258][ T1545] EXT4-fs: Ignoring removed oldalloc option [ 51.641343][ T1206] EXT4-fs (loop6): unmounting filesystem. [ 51.647343][ T1545] EXT4-fs (loop1): Test dummy encryption mode enabled [ 51.673781][ T1545] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 51.683414][ T1545] System zones: 0-5 [ 51.690041][ T1545] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.714049][ T291] EXT4-fs (loop1): unmounting filesystem. [ 51.874390][ T1567] netlink: 'syz.6.477': attribute type 4 has an invalid length. [ 51.883848][ T1567] netlink: 'syz.6.477': attribute type 4 has an invalid length. [ 51.937750][ T1509] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 51.999565][ T28] audit: type=1400 audit(1786393448.006:370): avc: denied { watch } for pid=1582 comm="syz.2.483" path="/101/file0" dev="incremental-fs" ino=559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.151948][ T24] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 52.163884][ T24] asix: probe of 5-1:127.57 failed with error -71 [ 52.171653][ T24] usb 5-1: USB disconnect, device number 7 [ 52.231890][ T1583] F2FS-fs (loop1): invalid crc value [ 52.259597][ T1583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.297131][ T1583] F2FS-fs (loop1): Start checkpoint disabled! [ 52.303715][ T1583] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 52.310945][ T1583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 52.359946][ T1583] F2FS-fs (loop1): ino:10, start:0, end:2048, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 52.375921][ T1605] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.389580][ T298] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.401188][ T1605] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 52.423272][ T1605] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdca9dc68, utbl_chksum : 0xe619d30d) [ 52.452760][ T442] kworker/u4:6: attempt to access beyond end of device [ 52.452760][ T442] loop1: rw=2049, sector=40960, nr_sectors = 48 limit=40427 [ 52.566748][ T1615] device batadv_slave_1 entered promiscuous mode [ 52.574239][ T1614] device batadv_slave_1 left promiscuous mode [ 52.598717][ T1617] set_capacity_and_notify: 9 callbacks suppressed [ 52.598741][ T1617] loop5: detected capacity change from 0 to 256 [ 52.622547][ T298] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.630670][ T1617] FAT-fs (loop5): Directory bread(block 64) failed [ 52.640270][ T1617] FAT-fs (loop5): Directory bread(block 65) failed [ 52.646976][ T298] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.650894][ T1617] FAT-fs (loop5): Directory bread(block 66) failed [ 52.665117][ T1617] FAT-fs (loop5): Directory bread(block 67) failed [ 52.666015][ T298] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.672765][ T1617] FAT-fs (loop5): Directory bread(block 68) failed [ 52.691419][ T1617] FAT-fs (loop5): Directory bread(block 69) failed [ 52.698088][ T1617] FAT-fs (loop5): Directory bread(block 70) failed [ 52.704958][ T298] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.711739][ T438] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 52.724369][ T298] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.724457][ T1617] FAT-fs (loop5): Directory bread(block 71) failed [ 52.739648][ T1617] FAT-fs (loop5): Directory bread(block 72) failed [ 52.746863][ T1617] FAT-fs (loop5): Directory bread(block 73) failed [ 52.760088][ T298] usb 7-1: config 0 descriptor?? [ 52.808701][ T1646] xt_hashlimit: size too large, truncated to 1048576 [ 52.921105][ T438] usb 3-1: Using ep0 maxpacket: 16 [ 52.929572][ T438] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.942710][ T438] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.960680][ T438] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.979330][ T438] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.996108][ T438] usb 3-1: Product: syz [ 53.004724][ T438] usb 3-1: Manufacturer: syz [ 53.014816][ T438] usb 3-1: SerialNumber: syz [ 53.174627][ T298] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 53.192933][ T298] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 53.230195][ T438] usb 3-1: 0:2 : does not exist [ 53.242018][ T438] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 53.273777][ T438] usb 3-1: USB disconnect, device number 7 [ 53.477287][ T1666] loop1: detected capacity change from 0 to 128 [ 53.487733][ T1666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.499533][ T1666] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.520172][ T291] EXT4-fs (loop1): unmounting filesystem. [ 53.583464][ T1671] loop1: detected capacity change from 0 to 256 [ 53.652623][ T1680] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 53.660503][ T1680] netlink: 'syz.4.516': attribute type 22 has an invalid length. [ 53.669949][ T1680] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.677192][ T1680] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.753726][ T1692] loop1: detected capacity change from 0 to 512 [ 53.780683][ T1687] loop4: detected capacity change from 0 to 4096 [ 53.788606][ T1687] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.804150][ T1687] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.813162][ T1687] EXT4-fs (loop4): Test dummy encryption mode enabled [ 53.820595][ T1687] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2842c198, mo2=0003] [ 53.829638][ T1687] System zones: 0-5 [ 53.834590][ T1687] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 53.861803][ T1687] fscrypt: AES-256-XTS using blk-crypto-fallback [ 53.908352][ T294] EXT4-fs (loop4): unmounting filesystem. [ 53.939216][ T1706] loop4: detected capacity change from 0 to 256 [ 53.946978][ T1706] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.962272][ T1708] loop1: detected capacity change from 0 to 512 [ 53.985861][ T1708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 53.998991][ T24] usb 7-1: USB disconnect, device number 2 [ 54.036342][ T291] EXT4-fs (loop1): unmounting filesystem. [ 55.311051][ C1] sched: RT throttling activated [ 55.311051][ C0] sched: RT throttling activated [ 56.556391][ T1755] loop5: detected capacity change from 0 to 512 [ 56.594179][ T1755] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.653662][ T1755] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 56.680044][ T1772] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.858377][ T1797] loop1: detected capacity change from 0 to 128 [ 56.891216][ T1800] loop5: detected capacity change from 0 to 512 [ 56.946238][ T1800] EXT4-fs (loop5): 1 truncate cleaned up [ 57.000357][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 57.000373][ T28] audit: type=1400 audit(1786393453.006:385): avc: denied { rename } for pid=1798 comm="syz.5.565" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.046578][ T1808] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.136015][ T1808] EXT4-fs (loop4): 1 truncate cleaned up [ 57.275715][ T1821] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.310346][ T1827] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 57.352447][ T1821] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.574: bg 0: block 112: padding at end of block bitmap is not set [ 57.420720][ T1821] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 57.461877][ T1838] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.574: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.497032][ T1821] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.497032][ T1821] [ 57.513856][ T28] audit: type=1400 audit(1786393453.526:386): avc: denied { mounton } for pid=1846 comm="syz.5.584" path="/67/file0" dev="ramfs" ino=36612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 57.531723][ T1821] EXT4-fs (loop1): Total free blocks count 0 [ 57.548064][ T28] audit: type=1400 audit(1786393453.556:387): avc: denied { unmount } for pid=893 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.563878][ T1821] EXT4-fs (loop1): Free/Dirty block details [ 57.584002][ T1821] EXT4-fs (loop1): free_blocks=0 [ 57.589054][ T1821] EXT4-fs (loop1): dirty_blocks=64 [ 57.599063][ T1821] EXT4-fs (loop1): Block reservation details [ 57.605318][ T1821] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 57.723669][ T28] audit: type=1400 audit(1786393453.736:388): avc: denied { read } for pid=1857 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.751207][ T925] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 57.941084][ T925] usb 7-1: Using ep0 maxpacket: 16 [ 57.947414][ T925] usb 7-1: config 1 has an invalid interface association descriptor of length 5, skipping [ 57.947454][ T925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.947483][ T925] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024 [ 57.947513][ T925] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 57.947539][ T925] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 57.969691][ T925] usb 7-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 57.969723][ T925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.969746][ T925] usb 7-1: Product: syz [ 57.969760][ T925] usb 7-1: Manufacturer: syz [ 57.969776][ T925] usb 7-1: SerialNumber: syz [ 57.982459][ T1843] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 58.131209][ T924] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.187496][ T925] usb 7-1: MIDIStreaming interface descriptor not found [ 58.223724][ T925] usb 7-1: USB disconnect, device number 3 [ 58.226707][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.311122][ T924] usb 6-1: Using ep0 maxpacket: 8 [ 58.317356][ T924] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.317397][ T924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.337925][ T924] usb 6-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 58.337957][ T924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.337977][ T924] usb 6-1: Product: syz [ 58.337991][ T924] usb 6-1: Manufacturer: syz [ 58.338005][ T924] usb 6-1: SerialNumber: syz [ 58.434221][ T442] device bridge_slave_1 left promiscuous mode [ 58.434300][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.434763][ T442] device bridge_slave_0 left promiscuous mode [ 58.434828][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.436001][ T442] device veth1_macvtap left promiscuous mode [ 58.436061][ T442] device veth0_vlan left promiscuous mode [ 58.553725][ T924] usb 6-1: unit 6 not found! [ 58.578217][ T924] usb 6-1: unit 5 not found! [ 58.592359][ T924] usb 6-1: USB disconnect, device number 2 [ 58.620077][ T408] udevd[408]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.728711][ T1872] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.754735][ T1872] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.762608][ T1872] device bridge_slave_0 entered promiscuous mode [ 58.770238][ T1872] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.777863][ T1872] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.785607][ T1872] device bridge_slave_1 entered promiscuous mode [ 58.830095][ T28] audit: type=1400 audit(1786393454.836:389): avc: denied { mounton } for pid=1887 comm="syz.6.601" path="/53/file0" dev="tmpfs" ino=311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.870000][ T1877] set_capacity_and_notify: 3 callbacks suppressed [ 58.870018][ T1877] loop2: detected capacity change from 0 to 40427 [ 58.896563][ T1872] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.903685][ T1872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.911032][ T1872] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.918113][ T1872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.926062][ T1877] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 58.953595][ T1877] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 58.965267][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.975768][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.985299][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.995203][ T1877] F2FS-fs (loop2): Unrecognized mount option "000000000000000000000177777777777777777777700000000000000000000" or missing value [ 59.003933][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.008819][ T1891] udc dummy_udc.0: soft-connect without a gadget driver [ 59.018913][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.031196][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.039487][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.048185][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.055388][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.085610][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.094357][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.122571][ T1879] loop1: detected capacity change from 0 to 40427 [ 59.123855][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.145297][ T1879] F2FS-fs (loop1): invalid crc value [ 59.156846][ T1872] device veth0_vlan entered promiscuous mode [ 59.163771][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.172183][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.177623][ T1879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 59.180657][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.219151][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.247955][ T1872] device veth1_macvtap entered promiscuous mode [ 59.264049][ T1898] loop6: detected capacity change from 0 to 4096 [ 59.272736][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.281726][ T1879] F2FS-fs (loop1): Start checkpoint disabled! [ 59.293791][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.303378][ T1879] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 59.325806][ T28] audit: type=1400 audit(1786393455.336:390): avc: denied { watch } for pid=1901 comm="syz.2.606" path="/125" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.328569][ T1879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 59.358689][ T28] audit: type=1400 audit(1786393455.336:391): avc: denied { execute } for pid=1901 comm="syz.2.606" name="file1" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.380893][ T28] audit: type=1400 audit(1786393455.336:392): avc: denied { execute_no_trans } for pid=1901 comm="syz.2.606" path="/125/file1" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.420467][ T1904] loop2: detected capacity change from 0 to 128 [ 59.431881][ T28] audit: type=1400 audit(1786393455.446:393): avc: denied { mount } for pid=1903 comm="syz.2.607" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.473005][ T1904] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 59.499516][ T28] audit: type=1400 audit(1786393455.466:394): avc: denied { link } for pid=1897 comm="syz.6.605" name="#24" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 59.512429][ T1904] FAT-fs (loop2): Filesystem has been set read-only [ 59.529352][ T1908] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 59.562555][ T1879] F2FS-fs (loop1): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 59.590828][ T1911] kvm [1910]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 59.599625][ T1911] kvm [1910]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 59.659305][ T1640] kworker/u4:22: attempt to access beyond end of device [ 59.659305][ T1640] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 59.673689][ T1640] kworker/u4:22: attempt to access beyond end of device [ 59.673689][ T1640] loop1: rw=1, sector=45136, nr_sectors = 8 limit=40427 [ 59.688205][ T1640] kworker/u4:22: attempt to access beyond end of device [ 59.688205][ T1640] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 59.707041][ T1640] kworker/u4:22: attempt to access beyond end of device [ 59.707041][ T1640] loop1: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 59.847349][ T1934] loop1: detected capacity change from 0 to 512 [ 59.861011][ T1935] loop2: detected capacity change from 0 to 256 [ 59.872068][ T1935] exfat: Deprecated parameter 'utf8' [ 59.886488][ T1935] exfat: Deprecated parameter 'utf8' [ 59.910461][ T1935] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 59.977539][ T1944] loop5: detected capacity change from 0 to 512 [ 59.986669][ T1944] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.622: inode has both inline data and