last executing test programs: 20m20.258095076s ago: executing program 3 (id=101): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x100, 0x0, 0x13, "7a58beca3900000000000000000000000200"}) 20m19.676599745s ago: executing program 3 (id=103): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000340)={0x1, 0x6, 0x3, 0x5, 0x7, 0x7, 0x8, 0x1}, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x3]}, 0x8}) 20m17.782770485s ago: executing program 3 (id=111): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r4, @ANYBLOB="080008100002000008000200ffffffff0800090006"], 0x48}}, 0x0) 20m16.761586451s ago: executing program 3 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(r0, 0xf, &(0x7f0000000140)={0xfffffffffffffffe, 0x81}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") chdir(&(0x7f0000000480)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 20m15.328338123s ago: executing program 3 (id=117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d00000100008000000000020002000000140003007866f26d3000"/55], 0x50}}, 0x8000080) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) 20m14.380626888s ago: executing program 3 (id=121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 20m14.012386183s ago: executing program 32 (id=121): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 3m39.929249269s ago: executing program 5 (id=4196): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB='errors=continue,namecase=1,iocharset=none,errors=continue,fmask=00000000000000000000011,iocharset=cp950,gid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000127435,gid=', @ANYRES64, @ANYBLOB=',\x00'], 0x5, 0x1510, &(0x7f0000000240)="$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") mknodat(0xffffffffffffff9c, 0x0, 0xc000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4010) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, 0x0, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010102, 0xffffffff, 0xff000000, 'bond_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x25, 0x2, 0x59}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0xd, [0x30, 0x18, 0x16, 0x3d, 0x33, 0x12, 0x35, 0x1, 0x24, 0x2f, 0x1d, 0x1, 0x20, 0x3b, 0x22, 0x31], 0x2, 0x5, 0x9}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 3m36.576273362s ago: executing program 5 (id=4204): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000580)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES32], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 3m35.941038542s ago: executing program 5 (id=4209): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 3m32.163845451s ago: executing program 5 (id=4219): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) 3m31.323273794s ago: executing program 5 (id=4226): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x18, 0x80000}}], 0x1, 0x80) ftruncate(0xffffffffffffffff, 0x5) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) clock_adjtime(0x3, &(0x7f0000000a40)={0xfffffffffffffffa, 0x4, 0x8d52, 0x4f, 0x7dc9, 0x8, 0x7, 0x3, 0x7, 0xd, 0x7f, 0x9, 0x10, 0x7, 0x10000, 0x8000000000000000, 0x1, 0x10, 0x3, 0x3, 0x95, 0x6, 0x10000, 0x1, 0x8, 0x81}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 3m31.002938239s ago: executing program 5 (id=4229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m30.914109701s ago: executing program 33 (id=4229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 16.734135437s ago: executing program 4 (id=4919): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15.961665869s ago: executing program 4 (id=4923): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000380)='uid_map\x00') mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000280)) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 9.705474677s ago: executing program 1 (id=4938): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000100)={0xd4, 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.56000423s ago: executing program 1 (id=4939): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000082, &(0x7f00000003c0)={[{@rodir}, {@uni_xlateno}, {@rodir}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@numtail}, {@nonumtail}, {@shortname_win95}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@utf8}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@uni_xlate}]}, 0x27, 0x358, &(0x7f0000000480)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@grpid}, {@data_ordered}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x47a, &(0x7f0000000ac0)="$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") 9.147849026s ago: executing program 4 (id=4941): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f0000000a80)=[{&(0x7f0000000b80)='/', 0x1}], 0x1, 0xe7b, 0x2a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000400)={[{@fat=@uid}, {@utf8}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@shortname_mixed}]}, 0x3, 0x21f, &(0x7f0000000940)="$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") pipe2(0x0, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) write$selinux_access(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 7.451865823s ago: executing program 1 (id=4946): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x66, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) open(0x0, 0x141a42, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7.435052623s ago: executing program 4 (id=4947): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[], 0xfd, 0x2b9, &(0x7f0000000980)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x24000800) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000080)='0\x00', 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x81000) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000340)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.256637321s ago: executing program 6 (id=4949): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x180) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) 6.229889832s ago: executing program 2 (id=4950): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000ec0)={@local, @random="b557a0758659", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast1}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) 5.680787671s ago: executing program 1 (id=4953): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1}]) 5.294781827s ago: executing program 6 (id=4954): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2(0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x180) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) pwritev2(r6, &(0x7f0000001140)=[{&(0x7f0000000fc0)="ea", 0x1}], 0x1, 0x6, 0xde, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.257846117s ago: executing program 1 (id=4955): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000b10904000001020d0000052406000105240000010d240f0102000000000000000006241a0000000905810300020000000904010002020d00000904010102020d0000090582020002800005090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x80, 0xfffffffffffffff4, {0x100, 0x2, 0x100, 0x3, 0xffe, 0x3, 0x0, 0x2, 0x800, 0x6, 0xfe}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000011c0)={0x14, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 4.811928684s ago: executing program 0 (id=4956): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 4.809402374s ago: executing program 2 (id=4957): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x200048cc, &(0x7f0000000300)=ANY=[], 0x81, 0x151a, &(0x7f0000002a80)="$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") bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) capget(0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) 4.693071616s ago: executing program 0 (id=4958): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x18, 0x80000}}], 0x1, 0x80) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) clock_adjtime(0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="50000000100023ff00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 4.276076613s ago: executing program 6 (id=4959): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="8750a754ac0000003c0012800b000100697036746e6c00002c00028014000300fe"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 3.567197934s ago: executing program 4 (id=4960): sched_setscheduler(0x0, 0x3, &(0x7f0000001280)=0x18ffd02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) 3.094577321s ago: executing program 0 (id=4961): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r5, 0x0, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.769995206s ago: executing program 6 (id=4962): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x11d, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x10f, 0x800, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xfb, 0x0, @gue={{0x1, 0x0, 0x1, 0x3, 0x0, @void}, "925e7d86dadb13afca11f5ee71b7423d487b622a536fed34f975deedba3b6a4a44cce3b6c6c2414bcf74dbb9ca1c17418de3ce2e5db87126d31286093a50eb080a5bd6f9c84002000e132f599b4a952f39fb03ff97bd12d46d656345ff089e1fa1a76da5b65d499481eb3f597f5d5672990ed29a8590b6fc45a9a5a8a26ceba6775d95891e26d1abbbfed8f30ec858cfdc672d75a2390a15907f9cd11322395a1eb3a16e123a9ea342dfdd97882761d2f9fa2531e70d0cfda6828ca77f0656a1d884e064d932440f030c7a04c81e8d30b30b3e5b45800b855f5b358b0ee33db971b80bcaa5426a77676b8ff10d2257"}}}}}}, 0x0) 2.747298127s ago: executing program 2 (id=4963): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000"/245], 0x119) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}], 0x1) 2.691486298s ago: executing program 6 (id=4964): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000a80)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./bus\x00', 0x129841, 0x0) 2.596049779s ago: executing program 2 (id=4965): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1}]) 2.236190195s ago: executing program 2 (id=4966): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 1.648866084s ago: executing program 6 (id=4967): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x100000) 1.205078311s ago: executing program 2 (id=4968): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200"/31], 0x0, 0x4e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a5371a09bfd86a4d873560d2eb8cd523447b"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0x1a, 0x0, 0x0, @u64=0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x2406c089}, 0x20000000) 1.188830542s ago: executing program 0 (id=4969): mkdir(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) 1.151351612s ago: executing program 0 (id=4970): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000a80)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./bus\x00', 0x129841, 0x0) 75.213869ms ago: executing program 1 (id=4971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000041000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 67.659099ms ago: executing program 4 (id=4972): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x180) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 0 (id=4973): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=r0, @ANYBLOB="8750a754ac0000003c0012800b000100697036746e6c00002c00028014000300fe"], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) kernel console output (not intermixed with test programs): tamps until 2038-01-19 (0x7fffffff) [ 1247.662812][T14570] attempt to access beyond end of device [ 1247.662812][T14570] loop6: rw=2049, want=53384, limit=40427 [ 1247.684903][T14570] attempt to access beyond end of device [ 1247.684903][T14570] loop6: rw=0, want=53256, limit=40427 [ 1247.704338][T14515] attempt to access beyond end of device [ 1247.704338][T14515] loop6: rw=2049, want=45104, limit=40427 [ 1248.107805][ T568] Bluetooth: hci0: command 0x1009 tx timeout [ 1248.364914][T14596] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1248.850254][T14613] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 1249.074401][T14617] syz.0.4255[14617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1249.074492][T14617] syz.0.4255[14617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1251.586678][T14623] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1251.607236][T14623] EXT4-fs (loop2): external journal has bad superblock [ 1252.705218][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 1253.207071][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4265'. [ 1254.000290][T14658] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1254.010049][T14658] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.154213][T14666] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 1254.282315][T14668] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 1254.294221][T14668] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.647849][T14673] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1254.658353][T14673] EXT4-fs (loop0): external journal has bad superblock [ 1254.730216][ T568] Bluetooth: hci0: command 0x1003 tx timeout [ 1254.860211][T14641] Bluetooth: hci0: sending frame failed (-49) [ 1255.310470][ T1104] Bluetooth: hci1: command 0x1003 tx timeout [ 1255.317281][T14641] Bluetooth: hci1: sending frame failed (-49) [ 1255.865945][T14683] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 1256.336424][T14688] FAT-fs (loop4): bogus number of FAT sectors [ 1256.342737][T14688] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1256.902876][ T568] Bluetooth: hci0: command 0x1001 tx timeout [ 1256.909018][T14641] Bluetooth: hci0: sending frame failed (-49) [ 1257.357500][T14701] exfat: Deprecated parameter 'namecase' [ 1257.364265][ T568] Bluetooth: hci1: command 0x1001 tx timeout [ 1257.370962][T14641] Bluetooth: hci1: sending frame failed (-49) [ 1257.485292][T14701] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1257.552131][T14710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4279'. [ 1257.576956][T14707] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1257.587019][T14707] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.938565][T14713] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4281'. [ 1258.458276][T14719] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1258.468139][T14719] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1258.508193][T14719] tipc: Enabling of bearer rejected, already enabled [ 1258.726251][T14724] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1258.769611][T14724] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.310690][ T1105] Bluetooth: hci0: command 0x1009 tx timeout [ 1259.443970][ T568] Bluetooth: hci1: command 0x1009 tx timeout [ 1259.585319][T14729] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1259.636103][T14739] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0101) [ 1259.655812][T14739] FAT-fs (loop2): Filesystem has been set read-only [ 1259.819607][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1260.627254][T14750] overlayfs: failed to resolve './file1': -2 [ 1261.019076][T14754] overlayfs: failed to resolve './file1': -2 [ 1261.307246][T14758] tipc: Enabling of bearer rejected, already enabled [ 1261.443880][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4293'. [ 1261.459865][T14756] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4291'. [ 1263.712691][T14780] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value [ 