last executing test programs: 1m51.40820951s ago: executing program 2 (id=147): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) ppoll(&(0x7f00000000c0)=[{r1, 0x2}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 1m51.335161727s ago: executing program 2 (id=148): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)={0x7, 0x20, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 1m51.293745471s ago: executing program 2 (id=149): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 1m50.824447816s ago: executing program 2 (id=150): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000880)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000980)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x30) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(r0, 0x11, 0x0, 0x2000) 1m50.620447886s ago: executing program 2 (id=151): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x8, 0x9ac6, 0x4010}) 1m50.512294966s ago: executing program 2 (id=152): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb5, [@rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010102, @rand_addr=0x64010100]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x62, 0x0, 0x7}]}}}], 0x88}}], 0x1, 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 1m50.498814137s ago: executing program 32 (id=152): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0xb5, [@rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010102, @rand_addr=0x64010100]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x62, 0x0, 0x7}]}}}], 0x88}}], 0x1, 0x1) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 1m24.196623916s ago: executing program 1 (id=803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 1m24.110983075s ago: executing program 1 (id=806): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x404}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m23.979772038s ago: executing program 1 (id=807): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) madvise(&(0x7f000008f000/0x4000)=nil, 0x4000, 0xa) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m23.872119028s ago: executing program 1 (id=809): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000880)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000980)="$eJzs3UtoY1UYAOA/vWnSGdB2JwpCdCdomc5ON7ZIBwa7UQk+FmJwOipJFVostotJ60JxKbjUlTsFXbgQlyIo4s6FW0eRUXGhsxtw8Ehy87hN0seIrRS/D5qcnnP+c/77ILkNN6fPLUbz0nRcvn79WszMlKK8+Mhi3CjFXGTRtxPjKhPqAIDT4UZK8UfKjbbNTA4pnUBaAMAx6r7/vxARtZjLa17/8qD+ybs/AJx6vb//zxzUZ5/PASJeOZaUAIBjNvb5/717mivdn3L/13LhrgAA4LR64ulnHl1aiXi8VpuJWHtzs75Zj4eG7UuX46VoxWqci9m4GZFfKHQeSt3HCxdXls/VarV2/DwX9YiY6gXW8yuFpawbX42FmI25XnzvaiOllF34ZGV5odYVETvt7vyxVtqsT8fZ3vzfn43V4YVHf5DuU8TFleXztd4A9bV+fDtid3ijQif/+ZiNb58fDJNS/w7GleUrC/2kh/Gb9WpcGuyFfT8BAQAAAAAAAAAAAAAAAAAAAACAf2S+NjA3WD8ndZ7zlXLm5ye0d9fHyeN76wPt5usDpWqKlH5/7YH6W1nsWR9odH2eTQsJAgAAAAAAAAAAAAAAAAAAwMDGViUardbq+sbWdrNYaK9vbE1FRKfm5a8/+uJMjPc5pFDOp6hGDKao9abdbjZS1u+csojx8Kwzeb/mg08HGRf7VAdbMTGN6v5NrdZt9/z07rDm7qw/8l/DPllM3sCskMbDIyOv3Z6ndCs7alA4X6ypjs9+NaVUqHmjGH7l2fEBoxRRvvUDt92civ37pE7hq2sv3tnf+43PU+6++2efvPrO+782G63OzNE9gpX1jZup2Sj1Ox9h9t5wqXsIhudGKfJCqXgmlA8acHdvTSP77ren7nr7m6PthFSsebVzPo/0yfLN+Xg0vJIXOmmONJ0Zhk/3NqK1Oj3h5D+sUDymP27lIx0Sdcd7n32Y0g+/HHmKoamxl43Sv/DSAwAAAAAAAAAAAAAAAAAAjCh8V7z3pet23jB9UNSDj51QegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwIob//79Q2N2JkZqjFP5sT4iqrq5vRFT+680EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/7u8AAAD///APZHU=") creat(&(0x7f0000000100)='./bus\x00', 0x30) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(r0, 0x11, 0x0, 0x2000) 1m23.653654429s ago: executing program 1 (id=811): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1}}], 0x4, 0x608d8d0) 1m23.540474019s ago: executing program 1 (id=815): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m23.497702504s ago: executing program 33 (id=815): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m11.493786753s ago: executing program 6 (id=1088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000240)) 1m11.31446686s ago: executing program 6 (id=1092): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 1m11.242526687s ago: executing program 6 (id=1098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "91"}, @local=@item_4={0x3, 0x2, 0x2}]}}, 0x0}, 0x0) 1m9.54134971s ago: executing program 6 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) 1m9.54115273s ago: executing program 6 (id=1141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000102, 0x0, 0x1}]}) 1m9.468165737s ago: executing program 6 (id=1142): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x8e8, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x8d4, 0x1, [@m_police={0x8d0, 0x1, 0x0, 0x0, {{0xb}, {0x8a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x10003, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8e8}}, 0x0) 1m9.467799187s ago: executing program 34 (id=1142): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x8e8, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x8d4, 0x1, [@m_police={0x8d0, 0x1, 0x0, 0x0, {{0xb}, {0x8a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x80000000, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x10003, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8e8}}, 0x0) 59.384651493s ago: executing program 0 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.333733228s ago: executing program 0 (id=1394): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 59.017088568s ago: executing program 0 (id=1401): creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x7, 0x1b) 59.003733019s ago: executing program 0 (id=1402): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 58.990760791s ago: executing program 0 (id=1403): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 58.974548312s ago: executing program 0 (id=1404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 43.927517093s ago: executing program 35 (id=1404): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r0}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 2.811528391s ago: executing program 5 (id=2746): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.496134751s ago: executing program 4 (id=2754): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x4, 0x3}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@private=0x4, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', r2, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2f}}}}}) 2.484862392s ago: executing program 4 (id=2755): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d07}]}) 2.411060269s ago: executing program 4 (id=2756): write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="080088ca0303ff7fc30909000900aaaaaaaaaa33aaaaaaaaaa3488a8"], 0x27) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0xfc9c, 0x2004c8a1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.366420844s ago: executing program 4 (id=2758): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 2.336351526s ago: executing program 4 (id=2760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.19024241s ago: executing program 8 (id=2765): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/43, 0x39) getdents(r1, 0x0, 0xbb) 2.136151046s ago: executing program 8 (id=2767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2, r1}, 0x6) 2.135970916s ago: executing program 4 (id=2768): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 2.08709778s ago: executing program 36 (id=2768): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 2.08473951s ago: executing program 8 (id=2771): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@errors_remount}, {@noload}, {@delalloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@discard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00'}, 0x10) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xc00}]) 1.823475955s ago: executing program 8 (id=2775): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x8, 0x7fff, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2055, &(0x7f0000004440)={&(0x7f0000004300)={0x50, 0x0, 0x17, {0x7, 0x29, 0x4, 0xb069a97334577756, 0xa, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x8, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r1) 1.66851413s ago: executing program 8 (id=2776): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, "ba54093e"}, @local=@item_4={0x3, 0x2, 0x4, "851feb0e"}]}}, 0x0}, 0x0) 1.494752157s ago: executing program 9 (id=2770): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x1f8, 0x11, 0x148, 0x1f8, 0x0, 0x320, 0x2a8, 0x2a8, 0x320, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x0, 0x1}, {0x2, 0x2, 0x4}, 0x9, 0x8}}}, {{@ip={@multicast2, @loopback, 0xff, 0x0, 'vlan0\x00', 'veth0\x00', {}, {}, 0x8, 0x0, 0x64}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x26, 0x1e, 0x0, 0x80000000, 'pptp\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r0 = syz_io_uring_setup(0x47a7, &(0x7f00000012c0)={0x0, 0x6f55, 0x390, 0x1, 0x400200}, &(0x7f0000003400), &(0x7f0000000080)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r0}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000280)={0x0, 0x87974, 0x10, 0x0, 0x8, 0x0, r0}, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_enter(r0, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) 990.892845ms ago: executing program 7 (id=2780): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 832.51849ms ago: executing program 7 (id=2781): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f00"/28, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) recvmmsg$unix(r0, &(0x7f0000000040), 0x4000000000002ac, 0x0, 0x0) 801.330073ms ago: executing program 3 (id=2785): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x20}}, 0xfe44, 0x0) 748.396379ms ago: executing program 3 (id=2786): accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010000000000000c00000000000000000000000000000000000000000000000200000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000000000000440005007f000001000000000000000000000000000100003c"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, ' \x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 748.139859ms ago: executing program 3 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb4, [{{0x9, 0x4, 0x0, 0x0, 0x41, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x10, 0x5, {0x5, 0xb, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 747.899048ms ago: executing program 7 (id=2788): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000010000000000000000feffffff0000000000000000ffff00000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ac09000000000000fcffff00000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000200000000000000000008"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 747.768108ms ago: executing program 7 (id=2789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x4000000000000229, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 716.516631ms ago: executing program 5 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) 708.200983ms ago: executing program 5 (id=2791): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 645.830308ms ago: executing program 7 (id=2792): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfda1) 644.973408ms ago: executing program 9 (id=2793): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 568.259445ms ago: executing program 7 (id=2794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x82, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x8010, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./bus\x00') 568.023116ms ago: executing program 5 (id=2795): openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x40, 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r0, 0x2, 0x0) 567.829946ms ago: executing program 9 (id=2796): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0xeeee8000, 0x6000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x100000, 0x107000, 0x1}) 501.772072ms ago: executing program 9 (id=2797): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@checkpoint_diasble}, {@lfs_mode}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xf519, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file2\x00', 0x200, 0x88) 482.710454ms ago: executing program 5 (id=2798): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 320.97658ms ago: executing program 5 (id=2799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000071, 0x0, 0x8004}]}) 242.893397ms ago: executing program 3 (id=2800): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") mkdir(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000e40)="c6148789", 0x4, 0x7ffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 75.483343ms ago: executing program 9 (id=2801): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x36, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 75.016113ms ago: executing program 3 (id=2802): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) close(r0) 65.200244ms ago: executing program 3 (id=2803): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) fdatasync(r0) 0s ago: executing program 8 (id=2804): unshare(0x62040200) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): op4): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.664445][ T4399] EXT4-fs (loop4): 1 truncate cleaned up [ 96.674375][ T4399] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.694912][ T4399] EXT4-fs (loop4): shut down requested (0) [ 96.721061][ T287] EXT4-fs (loop4): unmounting filesystem. [ 96.815828][ T729] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 96.816774][ T4418] loop4: detected capacity change from 0 to 128 [ 96.843663][ T4418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.862922][ T4418] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.914824][ T287] EXT4-fs (loop4): unmounting filesystem. [ 97.007140][ T729] usb 8-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 97.020265][ T729] usb 8-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 97.035341][ T729] usb 8-1: config 0 interface 0 has no altsetting 0 [ 97.043172][ T729] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 97.052608][ T729] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.069830][ T729] usb 8-1: config 0 descriptor?? [ 97.155936][ T4437] loop4: detected capacity change from 0 to 1 [ 97.280448][ T4397] syz.7.1647[4397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.280539][ T4397] syz.7.1647[4397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.507852][ T729] kone 0003:1E7D:2CED.0022: unbalanced collection at end of report description [ 97.547076][ T729] kone 0003:1E7D:2CED.0022: parse failed [ 97.559285][ T729] kone: probe of 0003:1E7D:2CED.0022 failed with error -22 [ 97.649897][ T4445] loop4: detected capacity change from 0 to 40427 [ 97.670409][ T4445] F2FS-fs (loop4): fault_injection options not supported [ 97.690471][ T4445] F2FS-fs (loop4): invalid crc value [ 97.698896][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1671'. [ 97.730111][ T4445] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.742785][ T729] usb 8-1: USB disconnect, device number 8 [ 97.827491][ T4456] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.835186][ T4456] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.884511][ T4445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.974720][ T287] syz-executor: attempt to access beyond end of device [ 97.974720][ T287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.212874][ T4480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1683'. [ 98.248789][ T4483] SELinux: failed to load policy [ 98.433688][ T4496] loop4: detected capacity change from 0 to 8192 [ 98.508277][ T4496] loop4: p1 < > p2 p4 < p5 > [ 98.513052][ T4496] loop4: partition table partially beyond EOD, truncated [ 98.535836][ T4496] loop4: p1 start 134217728 is beyond EOD, truncated [ 98.542645][ T4496] loop4: p2 size 591360 extends beyond EOD, truncated [ 98.556641][ T4496] loop4: p5 size 591360 extends beyond EOD, truncated [ 98.807988][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 98.808003][ T28] audit: type=1400 audit(1766467549.382:606): avc: denied { create } for pid=4519 comm="syz.7.