extents flags [ 60.000155][ T1944] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.622: couldn't read orphan inode 15 (err -117) [ 60.041196][ T1944] loop5: detected capacity change from 512 to 64 [ 60.059329][ T893] EXT4-fs warning (device loop5): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 60.059937][ T1950] loop6: detected capacity change from 0 to 256 [ 60.090339][ T1950] FAT-fs (loop6): Directory bread(block 64) failed [ 60.097120][ T1950] FAT-fs (loop6): Directory bread(block 65) failed [ 60.104016][ T1950] FAT-fs (loop6): Directory bread(block 66) failed [ 60.110621][ T1950] FAT-fs (loop6): Directory bread(block 67) failed [ 60.117500][ T1950] FAT-fs (loop6): Directory bread(block 68) failed [ 60.124250][ T1950] FAT-fs (loop6): Directory bread(block 69) failed [ 60.130886][ T1950] FAT-fs (loop6): Directory bread(block 70) failed [ 60.138727][ T1950] FAT-fs (loop6): Directory bread(block 71) failed [ 60.145565][ T1950] FAT-fs (loop6): Directory bread(block 72) failed [ 60.152374][ T1950] FAT-fs (loop6): Directory bread(block 73) failed [ 60.171133][ T924] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 60.226797][ T1954] netlink: 20 bytes leftover after parsing attributes in process `syz.6.628'. [ 60.236711][ T1954] netlink: 20 bytes leftover after parsing attributes in process `syz.6.628'. [ 60.361125][ T924] usb 2-1: Using ep0 maxpacket: 16 [ 60.367579][ T924] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.381890][ T924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 60.396142][ T924] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 60.406485][ T924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.429575][ T924] usb 2-1: config 0 descriptor?? [ 60.456837][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.464677][ T1960] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.472623][ T1960] device bridge_slave_0 entered promiscuous mode [ 60.480033][ T1960] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.487295][ T1960] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.495234][ T1960] device bridge_slave_1 entered promiscuous mode [ 60.584131][ T1960] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.591355][ T1960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.598678][ T1960] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.605756][ T1960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.661002][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.671871][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.679303][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.698192][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.709986][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.718784][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.725885][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.734230][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.743778][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.752357][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.759437][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.792405][ T1984] loop6: detected capacity change from 0 to 512 [ 60.801321][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.813617][ T1984] ext4: Unknown parameter 'noacl' [ 60.821745][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.829886][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.840432][ T924] hid-generic 0003:04D8:00DD.0009: hidraw0: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 60.840914][ T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.862037][ T1984] netlink: 'syz.6.639': attribute type 3 has an invalid length. [ 60.882909][ T1984] netlink: 72 bytes leftover after parsing attributes in process `syz.6.639'. [ 60.911471][ T1638] device bridge_slave_1 left promiscuous mode [ 60.921356][ T1638] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.940030][ T1638] device bridge_slave_0 left promiscuous mode [ 60.948864][ T1638] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.965692][ T1989] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 60.966090][ T1638] device veth1_macvtap left promiscuous mode [ 60.983256][ T1638] device veth0_vlan left promiscuous mode [ 61.018197][ T1989] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.641: invalid indirect mapped block 9 (level 0) [ 61.069579][ T1989] EXT4-fs (loop6): 1 truncate cleaned up [ 61.098336][ T1989] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 61.119423][ T1989] overlayfs: failed to set xattr on upper [ 61.187229][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.197430][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.206336][ T1994] netlink: 'syz.7.642': attribute type 16 has an invalid length. [ 61.219399][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.227792][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.237244][ T1960] device veth0_vlan entered promiscuous mode [ 61.244184][ T456] usb 2-1: USB disconnect, device number 9 [ 61.250461][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.251946][ T1994] netlink: 'syz.7.642': attribute type 3 has an invalid length. [ 61.260701][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.286327][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.294882][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.304723][ T1960] device veth1_macvtap entered promiscuous mode [ 