1264.423452][T14783] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1265.202087][T14792] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1265.212759][T14792] EXT4-fs (loop6): external journal has bad superblock [ 1265.614910][T14800] overlayfs: failed to resolve './file1': -2 [ 1266.635481][T14803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4305'. [ 1266.677587][T14787] F2FS-fs (loop4): fault_injection options not supported [ 1266.700575][T14787] F2FS-fs (loop4): invalid crc value [ 1266.709283][T14787] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1266.805028][T14787] F2FS-fs (loop4): Start checkpoint disabled! [ 1266.816748][T14807] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1266.835356][T14807] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1267.140511][T14819] FAT-fs (loop0): bogus number of FAT sectors [ 1267.150842][T14819] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1267.321692][T14824] overlayfs: failed to resolve './file0': -2 [ 1267.649983][ T296] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1267.834659][T14832] overlayfs: failed to resolve './file0': -2 [ 1268.116807][T14835] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1268.126113][T14835] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.219966][ T296] usb 5-1: Using ep0 maxpacket: 8 [ 1268.295941][T14848] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1268.340300][ T296] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1268.348947][ T296] usb 5-1: config 179 has no interface number 0 [ 1268.356532][T14848] EXT4-fs error (device loop0): __ext4_iget:5008: inode #11: block 1: comm syz.0.4316: invalid block [ 1268.367812][ T296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1268.379567][ T296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1268.640049][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1268.871073][T14848] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.4316: couldn't read orphan inode 11 (err -117) [ 1268.894182][T14848] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,bsddf,nouid32,sysvgroups,nojournal_checksum,noauto_da_alloc,test_dummy_encryption,jqfmt=vfsv1,journal_dev=0x0000000000000008,acl,,errors=continue [ 1268.895193][ T296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 1269.020492][ T296] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 1269.044617][ T296] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1269.301550][ T296] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1269.310827][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.340059][T14823] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1269.524753][T14859] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4321'. [ 1270.550702][ T5] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input29 [ 1270.820300][T14823] udc-core: couldn't find an available UDC or it's busy [ 1270.831613][T14823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1270.870017][ T296] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1271.049540][ T5] usb 5-1: USB disconnect, device number 47 [ 1271.055562][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1271.055585][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1271.072861][ T5] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1271.240098][ T296] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.250499][ T296] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1271.310027][ T1105] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1271.340104][ T296] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1271.350353][ T296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1271.358641][ T296] usb 7-1: SerialNumber: syz [ 1271.662631][T14886] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1271.800510][ T1105] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1271.834340][T14886] exFAT-fs (loop2): hint_cluster is invalid (17) [ 1271.841146][ T296] usb 7-1: 0:2 : does not exist [ 1271.841181][ T296] usb 7-1: unit 5: unexpected type 0x03 [ 1271.841190][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1271.847943][ T296] usb 7-1: USB disconnect, device number 2 [ 1271.862035][ T1105] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1272.064811][T14895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4334'. [ 1272.090107][ T1105] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1272.099584][ T1105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.107787][ T1105] usb 1-1: Product: syz [ 1272.112061][ T1105] usb 1-1: Manufacturer: syz [ 1272.116723][ T1105] usb 1-1: SerialNumber: syz [ 1272.210062][ T20] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1272.365830][T14901] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1272.393195][T14901] EXT4-fs (loop6): 1 truncate cleaned up [ 1272.398994][T14901] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1272.480118][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1272.631359][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.643415][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.655936][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1272.666910][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.676781][ T20] usb 5-1: config 0 descriptor?? [ 1272.845739][T14913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14913 comm=syz.6.4340 [ 1272.858836][T14913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14913 comm=syz.6.4340 [ 1273.120230][T14915] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 1273.340120][ T1105] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1273.347874][ T1105] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1273.363103][ T1105] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1273.970901][ T1105] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1273.995465][ T1105] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1274.173870][T14920] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1274.183988][T14920] EXT4-fs (loop2): external journal has bad superblock [ 1274.770162][ T24] kauditd_printk_skb: 42 callbacks suppressed [ 1274.770177][ T24] audit: type=1400 audit(1753107205.578:1114): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1274.818560][ T24] audit: type=1400 audit(1753107205.578:1115): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1274.861564][ T24] audit: type=1400 audit(1753107205.578:1116): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=27969 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1274.890838][ T20] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 1274.901000][ T20] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 1274.909414][ T20] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 1274.919108][ T20] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 1274.927088][ T20] uclogic: probe of 0003:256C:006D.0019 failed with error -71 [ 1274.939286][T14882] EXT4-fs (loop0): Ignoring removed orlov option [ 1274.984344][ T20] usb 5-1: USB disconnect, device number 48 [ 1275.007692][T14882] EXT4-fs (loop0): 1 orphan inode deleted [ 1275.014877][T14882] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,orlov,acl,norecovery,nojournal_checksum,journal_dev=0x0000000000000005,,errors=continue [ 1275.046355][T14882] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.080283][ T24] audit: type=1400 audit(1753107205.578:1117): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=27969 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1275.104016][ T24] audit: type=1400 audit(1753107205.578:1118): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=27969 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1275.121061][ T296] usb 1-1: USB disconnect, device number 39 [ 1275.127932][ T24] audit: type=1400 audit(1753107205.648:1119): avc: denied { read } for pid=14933 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.142758][ T296] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 1275.768306][ T24] audit: type=1400 audit(1753107205.648:1120): avc: denied { open } for pid=14933 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.810896][ T24] audit: type=1400 audit(1753107205.648:1121): avc: denied { getattr } for pid=14933 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1275.845862][ T24] audit: type=1400 audit(1753107206.598:1122): avc: denied { write } for pid=14932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1276.524561][ T24] audit: type=1400 audit(1753107206.598:1123): avc: denied { add_name } for pid=14932 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1277.032309][T14963] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1277.145971][T14963] EXT4-fs (loop6): 1 truncate cleaned up [ 1277.152020][T14963] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1277.260681][T14963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1277.990048][ T20] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1278.099981][ T1104] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1278.550353][ T20] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 1278.570698][ T20] usb 3-1: config 0 has no interface number 0 [ 1278.750080][ T1104] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.750106][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=6b.bb [ 1278.761696][ T1104] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1278.771322][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.792951][ T20] usb 3-1: Product: syz [ 1278.797155][ T20] usb 3-1: Manufacturer: syz [ 1278.802426][ T20] usb 3-1: SerialNumber: syz [ 1278.812350][ T20] usb 3-1: config 0 descriptor?? [ 1278.965087][ T1104] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1278.974228][ T1104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.983464][ T1104] usb 2-1: Product: syz [ 1278.987816][ T1104] usb 2-1: Manufacturer: syz [ 1278.993584][ T1104] usb 2-1: SerialNumber: syz [ 1279.245422][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4363'. [ 1279.678568][T15021] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1279.702018][T15021] exFAT-fs (loop4): hint_cluster is invalid (17) [ 1280.604052][ T20] usb 3-1: USB disconnect, device number 32 [ 1280.670430][ T1104] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1280.677406][ T1104] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1280.685492][ T1104] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1280.730147][ T1104] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1280.742732][ T1104] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1281.395862][ T1104] usb 2-1: USB disconnect, device number 35 [ 1281.406905][ T1104] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 1282.083996][T15057] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1282.105067][T15057] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.243050][T15076] exfat: Deprecated parameter 'namecase' [ 1282.256418][T15076] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1283.844922][T15097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15097 comm=syz.1.4382 [ 1283.858074][T15097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15097 comm=syz.1.4382 [ 1284.203712][T15081] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1284.275032][T15100] FAT-fs (loop6): bogus number of FAT sectors [ 1284.281278][T15100] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1284.668534][T15120] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1284.678666][T15120] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.718507][T15120] tipc: Enabling of bearer rejected, already enabled [ 1286.080199][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 1286.080214][ T24] audit: type=1400 audit(1753107217.902:1129): avc: denied { setattr } for pid=15132 comm="syz.1.4393" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1287.131944][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4400'. [ 1289.591361][T15177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15177 comm=syz.1.4407 [ 1289.604536][T15177] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15177 comm=syz.1.4407 [ 1289.710112][ T25] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1289.911063][T15176] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1289.973445][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1290.070532][T15187] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value [ 1290.388775][T15204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4414'. [ 1290.493489][T15202] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1290.502515][T15202] EXT4-fs (loop6): external journal has bad superblock [ 1291.545716][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4421'. [ 1291.840149][ T790] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1291.869993][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1292.290068][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.301449][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.311842][ T25] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1292.321382][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.334480][ T25] usb 7-1: config 0 descriptor?? [ 1292.510137][ T790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.520349][ T790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.600125][ T790] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1292.609580][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1292.619279][ T790] usb 2-1: SerialNumber: syz [ 1292.920817][ T790] usb 2-1: 0:2 : does not exist [ 1292.925905][ T790] usb 2-1: unit 5: unexpected type 0x03 [ 1292.936072][ T790] usb 2-1: USB disconnect, device number 36 [ 1293.494177][T15259] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1293.570168][ T25] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #200: -71 [ 1293.608082][T15259] EXT4-fs (loop0): 1 truncate cleaned up [ 1293.613966][T15259] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1293.710519][T15259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1293.758528][ T25] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 1294.239991][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1294.317956][ T25] uclogic 0003:256C:006D.001A: failed probing pen v2 parameters: -71 [ 1294.326644][ T25] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 1294.334693][ T25] uclogic: probe of 0003:256C:006D.001A failed with error -71 [ 1294.343819][ T25] usb 7-1: USB disconnect, device number 3 [ 1294.447507][T15263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4435'. [ 1294.724513][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1295.051472][T15284] tipc: Started in network mode [ 1295.058245][T15284] tipc: Own node identity ac14140f, cluster identity 4711 [ 1295.068668][T15284] tipc: New replicast peer: 255.255.255.255 [ 1295.077966][T15284] tipc: Enabled bearer , priority 10 [ 1296.198394][ T25] tipc: 32-bit node address hash set to f1414ac [ 1296.442055][T15307] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1298.070048][T15311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4451'. [ 1298.860071][ T5] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1298.966136][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4449'. [ 