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.934487][ T28] audit: type=1400 audit(1766467549.502:607): avc: denied { read write } for pid=4529 comm="syz.5.1704" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 98.997710][ T28] audit: type=1400 audit(1766467549.502:608): avc: denied { open } for pid=4529 comm="syz.5.1704" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.045823][ T28] audit: type=1400 audit(1766467549.502:609): avc: denied { setopt } for pid=4531 comm="syz.4.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.075596][ T28] audit: type=1400 audit(1766467549.532:610): avc: denied { ioctl } for pid=4529 comm="syz.5.1704" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.098052][ T4540] loop4: detected capacity change from 0 to 512 [ 99.131565][ T28] audit: type=1400 audit(1766467549.552:611): avc: denied { mount } for pid=4537 comm="syz.7.1708" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 99.175927][ T4540] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.1709: invalid block [ 99.217425][ T4540] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 213 vs 220 free clusters [ 99.256003][ T4540] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1709: attempt to clear invalid blocks 983261 len 1 [ 99.300196][ T4540] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1709: invalid indirect mapped block 2683928664 (level 0) [ 99.372290][ T4540] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz.4.1709: Invalid inode table block 0 in block_group 0 [ 99.417624][ T4540] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 99.429130][ T4557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1713'. [ 99.449216][ T4540] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 99.487682][ T4540] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz.4.1709: Invalid inode table block 0 in block_group 0 [ 99.542322][ T4540] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 99.552131][ T28] audit: type=1400 audit(1766467550.112:612): avc: denied { mounton } for pid=4558 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 99.598048][ T4540] EXT4-fs error (device loop4): ext4_truncate:4320: inode #13: comm syz.4.1709: mark_inode_dirty error [ 99.610373][ T28] audit: type=1400 audit(1766467550.162:613): avc: denied { ioctl } for pid=4559 comm="syz.3.1718" path="socket:[34055]" dev="sockfs" ino=34055 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.641115][ T4540] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 99.654408][ T28] audit: type=1400 audit(1766467550.222:614): avc: denied { create } for pid=4566 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.688906][ T4540] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz.4.1709: Invalid inode table block 0 in block_group 0 [ 99.725128][ T4558] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.736809][ T4540] EXT4-fs (loop4): 1 truncate cleaned up [ 99.742586][ T4540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 99.755420][ T4558] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.763320][ T28] audit: type=1400 audit(1766467550.222:615): avc: denied { bind } for pid=4566 comm="syz.3.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.789650][ T4558] device bridge_slave_0 entered promiscuous mode [ 99.801943][ T4540] EXT4-fs (loop4): unmounting filesystem. [ 99.820735][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.843104][ T4558] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.853688][ T4558] device bridge_slave_1 entered promiscuous mode [ 99.866642][ T4545] loop5: detected capacity change from 0 to 131072 [ 99.875609][ T4545] F2FS-fs (loop5): invalid crc value [ 99.899547][ T4545] F2FS-fs (loop5): Found nat_bits in checkpoint [ 99.939557][ T4545] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 99.987532][ T4592] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 100.045635][ T4594] loop4: detected capacity change from 0 to 512 [ 100.071962][ T4594] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.090604][ T4594] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 100.100921][ T4594] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 100.127329][ T4594] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 100.156396][ T4594] System zones: 0-2, 18-18, 34-35 [ 100.162058][ T4594] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.181293][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.197229][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.216713][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.225671][ T287] EXT4-fs (loop4): unmounting filesystem. [ 100.250491][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.282139][ T819] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.289322][ T819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.315247][ T4615] loop7: detected capacity change from 0 to 1024 [ 100.317729][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.346245][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.357961][ T4615] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 100.374044][ T819] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.381187][ T819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.395365][ T4615] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.411211][ T680] device bridge_slave_1 left promiscuous mode [ 100.417605][ T680] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.436315][ T680] device bridge_slave_0 left promiscuous mode [ 100.445236][ T680] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.462386][ T4615] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: comm syz.7.1738: lblock 0 mapped to illegal pblock 0 (length 6) [ 100.482384][ T680] device veth1_macvtap left promiscuous mode [ 100.491698][ T680] device veth0_vlan left promiscuous mode [ 100.501936][ T4615] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 100.539224][ T4615] EXT4-fs (loop7): This should not happen!! Data will be lost [ 100.539224][ T4615] [ 100.590584][ T867] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:76: lblock 8 mapped to illegal pblock 8 (length 8) [ 100.615679][ T867] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 100.637467][ T867] EXT4-fs (loop7): This should not happen!! Data will be lost [ 100.637467][ T867] [ 100.648735][ T3188] EXT4-fs (loop7): unmounting filesystem. [ 100.669128][ T4631] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 100.695590][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.706289][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.722213][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.731208][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.742271][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.766686][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.780839][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.792932][ T4558] device veth0_vlan entered promiscuous mode [ 100.813693][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.834125][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.850923][ T4558] device veth1_macvtap entered promiscuous mode [ 100.858479][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.866483][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.874068][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.882400][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.891568][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.909567][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.918585][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.927535][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.948760][ T819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.185880][ T4690] loop8: detected capacity change from 0 to 256 [ 101.201686][ T4692] loop4: detected capacity change from 0 to 512 [ 101.210363][ T4688] bridge0: port 3(vlan2) entered blocking state [ 101.217531][ T4688] bridge0: port 3(vlan2) entered disabled state [ 101.231113][ T4692] EXT4-fs: Ignoring removed i_version option [ 101.241352][ T4688] device vlan2 entered promiscuous mode [ 101.247140][ T4692] EXT4-fs: Ignoring removed bh option [ 101.284054][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.302048][ T4692] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.329642][ T4692] EXT4-fs error (device loop4): ext4_resize_begin:62: comm syz.4.1769: resize_inode disabled but reserved GDT blocks non-zero [ 101.396233][ T287] EXT4-fs (loop4): unmounting filesystem. [ 101.597435][ T4724] IPv6: sit1: Disabled Multicast RS [ 101.706682][ T4729] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 101.758997][ T4734] device ip6gretap0 entered promiscuous mode [ 101.773826][ T4734] device macsec1 entered promiscuous mode [ 101.788031][ T4734] device ip6gretap0 left promiscuous mode [ 102.045861][ T4253] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 102.199000][ T4752] loop5: detected capacity change from 0 to 1024 [ 102.224769][ T4752] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 102.233595][ T4752] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.245889][ T4253] usb 9-1: Using ep0 maxpacket: 8 [ 102.249922][ T4752] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: comm syz.5.1792: lblock 0 mapped to illegal pblock 0 (length 6) [ 102.264619][ T4752] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 102.271411][ T4253] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.277013][ T4752] EXT4-fs (loop5): This should not happen!! Data will be lost [ 102.277013][ T4752] [ 102.298966][ T4253] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x11, skipping [ 102.310166][ T819] EXT4-fs error (device loop5): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:28: lblock 8 mapped to illegal pblock 8 (length 8) [ 102.310185][ T4253] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.325203][ T819] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 102.350110][ T819] EXT4-fs (loop5): This should not happen!! Data will be lost [ 102.350110][ T819] [ 102.361271][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 102.365874][ T4253] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.376205][ T4253] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.384285][ T4253] usb 9-1: Product: syz [ 102.388939][ T4253] usb 9-1: Manufacturer: syz [ 102.393542][ T4253] usb 9-1: SerialNumber: syz [ 102.400528][ T4736] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 102.514841][ T4779] loop5: detected capacity change from 0 to 2048 [ 102.546716][ T4779] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 102.565367][ T4783] loop7: detected capacity change from 0 to 8192 [ 102.574469][ T4779] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.587902][ T4779] EXT4-fs (loop5): unmounting filesystem. [ 102.651717][ T4792] af_packet: tpacket_rcv: packet too big, clamped from 124 to 4294967286. macoff=82 [ 102.929566][ T4821] loop5: detected capacity change from 0 to 40427 [ 102.937305][ T4821] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 102.943743][ T4821] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 102.953957][ T4821] F2FS-fs (loop5): invalid crc value [ 102.960891][ T4821] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 102.991834][ T4821] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 102.999420][ T4821] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 103.019090][ T2462] syz-executor: attempt to access beyond end of device [ 103.019090][ T2462] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.134442][ T4838] loop5: detected capacity change from 0 to 8192 [ 103.414171][ T4253] cdc_ncm 9-1:1.0: bind() failure [ 103.421006][ T4253] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 103.428152][ T4253] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 103.438315][ T4253] usb 9-1: USB disconnect, device number 2 [ 103.577321][ T4857] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.584827][ T4857] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.641017][ T4857] device ip6gre1 left promiscuous mode [ 103.749453][ T4882] loop7: detected capacity change from 0 to 128 [ 103.756606][ T4882] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.769798][ T4882] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.789364][ T867] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.799876][ T3188] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.805210][ T4885] loop4: detected capacity change from 0 to 1024 [ 103.837408][ T4888] loop7: detected capacity change from 0 to 4096 [ 103.844669][ T4888] EXT4-fs (loop7): Test dummy encryption mode enabled [ 103.854671][ T4885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 103.863092][ T4888] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 103.864822][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 103.864834][ T28] audit: type=1400 audit(1766467554.432:647): avc: denied { create } for pid=4887 comm="syz.7.1851" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.898596][ T28] audit: type=1400 audit(1766467554.452:648): avc: denied { mounton } for pid=4887 comm="syz.7.1851" path=2F3132392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.899795][ T287] EXT4-fs (loop4): unmounting filesystem. [ 103.936604][ T28] audit: type=1400 audit(1766467554.452:649): avc: denied { write } for pid=4887 comm="syz.7.1851" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.964452][ T28] audit: type=1400 audit(1766467554.452:650): avc: denied { add_name } for pid=4887 comm="syz.7.1851" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.985353][ T28] audit: type=1400 audit(1766467554.452:651): avc: denied { setattr } for pid=4887 comm="syz.7.1851" name="work" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.012282][ T28] audit: type=1400 audit(1766467554.452:652): avc: denied { remove_name } for pid=4887 comm="syz.7.1851" name="#25" dev="loop7" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 104.037004][ T3188] EXT4-fs (loop7): unmounting filesystem. [ 104.037079][ T4902] loop8: detected capacity change from 0 to 256 [ 104.047492][ T28] audit: type=1400 audit(1766467554.452:653): avc: denied { rename } for pid=4887 comm="syz.7.1851" name="#25" dev="loop7" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 104.059991][ T4902] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 104.073205][ T28] audit: type=1400 audit(1766467554.452:654): avc: denied { unlink } for pid=4887 comm="syz.7.1851" name="#25" dev="loop7" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 104.123699][ T28] audit: type=1400 audit(1766467554.452:655): avc: denied { setattr } for pid=4887 comm="syz.7.1851" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.154962][ T28] audit: type=1400 audit(1766467554.452:656): avc: denied { setattr } for pid=4887 comm="syz.7.1851" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 104.203214][ T4920] loop8: detected capacity change from 0 to 512 [ 104.220032][ T4920] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 104.233274][ T4920] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.1866: inode has both inline data and extents flags [ 104.256315][ T4920] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.1866: couldn't read orphan inode 15 (err -117) [ 104.268957][ T4920] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 104.280449][ T4920] syz.8.1866 (pid 4920) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 104.297649][ T4558] EXT4-fs (loop8): unmounting filesystem. [ 104.311071][ T4937] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 104.391255][ T4950] bridge0: port 3(syz_tun) entered blocking state [ 104.397838][ T4950] bridge0: port 3(syz_tun) entered disabled state [ 104.404966][ T4950] device syz_tun entered promiscuous mode [ 104.444950][ T4955] loop4: detected capacity change from 0 to 2048 [ 104.463866][ T4955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.488145][ T4955] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.495911][ T4255] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 104.512466][ T4955] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 640 with error 28 [ 104.534553][ T4955] EXT4-fs (loop4): This should not happen!! Data will be lost [ 104.534553][ T4955] [ 104.552414][ T4955] EXT4-fs (loop4): Total free blocks count 0 [ 104.558894][ T4955] EXT4-fs (loop4): Free/Dirty block details [ 104.565073][ T4955] EXT4-fs (loop4): free_blocks=2415919104 [ 104.571967][ T4955] EXT4-fs (loop4): dirty_blocks=656 [ 104.577291][ T4955] EXT4-fs (loop4): Block reservation details [ 104.584661][ T4955] EXT4-fs (loop4): i_reserved_data_blocks=41 [ 104.604994][ T867] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 104.703013][ T4255] usb 8-1: Using ep0 maxpacket: 16 [ 104.710049][ T4255] usb 8-1: config 0 has no interfaces? [ 104.718085][ T4255] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 104.727544][ T4255] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.736327][ T4255] usb 8-1: Product: syz [ 104.740633][ T4255] usb 8-1: Manufacturer: syz [ 104.745288][ T4255] usb 8-1: SerialNumber: syz [ 104.751706][ T4255] r8152-cfgselector 8-1: config 0 descriptor?? [ 104.810745][ T4973] IPv6: sit1: Disabled Multicast RS [ 104.965238][ T867] usb 8-1: config 0 descriptor?? [ 105.106971][ T4992] loop5: detected capacity change from 0 to 256 [ 105.119442][ T4992] exFAT-fs (loop5): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 105.183258][ T867] usb 8-1: can't set config #0, error -71 [ 105.189377][ T4254] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 105.192761][ T4253] usb 8-1: USB disconnect, device number 9 [ 105.247211][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.261880][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 105.273728][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.282516][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 105.292546][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.300941][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.309502][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.318200][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.318692][ T4998] loop5: detected capacity change from 0 to 40427 [ 105.327722][ T867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.335097][ T4998] F2FS-fs (loop5): invalid crc value [ 105.350347][ T4998] F2FS-fs (loop5): Found nat_bits in checkpoint [ 105.371186][ T4998] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 105.386902][ T4254] usb 5-1: config 0 has an invalid interface number: 95 but max is 0 [ 105.395931][ T4254] usb 5-1: config 0 has no interface number 0 [ 105.402735][ T4254] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 105.419753][ T2462] syz-executor: attempt to access beyond end of device [ 105.419753][ T2462] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.420785][ T4254] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 105.460156][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.470229][ T4254] usb 5-1: Product: syz [ 105.485922][ T4254] usb 5-1: Manufacturer: syz [ 105.490637][ T4254] usb 5-1: SerialNumber: syz [ 105.496281][ T4254] usb 5-1: config 0 descriptor?? [ 105.501811][ T4990] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 105.648429][ T5041] loop5: detected capacity change from 0 to 256 [ 105.658627][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1920'. [ 105.668706][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1920'. [ 105.686475][ T5041] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 105.719835][ T4254] usb 5-1: MIDIStreaming interface descriptor not found [ 105.734168][ T5048] loop5: detected capacity change from 0 to 2048 [ 105.749573][ T4254] usb 5-1: USB disconnect, device number 18 [ 105.773520][ T5048] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 105.786099][ T5054] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1925'. [ 105.807315][ T5058] xt_hashlimit: size too large, truncated to 1048576 [ 105.846285][ T2462] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 105.894450][ T2462] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 105.925629][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 106.029272][ T5075] overlayfs: workdir and upperdir must be separate subtrees [ 106.046383][ T4254] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.115807][ T5092] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1941'. [ 106.325795][ T2453] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 106.496037][ T4254] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.526298][ T2453] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.549342][ T2453] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1279, setting to 1024 [ 106.573051][ T2453] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 106.600481][ T2453] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.637372][ T2453] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.656090][ T2453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.681996][ T2453] usb 8-1: Product: syz [ 106.697565][ T2453] usb 8-1: Manufacturer: syz [ 106.702459][ T2453] usb 8-1: SerialNumber: syz [ 106.727134][ T5077] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 106.831967][ T5132] 9pnet_fd: Insufficient options for proto=fd [ 106.896150][ T4255] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 106.956137][ T4254] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 107.147017][ T4254] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 107.155617][ T4254] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 107.164765][ T4254] usb 6-1: config 8 has an invalid descriptor of length 41, skipping remainder of the config [ 107.175133][ T4254] usb 6-1: config 8 has no interface number 0 [ 107.181500][ T4254] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 107.193645][ T4254] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.208670][ T4254] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 107.218696][ T4254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.227760][ T4254] usb 6-1: Product: syz [ 107.232117][ T4254] usb 6-1: Manufacturer: syz [ 107.237462][ T4254] usb 6-1: SerialNumber: syz [ 107.415829][ T4457] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 107.451501][ T4254] usb 6-1: USB disconnect, device number 14 [ 107.511614][ T5160] loop4: detected capacity change from 0 to 4096 [ 107.519074][ T5160] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 107.596946][ T4457] usb 9-1: config 0 has no interfaces? [ 107.603502][ T4457] usb 9-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 107.613946][ T4457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 107.622668][ T4457] usb 9-1: SerialNumber: syz [ 107.631815][ T4457] usb 9-1: config 0 descriptor?? [ 107.706694][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 107.717365][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 107.726759][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 107.738149][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 107.750567][ T2453] cdc_ncm 8-1:1.0: bind() failure [ 107.756714][ T2453] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 107.763640][ T2453] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 107.771081][ T2453] usb 8-1: USB disconnect, device number 10 [ 107.785405][ T5183] loop4: detected capacity change from 0 to 256 [ 107.796865][ T5183] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 107.809679][ T5183] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 107.843040][ T4457] usb 9-1: USB disconnect, device number 3 [ 107.933962][ T5189] loop4: detected capacity change from 0 to 1024 [ 107.941265][ T4254] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 107.949851][ T4254] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 107.961419][ T5189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.980100][ T287] EXT4-fs (loop4): unmounting filesystem. [ 107.984121][ T5195] loop5: detected capacity change from 0 to 1024 [ 107.994923][ T5195] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.014641][ T5199] loop4: detected capacity change from 0 to 512 [ 108.021745][ T5199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.022849][ T5195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.033961][ T5199] EXT4-fs (loop4): 1 truncate cleaned up [ 108.048168][ T5199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.059847][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 108.074760][ T5204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1990'. [ 108.084988][ T287] EXT4-fs (loop4): unmounting filesystem. [ 108.103493][ T5206] xt_bpf: check failed: parse error [ 108.114153][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1992'. [ 108.386969][ T4254] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 108.387619][ T5242] syz.8.2008[5242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.397105][ T5242] syz.8.2008[5242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.425936][ T4255] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 108.509502][ T5254] loop8: detected capacity change from 0 to 128 [ 108.517690][ T5254] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 108.527664][ T5254] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.555267][ T4558] EXT4-fs (loop8): unmounting filesystem. [ 108.555826][ T2453] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 108.577144][ T4254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.599093][ T4254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.610469][ T4254] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.627900][ T4254] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 108.638250][ T4254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.646954][ T4254] usb 5-1: config 0 descriptor?? [ 108.747237][ T2453] usb 8-1: config 8 has an invalid interface number: 223 but max is 0 [ 108.756160][ T2453] usb 8-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 108.765657][ T2453] usb 8-1: config 8 has an invalid descriptor of length 41, skipping remainder of the config [ 108.776754][ T2453] usb 8-1: config 8 has no interface number 0 [ 108.782918][ T2453] usb 8-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 108.795958][ T2453] usb 8-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.812107][ T2453] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 108.821251][ T2453] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.829601][ T2453] usb 8-1: Product: syz [ 108.834031][ T2453] usb 8-1: Manufacturer: syz [ 108.838899][ T2453] usb 8-1: SerialNumber: syz [ 108.975839][ T4255] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 109.049581][ T2453] usb 8-1: USB disconnect, device number 11 [ 109.058653][ T4254] hid-generic 0003:0457:07DA.0023: unknown main item tag 0x0 [ 109.067886][ T4254] hid-generic 0003:0457:07DA.0023: unknown main item tag 0x0 [ 109.075377][ T4254] hid-generic 0003:0457:07DA.0023: unknown main item tag 0x0 [ 109.084701][ T4254] hid-generic 0003:0457:07DA.0023: unknown main item tag 0x0 [ 109.092616][ T4254] hid-generic 0003:0457:07DA.0023: unknown main item tag 0x0 [ 109.100673][ T4254] hid-generic 0003:0457:07DA.0023: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 109.157033][ T4255] usb 9-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 109.168743][ T4255] usb 9-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 109.182273][ T4255] usb 9-1: config 0 interface 0 has no altsetting 0 [ 109.189325][ T4255] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 109.199016][ T4255] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.211999][ T4255] usb 9-1: config 0 descriptor?? [ 109.336338][ T2453] usb 5-1: USB disconnect, device number 19 [ 109.406974][ T4458] kernel write not supported for file bpf-prog (pid: 4458 comm: kworker/1:8) [ 109.419309][ T5277] syz.8.2024[5277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.419387][ T5277] syz.8.2024[5277] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.508024][ T4254] kernel write not supported for file bpf-prog (pid: 4254 comm: kworker/0:7) [ 109.555947][ T5303] xt_CT: No such helper "pptp" [ 109.574795][ T5304] loop5: detected capacity change from 0 to 4096 [ 109.581287][ T28] kauditd_printk_skb: 97 callbacks suppressed [ 109.581301][ T28] audit: type=1400 audit(1766467560.152:754): avc: denied { read } for pid=5305 comm="syz.7.2038" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.589102][ T5304] EXT4-fs (loop5): Test dummy encryption mode enabled [ 109.612116][ T28] audit: type=1400 audit(1766467560.152:755): avc: denied { open } for pid=5305 comm="syz.7.2038" path="net:[4026532633]" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 109.643859][ T4255] kone 0003:1E7D:2CED.0024: unbalanced collection at end of report description [ 109.656069][ T4255] kone 0003:1E7D:2CED.0024: parse failed [ 109.656236][ T5304] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 109.661750][ T4255] kone: probe of 0003:1E7D:2CED.0024 failed with error -22 [ 109.678686][ T5304] System zones: 0-5 [ 109.684603][ T5304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 109.741526][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 109.743798][ T5320] loop7: detected capacity change from 0 to 128 [ 109.756652][ T5320] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 109.765904][ T5320] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.781463][ T28] audit: type=1400 audit(1766467560.352:756): avc: denied { remount } for pid=5319 comm="syz.7.2043" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.802037][ T5320] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 109.810237][ T5320] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 109.825092][ T3188] EXT4-fs (loop7): unmounting filesystem. [ 109.840006][ T5327] loop7: detected capacity change from 0 to 512 [ 109.853784][ T2453] usb 9-1: USB disconnect, device number 4 [ 109.869595][ T5327] ext4: Unknown parameter 'dont_measure' [ 109.878910][ T28] audit: type=1400 audit(1766467560.452:757): avc: denied { name_bind } for pid=5329 comm="syz.4.2048" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 109.907323][ T28] audit: type=1400 audit(1766467560.452:758): avc: denied { node_bind } for pid=5329 comm="syz.4.2048" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 109.928922][ T28] audit: type=1400 audit(1766467560.492:759): avc: denied { read write } for pid=5326 comm="syz.7.2047" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 109.953529][ T28] audit: type=1400 audit(1766467560.492:760): avc: denied { open } for pid=5326 comm="syz.7.2047" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 109.978202][ T28] audit: type=1400 audit(1766467560.492:761): avc: denied { mount } for pid=5326 comm="syz.7.2047" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.002390][ T28] audit: type=1400 audit(1766467560.512:762): avc: denied { unmount } for pid=3188 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.084374][ T5336] loop7: detected capacity change from 0 to 1024 [ 110.091217][ T5336] EXT4-fs: Ignoring removed orlov option [ 110.097316][ T5336] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.107789][ T5336] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 110.118235][ T28] audit: type=1400 audit(1766467560.692:763): avc: denied { setattr } for pid=5335 comm="syz.7.2051" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.161247][ T5340] mmap: syz.5.2052 (5340) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.174416][ T3188] EXT4-fs (loop7): unmounting filesystem. [ 110.195115][ T5346] loop5: detected capacity change from 0 to 128 [ 110.203120][ T5346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 110.212126][ T5346] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.256019][ T4457] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 110.261487][ T5349] loop7: detected capacity change from 0 to 256 [ 110.272211][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 110.275182][ T5349] FAT-fs (loop7): Directory bread(block 64) failed [ 110.284696][ T5349] FAT-fs (loop7): Directory bread(block 65) failed [ 110.291724][ T5349] FAT-fs (loop7): Directory bread(block 66) failed [ 110.298761][ T5349] FAT-fs (loop7): Directory bread(block 67) failed [ 110.305713][ T5349] FAT-fs (loop7): Directory bread(block 68) failed [ 110.314729][ T5349] FAT-fs (loop7): Directory bread(block 69) failed [ 110.321899][ T5349] FAT-fs (loop7): Directory bread(block 70) failed [ 110.328792][ T5349] FAT-fs (loop7): Directory bread(block 71) failed [ 110.335469][ T5349] FAT-fs (loop7): Directory bread(block 72) failed [ 110.342302][ T5349] FAT-fs (loop7): Directory bread(block 73) failed [ 110.369357][ T5349] syz.7.2056: attempt to access beyond end of device [ 110.369357][ T5349] loop7: rw=2049, sector=1800, nr_sectors = 8 limit=256 [ 110.383920][ T5349] loop2: detected capacity change from 0 to 7 [ 110.447477][ T4457] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 110.463572][ T4457] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 110.479917][ T4457] usb 5-1: config 8 has an invalid descriptor of length 41, skipping remainder of the config [ 110.491207][ T4457] usb 5-1: config 8 has no interface number 0 [ 110.501819][ T4457] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 110.518341][ T4457] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.539596][ T4457] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 110.557707][ T4457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.572383][ T4457] usb 5-1: Product: syz [ 110.580047][ T4457] usb 5-1: Manufacturer: syz [ 110.587359][ T4457] usb 5-1: SerialNumber: syz [ 110.727164][ T5398] loop8: detected capacity change from 0 to 512 [ 110.738031][ T5398] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 110.754949][ T4558] EXT4-fs (loop8): unmounting filesystem. [ 110.798523][ T4457] usb 5-1: USB disconnect, device number 20 [ 110.912760][ T5415] loop8: detected capacity change from 0 to 40427 [ 110.920268][ T5415] F2FS-fs (loop8): fault_type options not supported [ 110.927310][ T5415] F2FS-fs (loop8): fault_injection options not supported [ 110.934447][ T5415] F2FS-fs (loop8): Image doesn't support compression [ 110.942066][ T5415] F2FS-fs (loop8): invalid crc value [ 110.948855][ T5415] F2FS-fs (loop8): Found nat_bits in checkpoint [ 110.970406][ T5415] F2FS-fs (loop8): Start checkpoint disabled! [ 110.977325][ T5415] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 111.002556][ T5415] syz.8.2085: attempt to access beyond end of device [ 111.002556][ T5415] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 111.031737][ T867] kworker/u4:76: attempt to access beyond end of device [ 111.031737][ T867] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 111.329981][ T5432] loop7: detected capacity change from 0 to 256 [ 111.341345][ T5432] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 111.372620][ T5437] serio: Serial port ptm0 [ 111.377763][ T4255] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 111.402931][ T5443] __nla_validate_parse: 1 callbacks suppressed [ 111.402946][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2099'. [ 111.420577][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2099'. [ 111.431019][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2099'. [ 111.567155][ T4255] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 111.578540][ T4255] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.591937][ T4255] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 111.603069][ T4255] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.613941][ T5463] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2108'. [ 111.623797][ T4255] usb 9-1: config 0 descriptor?? [ 111.735844][ T2453] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 111.785806][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 111.857188][ T5490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2121'. [ 111.917562][ T2453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.929083][ T2453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.939477][ T2453] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.953000][ T2453] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.962348][ T2453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.971236][ T2453] usb 6-1: config 0 descriptor?? [ 111.996057][ T4457] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 112.037676][ T4255] isku 0003:1E7D:319C.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 112.187138][ T4457] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.196184][ T4457] usb 8-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 112.206969][ T4457] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 112.216760][ T4457] usb 8-1: config 1 has no interface number 1 [ 112.223694][ T4457] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 112.239132][ T4458] usb 9-1: USB disconnect, device number 5 [ 112.247237][ T4457] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.256931][ T4457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.265143][ T4457] usb 8-1: Product: syz [ 112.269386][ T4457] usb 8-1: Manufacturer: syz [ 112.274007][ T4457] usb 8-1: SerialNumber: syz [ 112.379431][ T2453] plantronics 0003:047F:FFFF.0026: ignoring exceeding usage max [ 112.389686][ T2453] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 112.398800][ T2453] plantronics 0003:047F:FFFF.0026: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 112.483304][ T4457] usb 8-1: USB disconnect, device number 12 [ 112.794683][ T5512] loop8: detected capacity change from 0 to 128 [ 112.842035][ T5516] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 112.895333][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2134'. [ 113.787525][ T5545] loop8: detected capacity change from 0 to 128 [ 113.810017][ T5547] loop8: detected capacity change from 0 to 256 [ 114.080388][ T5585] loop4: detected capacity change from 0 to 256 [ 114.091515][ T5585] FAT-fs (loop4): Directory bread(block 64) failed [ 114.098547][ T5585] FAT-fs (loop4): Directory bread(block 65) failed [ 114.106295][ T5585] FAT-fs (loop4): Directory bread(block 66) failed [ 114.113427][ T5585] FAT-fs (loop4): Directory bread(block 67) failed [ 114.120786][ T5585] FAT-fs (loop4): Directory bread(block 68) failed [ 114.127423][ T5585] FAT-fs (loop4): Directory bread(block 69) failed [ 114.135844][ T5585] FAT-fs (loop4): Directory bread(block 70) failed [ 114.143488][ T5585] FAT-fs (loop4): Directory bread(block 71) failed [ 114.143914][ T5581] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2162'. [ 114.150751][ T5585] FAT-fs (loop4): Directory bread(block 72) failed [ 114.167075][ T5585] FAT-fs (loop4): Directory bread(block 73) failed [ 114.224546][ T5590] loop5: detected capacity change from 0 to 2048 [ 114.258868][ T5590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 114.274091][ T5605] loop8: detected capacity change from 0 to 256 [ 114.282871][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 114.299236][ T5605] FAT-fs (loop8): Directory bread(block 64) failed [ 114.307658][ T5605] FAT-fs (loop8): Directory bread(block 65) failed [ 114.315092][ T5605] FAT-fs (loop8): Directory bread(block 66) failed [ 114.327462][ T5605] FAT-fs (loop8): Directory bread(block 67) failed [ 114.337258][ T5605] FAT-fs (loop8): Directory bread(block 68) failed [ 114.345095][ T5605] FAT-fs (loop8): Directory bread(block 69) failed [ 114.353397][ T5605] FAT-fs (loop8): Directory bread(block 70) failed [ 114.360168][ T5605] FAT-fs (loop8): Directory bread(block 71) failed [ 114.368339][ T5605] FAT-fs (loop8): Directory bread(block 72) failed [ 114.375309][ T5605] FAT-fs (loop8): Directory bread(block 73) failed [ 114.426882][ T5628] loop4: detected capacity change from 0 to 128 [ 114.435369][ T5628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 114.446451][ T5628] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.467795][ T287] EXT4-fs (loop4): unmounting filesystem. [ 114.497648][ T729] usb 6-1: USB disconnect, device number 15 [ 114.507290][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 114.622359][ T5661] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2198'. [ 114.761600][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 114.761614][ T28] audit: type=1400 audit(1766467565.332:815): avc: denied { ioctl } for pid=5679 comm="syz.4.2207" path="socket:[38433]" dev="sockfs" ino=38433 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.800521][ T5682] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2208'. [ 114.832986][ T5684] incfs: Backing dir is not set, filesystem can't be mounted. [ 114.846157][ T5684] incfs: mount failed -2 [ 114.857625][ T4457] kernel write not supported for file bpf-prog (pid: 4457 comm: kworker/1:7) [ 114.904282][ T5696] tun0: tun_chr_ioctl cmd 1074812118 [ 114.910612][ T28] audit: type=1400 audit(1766467565.482:816): avc: denied { mount } for pid=5698 comm="syz.4.2215" name="/" dev="ramfs" ino=38459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 114.950205][ T28] audit: type=1400 audit(1766467565.522:817): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 115.015548][ T5711] loop4: detected capacity change from 0 to 512 [ 115.051299][ T5717] loop5: detected capacity change from 0 to 1024 [ 115.073155][ T5717] EXT4-fs: Ignoring removed nobh option [ 115.079953][ T5711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.080873][ T5717] EXT4-fs: Ignoring removed bh option [ 115.095102][ T5717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 115.122130][ T287] EXT4-fs (loop4): unmounting filesystem. [ 115.146391][ T5717] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 115.187248][ T5733] netlink: 'syz.8.2231': attribute type 2 has an invalid length. [ 115.246649][ T28] audit: type=1400 audit(1766467565.822:818): avc: denied { map } for pid=5716 comm="syz.5.2224" path="/249/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.254978][ T5705] loop7: detected capacity change from 0 to 40427 [ 115.286994][ T5705] F2FS-fs (loop7): invalid crc value [ 115.316819][ T5705] F2FS-fs (loop7): Found nat_bits in checkpoint [ 115.324419][ T28] audit: type=1400 audit(1766467565.842:819): avc: denied { execute } for pid=5716 comm="syz.5.2224" path="/249/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.359205][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 115.395879][ T5705] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 115.412667][ T5748] loop8: detected capacity change from 0 to 8192 [ 115.431944][ T28] audit: type=1400 audit(1766467566.002:820): avc: denied { mounton } for pid=5747 comm="syz.8.2236" path="/98/file2/bus" dev="loop8" ino=1048824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 115.446768][ T5735] loop4: detected capacity change from 0 to 40427 [ 115.466473][ T5735] F2FS-fs (loop4): fault_type options not supported [ 115.473301][ T4558] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 115.479097][ T5735] F2FS-fs (loop4): fault_injection options not supported [ 115.489779][ T4558] FAT-fs (loop8): Filesystem has been set read-only [ 115.489897][ T5735] F2FS-fs (loop4): Image doesn't support compression [ 115.503805][ T3188] syz-executor: attempt to access beyond end of device [ 115.503805][ T3188] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.504613][ T28] audit: type=1400 audit(1766467566.072:821): avc: denied { unmount } for pid=4558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 115.539901][ T5735] F2FS-fs (loop4): invalid crc value [ 115.556715][ T5735] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.598880][ T5735] F2FS-fs (loop4): Start checkpoint disabled! [ 115.611474][ T5735] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 115.676482][ T5735] syz.4.2230: attempt to access beyond end of device [ 115.676482][ T5735] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 115.753983][ T867] kworker/u4:76: attempt to access beyond end of device [ 115.753983][ T867] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 115.786543][ T28] audit: type=1400 audit(1766467566.362:822): avc: denied { mount } for pid=5765 comm="syz.8.2253" name="/" dev="configfs" ino=13594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.845791][ T28] audit: type=1400 audit(1766467566.392:823): avc: denied { search } for pid=5765 comm="syz.8.2253" name="/" dev="configfs" ino=13594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.915943][ T28] audit: type=1400 audit(1766467566.392:824): avc: denied { write } for pid=5765 comm="syz.8.2253" name="/" dev="configfs" ino=13594 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 116.178663][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.188006][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.189049][ T5805] loop7: detected capacity change from 0 to 256 [ 116.196713][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.210309][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.218311][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.228738][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.240541][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.249633][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.257950][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.265835][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.273950][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.281827][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.293807][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.301825][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.309631][ T4254] hid-generic 00A0:0006:0003.0027: unknown main item tag 0x0 [ 116.317582][ T4254] hid-generic 00A0:0006:0003.0027: hidraw0: HID v0.05 Device [syz1] on syz0 [ 116.398600][ T5828] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004D†ü0xffffffffffffffff [ 116.418140][ T5830] syz.3.2273[5830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.418221][ T5830] syz.3.2273[5830] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.480754][ T729] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 116.595808][ T4254] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 116.676925][ T729] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 116.688357][ T729] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 116.702381][ T729] usb 9-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 116.711890][ T729] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.722001][ T729] usb 9-1: config 0 descriptor?? [ 116.787844][ T4254] usb 5-1: config 0 has no interfaces? [ 116.794163][ T4254] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 116.803331][ T4254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.813133][ T4254] usb 5-1: config 0 descriptor?? [ 117.023611][ T2453] usb 5-1: USB disconnect, device number 21 [ 117.132286][ T729] magicmouse 0003:05AC:0269.0028: item fetching failed at offset 5/7 [ 117.140770][ T729] magicmouse 0003:05AC:0269.0028: magicmouse hid parse failed [ 117.149150][ T729] magicmouse: probe of 0003:05AC:0269.0028 failed with error -22 [ 117.341058][ T729] usb 9-1: USB disconnect, device number 6 [ 117.381042][ T5883] netlink: 'syz.5.2297': attribute type 6 has an invalid length. [ 117.884715][ T5912] loop8: detected capacity change from 0 to 512 [ 117.892808][ T5912] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 117.907264][ T5912] EXT4-fs (loop8): 1 truncate cleaned up [ 117.913796][ T5912] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 117.934789][ T4558] EXT4-fs (loop8): unmounting filesystem. [ 117.995855][ T729] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 118.198628][ T729] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 118.208747][ T729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.217887][ T729] usb 5-1: Product: syz [ 118.223043][ T729] usb 5-1: Manufacturer: syz [ 118.228025][ T729] usb 5-1: SerialNumber: syz [ 118.233408][ T729] usb 5-1: config 0 descriptor?? [ 118.239678][ T729] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 118.246952][ T729] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 118.255220][ T729] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 118.337206][ T5932] netlink: 'syz.5.2320': attribute type 4 has an invalid length. [ 118.345178][ T5932] __nla_validate_parse: 1 callbacks suppressed [ 118.345194][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 118.399978][ T5938] loop5: detected capacity change from 0 to 512 [ 118.407277][ T5938] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.418975][ T5938] EXT4-fs (loop5): 1 truncate cleaned up [ 118.425200][ T5938] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 118.441491][ T729] usb 5-1: USB disconnect, device number 22 [ 118.449519][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 118.486620][ T5945] 9pnet: p9_errstr2errno: server reported unknown error  [ 118.539794][ T5951] loop5: detected capacity change from 0 to 512 [ 118.546889][ T5951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.561984][ T5951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.571305][ T5951] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.586280][ T5951] EXT4-fs (loop5): shut down requested (0) [ 118.599229][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 118.647402][ T5960] sock: sock_set_timeout: `syz.5.2332' (pid 5960) tries to set negative timeout [ 118.688007][ T5968] loop5: detected capacity change from 0 to 256 [ 118.696651][ T5968] exfat: Deprecated parameter 'utf8' [ 118.704564][ T5968] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 118.719128][ T5968] exFAT-fs (loop5): IO charset iso8³5•V“Ì$ not found [ 119.174084][ T5995] loop5: detected capacity change from 0 to 40427 [ 119.201576][ T5995] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 119.231387][ T5995] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 119.256107][ T5995] F2FS-fs (loop5): invalid crc value [ 119.293196][ T5995] F2FS-fs (loop5): Found nat_bits in checkpoint [ 119.383708][ T5995] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 119.393604][ T5995] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 119.424414][ T6006] loop4: detected capacity change from 0 to 131072 [ 119.431887][ T6006] F2FS-fs (loop4): Test dummy encryption mode enabled [ 119.441027][ T6006] F2FS-fs (loop4): invalid crc value [ 119.476550][ T6006] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.531640][ T6006] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.699763][ T6019] loop5: detected capacity change from 0 to 256 [ 119.710190][ T6019] FAT-fs (loop5): Directory bread(block 64) failed [ 119.732483][ T6019] FAT-fs (loop5): Directory bread(block 65) failed [ 119.742319][ T6019] FAT-fs (loop5): Directory bread(block 66) failed [ 119.755957][ T6019] FAT-fs (loop5): Directory bread(block 67) failed [ 119.763247][ T6019] FAT-fs (loop5): Directory bread(block 68) failed [ 119.773354][ T6019] FAT-fs (loop5): Directory bread(block 69) failed [ 119.780153][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 119.799107][ T6019] FAT-fs (loop5): Directory bread(block 70) failed [ 119.815842][ T6019] FAT-fs (loop5): Directory bread(block 71) failed [ 119.832814][ T6019] FAT-fs (loop5): Directory bread(block 72) failed [ 119.842862][ T6019] FAT-fs (loop5): Directory bread(block 73) failed [ 119.964823][ T6027] syz.5.2356: attempt to access beyond end of device [ 119.964823][ T6027] loop5: rw=2049, sector=1224, nr_sectors = 128 limit=256 [ 120.132690][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 120.132709][ T28] audit: type=1400 audit(1766467571.699:841): avc: denied { ioctl } for pid=6034 comm="syz.3.2362" path="socket:[40292]" dev="sockfs" ino=40292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.176139][ T28] audit: type=1400 audit(1766467571.739:842): avc: denied { bind } for pid=6034 comm="syz.3.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 120.227260][ T6039] overlayfs: failed to clone upperpath [ 120.235592][ T6039] overlayfs: failed to clone upperpath [ 120.243151][ T867] kworker/u4:76: attempt to access beyond end of device [ 120.243151][ T867] loop5: rw=1, sector=1352, nr_sectors = 416 limit=256 [ 120.261208][ T1511] Bluetooth: hci0: command 0x1003 tx timeout [ 120.267395][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.294455][ T867] kworker/u4:76: attempt to access beyond end of device [ 120.294455][ T867] loop5: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 120.311550][ T6045] netlink: 'syz.7.2368': attribute type 5 has an invalid length. [ 120.375216][ T867] kworker/u4:76: attempt to access beyond end of device [ 120.375216][ T867] loop5: rw=1, sector=1960, nr_sectors = 12360 limit=256 [ 120.409347][ T867] kworker/u4:76: attempt to access beyond end of device [ 120.409347][ T867] loop5: rw=1, sector=14320, nr_sectors = 2056 limit=256 [ 120.450481][ T867] kworker/u4:76: attempt to access beyond end of device [ 120.450481][ T867] loop5: rw=1, sector=16376, nr_sectors = 4072 limit=256 [ 120.484718][ T867] kworker/u4:76: attempt to access beyond end of device [ 120.484718][ T867] loop5: rw=1, sector=20448, nr_sectors = 13104 limit=256 [ 120.526209][ T867] kworker/u4:76: attempt to access beyond end of device [ 120.526209][ T867] loop5: rw=1, sector=33552, nr_sectors = 248 limit=256 [ 120.554606][ T28] audit: type=1400 audit(1766467572.119:843): avc: denied { mount } for pid=6066 comm="syz.3.2379" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 120.605141][ T6008] loop8: detected capacity change from 0 to 262144 [ 120.616081][ T6008] F2FS-fs (loop8): invalid crc value [ 120.623915][ T28] audit: type=1400 audit(1766467572.169:844): avc: denied { setopt } for pid=6069 comm="syz.4.