61.322912][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.330881][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.340860][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.351243][ T1997] netlink: 48 bytes leftover after parsing attributes in process `syz.7.643'. [ 61.361027][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.370139][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.399214][ T1999] binder: 1998:1999 ioctl 4018620d 0 returned -22 [ 61.476515][ T2003] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.665246][ T2013] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.739258][ T2018] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.650: invalid indirect mapped block 4294967295 (level 1) [ 61.774507][ T2018] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.650: invalid indirect mapped block 4294967295 (level 1) [ 61.789086][ T2018] EXT4-fs (loop7): 2 truncates cleaned up [ 61.821862][ T1206] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 61.902294][ T2031] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.914054][ T2031] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 61.926181][ T2031] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 61.959401][ T2031] incfs: ino conflict with backing FS 1 [ 61.997479][ T1960] exFAT-fs (loop8): abnormal access to deleted dentry [ 62.100765][ T2043] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.665: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 62.146742][ T2043] EXT4-fs (loop2): Remounting filesystem read-only [ 62.170328][ T2043] EXT4-fs error (device loop2): ext4_ext_precache:627: inode #2: comm syz.2.665: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 62.226591][ T2043] EXT4-fs (loop2): Remounting filesystem read-only [ 62.344048][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.351236][ T2055] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.358833][ T2055] device bridge_slave_0 entered promiscuous mode [ 62.366395][ T2055] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.373821][ T2055] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.381578][ T2055] device bridge_slave_1 entered promiscuous mode [ 62.471034][ T2069] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.478239][ T2069] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.485977][ T2069] device bridge_slave_0 entered promiscuous mode [ 62.495180][ T1638] device bridge_slave_1 left promiscuous mode [ 62.501510][ T1638] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.509374][ T1638] device bridge_slave_0 left promiscuous mode [ 62.515705][ T1638] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.523873][ T1638] device veth1_macvtap left promiscuous mode [ 62.530014][ T1638] device veth0_vlan left promiscuous mode [ 62.611264][ T456] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 62.624382][ T2069] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.631476][ T2069] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.639112][ T2069] device bridge_slave_1 entered promiscuous mode [ 62.689207][ T2055] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.696657][ T2055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.703965][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.711011][ T2055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.758519][ T2069] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.765651][ T2069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.773021][ T2069] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.780068][ T2069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.792639][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.800690][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.809263][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.818043][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.825268][ T456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.836459][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.843628][ T456] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 25520, setting to 1024 [ 62.861301][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.870304][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.877406][ T1640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.885213][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.893481][ T456] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.902820][ T1640] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.909871][ T1640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.917428][ T456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.925519][ T456] usb 3-1: Product: syz [ 62.929701][ T456] usb 3-1: Manufacturer: syz [ 62.934731][ T456] usb 3-1: SerialNumber: syz [ 62.949176][ T456] usb 3-1: config 0 descriptor?? [ 62.961011][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.969278][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.982185][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.990334][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.024144][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.032972][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.051567][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.059714][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.067578][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.076891][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.086963][ T1638] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.094094][ T1638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.101840][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.110352][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.119184][ T1638] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.126491][ T1638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.136984][ T2055] device veth0_vlan entered promiscuous mode [ 63.143836][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.153476][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.162518][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.170167][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.190863][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.199384][ T2084] syz.1.679 uses obsolete (PF_INET,SOCK_PACKET) [ 63.202580][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.220200][ T2055] device veth1_macvtap entered promiscuous mode [ 63.239977][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.249010][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.257731][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.265688][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.274973][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.308203][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.317467][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.326000][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.335728][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.344401][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.352991][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.377964][ T2069] device veth0_vlan entered promiscuous mode [ 63.400232][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.413020][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.421696][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.429391][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.461179][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.469776][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.485619][ T2069] device veth1_macvtap entered promiscuous mode [ 63.511922][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.520081][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.528802][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.551471][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.561976][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.609529][ T2108] input: syz0 as /devices/virtual/input/input13 [ 63.650333][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 63.650344][ T28] audit: type=1400 audit(1786393459.656:404): avc: denied { read } for pid=2115 comm="syz.9.692" path="socket:[38732]" dev="sockfs" ino=38732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 63.681465][ T60] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 63.882244][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 63.893449][ T60] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.909836][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.918483][ T2133] set_capacity_and_notify: 7 callbacks suppressed [ 63.918526][ T2133] loop0: detected capacity change from 0 to 512 [ 63.938192][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.946802][ T60] usb 2-1: Product: syz [ 63.951087][ T60] usb 2-1: Manufacturer: syz [ 63.955843][ T60] usb 2-1: SerialNumber: syz [ 63.973169][ T456] cdc_ncm 3-1:0.0: bind() failure [ 63.979887][ T456] cdc_ncm: probe of 3-1:0.1 failed with error -71 [ 63.985841][ T2135] loop7: detected capacity change from 0 to 2048 [ 63.989219][ T456] cdc_mbim: probe of 3-1:0.1 failed with error -71 [ 63.999637][ T1640] device bridge_slave_1 left promiscuous mode [ 64.004642][ T2133] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.013160][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.020568][ T456] usb 3-1: USB disconnect, device number 8 [ 64.039320][ T1640] device bridge_slave_0 left promiscuous mode [ 64.047705][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.059735][ T1640] device veth1_macvtap left promiscuous mode [ 64.094799][ T1640] device veth0_vlan left promiscuous mode [ 64.106207][ T2143] loop0: detected capacity change from 0 to 128 [ 64.154086][ T2143] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.197810][ T2146] loop7: detected capacity change from 0 to 1024 [ 64.206274][ T2143] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 63: comm syz.0.701: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 64.227404][ T2143] EXT4-fs (loop0): Remounting filesystem read-only [ 64.234511][ T2143] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 64.243051][ T2143] EXT4-fs (loop0): Remounting filesystem read-only [ 64.252325][ T2146] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.267835][ T2146] EXT4-fs error (device loop7): ext4_free_blocks:6220: comm syz.7.702: Freeing blocks not in datazone - block = 0, count = 16 [ 64.397386][ T2153] loop0: detected capacity change from 0 to 512 [ 64.421346][ T2153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.434717][ T2153] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.704: bad orphan inode 15 [ 64.517597][ T2158] loop2: detected capacity change from 0 to 512 [ 64.526803][ T2160] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 64.526803][ T2160] Q&|xX [ 64.551621][ T2158] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 