last executing test programs: 1m34.444548623s ago: executing program 1 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x6, 0x5, 0xa, 0x8, 0x81, 0x9, 0x4, 0x10, 0x5, 0xd, 0x0, 0xa, 0x9, 0x81, 0x3, 0x5}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x1, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) 1m33.993293071s ago: executing program 1 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x940, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r9, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r10, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r9}}]}}) 1m32.47612955s ago: executing program 1 (id=85): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m32.051810697s ago: executing program 1 (id=86): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x504, &(0x7f0000002580)="$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") mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000), 0x18040, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)=ANY=[]) 1m31.758214213s ago: executing program 1 (id=88): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r8, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r8}}]}}) 1m31.542295807s ago: executing program 1 (id=90): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r2, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) 1m31.444449509s ago: executing program 32 (id=90): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r2, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) 54.044214699s ago: executing program 0 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x940, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r7, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r8, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r7}}]}}) 53.062727417s ago: executing program 0 (id=383): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x37, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030200bd7000000000001b"], 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x0) 52.207382273s ago: executing program 0 (id=386): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) 52.190970853s ago: executing program 0 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x103) 52.113091075s ago: executing program 0 (id=392): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x940, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r9, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r10, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r9}}]}}) 51.974443897s ago: executing program 0 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x182) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x45, &(0x7f0000004300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 51.937493818s ago: executing program 33 (id=395): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x1, 0x182) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x45, &(0x7f0000004300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9.410025054s ago: executing program 6 (id=849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x940, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r8, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r8}}]}}) 8.53819394s ago: executing program 6 (id=857): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 8.516636841s ago: executing program 6 (id=858): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020) 8.496442451s ago: executing program 6 (id=859): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r1 = syz_open_pts(r0, 0x101) dup3(r1, r0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 7.348081003s ago: executing program 6 (id=864): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x20, 0xe, 0x3, "e31597"}, 0x0, 0x0}) 3.195631501s ago: executing program 6 (id=895): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d0000052406000105240000800d240f0101000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020004000101090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x8, 0x4, 0x207f, 0x403, 0x1, 0x10001, 0x2, 0x1fc, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.065098361s ago: executing program 3 (id=910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff001, 0x0, 0x5, 0x3], 0x100000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.939197784s ago: executing program 3 (id=912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff58, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f000000a780), 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a880)={&(0x7f000000a7c0)={0x20, r2, 0x201, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048091}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f90000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_u}]}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r11}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r12}, 0x10) 1.903545555s ago: executing program 3 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0xffaf) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvvW1pKYUWJfFHVBBRNISZdoCGsMKNxhASI3HlAmo7NE1nOk1nirSyKP+DiSSu9E9wYeLChJV7d7pzgwsTVOILfclbzMudmZZSOm3fo8x96Xw+ycm9555hvt/D9J4zPW3nBNC3LkTERkSciIgHETHeuZ50Stxul+xxr189md189WQ2iWbz3n+TVnt2LXb8m8ypznOORMTPfhzxy+TduPW19cWZSqW80qkXG9XlYn1t/epCdWa+PF9eKpWmp6Ynb167UTqyvp6v/vHljxbu/Pwvf/7mi79t/ODXWVpjnbad/ThK7a4PbcfJDEbEnQ8RLAcDnf6cyDsRPpc0Ir4UERez+7+ZdzYAQC80m+PRHN9ZBwCOu7S1Bpakhc5awFikaaHQXsM7F6NppVZvXHlYW12aa6+VTcRQ+nChUp7srBVOxFCS1ada52/qpV31axFxNiJ+M3yyVS/M1ipzeb7xAYA+dmrX/P/RcHv+BwCOuZG8EwAAes78DwD9x/wPAP3H/A8A/cf8DwD9x/wPAP3H/A8AfeWnd+9mpbnZ+fzruUdrq4u1R1fnyvXFQnV1tjBbW1kuzNdq863P7Kke9HyVWm156nqsPi42yvVGsb62fr9aW11q3G99rvf98lBPegUA7Ofs+ef/SCJi49bJVokdezmYq+F4S/NOAMjNQN4JALkZzDsBIDe+xwf22KL3LV1/RejZ0ecC9Mblr1n/h35l/R/6l/V/6F/W/6F/NZuJPf8BoM9Y4wf8/B8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u7FWSdJCZy/wsUjTQiHidERMxFDycKFSnoyIMxHx9+Gh4aw+lXfSAMB7Sv+ddPb/ujx+aWx364nk4+HWMSJ+9bt7v30802isTGXX/7d9vfGsc72UR/4AwEG25umteXzL61dPZrdKL/N5+cP25qJZ3M1OabcMxmDrOBJDETH6/6RTb8verwwcQfyNpxHx1b36n7TWRiY6O5/ujp/FPt3T+Olb8dNWW/uY/V98+QhygX7zPBt/bu91/6VxoXXc+/4faY1Q729r/Nt8Z/xLt8e/gS7j34XDxrj+1590bXsa8fXBveIn2/GTLvEvHTL+P7/xrYvd2pq/j7gce8ffGavYqC4X62vrVxeqM/Pl+fJSqTQ9NT1589qNUrG1Rl3cWql+139uXTmzX/9Hu8QfOaD/3z1k///wyYNffHuf+N//zt6v/7l94mdz4vcOGX9m9E9dt+/O4s916f9Br/+VQ8Z/8a/1uUM+FADogfra+uJMpVJecdKzk+y92xcgDSe5nWRfAUfxPF/5gKnmPTIBH9qbmz7vTAAAAAAAAAAAAAAAgG568QdPefcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+vTAAAA//+0tdao") lsetxattr$security_selinux(&(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00), &(0x7f0000000d40)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c, 0x1) 1.817957756s ago: executing program 2 (id=914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x5b1, &(0x7f0000000a00)="$eJzs3U9vVFUbAPDnzExLS4GWN2+iyMImJECitrRgNMZEiLhz4R8S44LE2hZCGKChNRHECAl+A/0AJu5MjHFJjCHqxq07E7cmhkgMdONuzJ3eKQPMtNN2yoXO75dces49cznnzswz594z594JoGeNZv+UIvZExFyKGG4qq0ReOLr0uLt3rkwv3rkynaJWe/efFClf13h8yv8O5RsPRMRvP6X4X/nheucvXT47Va3OXszz4wvn5sbnL11+4cy5qdOzp2fPT068NPHikcOTRw51ZT93RsQvY8cr10+9vve76a93f/bDNzdSHI0deXnzfnTLaIwuPyfNsuf15W5XVpByvj/NL3GqFNgg1qTx+vVFxFMxHOW49+INx+dvF9o4YFPVUkStQ9knQ6ePBZ4ESUxDj2ocB2Tnv42l2CMS4FG5fWxpAOBuWhrbW1yO/8rS2GAM1McGti+maB7WSRHRjZG5rI65/Wk4W2KTxuGA1q5ei4inW/X/qR6bI/VR/Cz+S/fFfyki3sr/ZuvfWWf9ow/kxT88OqvF//4V4v+Dpvj/cJ31i38AAAAAAADonpvHIuL5Vt//lZbn/0SL+T9DEXG0C/Wv/v1f6VYXqgFauH0s4tWIaMz9W2yK/9xIOc/trM8H6kunzlRnD0XErog4GH3bsvxE+yoGYu+vfe0Km+f/ZUtWf2MuYN6OW5Vt928zM7UwtaGdBupuX4t4ptIq/tNy/59a9P9Z3z/XYR2146/93K5s9fgHNkvtq4gDLfv/e3euSCvfn2O8fjww3jgqeNgnJ298365+8Q/Fyfr/7SvH/0hqvl/P/Nrr+PTvPzYQ/62P//vTifotZ/rzdR9PLSxcnIjoT28+vH5y7W2GragRD414yeL/4L7W5/8rHf8PRsTVDus88eMb19uV6f+hOIPXImbW1P+vPbHvvS//bVd/Z/3/kXqffjBfY/wPVtZpgBbdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EpUiYkek0thyulQaG4sYioj/x/ZS9cL8wnOnLnx0fiYrq//+f6nxS7/DS/nU+P3/kab85AP5wxGxOyK+KA/W82PTF6ozRe88AAAAAAAAAAAAAAAAAAAAPCaG2lz/n/mrXHTrgE1XKboBQGHEP/Su94tuAFAY/T/0LvEPvUv8Q+8S/9C7xD/0LvEPvatc+/Zk0W0AAAAAAAC6ZvezN39PEXH1lcH6kunPy/oKbRmw2Y4W3QCgMG7xA73L1D/oXaud4xsDgK0vrVI+sO4tAQAAAAAAAAAAAIBuObDH9f/Qq0pFNwAoTPvr/90ZALY61/9D73KOD7j+HwAAAAAAAAAAAAAef/OXLp+dqlZnL643sW1jm0tIdJr4c9fSe3Zj/0954+/5dScidSHiHlGi6E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg4b8AAAD//3Uy8Os=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1.817510696s ago: executing program 4 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 1.725791868s ago: executing program 5 (id=916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004802}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1.724247268s ago: executing program 4 (id=917): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x200000000) readv(r0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/207, 0x48}, {0x0}], 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x3) 1.645066129s ago: executing program 3 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea02, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x61}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 1.6016087s ago: executing program 2 (id=919): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xda) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0x407ff, 0x7, "0441900887e8c2b791f19dd026d7677fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000640)=0x8) 1.60095417s ago: executing program 5 (id=920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x940, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r8, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r9, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r8}}]}}) 1.60044966s ago: executing program 4 (id=921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) 1.58226511s ago: executing program 2 (id=922): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000580)=""/155, 0x9b}], 0x1) 1.523340142s ago: executing program 3 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 1.522977162s ago: executing program 4 (id=924): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) close(r0) 1.434156273s ago: executing program 3 (id=925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 1.413378664s ago: executing program 4 (id=926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$eJzs3d9rW+UbAPDnpM1+f7cOxvgqIoVdOJlL19YfE7yYl6LDgd7P0J6V0XQZTTrWOnC7cDfeyBBEHIj3eu/l8B/wrxjoYMgoeuFN5aQnW7cmTdZmS2Y+HzjlffOe5D1PznnevifnhAQwtMazP4WIlyLi6yTiUEQkedto5I3j6+utPrg2ky1JrK198mfSWC+rN1+r+bz9eeX/EfHrlxEnCpv7rS2vzJcrlXQxr0/UFy5P1JZXTl5cKM+lc+mlqenp029NT737zts9i/X1c39/9/GdD05/dWz125/vHb6VxJk4kLdtjGMHrm+sjMd4/p4U48wTK072oLNBkvR7A9iWkTzPi5GNAYdiJM964L/vi4hYA4ZUIv9hSDXnAcX83L5H58EvjPvvr58ArW6Kf3T9s5HY0zg32reaPHZmlJ3vjvWg/6yPX/64fStbonefQwB0dP1GRJwaHd08/iX5+Nfe3g7tp7ro/8k+jH/w/NzJ5j9vtJr/FB7Of6LF/Gd/i9zdjs75X7jXg27ayuZ/70Xr+HNjI3ntf405XzG5cLGSZmPbwYg4HsXdWX2r6zmnV++utWvbOP/Llqz/5lww3457o7sff85suV7eScwb3b8R8XLL+W/ycP8nLfZ/9n6c67KPo+ntV9u1dY7/2Vr7MeK1lvv/0RWtZOvrkxON42GieVRs9tfNo7+167/f8Wf7f9/W8Y8lG6/X1p6+jx/2/JO2a3ss/uj++N+VfNoo78ofu1qu1xcnI3YlH21+fOrRc5v15vpZ/MePbT3+tTr+s7nPZ13Gf/PIT690FX+f9v/sU+3/py/c/fDz79v1393492ajdDx/pJvxr9sN3Ml7BwAAAAAAAIOmEBEHIimUHpYLhVJp/f6OI7GvUKnW6icuVJcuzUbju7JjUSw0r3Qf2nA/xGR+P2yzPvVEfToiDkfENyN7G/XSTLUy2+/gAQAAAAAAAAAAAAAAAAAAYEDsb/P9/8zvI/3eOuCZ85PfMLw65n8vfukJGEj+/8Pwkv8wvOQ/DC/5D8NL/sPwkv8wvOQ/DC/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAD117uzZbFlbfXBtJqvPXllemq9eOTmb1uZLC0szpZnq4uXSXLU6V0lLM9WFTq9XqVYvT07F0tWJelqrT9SWV84vVJcu1c9fXCjPpefT4nOJCgAAAAAAAAAAAAAAAAAAAF4steWV+XKlki4qKGyrMDoYm7HjwsGIGIDNGJhCv0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjk3wAAAP//VSs1PA==") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r7, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r8, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r7}}]}}) 1.411684113s ago: executing program 2 (id=927): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1ff, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000280)="f3460f018bb8010000000f01d9400f01d446a30030cd1b6c944a1d66b843000f00d866baf80cb888aa2c84ef66bafc0cecc7442400e8000000c744240261000000ff2c2466b85b000f00d066baf80cb8cc25fd83ef66bafc0cb800000000ef66430f388229", 0x65}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 935.404083ms ago: executing program 2 (id=928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000180)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55f, &(0x7f0000000fc0)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x940, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe}, 0x1c) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x6dcb, @empty}, 0x1c) listen(r0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r9, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r10, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}], [{@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@uid_lt={'uid<', r9}}]}}) 560.99532ms ago: executing program 5 (id=929): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 516.756371ms ago: executing program 4 (id=930): syz_usb_connect$uac1(0x4, 0x92, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x8, 0x20, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xaa}, [@extension_unit={0x7, 0x24, 0x8, 0x5, 0x3, 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x3, 0xe, "2d9e06"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0xb, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xa, 0xb, 0x0, {0x7, 0x25, 0x1, 0x0, 0xc, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0xff, "7307a5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x8, 0x0, {0x7, 0x25, 0x1, 0x1, 0x5, 0x5}}}}}}}]}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 452.730461ms ago: executing program 5 (id=931): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) 346.312754ms ago: executing program 5 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x1a1002, 0x47) 468.7µs ago: executing program 5 (id=933): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb7e, &(0x7f0000000c40)="$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") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x2, &(0x7f0000000040)="69df", 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=934): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) kernel console output (not intermixed with test programs): lid bInterval 0, changing to 7 [ 70.261440][ T19] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.271314][ T19] usb 4-1: config 0 interface 0 has no altsetting 0 [ 70.279015][ T490] kone 0003:1E7D:2CED.000C: unknown main item tag 0x4 [ 70.285899][ T19] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 70.295512][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.303893][ T490] kone 0003:1E7D:2CED.