1299.424563][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 1299.434586][T15327] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1299.522354][T15327] EXT4-fs (loop2): 1 truncate cleaned up [ 1299.528143][T15327] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1299.620392][T15327] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1299.636621][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4455'. [ 1301.096239][T15347] FAT-fs (loop0): bogus number of FAT sectors [ 1301.104208][T15350] fuse: Bad value for 'fd' [ 1301.108955][T15347] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1301.162188][ T790] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1301.190268][ T5] usb 5-1: device descriptor read/all, error -71 [ 1301.472493][T15354] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0101) [ 1301.481941][T15354] FAT-fs (loop2): Filesystem has been set read-only [ 1301.820093][ T790] usb 2-1: unable to read config index 0 descriptor/all [ 1301.840432][ T790] usb 2-1: can't read configurations, error -71 [ 1303.443933][T15369] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1303.454733][T15369] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.778385][T15369] tipc: Enabling of bearer rejected, already enabled [ 1304.494083][T15376] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1304.799021][T15385] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1305.606473][T15394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1305.643657][T15394] EXT4-fs (loop0): 1 truncate cleaned up [ 1305.650102][T15394] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1305.760431][T15394] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1306.870002][ T790] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1307.044562][T15413] overlayfs: failed to resolve './file1': -2 [ 1307.078372][ T24] audit: type=1400 audit(1753107239.906:1130): avc: denied { remount } for pid=15405 comm="syz.0.4481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1307.122419][T15404] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value [ 1307.316239][T15404] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1307.325224][T15404] EXT4-fs (loop6): external journal has bad superblock [ 1307.340031][ T5] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1307.430034][ T790] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.441027][ T790] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1307.485551][T15420] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1307.494989][T15420] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1307.530175][ T790] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1307.540258][ T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1307.548686][ T790] usb 5-1: SerialNumber: syz [ 1307.730139][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.750419][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.762312][ T5] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1307.801031][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.811579][ T5] usb 3-1: config 0 descriptor?? [ 1307.818248][T15424] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1307.830683][T15424] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1307.830936][ T790] usb 5-1: skipping empty audio interface (v1) [ 1307.928457][T15424] F2FS-fs (loop6): invalid crc value [ 1308.158726][T15424] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1308.235378][T15439] 9pnet: Insufficient options for proto=fd [ 1308.281999][T15439] 9pnet: Insufficient options for proto=fd [ 1308.497912][T15424] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1308.950026][T15424] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1309.023734][T15424] attempt to access beyond end of device [ 1309.023734][T15424] loop6: rw=2049, want=53384, limit=40427 [ 1309.040138][T15424] attempt to access beyond end of device [ 1309.040138][T15424] loop6: rw=0, want=53256, limit=40427 [ 1309.065678][T14515] attempt to access beyond end of device [ 1309.065678][T14515] loop6: rw=2049, want=45104, limit=40427 [ 1309.085444][ T790] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1309.095957][ T790] usb 5-1: USB disconnect, device number 51 [ 1309.921471][ T5] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71 [ 1310.121670][ T5] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 1310.129834][ T5] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71 [ 1310.138062][ T5] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 1310.145675][ T5] uclogic: probe of 0003:256C:006D.001B failed with error -71 [ 1310.155317][ T5] usb 3-1: USB disconnect, device number 34 [ 1310.349521][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.614596][T15467] overlayfs: failed to resolve './file1': -2 [ 1311.684706][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.692749][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.700787][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.740540][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.748134][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.756261][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.764950][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.772783][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.849959][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.857506][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.910023][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.917477][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.939959][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.947662][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.969985][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.977525][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.990423][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1311.997980][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.005580][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.013158][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.020790][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.028485][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.036616][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.044376][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.052154][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.059833][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.067273][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.074961][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.082576][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.090200][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.098030][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.105524][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.113140][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.120791][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.128381][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.135867][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.143410][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.151335][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.158853][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.166605][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.174565][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.182234][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.190090][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.197530][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.205424][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.213374][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.220873][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.228297][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.236200][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.244106][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.251548][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.259420][ T568] hid-generic 0008:0006:0007.001C: unknown main item tag 0x0 [ 1312.267802][ T568] hid-generic 0008:0006:0007.001C: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1312.398329][T15483] fido_id[15483]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1312.677798][T15493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15493 comm=syz.6.4504 [ 1312.755577][T15493] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15493 comm=syz.6.4504 [ 1312.783747][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4504'. [ 1312.921086][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4505'. [ 1313.179968][ T4553] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1313.350509][T15501] FAT-fs (loop0): bogus number of FAT sectors [ 1313.379657][T15501] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1313.499938][ T4553] usb 2-1: Using ep0 maxpacket: 8 [ 1314.217454][T15507] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0101) [ 1314.226429][T15507] FAT-fs (loop4): Filesystem has been set read-only [ 1314.295207][ T4553] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1314.312682][ T4553] usb 2-1: config 179 has no interface number 0 [ 1314.320075][ T4553] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1314.368324][ T4553] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1314.401722][ T4553] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 20, changing to 8 [ 1314.437499][ T4553] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 57696, setting to 1024 [ 1314.473290][ T4553] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1314.599732][ T4553] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1314.627016][ T4553] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.704507][T15497] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1315.631462][ T4553] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input31 [ 1315.821583][T15497] udc-core: couldn't find an available UDC or it's busy [ 1315.844570][T15497] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1316.109660][ T1105] usb 2-1: USB disconnect, device number 39 [ 1316.115716][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1316.115740][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1316.150408][ T1105] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1316.797727][T15538] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 1316.820076][T15538] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.384463][T15554] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0101) [ 1317.398344][T15554] FAT-fs (loop0): Filesystem has been set read-only [ 1317.559999][ T1105] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1318.000151][ T1105] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1318.008752][ T1105] usb 2-1: config 0 has no interface number 0 [ 1318.159787][T15567] overlayfs: failed to resolve './file0': -2 [ 1318.918322][ T1105] usb 2-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=6b.bb [ 1318.928682][ T1105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.937616][ T1105] usb 2-1: Product: syz [ 1318.942129][ T1105] usb 2-1: Manufacturer: syz [ 1318.946849][ T1105] usb 2-1: SerialNumber: syz [ 1318.952584][ T1105] usb 2-1: config 0 descriptor?? [ 1319.070416][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4526'. [ 1320.365883][ T568] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1321.136869][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1321.621270][ T1105] usb 2-1: USB disconnect, device number 40 [ 1322.010937][ T568] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.078139][T15600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1322.885246][ T568] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1323.097440][ T568] usb 1-1: string descriptor 0 read error: -71 [ 1323.103797][ T568] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1323.113963][ T568] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.845638][ T568] usb 1-1: can't set config #1, error -71 [ 1323.856254][ T568] usb 1-1: USB disconnect, device number 40 [ 1324.871951][T15636] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1325.024858][T15636] EXT4-fs (loop4): 1 truncate cleaned up [ 1325.031205][T15636] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1325.100904][T15636] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1325.108962][T15636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4541'. [ 1325.990646][T15634] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1326.015098][T15634] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1326.031707][T15634] F2FS-fs (loop0): invalid crc value [ 1326.047177][T15634] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1326.116865][T15634] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1326.124395][T15634] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1326.132273][ T296] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1326.182668][T15634] attempt to access beyond end of device [ 1326.182668][T15634] loop0: rw=2049, want=53384, limit=40427 [ 1326.196634][T15634] attempt to access beyond end of device [ 1326.196634][T15634] loop0: rw=0, want=53256, limit=40427 [ 1326.219386][T10056] attempt to access beyond end of device [ 1326.219386][T10056] loop0: rw=2049, want=45104, limit=40427 [ 1326.306449][T15656] 9pnet: Insufficient options for proto=fd [ 1327.400056][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1328.051186][ T296] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 1328.059726][ T296] usb 7-1: config 0 has no interface number 0 [ 1328.373765][T15686] overlayfs: failed to resolve './file1': -2 [ 1328.568632][ T296] usb 7-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=6b.bb [ 1328.635928][ T296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.751715][ T296] usb 7-1: Product: syz [ 1328.789454][ T296] usb 7-1: Manufacturer: syz [ 1328.806882][T15684] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1328.816650][T15684] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.861140][T15684] tipc: Enabled bearer , priority 10 [ 1328.942917][ T296] usb 7-1: SerialNumber: syz [ 1329.346028][ T296] usb 7-1: config 0 descriptor?? [ 1329.693571][ T296] usb 7-1: can't set config #0, error -71 [ 1329.706551][ T296] usb 7-1: USB disconnect, device number 4 [ 1329.765361][T15695] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 1329.810648][T15692] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 1329.822025][T15692] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 1329.832164][T15692] F2FS-fs (loop6): invalid crc value [ 1329.839807][T15692] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1329.883106][T15692] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 1329.890444][T15692] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1329.968587][T15692] attempt to access beyond end of device [ 1329.968587][T15692] loop6: rw=2049, want=53384, limit=40427 [ 1329.982244][T15692] attempt to access beyond end of device [ 1329.982244][T15692] loop6: rw=0, want=53256, limit=40427 [ 1329.999087][T15709] 9pnet: Insufficient options for proto=fd [ 1330.587037][T14515] attempt to access beyond end of device [ 1330.587037][T14515] loop6: rw=2049, want=45104, limit=40427 [ 1330.945158][T15717] tipc: Enabling of bearer rejected, already enabled [ 1331.394921][T15716] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1331.405016][T15716] EXT4-fs (loop0): external journal has bad superblock [ 1333.201305][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4565'. [ 1334.345003][ T568] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1335.110342][ T568] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.204680][ T568] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1335.214102][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1335.214279][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1335.323236][T15752] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1335.343917][T15752] EXT4-fs (loop0): external journal has bad superblock [ 1335.350131][ T568] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1335.360884][ T568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1335.369267][ T568] usb 5-1: SerialNumber: syz [ 1336.162121][ T568] usb 5-1: 0:2 : does not exist [ 1336.181256][ T568] usb 5-1: unit 5: unexpected type 0x03 [ 1336.192319][ T568] usb 5-1: USB disconnect, device number 52 [ 1336.262871][T15765] EXT4-fs (loop6): Ignoring removed bh option [ 1336.331857][T15765] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1336.376083][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.384187][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.392151][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.399797][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.408498][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.416601][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.424294][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.432585][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.516103][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.524164][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.532120][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.540105][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1336.547705][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1337.830007][T15777] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4579'. [ 1338.099233][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.106914][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.114775][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.122940][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.146688][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.157348][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.165752][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.173574][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.181639][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.189258][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.197260][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.235338][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.243149][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.251050][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.258885][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.267469][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.268717][T15785] tipc: Enabling of bearer rejected, already enabled [ 1338.275645][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.291106][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.302540][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.310784][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.318421][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.326921][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.335040][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.343347][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.351435][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.363703][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.371674][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.379257][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.387076][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.398300][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.406539][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.414861][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.422788][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.430520][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.438574][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.446415][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.458551][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.466441][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.474111][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.482200][ T5] hid-generic 0008:0006:0007.001D: unknown main item tag 0x0 [ 1338.498934][ T5] hid-generic 0008:0006:0007.001D: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1338.593942][T15792] fido_id[15792]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1338.624353][ T24] audit: type=1326 audit(1753107272.457:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fb77029a9 code=0x7ffc0000 [ 1338.653474][ T24] audit: type=1326 audit(1753107272.487:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2fb77029a9 code=0x7ffc0000 [ 1338.687504][ T24] audit: type=1326 audit(1753107272.487:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2fb77029e3 code=0x7ffc0000 [ 1338.713875][ T24] audit: type=1326 audit(1753107272.487:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2fb770145f code=0x7ffc0000 [ 1338.739365][ T24] audit: type=1326 audit(1753107272.487:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2fb7702a37 code=0x7ffc0000 [ 1338.763601][ T24] audit: type=1326 audit(1753107272.487:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2fb7701310 code=0x7ffc0000 [ 1338.787829][ T24] audit: type=1326 audit(1753107272.487:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fb77025ab code=0x7ffc0000 [ 1338.945536][T15795] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1339.088632][ T24] audit: type=1326 audit(1753107272.487:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2fb770160a code=0x7ffc0000 [ 1339.115889][ T24] audit: type=1326 audit(1753107272.487:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2fb770160a code=0x7ffc0000 [ 1339.147418][ T24] audit: type=1326 audit(1753107272.577:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15794 comm="syz.6.4584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2fb7701217 code=0x7ffc0000 [ 1341.520002][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4591'. [ 1343.564151][T15827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1343.607789][T15827] EXT4-fs (loop0): 1 truncate cleaned up [ 1343.613729][T15827] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1344.081938][T15821] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1344.100048][T15821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4590'. [ 1344.118743][T15829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1344.502603][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.510429][T15829] EXT4-fs (loop4): 1 truncate cleaned up [ 1344.510448][T15829] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1344.575371][T15828] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1344.577040][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.589888][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.597964][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4594'. [ 1344.607924][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.615744][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.628200][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.636659][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.644919][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.652948][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.661529][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1344.702430][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.357178][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.423798][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.433158][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.443014][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.450988][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.458827][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.467226][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.475151][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.483339][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.491084][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.498998][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.506593][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.514481][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.530100][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.549264][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.560311][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.569672][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.609564][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.618717][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.629404][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.642460][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.719053][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.734285][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.748185][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.763755][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.775489][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.789554][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.790558][T15849] exfat: Deprecated parameter 'namecase' [ 1345.806999][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.831188][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.843564][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.854515][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.867348][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.879896][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.889157][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.899076][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.907455][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.915382][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.923406][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.931314][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.939339][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.948050][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.957011][ T4727] hid-generic 0008:0006:0007.001E: unknown main item tag 0x0 [ 1345.968715][T15849] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1345.982587][ T4727] hid-generic 0008:0006:0007.001E: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1346.306013][T15857] fido_id[15857]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1346.331179][T15854] EXT4-fs (loop4): Ignoring removed bh option [ 1346.353339][T15854] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1346.440149][ T20] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1347.411544][T15874] overlayfs: missing 'workdir' [ 1347.869977][ T20] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.893463][ T20] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1347.948680][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4604'. [ 1348.170726][ T20] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1348.657054][ T20] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.675549][ T20] usb 7-1: Product: syz [ 1348.706528][ T20] usb 7-1: Manufacturer: syz [ 1348.800737][ T20] usb 7-1: SerialNumber: syz [ 1348.814572][T15882] 9pnet: Insufficient options for proto=fd [ 1349.150582][ T20] usb 7-1: 0:2 : does not exist [ 1349.347460][ T20] usb 7-1: USB disconnect, device number 5 [ 1349.500340][T15887] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 1350.207458][T15890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1350.260323][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1350.315234][T15890] EXT4-fs (loop2): 1 truncate cleaned up [ 1350.321058][T15890] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1350.526509][T15890] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1350.549396][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4607'. [ 1351.217928][T15894] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 1351.240947][T15887] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1351.301552][T15887] EXT4-fs (loop4): external journal has bad superblock [ 1351.743632][T15909] overlayfs: missing 'lowerdir' [ 1351.886280][T15910] 9pnet: Insufficient options for proto=fd [ 1352.661464][T15911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4613'. [ 1352.734581][T15918] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1352.743551][T15918] EXT4-fs (loop0): external journal has bad superblock [ 1352.789265][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4618'. [ 1352.820459][ T7979] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1352.884512][T15924] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1352.893876][T15924] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.924243][T15924] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 1352.942875][T15924] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 1353.923984][ T7979] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1353.965001][ T7979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1354.100726][ T7979] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1354.114965][ T7979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1354.124717][ T7979] usb 5-1: SerialNumber: syz [ 1354.786161][T15949] 9pnet: Insufficient options for proto=fd [ 1355.601670][ T7979] usb 5-1: 0:2 : does not exist [ 1355.650451][T15957] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0101) [ 1355.668050][ T7979] usb 5-1: USB disconnect, device number 53 [ 1355.678821][T15957] FAT-fs (loop6): Filesystem has been set read-only [ 1355.900870][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1355.925844][T15966] EXT4-fs (loop0): Ignoring removed bh option [ 1356.002007][T15966] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1358.282843][T15989] EXT4-fs (loop0): Ignoring removed bh option [ 1358.404057][T15989] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1359.756245][T16014] overlayfs: failed to resolve './file1': -2 [ 1359.888200][T16020] EXT4-fs (loop4): Ignoring removed bh option [ 1359.902616][T16020] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1359.927484][T16026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16026 comm=syz.1.4645 [ 1359.984775][T16027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4642'. [ 1360.000664][T16026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16026 comm=syz.1.4645 [ 1360.080979][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4645'. [ 1360.549088][T16023] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1360.616219][T16023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1360.828175][T16023] F2FS-fs (loop2): invalid crc value [ 1360.864221][T16043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4650'. [ 