64.574755][ T2158] EXT4-fs (loop2): Test dummy encryption mode enabled [ 64.615075][ T2158] EXT4-fs (loop2): shut down requested (2) [ 64.625602][ T2169] netlink: 'syz.9.711': attribute type 4 has an invalid length. [ 64.749371][ T2177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.714'. [ 64.988259][ T60] cdc_ncm 2-1:1.0: bind() failure [ 64.997756][ T60] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 65.015606][ T60] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 65.024850][ T2206] xt_hashlimit: size too large, truncated to 1048576 [ 65.032767][ T60] usb 2-1: USB disconnect, device number 10 [ 65.047418][ T2145] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.702: bg 0: block 112: padding at end of block bitmap is not set [ 65.062765][ T2145] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 65.075322][ T2145] EXT4-fs (loop7): This should not happen!! Data will be lost [ 65.075322][ T2145] [ 65.094937][ T2145] EXT4-fs (loop7): Total free blocks count 0 [ 65.101173][ T2145] EXT4-fs (loop7): Free/Dirty block details [ 65.108625][ T2145] EXT4-fs (loop7): free_blocks=0 [ 65.124015][ T2145] EXT4-fs (loop7): dirty_blocks=26720 [ 65.131730][ T2145] EXT4-fs (loop7): Block reservation details [ 65.142879][ T2145] EXT4-fs (loop7): i_reserved_data_blocks=1670 [ 65.170292][ T1640] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2052 with max blocks 2048 with error 28 [ 65.183802][ T2204] ================================================================== [ 65.191906][ T2204] BUG: KASAN: use-after-free in mutex_lock+0x86/0x1b0 [ 65.193247][ T1640] EXT4-fs (loop7): This should not happen!! Data will be lost [ 65.193247][ T1640] [ 65.198811][ T2204] Write of size 8 at addr ffff888112a56950 by task syz.2.725/2204 [ 65.198830][ T2204] [ 65.198843][ T2204] CPU: 1 PID: 2204 Comm: syz.2.725 Not tainted syzkaller #0 [ 65.225974][ T2204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.236065][ T2204] Call Trace: [ 65.239374][ T2204] [ 65.242347][ T2204] __dump_stack+0x21/0x24 [ 65.246705][ T2204] dump_stack_lvl+0x110/0x170 [ 65.251408][ T2204] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.256475][ T2204] ? mutex_lock+0x86/0x1b0 [ 65.260943][ T2204] print_address_description+0x71/0x200 [ 65.266525][ T2204] print_report+0x4a/0x60 [ 65.270894][ T2204] kasan_report+0x122/0x150 [ 65.275433][ T2204] ? mutex_lock+0x86/0x1b0 [ 65.279899][ T2204] kasan_check_range+0x249/0x2a0 [ 65.284957][ T2204] __kasan_check_write+0x14/0x20 [ 65.290013][ T2204] mutex_lock+0x86/0x1b0 [ 65.294295][ T2204] ? __cfi_mutex_lock+0x10/0x10 [ 65.299191][ T2204] ? kfree+0x6f/0xf0 [ 65.303119][ T2204] ? l2tp_session_put+0xaf/0x1a0 [ 65.308084][ T2204] ? l2tp_session_delete+0x3df/0x4d0 [ 65.313395][ T2204] pppol2tp_release+0x178/0x2b0 [ 65.318282][ T2204] sock_close+0xc9/0x220 [ 65.322574][ T2204] ? __cfi_sock_close+0x10/0x10 [ 65.327552][ T2204] __fput+0x1fd/0x8f0 [ 65.331574][ T2204] ____fput+0x15/0x20 [ 65.335599][ T2204] task_work_run+0x1e1/0x250 [ 65.340220][ T2204] ? __cfi_task_work_run+0x10/0x10 [ 65.345362][ T2204] ? free_nsproxy+0x21f/0x270 [ 65.350203][ T2204] do_exit+0xaf2/0x2850 [ 65.354402][ T2204] ? __cfi_do_exit+0x10/0x10 [ 65.359031][ T2204] ? xfd_validate_state+0x70/0x150 [ 65.364183][ T2204] ? __kasan_check_write+0x14/0x20 [ 65.369332][ T2204] __x64_sys_exit+0x40/0x40 [ 65.373876][ T2204] x64_sys_call+0x67/0x9a0 [ 65.378328][ T2204] do_syscall_64+0x4c/0xa0 [ 65.382778][ T2204] ? clear_bhb_loop+0x30/0x80 [ 65.387485][ T2204] ? clear_bhb_loop+0x30/0x80 [ 65.392184][ T2204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.398131][ T2204] RIP: 0033:0x7faba8b9e0d9 [ 65.402574][ T2204] Code: Unable to access opcode bytes at 0x7faba8b9e0af. [ 65.409658][ T2204] RSP: 002b:00007faba9b39ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 65.418123][ T2204] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007faba8b9e0d9 [ 65.426124][ T2204] RDX: 00007faba9b3a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.434124][ T2204] RBP: 00007faba8c35024 R08: 0000000000000000 R09: 0000000000000058 [ 65.442127][ T2204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.450123][ T2204] R13: 00007faba8e26038 R14: 00007faba8e25fa0 R15: 00007fff5f1618d8 [ 65.458132][ T2204] [ 65.461205][ T2204] [ 65.463656][ T2204] Allocated by task 2203: [ 65.467996][ T2204] kasan_set_track+0x4b/0x70 [ 65.472620][ T2204] kasan_save_alloc_info+0x1f/0x30 [ 65.477757][ T2204] __kasan_kmalloc+0x95/0xb0 [ 65.482378][ T2204] __kmalloc+0xb4/0x1e0 [ 65.486558][ T2204] l2tp_session_create+0x38/0xbd0 [ 65.491621][ T2204] pppol2tp_connect+0xbf5/0x1640 [ 65.496597][ T2204] __sys_connect+0x3da/0x460 [ 65.501213][ T2204] __x64_sys_connect+0x7a/0x90 [ 65.505996][ T2204] x64_sys_call+0x88d/0x9a0 [ 65.510521][ T2204] do_syscall_64+0x4c/0xa0 [ 65.514963][ T2204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.520885][ T2204] [ 65.523224][ T2204] Freed by task 2204: [ 65.527307][ T2204] kasan_set_track+0x4b/0x70 [ 65.531934][ T2204] kasan_save_free_info+0x2b/0x40 [ 65.537071][ T2204] ____kasan_slab_free+0x132/0x180 [ 65.542215][ T2204] __kasan_slab_free+0x11/0x20 [ 65.547014][ T2204] slab_free_freelist_hook+0xc2/0x190 [ 65.552406][ T2204] __kmem_cache_free+0xb7/0x1b0 [ 65.557288][ T2204] kfree+0x6f/0xf0 [ 65.561033][ T2204] l2tp_session_put+0xaf/0x1a0 [ 65.565818][ T2204] l2tp_session_delete+0x3df/0x4d0 [ 65.570950][ T2204] pppol2tp_release+0x169/0x2b0 [ 65.575976][ T2204] sock_close+0xc9/0x220 [ 65.580254][ T2204] __fput+0x1fd/0x8f0 [ 65.584269][ T2204] ____fput+0x15/0x20 [ 65.588293][ T2204] task_work_run+0x1e1/0x250 [ 65.592909][ T2204] do_exit+0xaf2/0x2850 [ 65.597096][ T2204] __cfi___ia32_sys_exit+0x0/0x10 [ 65.602160][ T2204] x64_sys_call+0x67/0x9a0 [ 65.606778][ T2204] do_syscall_64+0x4c/0xa0 [ 65.611226][ T2204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.617156][ T2204] [ 65.619500][ T2204] The buggy address belongs to the object at ffff888112a56800 [ 65.619500][ T2204] which belongs to the cache kmalloc-512 of size 512 [ 65.633581][ T2204] The buggy address is located 336 bytes inside of [ 65.633581][ T2204] 512-byte region [ffff888112a56800, ffff888112a56a00) [ 65.646883][ T2204] [ 65.649249][ T2204] The buggy address belongs to the physical page: [ 65.655688][ T2204] page:ffffea00044a9500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888112a57000 pfn:0x112a54 [ 65.667339][ T2204] head:ffffea00044a9500 order:2 compound_mapcount:0 compound_pincount:0 [ 65.675685][ T2204] flags: 0x4000000000010200(slab|head|zone=1) [ 65.681792][ T2204] raw: 4000000000010200 ffffea000440c208 ffffea00043e8d08 ffff888100042f00 [ 65.690516][ T2204] raw: ffff888112a57000 000000000010000e 00000001ffffffff 0000000000000000 [ 65.699153][ T2204] page dumped because: kasan: bad access detected [ 65.705603][ T2204] page_owner tracks the page as allocated [ 65.711342][ T2204] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 105, tgid 105 (udevd), ts 5616623046, free_ts 0 [ 65.731169][ T2204] post_alloc_hook+0x1f5/0x210 [ 65.735976][ T2204] prep_new_page+0x1c/0x110 [ 65.740513][ T2204] get_page_from_freelist+0x2ca9/0x2d20 [ 65.746096][ T2204] __alloc_pages+0x1fa/0x610 [ 65.750723][ T2204] alloc_slab_page+0x6e/0xf0 [ 65.755350][ T2204] new_slab+0x98/0x3e0 [ 65.759443][ T2204] ___slab_alloc+0x70f/0xb70 [ 65.764065][ T2204] __slab_alloc+0x5e/0xa0 [ 65.768522][ T2204] __kmem_cache_alloc_node+0x204/0x2d0 [ 65.774018][ T2204] __kmalloc_node_track_caller+0xa1/0x1e0 [ 65.779800][ T2204] __alloc_skb+0x226/0x4a0 [ 65.784286][ T2204] alloc_skb_with_frags+0xa8/0x620 [ 65.789420][ T2204] sock_alloc_send_pskb+0x87f/0x9a0 [ 65.794652][ T2204] unix_dgram_sendmsg+0x5c1/0x1710 [ 65.799805][ T2204] sock_write_iter+0x2ea/0x3f0 [ 65.804605][ T2204] vfs_write+0x5ef/0xd00 [ 65.808882][ T2204] page_owner free stack trace missing [ 65.814272][ T2204] [ 65.816629][ T2204] Memory state around the buggy address: [ 65.822282][ T2204] ffff888112a56800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.830383][ T2204] ffff888112a56880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.838475][ T2204] >ffff888112a56900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.846586][ T2204] ^ [ 65.853298][ T2204] ffff888112a56980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 65.861392][ T2204] ffff888112a56a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.869553][ T2204] ================================================================== [ 65.887763][ T2212] loop0: detected capacity change from 0 to 512 [ 65.895564][ T2204] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.901193][ T28] audit: type=1400 audit(1786393461.896:405): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14902]" dev="pipefs" ino=14902 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 65.915300][ T2210] loop1: detected capacity change from 0 to 512 [ 65.942731][ T2212] EXT4-fs mount: 35 callbacks suppressed [ 65.942751][ T2212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.961184][ T2212] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.003508][ T2210] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 66.275790][ T2212] EXT4-fs (loop0): unmounting filesystem. [ 66.371930][ T1639] device bridge_slave_1 left promiscuous mode [ 66.378121][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.386033][ T1639] device bridge_slave_0 left promiscuous mode [ 66.392298][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.400554][ T1639] device veth1_macvtap left promiscuous mode [ 66.407064][ T1639] device veth0_vlan left promiscuous mode [ 66.742797][ T1639] tipc: Disabling bearer [ 66.747862][ T1639] tipc: Left network mode [ 67.292002][ T1639] device bridge_slave_1 left promiscuous mode [ 67.298197][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.305935][ T1639] device bridge_slave_0 left promiscuous mode [ 67.312287][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.320958][ T1639] device bridge_slave_1 left promiscuous mode [ 67.327226][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.334846][ T1639] device bridge_slave_0 left promiscuous mode [ 67.341225][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.349088][ T1639] device bridge_slave_1 left promiscuous mode [ 67.355401][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.362892][ T1639] device bridge_slave_0 left promiscuous mode [ 67.369025][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.377480][ T1639] device veth1_macvtap left promiscuous mode [ 67.383659][ T1639] device veth0_vlan left promiscuous mode [ 67.389583][ T1639] device veth1_macvtap left promiscuous mode [ 67.395723][ T1639] device veth0_vlan left promiscuous mode [ 67.401668][ T1639] device veth1_macvtap left promiscuous mode [ 67.407689][ T1639] device veth0_vlan left promiscuous mode