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 70.317423][ T19] usb 4-1: config 0 descriptor?? [ 70.333803][ T59] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 70.447095][ T283] EXT4-fs (loop0): unmounting filesystem. [ 70.450160][ T1456] loop5: detected capacity change from 0 to 512 [ 70.465016][ T1456] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.368: inode #1: comm syz.5.368: iget: illegal inode # [ 70.481902][ T1459] loop0: detected capacity change from 0 to 512 [ 70.486055][ T1199] usb 3-1: USB disconnect, device number 5 [ 70.490648][ T1456] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.368: error while reading EA inode 1 err=-117 [ 70.507308][ T1459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.522027][ T1456] EXT4-fs (loop5): 1 orphan inode deleted [ 70.528459][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 70.532999][ T1456] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 70.537037][ T59] usb 5-1: unable to get BOS descriptor or descriptor too short [ 70.543947][ T1459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.559014][ T59] usb 5-1: config 2 has an invalid interface number: 221 but max is 0 [ 70.570358][ T1459] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.574589][ T59] usb 5-1: config 2 has no interface number 0 [ 70.588096][ T575] EXT4-fs (loop5): unmounting filesystem. [ 70.601739][ T59] usb 5-1: config 2 interface 221 has no altsetting 0 [ 70.613188][ T1463] input: syz0 as /devices/virtual/input/input13 [ 70.630034][ T59] usb 5-1: string descriptor 0 read error: -22 [ 70.646291][ T59] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=85.42 [ 70.648477][ T283] EXT4-fs (loop0): unmounting filesystem. [ 70.655761][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.675827][ T59] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 70.682781][ T59] usb 5-1: No valid video chain found. [ 70.739566][ T19] hid-generic 0003:060B:500A.000D: unexpected long global item [ 70.750079][ T19] hid-generic: probe of 0003:060B:500A.000D failed with error -22 [ 70.753532][ T1474] input: syz1 as /devices/virtual/input/input14 [ 70.785506][ T1476] loop0: detected capacity change from 0 to 1024 [ 70.792316][ T1476] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.798991][ T1476] EXT4-fs: Ignoring removed bh option [ 70.804867][ T1476] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.825174][ T1476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.888580][ T59] usb 5-1: USB disconnect, device number 6 [ 70.936147][ T19] usb 4-1: USB disconnect, device number 6 [ 70.993795][ T312] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 71.173796][ T312] usb 6-1: Using ep0 maxpacket: 8 [ 71.180475][ T312] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.191436][ T312] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.201324][ T312] usb 6-1: config 0 interface 0 has no altsetting 0 [ 71.208221][ T312] usb 6-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 71.217433][ T312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.226102][ T312] usb 6-1: config 0 descriptor?? [ 71.313796][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 71.508176][ T39] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 71.519262][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.530440][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.541240][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 71.559286][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 71.569032][ T39] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 71.577978][ T39] usb 3-1: Manufacturer: syz [ 71.683624][ T1494] loop4: detected capacity change from 0 to 2048 [ 71.765512][ T283] EXT4-fs (loop0): unmounting filesystem. [ 71.785984][ T39] usb 3-1: config 0 descriptor?? [ 71.886599][ T1494] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.955757][ T1494] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.380: bg 0: block 234: padding at end of block bitmap is not set [ 71.971445][ T1494] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.983791][ T1494] EXT4-fs (loop4): This should not happen!! Data will be lost [ 71.983791][ T1494] [ 71.993531][ T1494] EXT4-fs (loop4): Total free blocks count 0 [ 71.999731][ T1494] EXT4-fs (loop4): Free/Dirty block details [ 72.005692][ T1494] EXT4-fs (loop4): free_blocks=0 [ 72.010734][ T1494] EXT4-fs (loop4): dirty_blocks=16 [ 72.015912][ T1494] EXT4-fs (loop4): Block reservation details [ 72.022128][ T1494] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 72.362556][ T39] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 72.371832][ T39] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 72.382303][ T39] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 72.512211][ T312] ntrig 0003:1B96:0004.000F: unknown main item tag 0x0 [ 72.513430][ T286] EXT4-fs (loop4): unmounting filesystem. [ 72.519261][ T312] ntrig 0003:1B96:0004.000F: unknown main item tag 0x0 [ 72.531897][ T312] ntrig 0003:1B96:0004.000F: item fetching failed at offset 2/5 [ 72.539766][ T312] ntrig 0003:1B96:0004.000F: parse failed [ 72.545722][ T312] ntrig: probe of 0003:1B96:0004.000F failed with error -22 [ 72.554285][ T312] usb 6-1: USB disconnect, device number 4 [ 72.629360][ T1505] loop4: detected capacity change from 0 to 2048 [ 72.636242][ T1505] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 72.669225][ T403] usb 3-1: USB disconnect, device number 6 [ 72.709911][ T1516] loop3: detected capacity change from 0 to 512 [ 72.724564][ T1517] loop5: detected capacity change from 0 to 1024 [ 72.736286][ T1516] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.739630][ T1517] EXT4-fs: Ignoring removed orlov option [ 72.764848][ T1516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.769448][ T1517] EXT4-fs (loop5): can't mount with commit=1, fs mounted w/o journal [ 72.774395][ T1516] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.836918][ T287] EXT4-fs (loop3): unmounting filesystem. [ 73.024073][ T6] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.035353][ T1532] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.042538][ T1532] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.050353][ T1532] device bridge_slave_0 entered promiscuous mode [ 73.057726][ T1532] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.065109][ T1532] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.069048][ T1531] loop5: detected capacity change from 0 to 40427 [ 73.072886][ T1532] device bridge_slave_1 entered promiscuous mode [ 73.087158][ T1531] F2FS-fs (loop5): fault_injection options not supported [ 73.100385][ T1531] F2FS-fs (loop5): invalid crc value [ 73.107056][ T1531] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.147945][ T1531] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 73.163814][ T403] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 73.203384][ T1532] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.210696][ T1532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.218140][ T1532] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.225218][ T1532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.233675][ T575] syz-executor: attempt to access beyond end of device [ 73.233675][ T575] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 73.234131][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.272000][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.275969][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.289134][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.289616][ T769] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.302066][ T6] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.318395][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.327494][ T6] usb 5-1: config 0 descriptor?? [ 73.332646][ T769] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.353860][ T317] device veth1_macvtap left promiscuous mode [ 73.359979][ T317] device veth0_vlan left promiscuous mode [ 73.378020][ T403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.399196][ T403] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.418719][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.439578][ T403] usb 4-1: config 0 descriptor?? [ 73.445766][ T1545] loop2: detected capacity change from 0 to 1024 [ 73.453688][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 73.453701][ T28] audit: type=1400 audit(1753359492.723:4177): avc: denied { name_bind } for pid=1546 comm="syz.5.401" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 73.464262][ T1545] EXT4-fs: Ignoring removed i_version option [ 73.503662][ T28] audit: type=1400 audit(1753359492.763:4178): avc: denied { node_bind } for pid=1546 comm="syz.5.401" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 73.529654][ T1545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.548112][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.557055][ T769] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.564253][ T769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.572833][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.582181][ T769] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.589344][ T769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.595312][ T1545] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.621392][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.630468][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.639410][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.655358][ T285] EXT4-fs (loop2): unmounting filesystem. [ 73.660079][ T1532] device veth0_vlan entered promiscuous mode [ 73.682721][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.686034][ T28] audit: type=1400 audit(1753359492.953:4179): avc: denied { ioctl } for pid=1556 comm="syz.2.406" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.691679][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.724594][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.750675][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.765515][ T1532] device veth1_macvtap entered promiscuous mode [ 73.771920][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.782093][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.792004][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.799946][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.811552][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.820173][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.829434][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.847868][ T28] audit: type=1400 audit(1753359493.123:4180): avc: denied { mounton } for pid=1532 comm="syz-executor" path="/root/syzkaller.3cZSNT/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.848890][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.881998][ T403] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 73.886849][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.894873][ T403] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input15 [ 73.898458][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.916919][ T28] audit: type=1400 audit(1753359493.123:4181): avc: denied { mount } for pid=1532 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.917822][ T769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.939597][ T28] audit: type=1400 audit(1753359493.123:4182): avc: denied { mounton } for pid=1532 comm="syz-executor" path="/root/syzkaller.3cZSNT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.948243][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.982192][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.991142][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 74.002149][ T28] audit: type=1400 audit(1753359493.123:4183): avc: denied { mounton } for pid=1532 comm="syz-executor" path="/root/syzkaller.3cZSNT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.006137][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 74.038074][ T403] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 74.058398][ T28] audit: type=1400 audit(1753359493.163:4184): avc: denied { mounton } for pid=1532 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.061853][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 74.095365][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 74.123066][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 74.124960][ T28] audit: type=1400 audit(1753359493.163:4185): avc: denied { mounton } for pid=1532 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 74.143272][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 74.178651][ T1574] syz.6.412[1574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.178729][ T1574] syz.6.412[1574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.183016][ T28] audit: type=1400 audit(1753359493.163:4186): avc: denied { mount } for pid=1532 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 74.196172][ T6] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 74.237490][ T6] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 74.260613][ T6] usb 5-1: USB disconnect, device number 7 [ 74.273785][ T59] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 74.292411][ T1577] fido_id[1577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 74.360783][ T1579] input: syz0 as /devices/virtual/input/input16 [ 74.455816][ T59] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.467128][ T59] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.467776][ T19] usb 4-1: USB disconnect, device number 7 [ 74.477621][ T59] usb 3-1: config 0 interface 0 has no altsetting 0 [ 74.494185][ T59] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 74.504539][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.526810][ T59] usb 3-1: config 0 descriptor?? [ 74.658072][ T1600] loop5: detected capacity change from 0 to 1024 [ 74.665497][ T1600] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.672088][ T1600] EXT4-fs: Ignoring removed bh option [ 74.678492][ T1600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.699004][ T1603] loop4: detected capacity change from 0 to 512 [ 74.705958][ T1600] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 74.706698][ T1603] EXT4-fs: Ignoring removed bh option [ 74.752925][ T1603] EXT4-fs error (device loop4): __ext4_iget:5078: inode #15: block 1803188595: comm syz.4.424: invalid block [ 74.765214][ T1603] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.424: couldn't read orphan inode 15 (err -117) [ 74.778162][ T1603] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.816485][ T286] EXT4-fs (loop4): unmounting filesystem. [ 74.835762][ T1608] loop4: detected capacity change from 0 to 1024 [ 74.842709][ T1608] EXT4-fs: Ignoring removed nobh option [ 74.848411][ T1608] EXT4-fs: Ignoring removed bh option [ 74.854366][ T1608] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.880927][ T1608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.021479][ T286] EXT4-fs (loop4): unmounting filesystem. [ 75.189491][ T59] usb 3-1: string descriptor 0 read error: -22 [ 75.520185][ T1619] loop4: detected capacity change from 0 to 2048 [ 75.647188][ T59] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input17 [ 75.650623][ T59] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input18 [ 75.653567][ T59] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input19 [ 75.671875][ T59] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input20 [ 75.695887][ T59] uclogic 0003:256C:006D.0012: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 75.701859][ T1625] loop6: detected capacity change from 0 to 1024 [ 75.702229][ T1625] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.702254][ T1625] EXT4-fs: Ignoring removed bh option [ 75.702658][ T1625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.719967][ T1619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.905180][ T1619] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.426: bg 0: block 234: padding at end of block bitmap is not set [ 75.906156][ T1619] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 75.906220][ T1619] EXT4-fs (loop4): This should not happen!! Data will be lost [ 75.906220][ T1619] [ 76.322082][ T59] usb 3-1: USB disconnect, device number 7 [ 76.353817][ T1625] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 76.429171][ T575] EXT4-fs (loop5): unmounting filesystem. [ 76.809744][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 76.820427][ T286] EXT4-fs (loop4): unmounting filesystem. [ 76.842931][ T1636] input: syz1 as /devices/virtual/input/input21 [ 76.855605][ T1638] loop2: detected capacity change from 0 to 1024 [ 76.869759][ T1617] tty tty26: ldisc open failed (-12), clearing slot 25 [ 76.872410][ T1638] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.885444][ T1638] EXT4-fs: Ignoring removed bh option [ 76.891240][ T1638] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.921465][ T1621] tty tty26: ldisc open failed (-12), clearing slot 25 [ 76.948015][ T1647] loop6: detected capacity change from 0 to 1024 [ 76.955514][ T1647] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.961984][ T1647] EXT4-fs: Ignoring removed bh option [ 76.968391][ T1647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.971501][ T1638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.057630][ T1656] input: syz1 as /devices/virtual/input/input22 [ 77.074473][ T1647] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 77.095716][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 77.131972][ T1660] fido_id[1660]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 77.167784][ T1665] loop5: detected capacity change from 0 to 128 [ 77.175778][ T1664] loop3: detected capacity change from 0 to 256 [ 77.198108][ T1665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.223931][ T1665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.236815][ T1665] EXT4-fs (loop5): Test dummy encryption mode enabled [ 77.276335][ T1665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 77.296615][ T1665] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 77.617226][ T1686] loop3: detected capacity change from 0 to 1024 [ 77.624114][ T1686] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.630603][ T1686] EXT4-fs: Ignoring removed bh option [ 77.637269][ T1686] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.680796][ T1686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 77.745514][ T285] EXT4-fs (loop2): unmounting filesystem. [ 77.831021][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 77.957969][ T575] EXT4-fs (loop5): unmounting filesystem. [ 78.092266][ T1721] loop2: detected capacity change from 0 to 1024 [ 78.109087][ T1721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.125939][ T1726] loop5: detected capacity change from 0 to 1024 [ 78.132748][ T1726] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.139313][ T1726] EXT4-fs: Ignoring removed bh option [ 78.145783][ T1726] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.172961][ T1726] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 78.173587][ T285] EXT4-fs (loop2): unmounting filesystem. [ 78.257609][ T1734] loop2: detected capacity change from 0 to 1024 [ 78.264955][ T1734] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.271424][ T1734] EXT4-fs: Ignoring removed bh option [ 78.277265][ T1734] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.297305][ T1734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.451213][ T1745] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 78.476861][ T287] EXT4-fs (loop3): unmounting filesystem. [ 78.492571][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 78.492587][ T28] audit: type=1400 audit(1753359497.763:4251): avc: denied { read write } for pid=1746 comm="syz.3.471" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.522925][ T28] audit: type=1400 audit(1753359497.763:4252): avc: denied { open } for pid=1746 comm="syz.3.471" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.537468][ T1749] loop3: detected capacity change from 0 to 1024 [ 78.553641][ T1749] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.560740][ T1749] EXT4-fs: Ignoring removed bh option [ 78.566830][ T1749] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.585259][ T1749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.658360][ T1754] loop4: detected capacity change from 0 to 1024 [ 78.675648][ T1754] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.687531][ T28] audit: type=1400 audit(1753359497.963:4253): avc: denied { create } for pid=1753 comm="syz.4.473" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.709292][ T28] audit: type=1400 audit(1753359497.963:4254): avc: denied { read append open } for pid=1753 comm="syz.4.473" path="/91/file1/memory.swap.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.734763][ T28] audit: type=1400 audit(1753359497.963:4255): avc: denied { map } for pid=1753 comm="syz.4.473" path="/91/file1/memory.swap.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.736169][ T286] EXT4-fs (loop4): unmounting filesystem. [ 78.782876][ T28] audit: type=1400 audit(1753359498.053:4256): avc: denied { read } for pid=1757 comm="syz.4.474" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.806438][ T28] audit: type=1400 audit(1753359498.053:4257): avc: denied { open } for pid=1757 comm="syz.4.474" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.830262][ T28] audit: type=1400 audit(1753359498.053:4258): avc: denied { ioctl } for pid=1757 comm="syz.4.474" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 78.855663][ T28] audit: type=1400 audit(1753359498.053:4259): avc: denied { read write } for pid=1759 comm="syz.4.475" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.879834][ T28] audit: type=1400 audit(1753359498.053:4260): avc: denied { open } for pid=1759 comm="syz.4.475" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.979733][ T575] EXT4-fs (loop5): unmounting filesystem. [ 79.053816][ T403] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 79.064239][ T1767] loop5: detected capacity change from 0 to 128 [ 79.073041][ T1767] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 79.086854][ T1767] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.122709][ T285] EXT4-fs (loop2): unmounting filesystem. [ 79.128585][ T1767] EXT4-fs error (device loop5): make_indexed_dir:2333: inode #2: block 20: comm syz.5.478: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0 [ 79.166738][ T575] EXT4-fs (loop5): unmounting filesystem. [ 79.201535][ T1775] syz.5.480[1775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.201593][ T1775] syz.5.480[1775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.243906][ T403] usb 5-1: Using ep0 maxpacket: 32 [ 79.285969][ T1782] Zero length message leads to an empty skb [ 79.293144][ T403] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 79.302643][ T1782] loop5: detected capacity change from 0 to 128 [ 79.308999][ T403] usb 5-1: config 0 has no interface number 0 [ 79.319622][ T403] usb 5-1: config 0 interface 184 has no altsetting 0 [ 79.335776][ T1782] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 79.351109][ T1782] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.361979][ T403] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 79.382781][ T1782] EXT4-fs warning (device loop5): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 79.405314][ T403] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.413639][ T403] usb 5-1: Product: syz [ 79.414387][ T287] EXT4-fs (loop3): unmounting filesystem. [ 79.418161][ T403] usb 5-1: Manufacturer: syz [ 79.428931][ T403] usb 5-1: SerialNumber: syz [ 79.435281][ T403] usb 5-1: config 0 descriptor?? [ 79.441926][ T403] smsc75xx v1.0.0 [ 79.548856][ T1794] loop2: detected capacity change from 0 to 1024 [ 79.555774][ T1794] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.562266][ T1794] EXT4-fs: Ignoring removed bh option [ 79.568494][ T1794] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.790679][ T1796] loop3: detected capacity change from 0 to 32768 [ 79.824900][ T1796] loop3: p1 p3 < > [ 79.992707][ T329] udevd[329]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 80.000268][ T1815] loop3: detected capacity change from 0 to 2048 [ 80.014735][ T305] udevd[305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 80.046782][ T403] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 80.058171][ T403] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 80.068535][ T1815] loop3: p1 < > p4 [ 80.073611][ T1818] loop5: detected capacity change from 0 to 1024 [ 80.073621][ T1815] loop3: p4 size 8388608 extends beyond EOD, truncated [ 80.080703][ T1818] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.093547][ T1818] EXT4-fs: Ignoring removed bh option [ 80.099401][ T1818] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.175567][ T305] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.193229][ T329] udevd[329]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 80.205021][ T305] udevd[305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 80.273145][ T403] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 80.286281][ T403] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 80.297032][ T403] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 80.307985][ T403] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 80.317681][ T403] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 80.326123][ T403] usb 5-1: USB disconnect, device number 8 [ 80.349753][ T1822] loop3: detected capacity change from 0 to 40427 [ 80.358281][ T1822] F2FS-fs (loop3): invalid crc value [ 80.365203][ T1822] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.430218][ T1822] F2FS-fs (loop3): Start checkpoint disabled! [ 80.437861][ T1822] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 80.455539][ T1831] process 'syz.2.500' launched './file0' with NULL argv: empty string added [ 80.517345][ T534] kworker/u4:5: attempt to access beyond end of device [ 80.517345][ T534] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 80.652932][ T1842] loop3: detected capacity change from 0 to 256 [ 80.790847][ T1843] loop2: detected capacity change from 0 to 2048 [ 80.995734][ T1843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.504: bg 0: block 234: padding at end of block bitmap is not set [ 81.020543][ T1843] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 81.032987][ T1843] EXT4-fs (loop2): This should not happen!! Data will be lost [ 81.032987][ T1843] [ 81.042977][ T1843] EXT4-fs (loop2): Total free blocks count 0 [ 81.049053][ T1843] EXT4-fs (loop2): Free/Dirty block details [ 81.055104][ T1843] EXT4-fs (loop2): free_blocks=0 [ 81.060092][ T1843] EXT4-fs (loop2): dirty_blocks=16 [ 81.065272][ T1843] EXT4-fs (loop2): Block reservation details [ 81.071305][ T1843] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 81.731119][ T1849] loop6: detected capacity change from 0 to 40427 [ 81.749027][ T1849] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 81.756732][ T1849] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 81.771694][ T1865] loop2: detected capacity change from 0 to 512 [ 81.773792][ T403] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.789029][ T1849] F2FS-fs (loop6): invalid crc value [ 81.803372][ T1865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.825593][ T1849] F2FS-fs (loop6): Found nat_bits in checkpoint [ 81.844792][ T1865] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.904068][ T1849] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 81.911299][ T1849] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 81.960088][ T1877] loop3: detected capacity change from 0 to 1024 [ 81.965686][ T403] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.967043][ T1877] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.983082][ T1877] EXT4-fs: Ignoring removed bh option [ 81.986854][ T403] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.998080][ T1877] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.094028][ T1532] syz-executor: attempt to access beyond end of device [ 82.094028][ T1532] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.113906][ T403] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 82.123055][ T403] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 82.131403][ T403] usb 6-1: SerialNumber: syz [ 82.158070][ T1886] loop2: detected capacity change from 0 to 1024 [ 82.165131][ T1886] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.171596][ T1886] EXT4-fs: Ignoring removed bh option [ 82.178301][ T1886] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.345715][ T403] usb 6-1: 0:2 : does not exist [ 82.355021][ T403] usb 6-1: USB disconnect, device number 5 [ 82.653773][ T59] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 82.845213][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 82.856309][ T59] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 82.872653][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.891446][ T59] usb 7-1: config 0 descriptor?? [ 82.896908][ T1891] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 82.920731][ T1900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.523'. [ 82.953858][ T312] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 82.981416][ T1902] binder: 1901:1902 ioctl c0306201 200000000640 returned -22 [ 83.082790][ T1909] loop3: detected capacity change from 0 to 512 [ 83.147718][ T312] usb 5-1: config 0 has an invalid interface number: 138 but max is 0 [ 83.157103][ T312] usb 5-1: config 0 has no interface number 0 [ 83.168765][ T312] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 83.203281][ T312] usb 5-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 83.221596][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.224781][ T1924] loop3: detected capacity change from 0 to 256 [ 83.230052][ T312] usb 5-1: Product: syz [ 83.246279][ T312] usb 5-1: Manufacturer: syz [ 83.251067][ T312] usb 5-1: SerialNumber: syz [ 83.251824][ T1924] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 83.257157][ T312] usb 5-1: config 0 descriptor?? [ 83.274015][ T1893] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 83.297022][ T312] ums-datafab 5-1:0.138: USB Mass Storage device detected [ 83.316801][ T59] itetech 0003:06CB:2968.0013: unknown main item tag 0x0 [ 83.328963][ T59] itetech 0003:06CB:2968.0013: hidraw0: USB HID v1.01 Device [HID 06cb:2968] on usb-dummy_hcd.6-1/input0 [ 83.453788][ T39] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 83.507909][ T1893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.516483][ T1893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.525841][ T312] usb 5-1: USB disconnect, device number 9 [ 83.531055][ T59] usb 7-1: USB disconnect, device number 2 [ 83.634969][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.645447][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.657554][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.667021][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.675304][ T39] usb 3-1: Product: syz [ 83.679708][ T39] usb 3-1: Manufacturer: syz [ 83.684427][ T39] usb 3-1: SerialNumber: syz [ 83.698808][ T1945] kvm [1944]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 83.708011][ T1945] kvm [1944]: vcpu2, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 83.806362][ T28] kauditd_printk_skb: 565 callbacks suppressed [ 83.806376][ T28] audit: type=1400 audit(1753359503.083:4826): avc: denied { append } for pid=1947 comm="syz.3.542" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.897150][ T39] usb 3-1: 0:2 : does not exist [ 83.902822][ T28] audit: type=1400 audit(1753359503.173:4827): avc: denied { name_bind } for pid=1951 comm="syz.3.544" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 83.928266][ T39] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 83.945103][ T39] usb 3-1: USB disconnect, device number 8 [ 84.077472][ T1959] loop4: detected capacity change from 0 to 1024 [ 84.084574][ T1959] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.087266][ T1954] loop3: detected capacity change from 0 to 512 [ 84.091046][ T1959] EXT4-fs: Ignoring removed bh option [ 84.102993][ T1959] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.142831][ T1954] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.189241][ T1571] udevd[1571]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.868053][ T1971] loop3: detected capacity change from 0 to 2048 [ 85.112037][ T1971] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.548: bg 0: block 234: padding at end of block bitmap is not set [ 85.127683][ T1971] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 85.140062][ T1971] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.140062][ T1971] [ 85.149894][ T1971] EXT4-fs (loop3): Total free blocks count 0 [ 85.156136][ T1971] EXT4-fs (loop3): Free/Dirty block details [ 85.162109][ T1971] EXT4-fs (loop3): free_blocks=0 [ 85.167100][ T1971] EXT4-fs (loop3): dirty_blocks=16 [ 85.172242][ T1971] EXT4-fs (loop3): Block