1360.876695][T16023] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1361.257341][T16023] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1361.264670][T16023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1361.353889][T16023] attempt to access beyond end of device [ 1361.353889][T16023] loop2: rw=2049, want=53384, limit=40427 [ 1361.367693][T16023] attempt to access beyond end of device [ 1361.367693][T16023] loop2: rw=0, want=53256, limit=40427 [ 1361.390707][T10554] attempt to access beyond end of device [ 1361.390707][T10554] loop2: rw=2049, want=45104, limit=40427 [ 1361.540066][ T5] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1361.650151][ T20] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1362.089969][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.101358][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1362.259974][ T5] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.270384][ T5] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1362.280094][ T20] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1362.290032][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.298088][ T20] usb 5-1: Product: syz [ 1362.302611][ T20] usb 5-1: Manufacturer: syz [ 1362.307359][ T20] usb 5-1: SerialNumber: syz [ 1362.360052][ T5] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1362.369396][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1362.377913][ T5] usb 2-1: SerialNumber: syz [ 1362.530035][ T1137] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1362.663054][T16066] overlayfs: failed to resolve './file0': -2 [ 1362.890048][ T20] usb 5-1: 0:2 : does not exist [ 1362.929974][ T1137] usb 7-1: Using ep0 maxpacket: 16 [ 1362.936462][ T5] usb 2-1: 0:2 : does not exist [ 1362.937231][ T20] usb 5-1: USB disconnect, device number 54 [ 1362.945529][ T5] usb 2-1: unit 5: unexpected type 0x03 [ 1362.954935][ T5] usb 2-1: USB disconnect, device number 41 [ 1363.060010][ T1137] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.071346][ T1137] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1363.082002][ T1137] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1363.091735][ T1137] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1363.160464][ T6160] udevd[6160]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1363.180475][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1363.190133][ T1137] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1363.206618][ T1137] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1363.214689][ T1137] usb 7-1: SerialNumber: syz [ 1363.240039][T16062] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1363.247184][T16062] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1363.270395][ T1137] hub 7-1:1.0: bad descriptor, ignoring hub [ 1363.276922][ T1137] hub: probe of 7-1:1.0 failed with error -5 [ 1363.368123][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.434575][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.442510][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.443348][T16073] FAT-fs (loop4): bogus number of FAT sectors [ 1363.450692][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.457017][T16073] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1363.464863][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.489206][T16062] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1363.498557][T16062] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1363.784107][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.794018][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.890700][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.899190][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.910927][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.919291][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1363.974927][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.048754][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.088905][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.134072][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.172486][ T1137] cdc_ether: probe of 7-1:1.0 failed with error -71 [ 1364.461369][ T1137] usb 7-1: USB disconnect, device number 6 [ 1364.470189][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.479111][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.487447][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.495244][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.503275][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.882143][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.890262][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.898400][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.906853][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.915641][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.924158][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.933685][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.955540][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.975953][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1364.993763][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.009325][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.087399][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.095686][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.103483][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.112140][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.126536][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.149991][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.158659][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.166912][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.174725][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.182859][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.378673][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.387831][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.400676][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.409110][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.417226][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.440610][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.452058][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.515271][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.523150][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.562242][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.569839][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.577938][ T20] hid-generic 0008:0006:0007.001F: unknown main item tag 0x0 [ 1365.589513][ T20] hid-generic 0008:0006:0007.001F: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1365.694776][T16096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4664'. [ 1366.734229][T16095] fido_id[16095]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1367.179683][T16106] overlayfs: failed to resolve './file1': -2 [ 1367.584549][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4666'. [ 1367.689388][T16118] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,usrquota,,errors=continue [ 1367.705215][T16118] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.879332][T16164] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 1370.943206][T16169] device gretap0 entered promiscuous mode [ 1370.958960][T16169] device vlan2 entered promiscuous mode [ 1372.501095][T16173] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1372.510399][T16173] EXT4-fs (loop2): external journal has bad superblock [ 1372.517048][T16172] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 1373.493292][T16185] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1373.502712][T16185] EXT4-fs (loop0): external journal has bad superblock [ 1374.169347][ T790] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1374.790000][ T790] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.819923][ T790] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1375.000132][ T790] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1375.021128][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.046504][ T790] usb 5-1: Product: syz [ 1375.056639][ T790] usb 5-1: Manufacturer: syz [ 1375.066846][ T790] usb 5-1: SerialNumber: syz [ 1375.635124][T16213] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 1375.655212][T16213] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1375.668511][ T790] usb 5-1: 0:2 : does not exist [ 1375.705417][T16213] F2FS-fs (loop2): invalid crc value [ 1375.726622][ T790] usb 5-1: USB disconnect, device number 55 [ 1375.764939][T16213] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1375.840825][T16230] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 1375.886529][T16213] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1375.903527][T16213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1375.936907][T16213] attempt to access beyond end of device [ 1375.936907][T16213] loop2: rw=2049, want=53384, limit=40427 [ 1375.974200][T16213] attempt to access beyond end of device [ 1375.974200][T16213] loop2: rw=0, want=53256, limit=40427 [ 1376.011202][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1376.061075][T10554] attempt to access beyond end of device [ 1376.061075][T10554] loop2: rw=2049, want=45104, limit=40427 [ 1376.183178][ T1204] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1376.436557][T16245] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1376.466708][T16245] EXT4-fs (loop4): external journal has bad superblock [ 1376.630171][ T1204] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 1376.638791][ T1204] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1376.647976][ T1204] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.665703][ T1204] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1376.675145][ T1204] usb 1-1: config 0 has no interface number 0 [ 1376.681709][ T1204] usb 1-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1376.695456][ T1204] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1376.704936][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.726828][ T1204] usb 1-1: config 0 descriptor?? [ 1376.803657][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4710'. [ 1376.952880][ T1204] usb 1-1: MIDIStreaming interface descriptor not found [ 1377.037533][T16252] device gretap0 entered promiscuous mode [ 1377.116189][T16252] device vlan2 entered promiscuous mode [ 1377.177174][ T1204] usb 1-1: USB disconnect, device number 41 [ 1377.256468][T16256] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0101) [ 1377.275364][T16256] FAT-fs (loop6): Filesystem has been set read-only [ 1378.220052][ T790] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1379.040071][ T790] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 1379.051908][ T790] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1379.091972][ T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.111916][ T790] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1379.126492][ T790] usb 1-1: config 0 has no interface number 0 [ 1379.133258][ T790] usb 1-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.146942][ T790] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1379.173248][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.225668][ T790] usb 1-1: config 0 descriptor?? [ 1379.270912][ T790] usb 1-1: MIDIStreaming interface descriptor not found [ 1379.716365][T16281] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value [ 1380.325651][ T1105] usb 1-1: USB disconnect, device number 42 [ 1380.527561][T16290] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1380.668485][T16290] EXT4-fs (loop6): external journal has bad superblock [ 1380.943821][T16301] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 1380.987110][T16306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4724'. [ 1381.130147][ T4553] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1382.004770][T16312] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1382.014573][T16312] EXT4-fs (loop2): external journal has bad superblock [ 1382.023714][ T4553] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.211396][ T4553] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1382.570446][ T4553] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1382.617215][ T4553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.708508][ T4553] usb 5-1: Product: syz [ 1382.723244][ T4553] usb 5-1: Manufacturer: syz [ 1382.739913][ T4553] usb 5-1: SerialNumber: syz [ 1384.595813][T16330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1384.656117][T16330] EXT4-fs (loop2): 1 truncate cleaned up [ 1384.662012][T16330] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1384.779947][T16330] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1384.799511][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4732'. [ 1384.830322][ T4553] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1384.869129][ T4553] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1385.321670][ T4553] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1385.360058][ T4553] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 1385.381297][ T4553] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 1385.728021][ T4553] usb 5-1: USB disconnect, device number 56 [ 1385.880719][ T4553] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 1385.993603][T16343] exfat: Deprecated parameter 'namecase' [ 1386.022599][T16343] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1387.535485][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4741'. [ 1388.698246][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 1388.698264][ T24] audit: type=1400 audit(1753107325.523:1178): avc: denied { ioctl } for pid=16401 comm="syz.6.4745" path="socket:[64932]" dev="sockfs" ino=64932 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1388.744608][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.752872][ T568] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1388.780680][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.789456][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.798069][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.807734][ T24] audit: type=1400 audit(1753107325.643:1179): avc: denied { write } for pid=16401 comm="syz.6.4745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1388.829558][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.845603][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.855427][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.866416][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.875041][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.886227][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1388.895576][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.510114][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.517992][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.526707][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.534429][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.542235][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.550292][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.680516][ T1137] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1389.880639][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.888335][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.895969][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.903596][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.911377][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.919160][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.927066][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.934798][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.942359][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.950048][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.957632][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.965498][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.973436][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.981340][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.989200][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1389.996772][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.004656][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.013474][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.021646][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.029984][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.038546][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.046326][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.054019][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.061994][ T568] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.062104][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.072513][ T568] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.080295][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.097709][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.105414][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.113316][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.121367][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.129155][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.136911][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.145003][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.152656][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.160341][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.167768][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.170176][ T568] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1390.175562][ T2299] hid-generic 0008:0006:0007.0020: unknown main item tag 0x0 [ 1390.185712][ T568] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1390.193597][ T2299] hid-generic 0008:0006:0007.0020: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1390.201467][ T568] usb 1-1: SerialNumber: syz [ 1390.222097][ T1137] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.244466][ T1137] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.253964][ T1137] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 1390.269714][ T1137] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1390.284615][T16408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4746'. [ 1390.348636][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4748'. [ 1390.360195][ T1137] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1390.370392][ T1137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1390.379054][ T1137] usb 3-1: SerialNumber: syz [ 1390.767789][ T568] usb 1-1: 0:2 : does not exist [ 1390.788741][ T568] usb 1-1: USB disconnect, device number 43 [ 1390.795997][ T1137] usb 3-1: 0:2 : does not exist [ 1390.805933][ T1137] usb 3-1: unit 5 not found! [ 1390.830817][ T1137] usb 3-1: USB disconnect, device number 35 [ 1390.863026][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.871172][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.879254][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.942336][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.950164][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.958681][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.966712][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.974587][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.983222][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.991119][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1390.998926][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.006988][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.014890][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.022501][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.032485][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.042143][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.052664][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.062745][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.361150][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.369034][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.484706][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.492888][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.502166][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.510424][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.518228][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.527028][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.535938][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.544520][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.567795][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.655701][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.686832][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.781571][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1391.836267][T16439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1391.907119][T16439] EXT4-fs (loop0): 1 truncate cleaned up [ 1391.913520][T16439] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1392.085806][T16439] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1392.109637][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 1392.133861][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.172092][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.665795][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.726414][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.734465][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.742714][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.750528][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.758901][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.766647][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.881061][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.888542][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.917069][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.927173][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.945261][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.963012][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.979917][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.990112][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1392.997557][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1393.039984][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1393.057697][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1393.067805][ T1204] hid-generic 0008:0006:0007.0021: unknown main item tag 0x0 [ 1393.086461][ T1204] hid-generic 0008:0006:0007.0021: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1394.747277][T16451] fido_id[16451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1394.921569][ T1204] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1395.347297][T16467] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1395.716101][T16467] EXT4-fs (loop6): 1 truncate cleaned up [ 1395.722295][T16467] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1396.112238][T16466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1396.120562][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4762'. [ 1396.630065][ T1204] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.641691][ T1204] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1396.780125][ T1204] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1396.791020][ T1204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1396.800276][ T1204] usb 1-1: SerialNumber: syz [ 1397.210789][ T1204] usb 1-1: 0:2 : does not exist [ 1397.216120][ T1204] usb 1-1: unit 5: unexpected type 0x03 [ 1397.303083][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4769'. [ 1397.303092][T16488] FAT-fs (loop0): bogus number of FAT sectors [ 1397.303111][T16488] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1397.324525][ T1204] usb 1-1: USB disconnect, device number 44 [ 1397.517913][ T2299] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1397.561097][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1397.640529][T16505] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value [ 1397.690212][ T790] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1397.914933][ T2299] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 1397.923552][ T2299] usb 5-1: config 0 has no interface number 0 [ 1398.183578][T16510] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1398.193157][T16510] EXT4-fs (loop6): external journal has bad superblock [ 1399.310302][ T296] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1399.360106][ T2299] usb 5-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=6b.bb [ 1399.369307][ T2299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.377931][ T790] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.389151][ T790] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1399.402528][ T2299] usb 5-1: Product: syz [ 1399.406860][ T2299] usb 5-1: Manufacturer: syz [ 1399.412108][ T2299] usb 5-1: SerialNumber: syz [ 1399.434055][ T2299] usb 5-1: config 0 descriptor?? [ 1399.579973][ T296] usb 1-1: Using ep0 maxpacket: 32 [ 1399.601404][T16517] FAT-fs (loop6): bogus number of FAT sectors [ 1399.610107][ T790] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1399.626219][T16517] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1399.643303][ T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.652328][ T790] usb 3-1: Product: syz [ 1399.656802][ T790] usb 3-1: Manufacturer: syz [ 1399.662235][ T790] usb 3-1: SerialNumber: syz [ 1399.700053][ T296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.870046][ T296] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1400.210527][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.218992][ T296] usb 1-1: Product: syz [ 1400.223412][ T296] usb 1-1: Manufacturer: syz [ 1400.228273][ T296] usb 1-1: SerialNumber: syz [ 1400.240911][ T296] usb 1-1: config 0 descriptor?? [ 1400.280548][ T296] usb 1-1: bad CDC descriptors [ 1400.285615][ T296] usb 1-1: unsupported MDLM descriptors [ 1400.335363][T16525] tipc: Enabling of bearer rejected, already enabled [ 1400.381309][T16527] FAT-fs (loop6): Unrecognized mount option "nnonumtail=1" or missing value [ 1400.487049][ T2298] usb 1-1: USB disconnect, device number 45 [ 1400.651450][T16532] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1400.660732][T16532] EXT4-fs (loop6): external journal has bad superblock [ 1400.739501][T16535] fuse: Bad value for 'fd' [ 1400.990144][ T790] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1400.996988][ T790] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1401.000826][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4784'. [ 1401.014010][ T790] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1401.823155][T10718] usb 5-1: USB disconnect, device number 57 [ 1402.121390][T16543] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1402.309930][ T790] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1402.322834][ T790] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 1402.335886][ T790] usb 3-1: USB disconnect, device number 36 [ 1403.018720][ T790] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 1403.101678][T16559] FAT-fs (loop4): bogus number of FAT sectors [ 1403.117628][T16556] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1403.128235][T16559] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1403.147657][T16556] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.517687][T16566] tipc: Enabling of bearer rejected, already enabled [ 1403.650125][T16569] fuse: Bad value for 'fd' [ 1404.374402][T16588] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4798'. [ 1405.333300][T16600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4802'. [ 1405.421652][T16606] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 1405.520496][ T1204] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1405.528520][ T1204] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1405.549982][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1405.753896][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 1406.032101][T16618] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1406.041719][T16618] EXT4-fs (loop4): external journal has bad superblock [ 1406.479957][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1406.487671][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1406.584164][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4810'. [ 1406.973762][T16632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1407.137440][T16632] EXT4-fs (loop2): 1 truncate cleaned up [ 1407.143261][T16632] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1407.180830][T16632] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1407.572981][T16636] device wg2 entered promiscuous mode [ 1407.760160][ T1137] Bluetooth: hci0: command 0x1003 tx timeout [ 1407.766521][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1408.217118][T16650] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4817'. [ 1408.291548][T16653] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue [ 1408.303198][T16653] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.458437][T16665] tipc: Enabling of bearer rejected, already enabled [ 1409.440198][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1409.535749][T16676] EXT4-fs (loop0): Ignoring removed bh option [ 1409.650979][T16676] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1410.088020][ T1204] Bluetooth: hci0: command 0x1001 tx timeout [ 1410.094932][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1410.110896][T16691] EXT4-fs (loop2): Ignoring removed bh option [ 1410.126657][T16691] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1410.761849][T16701] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue [ 1410.776120][T16701] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.104243][T16701] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 1411.112946][T16701] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #2: comm syz.4.4830: mark_inode_dirty error [ 1411.124962][T16701] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 1411.134359][T16701] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.4830: mark_inode_dirty error [ 1411.170038][ T2298] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1411.443427][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4833'. [ 