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.647834][ T6008] F2FS-fs (loop8): Found nat_bits in checkpoint [ 120.656189][ T729] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 120.675645][ T4457] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 120.686261][ T6008] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 120.695362][ T4457] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 120.707379][ T28] audit: type=1400 audit(1766467572.259:845): avc: denied { mounton } for pid=6007 comm="syz.8.2355" path="/117/file0/file0" dev="loop8" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.735476][ T28] audit: type=1400 audit(1766467572.279:846): avc: denied { write } for pid=6007 comm="syz.8.2355" name="work" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 120.767497][ T28] audit: type=1400 audit(1766467572.279:847): avc: denied { add_name } for pid=6007 comm="syz.8.2355" name="#27" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 120.792287][ T28] audit: type=1400 audit(1766467572.279:848): avc: denied { remove_name } for pid=6007 comm="syz.8.2355" name="#27" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 120.816561][ T28] audit: type=1400 audit(1766467572.279:849): avc: denied { rename } for pid=6007 comm="syz.8.2355" name="#27" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.840494][ T28] audit: type=1400 audit(1766467572.279:850): avc: denied { unlink } for pid=6007 comm="syz.8.2355" name="#27" dev="loop8" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.865918][ T729] usb 8-1: Using ep0 maxpacket: 16 [ 120.876962][ T729] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 120.888620][ T729] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.897511][ T729] usb 8-1: Product: syz [ 120.902668][ T729] usb 8-1: Manufacturer: syz [ 120.907672][ T729] usb 8-1: SerialNumber: syz [ 120.912981][ T729] usb 8-1: config 0 descriptor?? [ 120.923562][ T729] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 120.925914][ T2453] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 120.932167][ T729] usb 8-1: Detected FT-X [ 121.021619][ T6086] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 121.121469][ T729] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 121.135982][ T2453] usb 5-1: Using ep0 maxpacket: 32 [ 121.143298][ T2453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.158292][ T2453] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.178731][ T2453] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.190805][ T2453] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.215296][ T2453] usb 5-1: config 0 descriptor?? [ 121.232796][ T2453] hub 5-1:0.0: USB hub found [ 121.274955][ T6106] loop8: detected capacity change from 0 to 256 [ 121.282870][ T6106] exfat: Deprecated parameter 'utf8' [ 121.289515][ T6106] exfat: Deprecated parameter 'namecase' [ 121.296432][ T6106] exfat: Deprecated parameter 'utf8' [ 121.307410][ T6106] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 121.338922][ T6106] exFAT-fs (loop8): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5) [ 122.366834][ T729] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 122.618835][ T2453] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 122.636592][ T2453] usbhid 5-1:0.0: can't add hid device: -71 [ 122.642899][ T2453] usbhid: probe of 5-1:0.0 failed with error -71 [ 122.664811][ T729] usb 8-1: USB disconnect, device number 13 [ 122.683332][ T729] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 122.694459][ T2453] usb 5-1: USB disconnect, device number 23 [ 122.695106][ T729] ftdi_sio 8-1:0.0: device disconnected [ 122.714496][ T6131] device ip6erspan0 entered promiscuous mode [ 122.772928][ T6128] kvm [6127]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0xffff [ 122.784920][ T6128] kvm [6127]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc2) = 0xffff [ 122.891909][ T6151] xt_bpf: check failed: parse error [ 122.922346][ T6156] loop4: detected capacity change from 0 to 256 [ 122.940479][ T6157] x_tables: duplicate underflow at hook 4 [ 126.024810][ T6181] loop4: detected capacity change from 0 to 128 [ 126.034151][ T6181] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.070549][ T6181] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.117228][ T867] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.137944][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 126.137960][ T28] audit: type=1400 audit(1766467577.709:869): avc: denied { mount } for pid=6193 comm="syz.4.2432" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.225876][ T28] audit: type=1400 audit(1766467577.739:870): avc: denied { mounton } for pid=6193 comm="syz.4.2432" path="/491/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.253190][ T28] audit: type=1400 audit(1766467577.749:871): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.300402][ T28] audit: type=1400 audit(1766467577.819:872): avc: denied { write } for pid=6199 comm="syz.5.2434" name="raw" dev="proc" ino=4026532355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 126.405803][ T28] audit: type=1400 audit(1766467577.969:873): avc: denied { mount } for pid=6223 comm="syz.7.2446" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.448726][ T28] audit: type=1400 audit(1766467578.009:874): avc: denied { unmount } for pid=3188 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 126.487842][ T28] audit: type=1400 audit(1766467578.019:875): avc: denied { read write } for pid=6229 comm="syz.7.2448" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.517138][ T6226] device bridge0 entered promiscuous mode [ 126.528659][ T28] audit: type=1400 audit(1766467578.019:876): avc: denied { open } for pid=6229 comm="syz.7.2448" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.529877][ T6226] bridge0: port 3(macsec1) entered blocking state [ 126.562873][ T28] audit: type=1400 audit(1766467578.079:877): avc: denied { ioctl } for pid=6229 comm="syz.7.2448" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.563497][ T6226] bridge0: port 3(macsec1) entered disabled state [ 126.612277][ T6226] device bridge0 left promiscuous mode [ 126.658403][ T28] audit: type=1400 audit(1766467578.229:878): avc: denied { mounton } for pid=6239 comm="syz.4.2451" path="/proc/1063/task" dev="proc" ino=40798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 126.722144][ T6244] incfs: Options parsing error. -22 [ 126.729763][ T6244] incfs: mount failed -22 [ 126.773428][ T6251] loop5: detected capacity change from 0 to 1024 [ 126.781205][ T6251] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.807354][ T6251] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 126.848329][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 126.874706][ T6269] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2465'. [ 126.884185][ T6269] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2465'. [ 126.891852][ T919] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.921667][ T6279] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.943250][ T6279] device veth0_vlan left promiscuous mode [ 126.950349][ T6279] device veth0_vlan entered promiscuous mode [ 126.956251][ T729] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 126.957754][ T6279] device veth1_macvtap left promiscuous mode [ 126.971750][ T6279] device veth1_macvtap entered promiscuous mode [ 126.982856][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 126.993226][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.004481][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.014101][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.022187][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.031889][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.041274][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.051700][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.060307][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.069609][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.078440][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 127.087751][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.098410][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 127.108054][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.114612][ T6289] serio: Serial port ptm1 [ 127.117277][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.131864][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.140684][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.149704][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 127.158289][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 127.167053][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.175437][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 127.185812][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.195115][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.203551][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.211794][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.220259][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.229505][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.238651][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.248075][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.257046][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 127.265475][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.273241][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.281390][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.292549][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.301470][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 127.309982][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.354368][ T6296] loop8: detected capacity change from 0 to 1024 [ 127.368839][ T6296] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 127.382292][ T6296] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 127.400637][ T6296] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.414978][ T6296] EXT4-fs (loop8): This should not happen!! Data will be lost [ 127.414978][ T6296] [ 127.426110][ T6296] EXT4-fs (loop8): Total free blocks count 0 [ 127.433674][ T6296] EXT4-fs (loop8): Free/Dirty block details [ 127.441025][ T6296] EXT4-fs (loop8): free_blocks=68451041280 [ 127.448954][ T6296] EXT4-fs (loop8): dirty_blocks=80 [ 127.454344][ T6296] EXT4-fs (loop8): Block reservation details [ 127.461521][ T6296] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 127.470321][ T6302] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 127.616600][ T6316] loop5: detected capacity change from 0 to 512 [ 127.624844][ T6316] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 127.647294][ T6316] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only [ 127.704728][ T6330] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 127.714540][ T6330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.737945][ T6330] device veth0_vlan left promiscuous mode [ 127.746413][ T6330] device veth0_vlan entered promiscuous mode [ 127.755352][ T6330] device veth1_macvtap left promiscuous mode [ 127.763026][ T6330] device veth1_macvtap entered promiscuous mode [ 127.772826][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.780617][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.794372][ T6326] loop8: detected capacity change from 0 to 2048 [ 127.800050][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.810821][ T6326] EXT4-fs: Ignoring removed bh option [ 127.813966][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.823579][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.843759][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.853851][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.862160][ T6326] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 127.862679][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.873968][ T4255] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 127.883339][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.904049][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.913252][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 127.927020][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 127.939337][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 127.951617][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 127.952193][ T4558] EXT4-fs (loop8): unmounting filesystem. [ 127.960767][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 127.979860][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 127.989365][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 127.999405][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 128.008416][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 128.018487][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 128.030992][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 128.039925][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 128.051131][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 128.060485][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 128.070354][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 128.080410][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 128.089994][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.101017][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.111690][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.120658][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.132541][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.141655][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.151196][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.159942][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 128.168896][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 128.187874][ T6336] device bridge0 entered promiscuous mode [ 128.195925][ T6336] bridge0: port 3(macsec1) entered blocking state [ 128.203579][ T6336] bridge0: port 3(macsec1) entered disabled state [ 128.212795][ T6336] device bridge0 left promiscuous mode [ 128.256046][ T4254] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 128.447128][ T4254] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.460237][ T4254] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.475959][ T4254] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.497592][ T4254] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.507364][ T4254] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.516619][ T4254] usb 9-1: config 0 descriptor?? [ 128.575856][ T729] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 128.776888][ T729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.788209][ T729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.799005][ T729] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 128.808338][ T729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.817879][ T729] usb 6-1: config 0 descriptor?? [ 128.895861][ T1511] Bluetooth: hci0: command 0x1003 tx timeout [ 128.896088][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.925576][ T4254] plantronics 0003:047F:FFFF.002A: ignoring exceeding usage max [ 128.946987][ T4254] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 128.968824][ T4254] plantronics 0003:047F:FFFF.002A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 129.381326][ T729] steelseries_srws1 0003:1038:1410.002B: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 