reservation details [ 85.178292][ T1971] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 85.435774][ T28] audit: type=1400 audit(1753359504.713:4828): avc: denied { read } for pid=1975 comm="syz.5.551" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.463621][ T1979] loop2: detected capacity change from 0 to 128 [ 85.473648][ T1980] loop6: detected capacity change from 0 to 128 [ 85.499470][ T1979] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.550778][ T28] audit: type=1400 audit(1753359504.743:4829): avc: denied { open } for pid=1975 comm="syz.5.551" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.576432][ T1979] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.661949][ T28] audit: type=1400 audit(1753359504.743:4830): avc: denied { ioctl } for pid=1975 comm="syz.5.551" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.692084][ T1985] loop6: detected capacity change from 0 to 1024 [ 85.699469][ T1985] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.705980][ T1985] EXT4-fs: Ignoring removed bh option [ 85.715305][ T1985] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.735581][ T28] audit: type=1400 audit(1753359504.893:4831): avc: denied { execute } for pid=1977 comm="syz.2.550" path="/101/mnt/bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 85.781813][ T1990] loop4: detected capacity change from 0 to 1024 [ 85.799169][ T1992] loop3: detected capacity change from 0 to 1024 [ 85.806088][ T1992] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.812722][ T1992] EXT4-fs: Ignoring removed bh option [ 85.824982][ T1993] loop2: detected capacity change from 0 to 1024 [ 85.831817][ T1993] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.838653][ T1993] EXT4-fs: Ignoring removed bh option [ 85.843368][ T1992] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.856488][ T1993] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.280612][ T2003] loop5: detected capacity change from 0 to 1024 [ 86.287536][ T2003] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.294040][ T2003] EXT4-fs: Ignoring removed bh option [ 86.341639][ T2003] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.887201][ T2011] loop4: detected capacity change from 0 to 131072 [ 86.895209][ T2011] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 86.903332][ T2011] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 86.912229][ T2011] F2FS-fs (loop4): invalid crc value [ 86.928860][ T28] audit: type=1400 audit(1753359506.203:4832): avc: denied { sqpoll } for pid=2017 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 86.948351][ T2014] loop3: detected capacity change from 0 to 512 [ 86.955535][ T2014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.958038][ T28] audit: type=1400 audit(1753359506.203:4833): avc: denied { create } for pid=2017 comm="syz.2.562" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 86.987630][ T2011] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.039728][ T2011] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 87.046897][ T2011] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 87.058884][ T2014] EXT4-fs (loop3): 1 truncate cleaned up [ 87.128545][ T28] audit: type=1400 audit(1753359506.403:4834): avc: denied { ioctl } for pid=2028 comm="syz.6.563" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.180857][ T28] audit: type=1400 audit(1753359506.433:4835): avc: denied { create } for pid=2010 comm="syz.4.559" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 87.285346][ T2044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.313060][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 87.333642][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.342245][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 87.354020][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.362396][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.370972][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.379994][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.388601][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.472798][ T2054] syz.6.574[2054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.472881][ T2054] syz.6.574[2054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.485914][ T2054] syz.6.574[2054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.494154][ T292] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 87.499080][ T2054] syz.6.574[2054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.516900][ T2056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 87.556220][ T2058] loop3: detected capacity change from 0 to 256 [ 87.562942][ T2058] exfat: Deprecated parameter 'utf8' [ 87.566853][ T2060] loop6: detected capacity change from 0 to 1024 [ 87.568614][ T2058] exfat: Unknown parameter 'gi' [ 87.575828][ T2060] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.586414][ T2060] EXT4-fs: Ignoring removed bh option [ 87.592436][ T2060] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.625522][ T2062] SELinux: failed to load policy [ 87.690876][ T1571] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 87.704866][ T292] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.719947][ T292] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.729229][ T292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.738790][ T292] usb 6-1: Product: syz [ 87.740682][ T2069] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 87.743171][ T292] usb 6-1: Manufacturer: syz [ 87.755848][ T292] usb 6-1: SerialNumber: syz [ 87.764605][ T2069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.893071][ T2073] loop4: detected capacity change from 0 to 512 [ 87.940264][ T2076] 9pnet: p9_errstr2errno: server reported unknown error @íÎÇpî‘AçÁ›¬ž;KZì44§/@®qæžkøp [ 87.940264][ T2076] [ 87.986259][ T2080] loop4: detected capacity change from 0 to 1024 [ 87.993080][ T2080] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.000216][ T2080] EXT4-fs: Ignoring removed bh option [ 88.006112][ T2080] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.141964][ T2092] loop2: detected capacity change from 0 to 1024 [ 88.149519][ T2092] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.156474][ T2092] EXT4-fs: Ignoring removed bh option [ 88.166784][ T2092] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.591062][ T2100] loop6: detected capacity change from 0 to 512 [ 88.607555][ T2100] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.015921][ T292] cdc_ncm 6-1:1.0: bind() failure [ 89.031421][ T292] usb 6-1: USB disconnect, device number 6 [ 89.037956][ T312] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 89.074093][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 89.074109][ T28] audit: type=1400 audit(1753359508.353:4845): avc: denied { setopt } for pid=2113 comm="syz.2.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.100595][ T2111] loop6: detected capacity change from 0 to 8192 [ 89.114350][ T2111] FAT-fs (loop6): bogus number of directory entries (9) [ 89.127504][ T2111] FAT-fs (loop6): Can't find a valid FAT filesystem [ 89.193158][ T2123] capability: warning: `syz.6.592' uses 32-bit capabilities (legacy support in use) [ 89.223822][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 89.239082][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.256462][ T2127] loop6: detected capacity change from 0 to 512 [ 89.265205][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.276491][ T2127] EXT4-fs: Ignoring removed oldalloc option [ 89.282910][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.293391][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.295210][ T2127] EXT4-fs (loop6): 1 truncate cleaned up [ 89.307488][ T312] usb 4-1: config 0 descriptor?? [ 89.320018][ T312] hub 4-1:0.0: USB hub found [ 89.422121][ T28] audit: type=1400 audit(1753359508.693:4846): avc: denied { ioctl } for pid=2138 comm="syz.6.603" path="socket:[26981]" dev="sockfs" ino=26981 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.446854][ T28] audit: type=1400 audit(1753359508.713:4847): avc: denied { connect } for pid=2138 comm="syz.6.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.466488][ T28] audit: type=1400 audit(1753359508.713:4848): avc: denied { write } for pid=2138 comm="syz.6.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.572429][ T2142] loop4: detected capacity change from 0 to 2048 [ 89.782287][ T2142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.602: bg 0: block 234: padding at end of block bitmap is not set [ 89.798888][ T2142] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 89.811200][ T2142] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.811200][ T2142] [ 89.820929][ T2142] EXT4-fs (loop4): Total free blocks count 0 [ 89.826974][ T2142] EXT4-fs (loop4): Free/Dirty block details [ 89.832909][ T2142] EXT4-fs (loop4): free_blocks=0 [ 89.838042][ T2142] EXT4-fs (loop4): dirty_blocks=16 [ 89.843206][ T2142] EXT4-fs (loop4): Block reservation details [ 89.849254][ T2142] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 90.079234][ T28] audit: type=1400 audit(1753359509.353:4849): avc: denied { create } for pid=2147 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.309336][ T28] audit: type=1400 audit(1753359509.453:4850): avc: denied { connect } for pid=2147 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.360692][ T28] audit: type=1400 audit(1753359509.463:4851): avc: denied { ioctl } for pid=2147 comm="syz.5.605" path="socket:[26999]" dev="sockfs" ino=26999 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.394561][ T28] audit: type=1400 audit(1753359509.613:4852): avc: denied { attach_queue } for pid=2152 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.461428][ T2157] loop6: detected capacity change from 0 to 1024 [ 90.468337][ T2157] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.474824][ T2157] EXT4-fs: Ignoring removed bh option [ 90.483796][ T2157] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.484217][ T312] hub 4-1:0.0: 1 port detected [ 90.563870][ T292] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.595066][ T28] audit: type=1400 audit(1753359509.843:4853): avc: denied { compute_member } for pid=2161 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 90.615581][ T2164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 90.638323][ T312] hub 4-1:0.0: activate --> -90 [ 91.014709][ T2175] loop4: detected capacity change from 0 to 512 [ 91.035218][ T292] usb 3-1: Using ep0 maxpacket: 16 [ 91.041119][ T2175] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 91.041635][ T292] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 91.049812][ T2175] EXT4-fs (loop4): orphan cleanup on readonly fs [ 91.065586][ T292] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 91.075660][ T292] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.076940][ T2175] EXT4-fs (loop4): 1 orphan inode deleted [ 91.089644][ T292] usb 3-1: config 1 interface 0 has no altsetting 0 [ 91.107334][ T10] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 91.117422][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 91.129299][ T312] usb 4-1-port1: cannot disable (err = -71) [ 91.130208][ T59] usb 4-1: USB disconnect, device number 8 [ 91.143241][ T292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.152179][ T2179] loop5: detected capacity change from 0 to 1024 [ 91.160112][ T2179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.183119][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.192541][ T292] usb 3-1: Product: syz [ 91.198207][ T2179] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.199089][ T292] usb 3-1: Manufacturer: syz [ 91.212156][ T2179] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 91.224644][ T292] usb 3-1: SerialNumber: syz [ 91.229094][ T2179] EXT4-fs (loop5): Remounting filesystem read-only [ 91.446043][ T2199] loop6: detected capacity change from 0 to 8192 [ 91.458097][ T292] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 91.516576][ T2208] loop5: detected capacity change from 0 to 1024 [ 91.524250][ T2208] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.531595][ T2208] EXT4-fs: Ignoring removed bh option [ 91.539879][ T2208] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.655010][ T2217] loop6: detected capacity change from 0 to 1024 [ 91.661814][ T2217] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.669071][ T2217] EXT4-fs: Ignoring removed bh option [ 91.676692][ T2217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.779401][ T2134] usblp0:failed reading printer status (-71) [ 91.779501][ T403] usb 3-1: USB disconnect, device number 9 [ 91.816958][ T2228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 91.825971][ T2228] bridge_slave_0: default FDB implementation only supports local addresses [ 92.001034][ T2133] usblp0: removed [ 92.148257][ T2231] overlayfs: upper fs does not support tmpfile. [ 92.303781][ T1973] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 92.342632][ T2243] SELinux: failed to load policy [ 92.494178][ T1973] usb 5-1: Using ep0 maxpacket: 8 [ 92.504736][ T1973] usb 5-1: config 0 has no interfaces? [ 92.537744][ T1973] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 92.540661][ T2256] loop3: detected capacity change from 0 to 1024 [ 92.549865][ T1973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.553866][ T2256] EXT4-fs: Ignoring removed mblk_io_submit option [ 92.567854][ T2256] EXT4-fs: Ignoring removed bh option [ 92.573777][ T2256] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.629487][ T1973] usb 5-1: Product: syz [ 92.642578][ T1973] usb 5-1: Manufacturer: syz [ 92.658748][ T1973] usb 5-1: SerialNumber: syz [ 92.681976][ T1973] usb 5-1: config 0 descriptor?? [ 93.071695][ T403] usb 5-1: USB disconnect, device number 10 [ 93.111684][ T2280] loop2: detected capacity change from 0 to 1024 [ 93.118885][ T2280] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.125471][ T2280] EXT4-fs: Ignoring removed bh option [ 93.131846][ T2280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.176490][ T2284] loop6: detected capacity change from 0 to 1024 [ 93.218639][ T2284] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.6.652: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 93.238602][ T2284] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 93.247630][ T2284] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.652: Deleting old file: nlink 4, error=-117 [ 93.432643][ T2290] loop6: detected capacity change from 0 to 40427 [ 93.446069][ T2290] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (31, 24) [ 93.463024][ T2290] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 93.471400][ T2290] F2FS-fs (loop6): fault_injection options not supported [ 93.478586][ T2290] F2FS-fs (loop6): fault_type options not supported [ 93.486129][ T2290] F2FS-fs (loop6): invalid crc value [ 93.492975][ T2290] F2FS-fs (loop6): Found nat_bits in checkpoint [ 93.523467][ T2290] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 93.530864][ T2290] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 93.575767][ T1532] syz-executor: attempt to access beyond end of device [ 93.575767][ T1532] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.590144][ T39] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 93.634138][ T2306] loop3: detected capacity change from 0 to 512 [ 93.674296][ T2309] loop4: detected capacity change from 0 to 1024 [ 93.681151][ T2309] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.688104][ T2309] EXT4-fs: Ignoring removed bh option [ 93.697417][ T2309] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.738081][ T2313] binder: 2312:2313 ioctl c0306201 2000000000c0 returned -22 [ 93.814837][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.827346][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.832957][ T2319] loop3: detected capacity change from 0 to 512 [ 93.837407][ T39] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.848895][ T2319] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.877433][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.889706][ T39] usb 6-1: SerialNumber: syz [ 94.134745][ T39] usb 6-1: 0:2 : does not exist [ 94.176603][ T2319] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.189485][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 94.189501][ T28] audit: type=1400 audit(1753359513.473:4870): avc: denied { bind } for pid=2323 comm="syz.2.