1411.941561][T16715] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 1411.952482][T16715] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1412.036770][ T2298] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1412.178039][ T1204] Bluetooth: hci0: command 0x1009 tx timeout [ 1412.427575][ T2298] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1412.599991][ T2298] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1412.609554][ T2298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.613266][T16724] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 1412.658282][ T2298] usb 1-1: Product: syz [ 1412.663149][ T2298] usb 1-1: Manufacturer: syz [ 1412.668463][ T2298] usb 1-1: SerialNumber: syz [ 1412.890738][T16729] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1412.911456][T16729] EXT4-fs (loop4): external journal has bad superblock [ 1412.939982][ T5] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1413.299981][ T5] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.310260][ T5] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1413.410096][ T5] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1413.419459][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1413.439887][ T5] usb 3-1: SerialNumber: syz [ 1413.720762][ T5] usb 3-1: 0:2 : does not exist [ 1413.726658][ T5] usb 3-1: unit 5 not found! [ 1413.733818][ T5] usb 3-1: USB disconnect, device number 37 [ 1413.810034][ T2298] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1413.816990][ T2298] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1413.824610][ T2298] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1414.129445][T16740] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1414.150644][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4839'. [ 1415.109768][ T296] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1415.114726][T16742] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 1415.127026][ T6160] udevd[6160]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1415.127911][ T2298] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 1415.160425][ T2298] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1415.219942][ T2298] usb 1-1: USB disconnect, device number 46 [ 1415.243431][ T2298] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 1415.723508][T16747] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1415.774267][ T296] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.839755][T16747] EXT4-fs (loop2): external journal has bad superblock [ 1415.887287][ T296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1416.383190][T16766] EXT4-fs (loop6): Ignoring removed bh option [ 1416.536538][T16766] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1416.573861][T16768] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue [ 1416.661208][T16768] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1416.769933][ T296] usb 5-1: string descriptor 0 read error: -71 [ 1416.782047][ T296] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1416.793264][ T296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1416.829987][ T296] usb 5-1: can't set config #1, error -71 [ 1416.843886][ T296] usb 5-1: USB disconnect, device number 58 [ 1416.969324][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4846'. [ 1417.759945][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1418.107530][T16806] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4849'. [ 1419.094022][T16824] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 1419.293696][T16830] EXT4-fs (loop4): Ignoring removed bh option [ 1419.720213][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4859'. [ 1419.894602][T16830] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1421.120060][ T2298] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1421.345383][T16855] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1421.381662][T16855] EXT4-fs (loop0): external journal has bad superblock [ 1421.581477][ T2298] usb 3-1: Using ep0 maxpacket: 8 [ 1421.747548][ T2298] usb 3-1: config 179 has an invalid descriptor of length 137, skipping remainder of the config [ 1421.762724][ T2298] usb 3-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1421.847529][ T2298] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1421.858986][ T2298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.295214][ T4727] usb 3-1: USB disconnect, device number 38 [ 1423.400871][T16876] EXT4-fs (loop4): Ignoring removed bh option [ 1423.461602][T16876] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1425.185202][T16905] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 1425.314475][T16910] tipc: Enabling of bearer rejected, already enabled [ 1425.324787][T16908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1425.765098][T16911] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1425.780900][T16911] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1426.070230][T16911] tipc: Enabling of bearer rejected, already enabled [ 1426.634601][T16916] EXT4-fs (loop6): Ignoring removed bh option [ 1426.679763][T16916] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1426.923941][T16923] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1426.933338][T16923] EXT4-fs (loop0): external journal has bad superblock [ 1428.574981][T16940] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1428.635293][T16940] EXT4-fs (loop2): 1 truncate cleaned up [ 1428.641472][T16940] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1428.724682][T16940] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1428.739986][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4881'. [ 1430.117467][T16961] overlayfs: failed to resolve './file0': -2 [ 1430.656176][T16968] overlayfs: failed to resolve './file1': -2 [ 1430.914918][T16971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4892'. [ 1431.241890][T16974] EXT4-fs (loop6): Ignoring removed bh option [ 1431.261612][T16980] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4897'. [ 1431.299731][T16983] EXT4-fs (loop4): Ignoring removed bh option [ 1431.350856][T16983] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1431.451396][T16974] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1433.113028][T17007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4902'. [ 1433.274824][T17006] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4904'. [ 1433.310141][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1433.684356][T17020] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,usrquota,,errors=continue [ 1433.700876][T17020] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1433.791325][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4909'. [ 1434.266672][T17033] EXT4-fs (loop0): Ignoring removed bh option [ 1434.302076][T17033] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro, [ 1434.400028][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1435.335405][T17050] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4914'. [ 1435.836343][T17054] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1435.843904][T17054] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1435.851468][T17054] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 1435.859069][T17054] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 1436.313096][T17054] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue [ 1436.330399][T17054] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1436.720022][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1437.034147][T17039] F2FS-fs (loop2): fault_injection options not supported [ 1437.046973][T17039] F2FS-fs (loop2): invalid crc value [ 1437.056424][T17039] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1437.129231][T17039] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1437.182136][T10554] attempt to access beyond end of device [ 1437.182136][T10554] loop2: rw=2049, want=45104, limit=40427 [ 1437.449943][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1441.272158][T17115] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1441.291521][T17115] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.363357][T17118] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 1441.406126][ T24] audit: type=1400 audit(1753107379.241:1180): avc: denied { name_bind } for pid=17122 comm="syz.1.4932" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1441.449778][T17123] device bridge1 entered promiscuous mode [ 1442.174057][T17129] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 1442.183799][T17129] EXT4-fs (loop0): external journal has bad superblock [ 1444.242604][T17155] tipc: Enabling of bearer rejected, already enabled [ 1444.392521][T17159] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1444.430566][T17159] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1445.833915][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1445.939663][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1445.957906][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1445.975721][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1445.998173][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.035639][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.123428][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.234344][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.414463][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.422412][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.430585][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.438251][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.446213][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.454401][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.462187][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.477788][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.499940][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.507786][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.531081][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.559093][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.839996][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.849293][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.860753][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.868405][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.876114][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.884191][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.892140][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.900128][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.907994][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.916100][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.924077][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.931868][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.939396][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.947287][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.954955][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.963020][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.970677][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.978247][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.986260][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1446.994013][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.002177][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.010196][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.018004][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.025997][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.033942][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.042250][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.050172][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.058264][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.066261][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.074241][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.082188][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.089774][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.098139][ T25] hid-generic 0008:0006:0007.0022: unknown main item tag 0x0 [ 1447.122915][ T25] hid-generic 0008:0006:0007.0022: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1447.235585][T17201] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0101) [ 1447.257025][T17201] FAT-fs (loop4): Filesystem has been set read-only [ 1447.413696][T17205] fido_id[17205]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1448.062159][T17217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4950'. [ 1448.577556][ T24] audit: type=1326 audit(1753107386.411:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9c9819a9 code=0x7ffc0000 [ 1448.642870][ T24] audit: type=1326 audit(1753107386.451:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9c9819a9 code=0x7ffc0000 [ 1448.676328][ T24] audit: type=1326 audit(1753107386.451:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4d9c9819a9 code=0x7ffc0000 [ 1448.700487][ T24] audit: type=1326 audit(1753107386.451:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d9c9819e3 code=0x7ffc0000 [ 1448.725127][ T5] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1448.725190][ T24] audit: type=1326 audit(1753107386.461:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d9c98045f code=0x7ffc0000 [ 1448.771477][ T24] audit: type=1326 audit(1753107386.461:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4d9c981a37 code=0x7ffc0000 [ 1448.795696][ T24] audit: type=1326 audit(1753107386.461:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d9c980310 code=0x7ffc0000 [ 1448.820955][T17229] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 1448.837685][ T24] audit: type=1326 audit(1753107386.461:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d9c9815ab code=0x7ffc0000 [ 1448.868743][ T24] audit: type=1326 audit(1753107386.461:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d9c98060a code=0x7ffc0000 [ 1448.893785][ T24] audit: type=1326 audit(1753107386.461:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17228 comm="syz.2.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4d9c98060a code=0x7ffc0000 [ 1449.203376][T17234] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1449.353318][T17234] EXT4-fs (loop0): 1 truncate cleaned up [ 1449.359487][T17234] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota, [ 1449.404313][T17234] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1450.222037][T17241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1450.231421][T17241] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1450.389990][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.407068][ T5] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1450.626203][T17254] device bridge1 entered promiscuous mode [ 1450.640045][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1450.653694][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.681376][ T5] usb 2-1: Product: syz [ 1450.685696][ T5] usb 2-1: Manufacturer: syz [ 1450.700041][ T5] usb 2-1: SerialNumber: syz [ 1451.745220][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 1451.960004][ T5] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1451.967767][ T5] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1451.983760][ T5] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1452.170125][ T5] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 1452.192508][ T5] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 1452.250362][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.283984][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.293029][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.301634][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.310284][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.881697][T17279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4968'. [ 1452.898855][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.907257][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.910247][T10718] usb 2-1: USB disconnect, device number 42 [ 1452.922719][T10718] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 1452.928307][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1452.959927][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1453.258706][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.285020][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.306643][T17287] device gretap0 entered promiscuous mode [ 1453.312669][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.320827][T17287] device vlan2 entered promiscuous mode [ 1453.369044][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.377054][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.384915][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.392732][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.401166][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.410291][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.424107][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.432655][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.441280][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.449081][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.457073][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.464905][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.472416][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.479876][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.488023][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.496358][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.504074][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.511891][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.520262][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.528049][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.535970][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.544178][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.552526][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.560505][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.568348][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.576276][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.584350][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.592299][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.600029][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.607668][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.615311][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.622953][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.630977][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.639207][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.646674][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.654125][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.661753][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.669187][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.676705][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.684588][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.692213][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.699733][ T5] hid-generic 0008:0006:0007.0023: unknown main item tag 0x0 [ 1453.707595][ T2298] ================================================================== [ 1453.715928][ T2298] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 1453.724961][ T2298] Read of size 8 at addr ffff88811cad4c68 by task kworker/0:10/2298 [ 1453.733195][ T2298] [ 1453.735772][ T2298] CPU: 0 PID: 2298 Comm: kworker/0:10 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 1453.745994][ T2298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1453.756487][ T2298] Workqueue: events kfree_rcu_work [ 1453.761936][ T2298] Call Trace: [ 1453.765472][ T2298] __dump_stack+0x21/0x24 [ 1453.769929][T10718] Bluetooth: hci0: command 0x1003 tx timeout [ 1453.770174][ T2298] dump_stack_lvl+0x169/0x1d8 [ 1453.776794][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1453.781649][ T2298] ? show_regs_print_info+0x18/0x18 [ 1453.781666][ T2298] ? thaw_kernel_threads+0x220/0x220 [ 1453.781698][ T2298] print_address_description+0x7f/0x2c0 [ 1453.804607][ T2298] ? __list_del_entry_valid+0xa6/0x120 [ 1453.810344][ T2298] kasan_report+0xe2/0x130 [ 1453.814786][ T2298] ? __kasan_check_write+0x14/0x20 [ 1453.820240][ T2298] ? __list_del_entry_valid+0xa6/0x120 [ 1453.825836][ T2298] __asan_report_load8_noabort+0x14/0x20 [ 1453.831488][ T2298] __list_del_entry_valid+0xa6/0x120 [ 1453.837172][ T2298] process_one_work+0x44b/0xba0 [ 1453.842182][ T2298] worker_thread+0xa6a/0x13b0 [ 1453.847019][ T2298] kthread+0x346/0x3d0 [ 1453.851273][ T2298] ? worker_clr_flags+0x190/0x190 [ 1453.856309][ T2298] ? kthread_blkcg+0xd0/0xd0 [ 1453.861204][ T2298] ret_from_fork+0x1f/0x30 [ 1453.865832][ T2298] [ 1453.868368][ T2298] Allocated by task 5: [ 1453.872815][ T2298] __kasan_kmalloc+0xda/0x110 [ 1453.877898][ T2298] __kmalloc+0x1a7/0x330 [ 1453.882238][ T2298] kvmalloc_node+0x88/0x130 [ 1453.887162][ T2298] alloc_netdev_mqs+0x88/0xc80 [ 1453.892233][ T2298] alloc_etherdev_mqs+0x34/0x40 [ 1453.897441][ T2298] usbnet_probe+0x21a/0x2990 [ 1453.903208][ T2298] usb_probe_interface+0x5ff/0xae0 [ 1453.908633][ T2298] really_probe+0x3d8/0xa90 [ 1453.913373][ T2298] driver_probe_device+0xe7/0x190 [ 1453.918757][ T2298] __device_attach_driver+0x282/0x3f0 [ 1453.924881][ T2298] bus_for_each_drv+0x175/0x200 [ 1453.929937][ T2298] __device_attach+0x29a/0x400 [ 1453.934987][ T2298] device_initial_probe+0x1a/0x20 [ 1453.940197][ T2298] bus_probe_device+0xc0/0x1e0 [ 1453.945167][ T2298] device_add+0x8b4/0xbf0 [ 1453.949553][ T2298] usb_set_configuration+0x1a47/0x1f80 [ 1453.955117][ T2298] usb_generic_driver_probe+0x91/0x150 [ 1453.960654][ T2298] usb_probe_device+0x148/0x260 [ 1453.965680][ T2298] really_probe+0x3d8/0xa90 [ 1453.970206][ T2298] driver_probe_device+0xe7/0x190 [ 1453.975338][ T2298] __device_attach_driver+0x282/0x3f0 [ 1453.980829][ T2298] bus_for_each_drv+0x175/0x200 [ 1453.986012][ T2298] __device_attach+0x29a/0x400 [ 1453.990947][ T2298] device_initial_probe+0x1a/0x20 [ 1453.996141][ T2298] bus_probe_device+0xc0/0x1e0 [ 1454.001206][ T2298] device_add+0x8b4/0xbf0 [ 1454.005734][ T2298] usb_new_device+0xcd1/0x1450 [ 1454.012222][ T2298] hub_event+0x2679/0x4120 [ 1454.018374][ T2298] process_one_work+0x6e1/0xba0 [ 1454.025288][ T2298] worker_thread+0xa6a/0x13b0 [ 1454.031368][ T2298] kthread+0x346/0x3d0 [ 1454.036327][ T2298] ret_from_fork+0x1f/0x30 [ 1454.042578][ T2298] [ 1454.045724][ T2298] Freed by task 10718: [ 1454.050682][ T2298] kasan_set_track+0x4a/0x70 [ 1454.057539][ T2298] kasan_set_free_info+0x23/0x40 [ 1454.063581][ T2298] ____kasan_slab_free+0x125/0x160 [ 1454.069560][ T2298] __kasan_slab_free+0x11/0x20 [ 1454.074976][ T2298] slab_free_freelist_hook+0xc5/0x190 [ 1454.082372][ T2298] kfree+0xc0/0x270 [ 1454.086715][ T2298] kvfree+0x35/0x40 [ 1454.091157][ T2298] netdev_freemem+0x3f/0x60 [ 1454.095833][ T2298] netdev_release+0x7f/0xb0 [ 1454.100710][ T2298] device_release+0x96/0x1c0 [ 1454.106432][ T2298] kobject_put+0x18a/0x270 [ 1454.112686][ T2298] put_device+0x1f/0x30 [ 1454.119326][ T2298] free_netdev+0x384/0x480 [ 1454.125213][ T2298] usbnet_disconnect+0x231/0x380 [ 1454.132479][ T2298] usb_unbind_interface+0x212/0x8c0 [ 1454.139358][ T2298] device_release_driver_internal+0x4bc/0x750 [ 1454.152769][ T2298] device_release_driver+0x19/0x20 [ 1454.159999][ T2298] bus_remove_device+0x2dd/0x340 [ 1454.169857][ T2298] device_del+0x696/0xed0 [ 1454.176119][ T2298] usb_disable_device+0x3a8/0x750 [ 1454.183091][ T2298] usb_disconnect+0x31e/0x850 [ 1454.190081][ T2298] hub_event+0x1912/0x4120 [ 1454.195801][ T2298] process_one_work+0x6e1/0xba0 [ 1454.203035][ T2298] worker_thread+0xa6a/0x13b0 [ 1454.208935][ T2298] kthread+0x346/0x3d0 [ 1454.215019][ T2298] ret_from_fork+0x1f/0x30 [ 1454.220467][ T2298] [ 1454.223918][ T2298] Last potentially related work creation: [ 1454.230736][ T2298] kasan_save_stack+0x3a/0x60 [ 1454.236514][ T2298] __kasan_record_aux_stack+0xd2/0x100 [ 1454.242604][ T2298] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1454.249075][ T2298] insert_work+0x52/0x310 [ 1454.254074][ T2298] __queue_work+0x923/0xca0 [ 1454.259744][ T2298] queue_work_on+0xd5/0x130 [ 1454.265719][ T2298] usbnet_link_change+0xef/0x100 [ 1454.271383][ T2298] usbnet_probe+0x1ed9/0x2990 [ 1454.276919][ T2298] usb_probe_interface+0x5ff/0xae0 [ 1454.283462][ T2298] really_probe+0x3d8/0xa90 [ 1454.288573][ T2298] driver_probe_device+0xe7/0x190 [ 1454.293895][ T2298] __device_attach_driver+0x282/0x3f0 [ 1454.300265][ T2298] bus_for_each_drv+0x175/0x200 [ 1454.307674][ T2298] __device_attach+0x29a/0x400 [ 1454.314688][ T2298] device_initial_probe+0x1a/0x20 [ 1454.322774][ T2298] bus_probe_device+0xc0/0x1e0 [ 1454.328428][ T2298] device_add+0x8b4/0xbf0 [ 1454.333022][ T2298] usb_set_configuration+0x1a47/0x1f80 [ 1454.338855][ T2298] usb_generic_driver_probe+0x91/0x150 [ 1454.344403][ T2298] usb_probe_device+0x148/0x260 [ 1454.349382][ T2298] really_probe+0x3d8/0xa90 [ 1454.353986][ T2298] driver_probe_device+0xe7/0x190 [ 1454.359473][ T2298] __device_attach_driver+0x282/0x3f0 [ 1454.366021][ T2298] bus_for_each_drv+0x175/0x200 [ 1454.371373][ T2298] __device_attach+0x29a/0x400 [ 1454.376376][ T2298] device_initial_probe+0x1a/0x20 [ 1454.381589][ T2298] bus_probe_device+0xc0/0x1e0 [ 1454.386551][ T2298] device_add+0x8b4/0xbf0 [ 1454.390897][ T2298] usb_new_device+0xcd1/0x1450 [ 1454.396075][ T2298] hub_event+0x2679/0x4120 [ 1454.400891][ T2298] process_one_work+0x6e1/0xba0 [ 1454.406289][ T2298] worker_thread+0xa6a/0x13b0 [ 1454.411308][ T2298] kthread+0x346/0x3d0 [ 1454.415918][ T2298] ret_from_fork+0x1f/0x30 [ 1454.420335][ T2298] [ 1454.422830][ T2298] The buggy address belongs to the object at ffff88811cad4000 [ 1454.422830][ T2298] which belongs to the cache kmalloc-4k of size 4096 [ 1454.438157][ T2298] The buggy address is located 3176 bytes inside of [ 1454.438157][ T2298] 4096-byte region [ffff88811cad4000, ffff88811cad5000) [ 1454.452271][ T2298] The buggy address belongs to the page: [ 1454.458023][ T2298] page:ffffea000472b400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811cad2000 pfn:0x11cad0 [ 1454.470079][ T2298] head:ffffea000472b400 order:3 compound_mapcount:0 compound_pincount:0 [ 1454.478685][ T2298] flags: 0x4000000000010200(slab|head) [ 1454.484623][ T2298] raw: 4000000000010200 ffffea000418e808 ffffea00049be408 ffff888100042c00 [ 1454.493657][ T2298] raw: ffff88811cad2000 0000000000040002 00000001ffffffff 0000000000000000 [ 1454.502474][ T2298] page dumped because: kasan: bad access detected [ 1454.509361][ T2298] page_owner tracks the page as allocated [ 1454.516300][ T2298] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 685, ts 236003776521, free_ts 235985146057 [ 1454.538335][ T2298] prep_new_page+0x179/0x180 [ 1454.543023][ T2298] get_page_from_freelist+0x2235/0x23d0 [ 1454.548665][ T2298] __alloc_pages_nodemask+0x268/0x5f0 [ 1454.554527][ T2298] new_slab+0x84/0x3f0 [ 1454.558750][ T2298] ___slab_alloc+0x2a6/0x450 [ 1454.563610][ T2298] __slab_alloc+0x63/0xa0 [ 1454.568263][ T2298] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 1454.573905][ T2298] kobject_uevent_env+0x272/0x700 [ 1454.579026][ T2298] kobject_uevent+0x1d/0x30 [ 1454.583653][ T2298] udc_bind_to_driver+0x5c8/0x6d0 [ 1454.589265][ T2298] usb_gadget_probe_driver+0x1fc/0x380 [ 1454.594970][ T2298] raw_ioctl+0x105a/0x2f00 [ 1454.599433][ T2298] __se_sys_ioctl+0x121/0x1a0 [ 1454.604191][ T2298] __x64_sys_ioctl+0x7b/0x90 [ 1454.608793][ T2298] do_syscall_64+0x31/0x40 [ 1454.613498][ T2298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1454.619687][ T2298] page last free stack trace: [ 1454.625304][ T2298] __free_pages_ok+0x7fc/0x820 [ 1454.630858][ T2298] __free_pages+0xdd/0x380 [ 1454.635777][ T2298] __free_slab+0xcf/0x190 [ 1454.640444][ T2298] __kmem_cache_shutdown+0x18a/0x1e0 [ 1454.646462][ T2298] kmem_cache_destroy+0x55/0x150 [ 1454.652197][ T2298] p9_client_destroy+0x3a9/0x3f0 [ 1454.657254][ T2298] v9fs_session_close+0x4e/0x1c0 [ 1454.662663][ T2298] v9fs_kill_super+0x5c/0x90 [ 1454.668397][ T2298] deactivate_locked_super+0xa0/0x100 [ 1454.674363][ T2298] deactivate_super+0xaf/0xe0 [ 1454.679639][ T2298] cleanup_mnt+0x446/0x500 [ 1454.685244][ T2298] __cleanup_mnt+0x19/0x20 [ 1454.690920][ T2298] task_work_run+0x127/0x190 [ 1454.695872][ T2298] exit_to_user_mode_loop+0xcb/0xe0 [ 1454.701801][ T2298] syscall_exit_to_user_mode+0x68/0x90 [ 1454.707432][ T2298] do_syscall_64+0x3d/0x40 [ 1454.711874][ T2298] [ 1454.714314][ T2298] Memory state around the buggy address: [ 1454.720426][ T2298] ffff88811cad4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1454.728780][ T2298] ffff88811cad4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1454.737048][ T2298] >ffff88811cad4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1454.746362][ T2298] ^ [ 1454.754496][ T2298] ffff88811cad4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1454.762847][ T2298] ffff88811cad4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1454.771131][ T2298] ================================================================== [ 1454.780011][ T2298] Disabling lock debugging due to kernel taint [ 1454.797230][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 1454.797246][ T24] audit: type=1400 audit(1753107392.631:1232): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1454.801277][ T5] hid-generic 0008:0006:0007.0023: hidraw0: HID v0.0b Device [syz1] on syz1 [ 1454.803733][ T24] audit: type=1400 audit(1753107392.631:1233): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.859884][ T24] audit: type=1400 audit(1753107392.631:1234): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.889382][ T24] audit: type=1400 audit(1753107392.631:1235): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.933541][ T24] audit: type=1400 audit(1753107392.631:1236): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1454.954788][ T24] audit: type=1400 audit(1753107392.631:1237): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1454.978398][ T24] audit: type=1400 audit(1753107392.631:1238): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1455.840303][T10718] Bluetooth: hci0: command 0x1001 tx timeout [ 1455.847314][ T40] Bluetooth: hci0: sending frame failed (-49) [ 1457.920656][ T5] Bluetooth: hci0: command 0x1009 tx timeout