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 94.228828][ T39] usb 6-1: USB disconnect, device number 7 [ 94.247136][ T28] audit: type=1400 audit(1753359513.483:4871): avc: denied { write } for pid=2318 comm="syz.3.663" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.250366][ T2326] loop6: detected capacity change from 0 to 1024 [ 94.269363][ T28] audit: type=1400 audit(1753359513.483:4872): avc: denied { add_name } for pid=2318 comm="syz.3.663" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.276175][ T2326] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.302565][ T2326] EXT4-fs: Ignoring removed bh option [ 94.309114][ T2326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.312191][ T28] audit: type=1400 audit(1753359513.483:4873): avc: denied { setattr } for pid=2318 comm="syz.3.663" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.355869][ T28] audit: type=1400 audit(1753359513.483:4874): avc: denied { remove_name } for pid=2318 comm="syz.3.663" name="#14" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.378246][ T28] audit: type=1400 audit(1753359513.483:4875): avc: denied { rename } for pid=2318 comm="syz.3.663" name="#14" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.400785][ T28] audit: type=1400 audit(1753359513.483:4876): avc: denied { unlink } for pid=2318 comm="syz.3.663" name="#14" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.423278][ T28] audit: type=1400 audit(1753359513.483:4877): avc: denied { unlink } for pid=2318 comm="syz.3.663" name="#15" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.444540][ T1571] udevd[1571]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 94.468241][ T28] audit: type=1400 audit(1753359513.483:4878): avc: denied { setattr } for pid=2318 comm="syz.3.663" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.490973][ T28] audit: type=1400 audit(1753359513.483:4879): avc: denied { read write } for pid=2318 comm="syz.3.663" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.593592][ T2337] loop4: detected capacity change from 0 to 1024 [ 94.601155][ T2337] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.608419][ T2337] EXT4-fs: Ignoring removed bh option [ 94.624664][ T2337] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.703834][ T59] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 94.883833][ T59] usb 4-1: Using ep0 maxpacket: 16 [ 94.890899][ T59] usb 4-1: config 0 interface 0 has no altsetting 0 [ 94.995739][ T59] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 95.190047][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.212341][ T59] usb 4-1: config 0 descriptor?? [ 95.297510][ T2335] loop2: detected capacity change from 0 to 40427 [ 95.313365][ T2335] F2FS-fs (loop2): fault_type options not supported [ 95.321270][ T2335] F2FS-fs (loop2): invalid crc value [ 95.342101][ T2335] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.392389][ T2335] F2FS-fs (loop2): Start checkpoint disabled! [ 95.401800][ T2335] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 95.454374][ T2335] syz.2.668: attempt to access beyond end of device [ 95.454374][ T2335] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.533935][ T39] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 95.652136][ T59] hid (null): bogus close delimiter [ 95.803784][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 95.810161][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.847762][ T59] usb 4-1: USB disconnect, device number 9 [ 95.870074][ T2352] loop6: detected capacity change from 0 to 1024 [ 95.877087][ T2352] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.883537][ T2352] EXT4-fs: Ignoring removed bh option [ 95.892640][ T2352] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.905600][ T317] kworker/u4:4: attempt to access beyond end of device [ 95.905600][ T317] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 95.946616][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.963199][ T39] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 95.973477][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.042308][ T39] usb 6-1: config 0 descriptor?? [ 96.083607][ T2361] loop2: detected capacity change from 0 to 1024 [ 96.090771][ T2361] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.097423][ T2361] EXT4-fs: Ignoring removed bh option [ 96.107703][ T2361] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.333803][ T354] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 96.380835][ T2361] EXT4-fs mount: 76 callbacks suppressed [ 96.380854][ T2361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.430070][ T2368] loop3: detected capacity change from 0 to 256 [ 96.440244][ T2368] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 96.467589][ T39] savu 0003:1E7D:2D5A.0015: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 96.489378][ T329] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.573905][ T354] usb 5-1: Using ep0 maxpacket: 16 [ 96.580312][ T354] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 96.589386][ T354] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.599802][ T354] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.610648][ T354] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.620105][ T354] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.628460][ T354] usb 5-1: Product: syz [ 96.632772][ T354] usb 5-1: Manufacturer: syz [ 96.637658][ T354] usb 5-1: SerialNumber: syz [ 96.712039][ T2377] loop3: detected capacity change from 0 to 4096 [ 96.735132][ T292] usb 6-1: USB disconnect, device number 8 [ 96.743350][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 96.751397][ T2377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.770048][ T2377] fs-verity: sha512 using implementation "sha512-avx2" [ 96.788533][ T2380] loop6: detected capacity change from 0 to 256 [ 96.797923][ T287] EXT4-fs (loop3): unmounting filesystem. [ 96.885788][ T2392] loop3: detected capacity change from 0 to 1024 [ 96.892780][ T2392] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.899470][ T2392] EXT4-fs: Ignoring removed bh option [ 96.905468][ T2392] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.935438][ T2392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.955124][ T285] EXT4-fs (loop2): unmounting filesystem. [ 97.050930][ T354] usb 5-1: 0:2 : does not exist [ 97.160182][ T403] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 97.353972][ T403] usb 7-1: Using ep0 maxpacket: 16 [ 97.362209][ T403] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 97.373809][ T403] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.381933][ T403] usb 7-1: Product: syz [ 97.386516][ T403] usb 7-1: Manufacturer: syz [ 97.391313][ T403] usb 7-1: SerialNumber: syz [ 97.397237][ T403] usb 7-1: config 0 descriptor?? [ 97.403572][ T403] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 97.411601][ T403] usb 7-1: Detected FT232H [ 97.434435][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9121 disabled perfctr wrmsr: 0xc1 data 0x1000005d8 [ 97.444556][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x100 [ 97.454018][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9121 disabled perfctr wrmsr: 0xc2 data 0x104 [ 97.463215][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x100 [ 97.479587][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9121 disabled perfctr wrmsr: 0xc1 data 0x1000005d8 [ 97.489393][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x100 [ 97.498791][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9121 disabled perfctr wrmsr: 0xc2 data 0x104 [ 97.508009][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc2 data 0x100 [ 97.523986][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9121 disabled perfctr wrmsr: 0xc1 data 0x1000005d8 [ 97.533856][ T2405] kvm [2404]: vcpu10, guest rIP: 0x9134 disabled perfctr wrmsr: 0xc1 data 0x100 [ 97.605575][ T403] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 97.613874][ T292] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.659125][ T354] usb 5-1: USB disconnect, device number 11 [ 97.755363][ T287] EXT4-fs (loop3): unmounting filesystem. [ 97.793862][ T292] usb 3-1: Using ep0 maxpacket: 8 [ 97.800362][ T292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.811885][ T292] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 97.836214][ T292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.847101][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.861162][ T292] usb 3-1: Product: syz [ 97.865891][ T292] usb 3-1: Manufacturer: syz [ 97.877795][ T292] usb 3-1: SerialNumber: syz [ 97.931951][ T2422] input: syz1 as /devices/virtual/input/input24 [ 98.015121][ T403] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.085726][ T2403] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 98.095384][ T2429] input input25: cannot allocate more than FF_MAX_EFFECTS effects [ 98.114768][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 98.174829][ T2434] device syz_tun entered promiscuous mode [ 98.180706][ T2434] device macsec1 entered promiscuous mode [ 98.186672][ T2434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 98.194774][ T2434] device syz_tun left promiscuous mode [ 98.221529][ T1973] usb 7-1: USB disconnect, device number 3 [ 98.237394][ T1973] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 98.248740][ T1973] ftdi_sio 7-1:0.0: device disconnected [ 98.293761][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 98.300116][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.322305][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.337540][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 98.347167][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.362391][ T39] usb 4-1: config 0 descriptor?? [ 98.369005][ T39] hub 4-1:0.0: USB hub found [ 98.622666][ T2448] loop4: detected capacity change from 0 to 2048 [ 98.726420][ T2403] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 98.739101][ T39] hub 4-1:0.0: 1 port detected [ 98.776538][ T2448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.869612][ T2448] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.708: bg 0: block 234: padding at end of block bitmap is not set [ 98.886196][ T2448] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 98.898760][ T2448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 98.898760][ T2448] [ 98.908495][ T2448] EXT4-fs (loop4): Total free blocks count 0 [ 98.914653][ T2448] EXT4-fs (loop4): Free/Dirty block details [ 98.920657][ T2448] EXT4-fs (loop4): free_blocks=0 [ 98.925663][ T2448] EXT4-fs (loop4): dirty_blocks=16 [ 98.930862][ T2448] EXT4-fs (loop4): Block reservation details [ 98.936912][ T2448] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 99.355923][ T2454] input: syz0 as /devices/virtual/input/input26 [ 99.379565][ T39] hub 4-1:0.0: activate --> -90 [ 99.482736][ T292] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 99.486137][ T286] EXT4-fs (loop4): unmounting filesystem. [ 99.489439][ T292] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 99.502673][ T292] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 99.520782][ T2461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'. [ 99.684692][ T292] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 99.692487][ T292] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 99.716590][ T2472] loop5: detected capacity change from 0 to 1024 [ 99.723416][ T2472] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.729928][ T2472] EXT4-fs: Ignoring removed bh option [ 99.735595][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 99.735609][ T28] audit: type=1400 audit(1753359519.003:4889): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 99.762641][ T2472] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.778049][ T292] usb 3-1: USB disconnect, device number 10 [ 99.780918][ T403] usb 4-1: USB disconnect, device number 10 [ 99.787925][ T292] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 99.801335][ T28] audit: type=1400 audit(1753359519.003:4890): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.827512][ T28] audit: type=1400 audit(1753359519.003:4891): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=7150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.849616][ T354] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 99.858843][ T28] audit: type=1400 audit(1753359519.003:4892): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.891343][ T2472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 99.905670][ T28] audit: type=1400 audit(1753359519.003:4893): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=7150 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.957011][ T28] audit: type=1400 audit(1753359519.083:4894): avc: denied { read } for pid=2475 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.984508][ T28] audit: type=1400 audit(1753359519.083:4895): avc: denied { open } for pid=2475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.009854][ T28] audit: type=1400 audit(1753359519.083:4896): avc: denied { getattr } for pid=2475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.036370][ T28] audit: type=1400 audit(1753359519.163:4897): avc: denied { write } for pid=2474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.059710][ T28] audit: type=1400 audit(1753359519.163:4898): avc: denied { add_name } for pid=2474 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.153802][ T354] usb 5-1: Using ep0 maxpacket: 32 [ 100.205201][ T354] usb 5-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 100.412416][ T354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.653899][ T354] usb 5-1: config 0 descriptor?? [ 100.696718][ T575] EXT4-fs (loop5): unmounting filesystem. [ 100.911350][ T2516] loop3: detected capacity change from 0 to 40427 [ 100.921211][ T2516] F2FS-fs (loop3): fault_injection options not supported [ 100.928406][ T2516] F2FS-fs (loop3): Image doesn't support compression [ 100.935196][ T2516] F2FS-fs (loop3): Image doesn't support compression [ 100.943005][ T2516] F2FS-fs (loop3): invalid crc value [ 100.949531][ T2516] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.000853][ T2516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.034439][ T2537] SELinux: failed to load policy [ 101.083017][ T2539] loop6: detected capacity change from 0 to 1024 [ 101.090276][ T2539] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.096893][ T2539] EXT4-fs: Ignoring removed bh option [ 101.102686][ T292] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.111894][ T2539] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.125789][ T354] wacom 0003:056A:0026.0016: unknown main item tag 0x0 [ 101.132901][ T354] wacom 0003:056A:0026.0016: unknown main item tag 0x0 [ 101.141933][ T354] wacom 0003:056A:0026.0016: unknown main item tag 0x0 [ 101.164309][ T2539] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 101.168086][ T354] wacom 0003:056A:0026.0016: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 101.206855][ T2548] loop3: detected capacity change from 0 to 1024 [ 101.213919][ T2548] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.220422][ T2548] EXT4-fs: Ignoring removed bh option [ 101.237983][ T2548] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.263480][ T354] wacom 0003:056A:0026.0016: hidraw0: USB HID v0.08 Device [HID 056a:0026] on usb-dummy_hcd.4-1/input0 [ 101.275515][ T2548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.275668][ T354] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0026.0016/input/input27 [ 102.028785][ T354] usb 5-1: USB disconnect, device number 12 [ 102.303315][ T292] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.335961][ T292] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.347344][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 102.354613][ T287] EXT4-fs (loop3): unmounting filesystem. [ 102.373753][ T292] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.402307][ T2558] fido_id[2558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 102.421790][ T2559] loop5: detected capacity change from 0 to 1024 [ 102.445327][ T292] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 102.456376][ T292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 102.458647][ T2559] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 102.464971][ T292] usb 3-1: Product: syz [ 102.474531][ T2559] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.478017][ T292] usb 3-1: Manufacturer: syz [ 102.492762][ T292] usb 3-1: SerialNumber: syz [ 102.506109][ T2559] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 102.530903][ T575] EXT4-fs (loop5): unmounting filesystem. [ 102.555792][ T2570] loop5: detected capacity change from 0 to 512 [ 102.563062][ T2570] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.590189][ T2570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 102.600018][ T2570] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.614439][ T2570] netlink: 'syz.5.740': attribute type 12 has an invalid length. [ 102.629688][ T575] EXT4-fs (loop5): unmounting filesystem. [ 102.677733][ T2580] tmpfs: Unknown parameter 'roo' [ 102.703375][ T292] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 102.726187][ T2584] loop4: detected capacity change from 0 to 1024 [ 102.733080][ T2584] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.739616][ T2584] EXT4-fs: Ignoring removed bh option [ 102.745445][ T2584] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.765344][ T2584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.795233][ T2588] loop5: detected capacity change from 0 to 1024 [ 102.802178][ T2588] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.808859][ T2588] EXT4-fs: Ignoring removed bh option [ 102.815042][ T2588] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.848636][ T2588] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 102.917808][ T1199] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 103.333918][ T1199] usb 4-1: Using ep0 maxpacket: 16 [ 103.341392][ T1199] usb 4-1: config 1 has an invalid interface number: 214 but max is 0 [ 103.419026][ T1199] usb 4-1: config 1 has no interface number 0 [ 103.465069][ T1199] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 103.476513][ T1199] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.490263][ T1199] usb 4-1: config 1 interface 214 has no altsetting 0 [ 103.497692][ T2556] usb 3-1: USB disconnect, device number 11 [ 103.505373][ T1199] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 103.514887][ T2556] usblp0: removed [ 103.519020][ T1199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.527645][ T1199] usb 4-1: Product: syz [ 103.531981][ T1199] usb 4-1: Manufacturer: syz [ 103.536635][ T1199] usb 4-1: SerialNumber: syz [ 103.542279][ T2576] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.549624][ T2576] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.557639][ T1199] ums-alauda 4-1:1.214: USB Mass Storage device detected [ 103.570026][ T1199] scsi host1: usb-storage 4-1:1.214 [ 103.597205][ T286] EXT4-fs (loop4): unmounting filesystem. [ 103.616533][ T2599] loop4: detected capacity change from 0 to 1024 [ 103.623399][ T2599] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.629906][ T2599] EXT4-fs: Ignoring removed bh option [ 103.639126][ T2599] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 103.662993][ T575] EXT4-fs (loop5): unmounting filesystem. [ 103.663353][ T2599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.707043][ T2603] SELinux: ebitmap: map size 6 does not match my size 64 (high bit was 0) [ 103.717288][ T2603] SELinux: failed to load policy [ 103.764979][ T292] usb 4-1: USB disconnect, device number 11 [ 104.083975][ T2615] loop5: detected capacity change from 0 to 1024 [ 104.090792][ T2615] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.097338][ T2615] EXT4-fs: Ignoring removed bh option [ 104.103864][ T2615] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.125105][ T2615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 104.211214][ T2624] Invalid ELF header magic: != ELF [ 104.257828][ T2628] loop2: detected capacity change from 0 to 16 [ 104.265498][ T2628] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 104.276921][ T2628] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 104.288207][ T2628] erofs: (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 104.305829][ T2628] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.321620][ T2630] loop3: detected capacity change from 0 to 4096 [ 104.331851][ T2628] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 104.344580][ T2628] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 104.354658][ T2630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.409480][ T287] EXT4-fs (loop3): unmounting filesystem. [ 104.478302][ T2144] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.485936][ T286] EXT4-fs (loop4): unmounting filesystem. [ 104.526630][ T2647] loop8: detected capacity change from 0 to 16384 [ 104.546382][ T2649] loop3: detected capacity change from 0 to 1024 [ 104.553193][ T2649] EXT4-fs: Ignoring removed mblk_io_submit option [ 104.559818][ T2649] EXT4-fs: Ignoring removed bh option [ 104.565696][ T2649] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.587294][ T2649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.703765][ T292] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 105.041502][ T575] EXT4-fs (loop5): unmounting filesystem. [ 105.216568][ T292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.226650][ T292] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 105.235940][ T292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.248231][ T2669] loop5: detected capacity change from 0 to 1024 [ 105.249010][ T292] usb 3-1: config 0 descriptor?? [ 105.255153][ T2669] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.266501][ T2669] EXT4-fs: Ignoring removed bh option [ 105.272274][ T2669] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.296736][ T2671] loop4: detected capacity change from 0 to 1024 [ 105.297189][ T2669] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 105.303600][ T2671] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.318559][ T2671] EXT4-fs: Ignoring removed bh option [ 105.324394][ T2671] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.353077][ T2671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.431417][ T287] EXT4-fs (loop3): unmounting filesystem. [ 105.481612][ T2678] loop6: detected capacity change from 0 to 1024 [ 105.488834][ T2678] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.495481][ T2678] EXT4-fs: Ignoring removed bh option [ 105.876545][ T2678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.268486][ T292] dragonrise 0003:0079:0006.0017: item fetching failed at offset 4/5 [ 106.276980][ T292] dragonrise 0003:0079:0006.0017: parse failed [ 106.283765][ T2678] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 106.292939][ T292] dragonrise: probe of 0003:0079:0006.0017 failed with error -22 [ 106.296296][ T2686] loop3: detected capacity change from 0 to 1024 [ 106.305714][ T292] usb 3-1: USB disconnect, device number 12 [ 106.307520][ T2686] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.320466][ T2686] EXT4-fs: Ignoring removed bh option [ 106.325905][ T575] EXT4-fs (loop5): unmounting filesystem. [ 106.332678][ T2686] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.390900][ T2686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 106.406291][ T286] EXT4-fs (loop4): unmounting filesystem. [ 107.463690][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 107.494190][ T287] EXT4-fs (loop3): unmounting filesystem. [ 107.552213][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 107.552247][ T28] audit: type=1400 audit(1753359526.823:4921): avc: denied { mount } for pid=2707 comm="syz.5.784" name="/" dev="configfs" ino=13636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.563901][ T2711] loop6: detected capacity change from 0 to 512 [ 107.717834][ T2714] loop4: detected capacity change from 0 to 2048 [ 107.745198][ T2715] loop5: detected capacity change from 0 to 1024 [ 107.752040][ T2715] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.758514][ T2715] EXT4-fs: Ignoring removed bh option [ 107.764520][ T2715] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.824518][ T28] audit: type=1400 audit(1753359526.823:4922): avc: denied { mounton } for pid=2707 comm="syz.5.784" path="/169/file0" dev="configfs" ino=13636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.990295][ T2711] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 108.034780][ T2714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.607760][ T2724] loop3: detected capacity change from 0 to 2048 [ 108.865497][ T2715] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.932984][ T2706] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.778: bg 0: block 234: padding at end of block bitmap is not set [ 108.948614][ T2706] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 108.961257][ T2706] EXT4-fs (loop4): This should not happen!! Data will be lost [ 108.961257][ T2706] [ 109.065510][ T2706] syz.4.778 (2706) used greatest stack depth: 20688 bytes left [ 109.962906][ T286] EXT4-fs (loop4): unmounting filesystem. [ 109.978700][ T575] EXT4-fs (loop5): unmounting filesystem. [ 110.011878][ T2724] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.077242][ T2724] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.781: bg 0: block 234: padding at end of block bitmap is not set [ 110.093572][ T2724] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 110.106156][ T2724] EXT4-fs (loop3): This should not happen!! Data will be lost [ 110.106156][ T2724] [ 110.308430][ T2734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 110.318485][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 110.338093][ T28] audit: type=1400 audit(1753359526.823:4923): avc: denied { read } for pid=2707 comm="syz.5.784" name="/" dev="configfs" ino=13636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.441715][ T28] audit: type=1400 audit(1753359526.823:4924): avc: denied { watch } for pid=2707 comm="syz.5.784" path="/169/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.465674][ T28] audit: type=1400 audit(1753359526.883:4925): avc: denied { unmount } for pid=575 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.494720][ T287] EXT4-fs (loop3): unmounting filesystem. [ 110.508313][ T2740] loop6: detected capacity change from 0 to 1024 [ 110.515140][ T2740] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.521757][ T2740] EXT4-fs: Ignoring removed bh option [ 110.527645][ T2740] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.539701][ T2742] loop4: detected capacity change from 0 to 512 [ 110.560429][ T2742] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.572575][ T2740] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 110.582230][ T1199] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 110.665770][ T286] EXT4-fs (loop4): unmounting filesystem. [ 110.835855][ T1199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.961811][ T1199] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.068244][ T1199] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.092918][ T1199] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.109293][ T1199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.120658][ T2759] device veth0_to_hsr entered promiscuous mode [ 111.135731][ T2759] device veth0_to_hsr left promiscuous mode [ 111.149270][ T1199] usb 6-1: config 0 descriptor?? [ 111.314023][ T28] audit: type=1400 audit(1753359530.593:4926): avc: denied { ioctl } for pid=2764 comm="syz.2.797" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 111.385306][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 111.412190][ T2769] hub 9-0:1.0: USB hub found [ 111.435112][ T2769] hub 9-0:1.0: 1 port detected [ 111.444619][ T28] audit: type=1400 audit(1753359530.723:4927): avc: denied { create } for pid=2770 comm="syz.2.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.503848][ T1973] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 111.506494][ T2775] loop6: detected capacity change from 0 to 1024 [ 111.550175][ T2775] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 111.566758][ T28] audit: type=1400 audit(1753359530.843:4928): avc: denied { append } for pid=2774 comm="syz.6.801" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.588537][ T1199] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 111.605201][ T1199] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 111.621577][ T1199] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 111.661896][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 111.710651][ T1973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.732000][ T1973] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 111.733621][ T2786] device veth1_macvtap left promiscuous mode [ 111.751746][ T1973] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.778284][ T1973] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.787496][ T1973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.795744][ T1973] usb 4-1: Product: syz [ 111.799994][ T1973] usb 4-1: Manufacturer: syz [ 111.804665][ T1973] usb 4-1: SerialNumber: syz [ 111.847773][ T2791] loop2: detected capacity change from 0 to 1024 [ 111.854668][ T2791] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.861130][ T2791] EXT4-fs: Ignoring removed bh option [ 111.867250][ T2791] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.887697][ T292] usb 6-1: USB disconnect, device number 9 [ 111.900243][ T2791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.969401][ T2795] kvm: MWAIT instruction emulated as NOP! [ 112.428696][ T2808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.811'. [ 112.460058][ T28] audit: type=1400 audit(1753359531.733:4929): avc: denied { write } for pid=2809 comm="syz.6.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.481724][ T2810] netlink: 88 bytes leftover after parsing attributes in process `syz.6.813'. [ 112.491027][ T2810] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 112.510526][ T28] audit: type=1400 audit(1753359531.783:4930): avc: denied { write } for pid=2813 comm="+}[@" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.523692][ T2814] random: crng reseeded on system resumption [ 112.541353][ T2816] loop6: detected capacity change from 0 to 1024 [ 112.544062][ T19] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.548484][ T2816] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.562313][ T2816] EXT4-fs: Ignoring removed bh option [ 112.562601][ T28] audit: type=1400 audit(1753359531.793:4931): avc: denied { open } for pid=2813 comm="+}[@" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 112.591547][ T2816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.617060][ T2816] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 112.651450][ T2821] loop5: detected capacity change from 0 to 1024 [ 112.658420][ T2821] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.664960][ T2821] EXT4-fs: Ignoring removed bh option [ 112.687415][ T2821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.727655][ T2821] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 112.737500][ T285] EXT4-fs (loop2): unmounting filesystem. [ 112.764875][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.775224][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.786321][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.523311][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 113.533773][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.542401][ T1973] cdc_ncm 4-1:1.0: bind() failure [ 113.543396][ T575] EXT4-fs (loop5): unmounting filesystem. [ 113.550928][ T19] usb 5-1: Product: syz [ 113.557598][ T1973] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 113.565039][ T19] usb 5-1: Manufacturer: syz [ 113.569738][ T1973] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 113.581808][ T19] usb 5-1: SerialNumber: syz [ 113.594382][ T1973] usb 4-1: USB disconnect, device number 12 [ 113.681215][ T2840] loop6: detected capacity change from 0 to 512 [ 113.694332][ T2840] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 113.714271][ T2843] loop5: detected capacity change from 0 to 512 [ 113.725332][ T1532] EXT4-fs (loop6): unmounting filesystem. [ 113.754024][ T2843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 113.754105][ T2843] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.754421][ T2846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.823'. [ 113.754461][ T2846] device bridge_slave_1 left promiscuous mode [ 113.754567][ T2846] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.758357][ T2846] device bridge_slave_0 left promiscuous mode [ 113.758455][ T2846] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.812912][ T19] usb 5-1: cannot find UAC_HEADER [ 113.835237][ T575] EXT4-fs (loop5): unmounting filesystem. [ 113.839786][ T19] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 113.851288][ T19] usb 5-1: USB disconnect, device number 13 [ 113.856300][ T2526] udevd[2526]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 113.932770][ T2857] loop2: detected capacity change from 0 to 128 [ 113.939909][ T2857] EXT4-fs: Ignoring removed nobh option [ 113.962599][ T2857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.972203][ T2857] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.989651][ T2857] EXT4-fs (loop2): shut down requested (2) [ 113.996088][ T28] audit: type=1400 audit(1753359533.273:4932): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 114.037861][ T28] audit: type=1400 audit(1753359533.273:4933): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.085411][ T28] audit: type=1400 audit(1753359533.273:4934): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.119160][ T28] audit: type=1400 audit(1753359533.273:4935): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.142294][ T28] audit: type=1400 audit(1753359533.273:4936): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.165274][ T28] audit: type=1400 audit(1753359533.303:4937): avc: denied { map } for pid=2863 comm="syz.5.831" path="socket:[31076]" dev="sockfs" ino=31076 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 114.250287][ T2880] netlink: 4 bytes leftover after parsing attributes in process `syz.5.837'. [ 114.353805][ T354] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 114.383765][ T19] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 114.499680][ T2890] loop3: detected capacity change from 0 to 2048 [ 114.525602][ T2890] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.545528][ T354] usb 7-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 114.562609][ T354] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.573758][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 114.580810][ T354] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.581190][ T19] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.598020][ T19] usb 3-1: config 0 has no interface number 0 [ 114.604160][ T19] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.615284][ T19] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.625112][ T19] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 114.625350][ T354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.634364][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.651351][ T19] usb 3-1: config 0 descriptor?? [ 114.657616][ T354] usb 7-1: Product: syz [ 114.661906][ T354] usb 7-1: Manufacturer: syz [ 114.667172][ T354] usb 7-1: SerialNumber: syz [ 114.703802][ T312] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.885955][ T354] usb 7-1: 0:2 : does not exist [ 114.893943][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 114.895510][ T354] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 114.907695][ T312] usb 5-1: config 0 has no interfaces? [ 114.914559][ T312] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.923977][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.929265][ T354] usb 7-1: USB disconnect, device number 4 [ 114.932043][ T312] usb 5-1: SerialNumber: syz [ 114.944671][ T312] usb 5-1: config 0 descriptor?? [ 115.152958][ T2556] usb 5-1: USB disconnect, device number 14 [ 115.271511][ T19] uclogic 0003:28BD:0071.0019: pen parameters not found [ 115.278852][ T19] uclogic 0003:28BD:0071.0019: interface is invalid, ignoring [ 115.311134][ T28] audit: type=1400 audit(1753359534.583:4938): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 115.415657][ T2914] loop6: detected capacity change from 0 to 1024 [ 115.422466][ T2914] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.429060][ T2914] EXT4-fs: Ignoring removed bh option [ 115.434844][ T2914] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.454030][ T354] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 115.503042][ T19] usb 3-1: USB disconnect, device number 13 [ 115.675821][ T354] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.726521][ T354] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.843908][ T1199] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 115.853603][ T354] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.868004][ T354] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.877400][ T354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.887734][ T354] usb 6-1: Product: syz [ 115.891917][ T354] usb 6-1: Manufacturer: syz [ 115.896743][ T354] usb 6-1: SerialNumber: syz [ 116.029942][ T2933] loop2: detected capacity change from 0 to 256 [ 116.044913][ T1199] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 116.057592][ T1199] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.068049][ T1199] usb 4-1: config 0 interface 0 has no altsetting 0 [ 116.075354][ T1199] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 116.086643][ T1199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.095636][ T1199] usb 4-1: config 0 descriptor?? [ 116.353793][ T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 116.509336][ T1199] uclogic 0003:5543:0064.001A: item fetching failed at offset 5/7 [ 116.517636][ T1199] uclogic 0003:5543:0064.001A: parse failed [ 116.523575][ T1199] uclogic: probe of 0003:5543:0064.001A failed with error -22 [ 116.536195][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.547204][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.557193][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.570224][ T19] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.579707][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.588900][ T19] usb 3-1: config 0 descriptor?? [ 116.714537][ T1199] usb 4-1: USB disconnect, device number 13 [ 116.892105][ T2949] loop4: detected capacity change from 0 to 1024 [ 116.899020][ T2949] EXT4-fs: Ignoring removed oldalloc option [ 116.905347][ T2949] EXT4-fs: Ignoring removed orlov option [ 116.945246][ T2954] loop4: detected capacity change from 0 to 1024 [ 116.952238][ T2954] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.959459][ T2954] EXT4-fs: Ignoring removed bh option [ 116.965445][ T2954] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.998525][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.006332][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.014112][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.021802][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.030165][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.037939][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.045634][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.053176][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.060903][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.068758][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.081285][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.088874][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.096322][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.103764][ T19] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 117.111366][ T19] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 117.112184][ T354] cdc_ncm 6-1:1.0: bind() failure [ 117.124650][ T19] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.125806][ T354] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 117.160619][ T354] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 117.311318][ T354] usb 6-1: USB disconnect, device number 10 [ 117.545358][ T1199] usb 3-1: USB disconnect, device number 14 [ 117.569595][ T2966] loop3: detected capacity change from 0 to 1024 [ 117.576424][ T2966] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.583070][ T2966] EXT4-fs: Ignoring removed bh option [ 117.589000][ T2966] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.027141][ T19] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 118.055623][ T2972] loop5: detected capacity change from 0 to 1024 [ 118.062421][ T2972] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.069228][ T2972] EXT4-fs: Ignoring removed bh option [ 118.075061][ T2972] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.172469][ T2983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 118.501740][ T19] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 118.511919][ T19] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 118.525450][ T1199] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 118.530674][ T19] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 118.550298][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.558748][ T19] usb 7-1: Product: syz [ 118.563202][ T19] usb 7-1: Manufacturer: syz [ 118.568023][ T19] usb 7-1: SerialNumber: syz [ 118.568936][ T2990] loop3: detected capacity change from 0 to 1024 [ 118.579731][ T2990] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.586404][ T2990] EXT4-fs: Ignoring removed bh option [ 118.592325][ T2990] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.604768][ T19] usb 7-1: config 0 descriptor?? [ 118.610042][ T2961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 118.623494][ T2961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 118.670542][ T2996] SELinux: failed to load policy [ 118.735161][ T1199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.746387][ T1199] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 118.757757][ T1199] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 118.769196][ T1199] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 118.782994][ T1199] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.792678][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.801850][ T1199] usb 5-1: Product: syz [ 118.835509][ T1199] usb 5-1: Manufacturer: syz [ 118.849864][ T1199] usb 5-1: SerialNumber: syz [ 118.860645][ T2985] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.088792][ T2961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 119.089372][ T2985] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.097477][ T2961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 119.109606][ T2985] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.152482][ T3005] loop5: detected capacity change from 0 to 1024 [ 119.153894][ T354] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 119.159556][ T3005] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.173639][ T3005] EXT4-fs: Ignoring removed bh option [ 119.179587][ T3005] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.365756][ T354] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.610450][ T354] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.622282][ T354] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.632524][ T354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.641606][ T3011] loop3: detected capacity change from 0 to 1024 [ 119.648346][ T354] usb 3-1: SerialNumber: syz [ 119.654144][ T3011] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.660722][ T3011] EXT4-fs: Ignoring removed bh option [ 119.666675][ T3011] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.794150][ T2985] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.801563][ T2985] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 119.963512][ T354] usb 3-1: 0:2 : does not exist [ 120.149394][ T1199] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 120.156587][ T1199] cdc_ncm 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 120.168767][ T354] usb 3-1: USB disconnect, device number 15 [ 120.174797][ T1199] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 120.192134][ T3017] hub 9-0:1.0: USB hub found [ 120.197665][ T3017] hub 9-0:1.0: 1 port detected [ 120.273622][ T3023] loop5: detected capacity change from 0 to 1024 [ 120.280598][ T3023] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.287132][ T3023] EXT4-fs: Ignoring removed bh option [ 120.293087][ T3023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.337633][ T19] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 120.353330][ T19] dm9601 7-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 120.369773][ T19] usb 7-1: USB disconnect, device number 5 [ 120.376878][ T19] dm9601 7-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet [ 120.385563][ T1199] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 120.394822][ T1199] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 120.407927][ T1199] usb 5-1: USB disconnect, device number 15 [ 120.416448][ T1199] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 120.434304][ T305] udevd[305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 121.384871][ T3035] input: syz1 as /devices/virtual/input/input31 [ 121.392076][ T3037] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.421179][ T28] audit: type=1400 audit(1753359540.693:4939): avc: denied { create } for pid=3038 comm="syz.3.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.467260][ T28] audit: type=1400 audit(1753359540.693:4940): avc: denied { bind } for pid=3038 comm="syz.3.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.492279][ T28] audit: type=1400 audit(1753359540.693:4941): avc: denied { write } for pid=3038 comm="syz.3.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 121.576560][ T3051] loop3: detected capacity change from 0 to 1024 [ 121.583471][ T3051] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.590032][ T3051] EXT4-fs: Ignoring removed bh option [ 121.595818][ T3051] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 121.657500][ T28] audit: type=1400 audit(1753359540.933:4942): avc: denied { setcurrent } for pid=3056 comm="syz.5.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 121.700650][ T28] audit: type=1401 audit(1753359540.963:4943): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 121.722196][ T3062] loop5: detected capacity change from 0 to 512 [ 121.733593][ T3061] syz.2.898[3061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.733666][ T3061] syz.2.898[3061] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.983218][ T3062] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.073948][ T3068] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 122.090659][ T3070] loop4: detected capacity change from 0 to 1024 [ 122.097852][ T3070] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.104662][ T3070] EXT4-fs: Ignoring removed bh option [ 122.110464][ T3070] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.122560][ T3068] SELinux: failed to load policy [ 122.215793][ T19] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 122.707545][ T19] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.718960][ T19] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 122.739458][ T19] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 122.750764][ T19] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 122.776999][ T19] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.788453][ T19] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.796849][ T19] usb 7-1: Product: syz [ 122.801122][ T19] usb 7-1: Manufacturer: syz [ 122.808248][ T19] usb 7-1: SerialNumber: syz [ 122.819162][ T3055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 122.888769][ T3106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 122.938364][ T3109] loop3: detected capacity change from 0 to 512 [ 122.970434][ T3111] loop2: detected capacity change from 0 to 1024 [ 122.988736][ T3111] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 123.002058][ T3111] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 123.016711][ T3111] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.914: Failed to acquire dquot type 0 [ 123.031454][ T28] audit: type=1400 audit(1753359542.313:4944): avc: denied { write } for pid=3113 comm="syz.4.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 123.036436][ T3055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 123.053944][ T3109] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.062418][ T3055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 123.072516][ T3111] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.914: bg 0: block 352: padding at end of block bitmap is not set [ 123.102624][ T3109] SELinux: Context system_u:object_r:devicekit_power_exec_t:s0 is not valid (left unmapped). [ 123.113641][ T3111] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 123.113673][ T28] audit: type=1400 audit(1753359542.383:4945): avc: denied { relabelto } for pid=3108 comm="syz.3.913" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:devicekit_power_exec_t:s0" [ 123.150837][ T3111] EXT4-fs (loop2): 1 truncate cleaned up [ 123.169494][ T3111] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 123.225691][ T3126] xt_bpf: check failed: parse error [ 123.240042][ T3130] loop5: detected capacity change from 0 to 1024 [ 123.246939][ T3130] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.253411][ T3130] EXT4-fs: Ignoring removed bh option [ 123.259264][ T3130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.275777][ T6] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 123.283276][ T6] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 123.322183][ T6] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 123.333676][ T6] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 123.415836][ T3142] fido_id[3142]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.425307][ T3145] loop4: detected capacity change from 0 to 1024 [ 123.436320][ T3145] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.442824][ T3145] EXT4-fs: Ignoring removed bh option [ 123.527987][ T3145] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.822929][ T3055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 123.830391][ T3055] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 123.893399][ T3154] loop2: detected capacity change from 0 to 1024 [ 123.900363][ T3154] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.907214][ T3154] EXT4-fs: Ignoring removed bh option [ 123.913288][ T3154] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.259206][ T312] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 124.266867][ T19] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 124.273338][ T19] cdc_ncm 7-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 124.280820][ T19] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 124.381365][ T3165] xt_hashlimit: size too large, truncated to 1048576 [ 124.750547][ T19] cdc_ncm 7-1:1.0: setting tx_max = 16384 [ 124.758661][ T19] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 124.771733][ T19] usb 7-1: USB disconnect, device number 6 [ 124.778000][ T19] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 124.788420][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.801219][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.823949][ T312] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 124.837642][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.866533][ T312] usb 4-1: config 0 descriptor?? [ 124.871927][ T1973] ================================================================== [ 124.880018][ T1973] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 124.887928][ T1973] Read of size 8 at addr ffff88811e552cf0 by task kworker/0:5/1973 [ 124.895827][ T1973] [ 124.898156][ T1973] CPU: 0 PID: 1973 Comm: kworker/0:5 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 124.908047][ T1973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.918105][ T1973] Workqueue: events update_stats_workfn [ 124.923702][ T1973] Call Trace: [ 124.926987][ T1973] [ 124.929925][ T1973] __dump_stack+0x21/0x24 [ 124.934289][ T1973] dump_stack_lvl+0xee/0x150 [ 124.938894][ T1973] ? __cfi_dump_stack_lvl+0x8/0x8 [ 124.944062][ T1973] ? _raw_spin_lock_irq+0x8f/0xe0 [ 124.949273][ T1973] ? __kasan_check_write+0x14/0x20 [ 124.954395][ T1973] ? __list_del_entry_valid+0xa6/0x130 [ 124.959859][ T1973] print_address_description+0x71/0x210 [ 124.965414][ T1973] print_report+0x4a/0x60 [ 124.969749][ T1973] kasan_report+0x122/0x150 [ 124.974265][ T1973] ? __list_del_entry_valid+0xa6/0x130 [ 124.980077][ T1973] __asan_report_load8_noabort+0x14/0x20 [ 124.985985][ T1973] __list_del_entry_valid+0xa6/0x130 [ 124.991284][ T1973] process_one_work+0x4b9/0xc40 [ 124.996213][ T1973] worker_thread+0xa29/0x11f0 [ 125.000984][ T1973] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 125.006603][ T1973] kthread+0x281/0x320 [ 125.010674][ T1973] ? __cfi_worker_thread+0x10/0x10 [ 125.015882][ T1973] ? __cfi_kthread+0x10/0x10 [ 125.020569][ T1973] ret_from_fork+0x1f/0x30 [ 125.024987][ T1973] [ 125.028000][ T1973] [ 125.030327][ T1973] Allocated by task 19: [ 125.034477][ T1973] kasan_set_track+0x4b/0x70 [ 125.039070][ T1973] kasan_save_alloc_info+0x25/0x30 [ 125.044180][ T1973] __kasan_kmalloc+0x95/0xb0 [ 125.048935][ T1973] __kmalloc_node+0xb2/0x1e0 [ 125.053567][ T1973] kvmalloc_node+0x294/0x480 [ 125.058190][ T1973] alloc_netdev_mqs+0x8d/0xf90 [ 125.062952][ T1973] alloc_etherdev_mqs+0x37/0x40 [ 125.067798][ T1973] usbnet_probe+0x20c/0x2780 [ 125.072486][ T1973] usb_probe_interface+0x610/0xaf0 [ 125.077865][ T1973] really_probe+0x2cb/0x960 [ 125.082366][ T1973] __driver_probe_device+0x198/0x280 [ 125.087830][ T1973] driver_probe_device+0x54/0x3e0 [ 125.093033][ T1973] __device_attach_driver+0x2e9/0x4a0 [ 125.098415][ T1973] bus_for_each_drv+0x183/0x210 [ 125.103259][ T1973] __device_attach+0x2a2/0x400 [ 125.108017][ T1973] device_initial_probe+0x1a/0x20 [ 125.113039][ T1973] bus_probe_device+0xc0/0x1f0 [ 125.117810][ T1973] device_add+0xb4d/0xef0 [ 125.122156][ T1973] usb_set_configuration+0x19c2/0x1f10 [ 125.127630][ T1973] usb_generic_driver_probe+0x91/0x150 [ 125.133094][ T1973] usb_probe_device+0x159/0x270 [ 125.137967][ T1973] really_probe+0x2cb/0x960 [ 125.142484][ T1973] __driver_probe_device+0x198/0x280 [ 125.147767][ T1973] driver_probe_device+0x54/0x3e0 [ 125.152791][ T1973] __device_attach_driver+0x2e9/0x4a0 [ 125.158162][ T1973] bus_for_each_drv+0x183/0x210 [ 125.163092][ T1973] __device_attach+0x2a2/0x400 [ 125.168029][ T1973] device_initial_probe+0x1a/0x20 [ 125.173153][ T1973] bus_probe_device+0xc0/0x1f0 [ 125.178274][ T1973] device_add+0xb4d/0xef0 [ 125.182613][ T1973] usb_new_device+0xa70/0x1520 [ 125.187395][ T1973] hub_event+0x2a5d/0x4680 [ 125.191814][ T1973] process_one_work+0x71f/0xc40 [ 125.196661][ T1973] worker_thread+0xa29/0x11f0 [ 125.201328][ T1973] kthread+0x281/0x320 [ 125.205430][ T1973] ret_from_fork+0x1f/0x30 [ 125.209855][ T1973] [ 125.212179][ T1973] Freed by task 19: [ 125.215971][ T1973] kasan_set_track+0x4b/0x70 [ 125.220655][ T1973] kasan_save_free_info+0x31/0x50 [ 125.225779][ T1973] ____kasan_slab_free+0x132/0x180 [ 125.230885][ T1973] __kasan_slab_free+0x11/0x20 [ 125.235662][ T1973] slab_free_freelist_hook+0xc2/0x190 [ 125.241063][ T1973] __kmem_cache_free+0xb7/0x1b0 [ 125.245907][ T1973] kfree+0x6f/0xf0 [ 125.249668][ T1973] kvfree+0x35/0x40 [ 125.253488][ T1973] netdev_freemem+0x3f/0x60 [ 125.258075][ T1973] netdev_release+0x7f/0xb0 [ 125.262587][ T1973] device_release+0xa4/0x1d0 [ 125.267193][ T1973] kobject_put+0x19d/0x280 [ 125.271692][ T1973] put_device+0x1f/0x30 [ 125.275848][ T1973] free_netdev+0x392/0x490 [ 125.280256][ T1973] usbnet_disconnect+0x25a/0x3b0 [ 125.285209][ T1973] usb_unbind_interface+0x223/0x8d0 [ 125.290502][ T1973] device_release_driver_internal+0x508/0x820 [ 125.296671][ T1973] device_release_driver+0x19/0x20 [ 125.301796][ T1973] bus_remove_device+0x2ee/0x350 [ 125.306733][ T1973] device_del+0x6a4/0xeb0 [ 125.311066][ T1973] usb_disable_device+0x3a8/0x750 [ 125.316096][ T1973] usb_disconnect+0x31e/0x860 [ 125.320858][ T1973] hub_event+0x1bd5/0x4680 [ 125.325283][ T1973] process_one_work+0x71f/0xc40 [ 125.330129][ T1973] worker_thread+0xd2e/0x11f0 [ 125.334883][ T1973] kthread+0x281/0x320 [ 125.338944][ T1973] ret_from_fork+0x1f/0x30 [ 125.343354][ T1973] [ 125.345669][ T1973] Last potentially related work creation: [ 125.351371][ T1973] kasan_save_stack+0x3a/0x60 [ 125.356130][ T1973] __kasan_record_aux_stack+0xb6/0xc0 [ 125.361501][ T1973] kasan_record_aux_stack_noalloc+0xb/0x10 [ 125.367318][ T1973] insert_work+0x51/0x300 [ 125.371663][ T1973] __queue_work+0x9b1/0xd30 [ 125.376161][ T1973] queue_work_on+0xd2/0x140 [ 125.380668][ T1973] usbnet_link_change+0x176/0x1a0 [ 125.385692][ T1973] usbnet_probe+0x1d55/0x2780 [ 125.390470][ T1973] usb_probe_interface+0x610/0xaf0 [ 125.395581][ T1973] really_probe+0x2cb/0x960 [ 125.400177][ T1973] __driver_probe_device+0x198/0x280 [ 125.405472][ T1973] driver_probe_device+0x54/0x3e0 [ 125.410513][ T1973] __device_attach_driver+0x2e9/0x4a0 [ 125.415899][ T1973] bus_for_each_drv+0x183/0x210 [ 125.420750][ T1973] __device_attach+0x2a2/0x400 [ 125.425512][ T1973] device_initial_probe+0x1a/0x20 [ 125.430548][ T1973] bus_probe_device+0xc0/0x1f0 [ 125.435321][ T1973] device_add+0xb4d/0xef0 [ 125.439750][ T1973] usb_set_configuration+0x19c2/0x1f10 [ 125.445395][ T1973] usb_generic_driver_probe+0x91/0x150 [ 125.450951][ T1973] usb_probe_device+0x159/0x270 [ 125.455815][ T1973] really_probe+0x2cb/0x960 [ 125.460417][ T1973] __driver_probe_device+0x198/0x280 [ 125.465717][ T1973] driver_probe_device+0x54/0x3e0 [ 125.470749][ T1973] __device_attach_driver+0x2e9/0x4a0 [ 125.476301][ T1973] bus_for_each_drv+0x183/0x210 [ 125.481155][ T1973] __device_attach+0x2a2/0x400 [ 125.485936][ T1973] device_initial_probe+0x1a/0x20 [ 125.490968][ T1973] bus_probe_device+0xc0/0x1f0 [ 125.495864][ T1973] device_add+0xb4d/0xef0 [ 125.500418][ T1973] usb_new_device+0xa70/0x1520 [ 125.505264][ T1973] hub_event+0x2a5d/0x4680 [ 125.509687][ T1973] process_one_work+0x71f/0xc40 [ 125.514706][ T1973] worker_thread+0xa29/0x11f0 [ 125.519372][ T1973] kthread+0x281/0x320 [ 125.523459][ T1973] ret_from_fork+0x1f/0x30 [ 125.527897][ T1973] [ 125.530216][ T1973] The buggy address belongs to the object at ffff88811e552000 [ 125.530216][ T1973] which belongs to the cache kmalloc-4k of size 4096 [ 125.544433][ T1973] The buggy address is located 3312 bytes inside of [ 125.544433][ T1973] 4096-byte region [ffff88811e552000, ffff88811e553000) [ 125.558154][ T1973] [ 125.560486][ T1973] The buggy address belongs to the physical page: [ 125.567015][ T1973] page:ffffea0004795400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e550 [ 125.577341][ T1973] head:ffffea0004795400 order:3 compound_mapcount:0 compound_pincount:0 [ 125.585750][ T1973] flags: 0x4000000000010200(slab|head|zone=1) [ 125.591838][ T1973] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 125.600504][ T1973] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 125.609183][ T1973] page dumped because: kasan: bad access detected [ 125.615930][ T1973] page_owner tracks the page as allocated [ 125.621634][ T1973] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2526, tgid 2526 (udevd), ts 106387678802, free_ts 106362922105 [ 125.644039][ T1973] post_alloc_hook+0x1f5/0x210 [ 125.648808][ T1973] prep_new_page+0x1c/0x110 [ 125.653402][ T1973] get_page_from_freelist+0x2c7b/0x2cf0 [ 125.659031][ T1973] __alloc_pages+0x19e/0x3a0 [ 125.663693][ T1973] alloc_slab_page+0x6e/0xf0 [ 125.668285][ T1973] new_slab+0x98/0x3d0 [ 125.672378][ T1973] ___slab_alloc+0x6f6/0xb50 [ 125.676979][ T1973] __slab_alloc+0x5e/0xa0 [ 125.681303][ T1973] __kmem_cache_alloc_node+0x203/0x2c0 [ 125.686848][ T1973] __kmalloc_node+0xa1/0x1e0 [ 125.691437][ T1973] kvmalloc_node+0x294/0x480 [ 125.696024][ T1973] seq_read_iter+0x1fc/0xdd0 [ 125.700610][ T1973] kernfs_fop_read_iter+0x147/0x480 [ 125.705815][ T1973] vfs_read+0x41e/0x8c0 [ 125.710234][ T1973] ksys_read+0x140/0x240 [ 125.714557][ T1973] __x64_sys_read+0x7b/0x90 [ 125.719067][ T1973] page last free stack trace: [ 125.723727][ T1973] free_unref_page_prepare+0x742/0x750 [ 125.729360][ T1973] free_unref_page+0x8f/0x530 [ 125.734040][ T1973] __free_pages+0x67/0x100 [ 125.738545][ T1973] __free_slab+0xca/0x1a0 [ 125.742898][ T1973] __unfreeze_partials+0x160/0x190 [ 125.748012][ T1973] put_cpu_partial+0xa9/0x100 [ 125.752805][ T1973] __slab_free+0x1c4/0x280 [ 125.757228][ T1973] ___cache_free+0xbf/0xd0 [ 125.761644][ T1973] qlist_free_all+0xc6/0x140 [ 125.766231][ T1973] kasan_quarantine_reduce+0x14a/0x170 [ 125.771691][ T1973] __kasan_slab_alloc+0x24/0x80 [ 125.776535][ T1973] slab_post_alloc_hook+0x4f/0x2d0 [ 125.781649][ T1973] kmem_cache_alloc+0x16e/0x330 [ 125.786523][ T1973] getname_flags+0xb9/0x500 [ 125.791043][ T1973] getname+0x19/0x20 [ 125.794958][ T1973] do_sys_openat2+0xcb/0x7e0 [ 125.799545][ T1973] [ 125.801867][ T1973] Memory state around the buggy address: [ 125.807483][ T1973] ffff88811e552b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.815631][ T1973] ffff88811e552c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.823699][ T1973] >ffff88811e552c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.831783][ T1973] ^ [ 125.839497][ T1973] ffff88811e552d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.847640][ T1973] ffff88811e552d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.855690][ T1973] ================================================================== [ 125.863737][ T1973] Disabling lock debugging due to kernel taint [ 125.878656][ T3172] loop5: detected capacity change from 0 to 4096 [ 125.973518][ T3172] fs-verity: sha256 using implementation "sha256-avx2" [ 125.989782][ T28] audit: type=1400 audit(1753359545.243:4946): avc: denied { write } for pid=3174 comm="syz.2.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.276177][ T312] hid-steam 0003:28DE:1142.001D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 126.288613][ T312] hid-steam 0003:28DE:1142.001E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 126.363764][ T312] hid-steam 0003:28DE:1142.001D: Steam wireless receiver connected [ 126.828722][ T312] usb 4-1: USB disconnect, device number 14 [ 126.836159][ T312] hid-steam 0003:28DE:1142.001D: Steam wireless receiver disconnected