129.676483][ T6387] serio: Serial port ptm0 [ 129.686798][ T729] usb 6-1: USB disconnect, device number 16 [ 129.847747][ T6397] loop4: detected capacity change from 0 to 1024 [ 129.887322][ T6397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.901340][ T6397] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 129.919360][ T6397] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 129.933502][ T6397] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.933502][ T6397] [ 129.947206][ T6397] EXT4-fs (loop4): Total free blocks count 0 [ 129.953386][ T6397] EXT4-fs (loop4): Free/Dirty block details [ 129.959558][ T6397] EXT4-fs (loop4): free_blocks=68451041280 [ 129.965433][ T6397] EXT4-fs (loop4): dirty_blocks=80 [ 129.970936][ T6397] EXT4-fs (loop4): Block reservation details [ 129.977813][ T6397] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 130.004170][ T6397] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 130.069259][ T6416] IPv6: sit1: Disabled Multicast RS [ 130.088558][ T6418] loop4: detected capacity change from 0 to 2048 [ 130.118475][ T6418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 130.129153][ T6418] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.146050][ T6418] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 130.160230][ T6418] EXT4-fs (loop4): This should not happen!! Data will be lost [ 130.160230][ T6418] [ 130.171338][ T6418] EXT4-fs (loop4): Total free blocks count 0 [ 130.177688][ T6418] EXT4-fs (loop4): Free/Dirty block details [ 130.183659][ T6418] EXT4-fs (loop4): free_blocks=2415919104 [ 130.190009][ T6418] EXT4-fs (loop4): dirty_blocks=32 [ 130.195163][ T6418] EXT4-fs (loop4): Block reservation details [ 130.210724][ T6418] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 130.218662][ T6427] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 130.252611][ T6436] loop5: detected capacity change from 0 to 512 [ 130.264093][ T6434] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2531'. [ 130.276418][ T6436] EXT4-fs (loop5): Test dummy encryption mode enabled [ 130.300262][ T6436] EXT4-fs error (device loop5): __ext4_iget:5093: inode #11: block 1: comm syz.5.2532: invalid block [ 130.331724][ T6436] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2532: couldn't read orphan inode 11 (err -117) [ 130.362062][ T6436] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 130.384365][ T6436] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.2532: Directory hole found for htree leaf block 0 [ 130.411958][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 130.455662][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2540'. [ 130.675826][ T4253] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 130.775799][ T729] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 130.860340][ T4253] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.875972][ T4253] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 130.887991][ T4253] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 130.913485][ T6469] SELinux: Context @ is not valid (left unmapped). [ 130.914768][ T4253] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.942880][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.951408][ T4253] usb 5-1: Product: syz [ 130.955680][ T4253] usb 5-1: Manufacturer: syz [ 130.961141][ T4253] usb 5-1: SerialNumber: syz [ 130.975789][ T729] usb 6-1: Using ep0 maxpacket: 32 [ 130.986550][ T729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.005053][ T729] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.016774][ T729] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.027218][ T729] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.036458][ T729] usb 6-1: config 0 descriptor?? [ 131.042253][ T729] hub 6-1:0.0: USB hub found [ 131.326383][ T4254] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 131.335259][ T4254] usb 9-1: device reset changed ep0 maxpacket size! [ 131.343279][ T4458] usb 9-1: USB disconnect, device number 7 [ 131.446221][ T729] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 131.455587][ T729] usbhid 6-1:0.0: can't add hid device: -71 [ 131.461607][ T729] usbhid: probe of 6-1:0.0 failed with error -71 [ 131.495817][ T4458] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 131.496587][ T729] usb 6-1: USB disconnect, device number 17 [ 131.675801][ T4458] usb 9-1: Using ep0 maxpacket: 16 [ 131.682244][ T4458] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.694002][ T4458] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.704560][ T4458] usb 9-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 131.715842][ T4458] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.725070][ T4458] usb 9-1: config 0 descriptor?? [ 131.976001][ T4253] cdc_ncm 5-1:1.0: bind() failure [ 131.982508][ T4253] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 131.999370][ T4253] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 132.016425][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 132.016440][ T28] audit: type=1326 audit(1766467583.589:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.5.2561" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0838d8f749 code=0x0 [ 132.019492][ T4253] usb 5-1: USB disconnect, device number 24 [ 132.136991][ T4458] logitech-hidpp-device 0003:046D:C091.002C: item fetching failed at offset 1/5 [ 132.147296][ T4458] logitech-hidpp-device 0003:046D:C091.002C: hidpp_probe:parse failed [ 132.157051][ T4458] logitech-hidpp-device: probe of 0003:046D:C091.002C failed with error -22 [ 132.338257][ T4253] usb 9-1: USB disconnect, device number 8 [ 132.660883][ T6520] fuse: Bad value for 'fd' [ 132.666510][ T28] audit: type=1400 audit(1766467584.239:894): avc: denied { remount } for pid=6519 comm="syz.3.2568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 132.721811][ T6528] tipc: Started in network mode [ 132.727712][ T6528] tipc: Node identity -B, cluster identity 4711 [ 132.769548][ T6538] loop4: detected capacity change from 0 to 512 [ 132.787387][ T6538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.796857][ T6538] ext4 filesystem being mounted at /517/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.810904][ T6538] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #2: comm syz.4.2578: corrupted inode contents [ 132.824205][ T6538] EXT4-fs error (device loop4): ext4_dirty_inode:6135: inode #2: comm syz.4.2578: mark_inode_dirty error [ 132.836597][ T6538] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #2: comm syz.4.2578: corrupted inode contents [ 132.853103][ T6538] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2578: mark_inode_dirty error [ 132.877997][ T28] audit: type=1400 audit(1766467584.449:895): avc: denied { rename } for pid=6537 comm="syz.4.2578" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 132.884417][ T6538] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 22: comm syz.4.2578: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=19, rec_len=1, size=2048 fake=0 [ 132.912038][ T6548] loop8: detected capacity change from 0 to 128 [ 132.922582][ T6538] EXT4-fs error (device loop4) in ext4_resetent:3725: Corrupt filesystem [ 132.937129][ T6538] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2935: inode #19: comm syz.4.2578: corrupted xattr block 22 [ 132.950084][ T6538] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 132.976995][ T28] audit: type=1400 audit(1766467584.549:896): avc: denied { remount } for pid=6547 comm="syz.8.2581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 133.000973][ T287] EXT4-fs (loop4): unmounting filesystem. [ 133.336765][ T6569] loop4: detected capacity change from 0 to 2048 [ 133.343415][ T6569] EXT4-fs: Ignoring removed bh option [ 133.357108][ T6569] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.377796][ T287] EXT4-fs (loop4): unmounting filesystem. [ 133.405824][ T4457] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 133.529454][ T6586] loop4: detected capacity change from 0 to 1024 [ 133.536935][ T6586] EXT4-fs: Ignoring removed orlov option [ 133.547926][ T6586] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.566704][ T287] EXT4-fs (loop4): unmounting filesystem. [ 133.585960][ T4457] usb 9-1: Using ep0 maxpacket: 16 [ 133.593375][ T4457] usb 9-1: config index 0 descriptor too short (expected 1316, got 36) [ 133.602995][ T4457] usb 9-1: config 0 has an invalid interface number: 1 but max is -1 [ 133.614991][ T4457] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 133.628756][ T4457] usb 9-1: config 0 has no interface number 0 [ 133.636165][ T4457] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.647546][ T4457] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.657707][ T4457] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 133.667624][ T4457] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.676514][ T4457] usb 9-1: config 0 descriptor?? [ 133.728752][ T6596] loop4: detected capacity change from 0 to 512 [ 133.737901][ T6596] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 133.749736][ T6596] EXT4-fs (loop4): invalid journal inode [ 133.755801][ T6596] EXT4-fs (loop4): can't get journal size [ 133.766403][ T6596] EXT4-fs (loop4): 1 truncate cleaned up [ 133.772934][ T6596] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.788004][ T6596] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 1073741833 (only 1 groups) [ 133.806849][ T287] EXT4-fs (loop4): unmounting filesystem. [ 133.851883][ T6604] loop4: detected capacity change from 0 to 128 [ 133.862313][ T6604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 133.872053][ T6604] ext4 filesystem being mounted at /534/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.915508][ T6604] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 63: comm syz.4.2603: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 133.937390][ T6604] EXT4-fs (loop4): Remounting filesystem read-only [ 133.945082][ T6604] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 133.953693][ T6604] EXT4-fs (loop4): Remounting filesystem read-only [ 133.969938][ T287] EXT4-fs (loop4): unmounting filesystem. [ 133.991498][ T28] audit: type=1400 audit(1766467585.559:897): avc: denied { load_policy } for pid=6606 comm="syz.4.2604" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 133.995956][ T6607] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 134.023917][ T6607] SELinux: failed to load policy [ 134.049542][ T28] audit: type=1400 audit(1766467585.619:898): avc: denied { read } for pid=6608 comm="syz.5.2605" path="socket:[42745]" dev="sockfs" ino=42745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.111893][ T6613] bridge0: port 3(syz_tun) entered blocking state [ 134.119335][ T6613] bridge0: port 3(syz_tun) entered forwarding state [ 134.127506][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 134.146242][ T6613] device veth0_vlan left promiscuous mode [ 134.154150][ T6613] device veth0_vlan entered promiscuous mode [ 134.162514][ T6613] device veth1_macvtap left promiscuous mode [ 134.172357][ T6613] device veth1_macvtap entered promiscuous mode [ 134.183236][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.194400][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.206222][ T2453] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 134.220830][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.240736][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.251409][ T838] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.258509][ T838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.266615][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.276829][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.287173][ T838] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.287511][ T4457] uclogic 0003:28BD:0071.002D: pen parameters not found [ 134.297223][ T838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.297490][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.306515][ T4457] uclogic 0003:28BD:0071.002D: interface is invalid, ignoring [ 134.323561][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 134.335463][ T4457] usb 9-1: USB disconnect, device number 9 [ 134.356254][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.366309][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 134.369257][ T28] audit: type=1400 audit(1766467585.939:899): avc: denied { create } for pid=6623 comm="syz.7.2610" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.377603][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.416432][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.427506][ T6624] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 134.427541][ T6624] FAT-fs (loop15): unable to read boot sector [ 134.438057][ T28] audit: type=1400 audit(1766467585.999:900): avc: denied { mounton } for pid=6623 comm="syz.7.2610" path="/221/file0" dev="tmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.444121][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.453863][ T28] audit: type=1400 audit(1766467586.009:901): avc: denied { unlink } for pid=3188 comm="syz-executor" name="file0" dev="tmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 134.477152][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.522154][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.522860][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.523123][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.553252][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.565165][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.565446][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.586378][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 134.586705][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.587202][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 134.621632][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.621884][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.642624][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.642963][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.661174][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.669356][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.676037][ T4457] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 134.678920][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.695560][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.717514][ T4458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 134.857155][ T6647] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 134.909318][ T6655] loop4: detected capacity change from 0 to 512 [ 134.920125][ T6657] loop7: detected capacity change from 0 to 128 [ 134.931801][ T6658] loop8: detected capacity change from 0 to 512 [ 134.962476][ T6658] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 134.962515][ T6658] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 134.963121][ T6658] EXT4-fs (loop8): 1 truncate cleaned up [ 134.989068][ T6655] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.005818][ T6655] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.008197][ T6658] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 135.039242][ T6655] EXT4-fs (loop4): shut down requested (2) [ 135.056673][ T287] EXT4-fs (loop4): unmounting filesystem. [ 135.085216][ T6669] overlayfs: failed to set xattr on upper [ 135.100687][ T28] audit: type=1326 audit(1766467586.669:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.4.2629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6678f749 code=0x7ffc0000 [ 135.135922][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 135.195086][ T6658] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 135.479795][ T6714] loop5: detected capacity change from 0 to 512 [ 135.489000][ T6714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 135.489445][ T6711] loop7: detected capacity change from 0 to 40427 [ 135.499856][ T6714] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 135.507682][ T6711] F2FS-fs (loop7): Found nat_bits in checkpoint [ 135.512303][ T4257] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 135.534820][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 135.547568][ T6711] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 135.674338][ T6722] loop5: detected capacity change from 0 to 32768 [ 135.715352][ T4558] EXT4-fs (loop8): unmounting filesystem. [ 135.725769][ T4257] usb 5-1: Using ep0 maxpacket: 16 [ 135.726516][ T6722] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 135.736985][ T6722] loop5: p1 start 460800 is beyond EOD, truncated [ 135.737472][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.744200][ T6722] loop5: p2 size 83886080 extends beyond EOD, truncated [ 135.761467][ T6722] loop5: p5 start 460800 is beyond EOD, truncated [ 135.763490][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.774383][ T6722] loop5: p6 size 83886080 extends beyond EOD, [ 135.781420][ T4458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 135.785085][ T4257] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.788640][ T6722] truncated [ 135.795561][ T4257] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.809021][ T4458] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 135.811474][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.840813][ T4257] usb 5-1: config 0 descriptor?? [ 136.248874][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.256339][ T4257] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 136.266450][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.273803][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.281425][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.290400][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.299049][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.306897][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.315081][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.323009][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.331241][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.338654][ T4257] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 136.457024][ T4257] microsoft 0003:045E:07DA.002E: No inputs registered, leaving [ 136.475383][ T4257] microsoft 0003:045E:07DA.002E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 136.487011][ T4257] microsoft 0003:045E:07DA.002E: no inputs found [ 136.493351][ T4257] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway [ 136.655952][ T4457] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 136.697970][ T4257] usb 5-1: USB disconnect, device number 25 [ 136.827113][ T6771] syz.8.2675[6771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.827188][ T6771] syz.8.2675[6771] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.840750][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2675'. [ 137.104844][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 137.104859][ T28] audit: type=1400 audit(1766467588.669:926): avc: denied { ioctl } for pid=6778 comm="syz.3.2678" path="socket:[42995]" dev="sockfs" ino=42995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.105968][ T6779] netlink: 'syz.3.2678': attribute type 12 has an invalid length. [ 137.144080][ T729] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 137.144126][ T6779] netlink: 'syz.3.2678': attribute type 29 has an invalid length. [ 137.159651][ T6779] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2678'. [ 137.179392][ T6781] fuse: Bad value for 'fd' [ 137.325817][ T729] usb 9-1: Using ep0 maxpacket: 16 [ 137.329564][ T28] audit: type=1400 audit(1766467588.899:927): avc: denied { mount } for pid=6799 comm="syz.4.2687" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 137.332344][ T729] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.363211][ T28] audit: type=1400 audit(1766467588.929:928): avc: denied { mounton } for pid=6799 comm="syz.4.2687" path="/549/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 137.366411][ T729] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.402406][ T729] usb 9-1: config 0 interface 0 has no altsetting 0 [ 137.409262][ T729] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 137.418655][ T729] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.437399][ T729] usb 9-1: config 0 descriptor?? [ 137.853689][ T729] hid (null): global environment stack underflow [ 137.863039][ T729] hid (null): global environment stack underflow [ 137.869762][ T729] hid (null): report_id 0 is invalid [ 137.875225][ T729] hid (null): global environment stack underflow [ 137.881957][ T729] hid (null): report_id 0 is invalid [ 137.888165][ T729] hid (null): report_id 0 is invalid [ 137.893640][ T729] hid (null): global environment stack underflow [ 138.070672][ T4457] usb 9-1: USB disconnect, device number 10 [ 138.125922][ T4458] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 138.306837][ T4458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.317831][ T4458] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.327622][ T4458] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.341068][ T4458] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.350402][ T4458] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.358883][ T4458] usb 5-1: config 0 descriptor?? [ 138.562450][ T28] audit: type=1400 audit(1766467590.129:929): avc: denied { connect } for pid=6842 comm="syz.3.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 138.623842][ T6848] tipc: Started in network mode [ 138.640845][ T6848] tipc: Node identity 4, cluster identity 4711 [ 138.650605][ T6848] tipc: Node number set to 4 [ 138.665698][ T28] audit: type=1400 audit(1766467590.229:930): avc: denied { append } for pid=6851 comm="syz.8.2710" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 138.791972][ T4458] plantronics 0003:047F:FFFF.0030: ignoring exceeding usage max [ 138.793777][ T4458] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 138.794976][ T4458] plantronics 0003:047F:FFFF.0030: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 139.567427][ T6884] syz.8.2724[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.567493][ T6884] syz.8.2724[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.579776][ T6884] syz.8.2724[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.591308][ T6884] syz.8.2724[6884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.627552][ T6888] loop5: detected capacity change from 0 to 2048 [ 139.657975][ T6888] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.695821][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 139.724182][ T6896] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 139.740160][ T6896] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 960 with error 28 [ 139.754265][ T6896] EXT4-fs (loop5): This should not happen!! Data will be lost [ 139.754265][ T6896] [ 139.765168][ T6896] EXT4-fs (loop5): Total free blocks count 0 [ 139.774282][ T6896] EXT4-fs (loop5): Free/Dirty block details [ 139.781332][ T6896] EXT4-fs (loop5): free_blocks=2415919504 [ 139.787719][ T6896] EXT4-fs (loop5): dirty_blocks=976 [ 139.793289][ T6896] EXT4-fs (loop5): Block reservation details [ 139.801195][ T6896] EXT4-fs (loop5): i_reserved_data_blocks=61 [ 139.877324][ T28] audit: type=1400 audit(1766467591.449:931): avc: denied { sys_module } for pid=6907 comm="syz.8.2733" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 139.911361][ T6908] Invalid ELF header magic: != ELF [ 139.929008][ T28] audit: type=1400 audit(1766467591.469:932): avc: denied { module_load } for pid=6907 comm="syz.8.2733" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 139.930532][ T6910] netlink: 'syz.7.2734': attribute type 8 has an invalid length. [ 140.023747][ T28] audit: type=1400 audit(1766467591.589:933): avc: denied { create } for pid=6919 comm="syz.8.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 140.472867][ T819] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 960 with max blocks 2048 with error 28 [ 140.914426][ T28] audit: type=1400 audit(1766467592.479:934): avc: denied { mounton } for pid=6965 comm="syz.4.2758" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 140.948407][ T4457] usb 5-1: USB disconnect, device number 26 [ 140.971007][ T28] audit: type=1400 audit(1766467592.479:935): avc: denied { mounton } for pid=6965 comm="syz.4.2758" path="/" dev="ramfs" ino=44581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 140.995168][ T6249] bridge0: port 3(syz_tun) entered disabled state [ 141.039476][ T6249] device syz_tun left promiscuous mode [ 141.045252][ T6249] bridge0: port 3(syz_tun) entered disabled state [ 141.197936][ T6991] loop8: detected capacity change from 0 to 512 [ 141.216265][ T6991] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.240745][ T6991] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2196: inode #15: comm syz.8.2771: corrupted in-inode xattr [ 141.263423][ T6991] EXT4-fs (loop8): Remounting filesystem read-only [ 141.275827][ T6991] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2771: couldn't read orphan inode 15 (err -117) [ 141.305973][ T6991] EXT4-fs (loop8): Remounting filesystem read-only [ 141.312589][ T6991] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 141.375863][ T4458] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 141.384510][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.391735][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.399918][ T6995] device bridge_slave_0 entered promiscuous mode [ 141.407502][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.414895][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.422713][ T6995] device bridge_slave_1 entered promiscuous mode [ 141.430144][ T4558] EXT4-fs (loop8): unmounting filesystem. [ 141.475999][ T6995] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.483064][ T6995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.491578][ T6995] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.498802][ T6995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.518394][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.526641][ T919] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.534324][ T919] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.544802][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.555472][ T919] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.561481][ T4458] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 141.562726][ T919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.573946][ T4458] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 141.591671][ T4458] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 141.601036][ T4458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.609984][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.619301][ T919] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.627175][ T919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.635553][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.645038][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.659967][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.671853][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.680588][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.688273][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.697964][ T6995] device veth0_vlan entered promiscuous mode [ 141.710896][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.726491][ T6995] device veth1_macvtap entered promiscuous mode [ 141.739676][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.762521][ T919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.816398][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.825398][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.885987][ T4254] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 142.035662][ T4458] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 142.043293][ T4458] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input35 [ 142.052615][ T4458] input: failed to attach handler kbd to device input35, error: -5 [ 142.062834][ T4458] usb 6-1: USB disconnect, device number 18 [ 142.076887][ T4254] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.088086][ T4254] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.098089][ T4254] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 142.107526][ T4254] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.116962][ T4254] usb 9-1: config 0 descriptor?? [ 142.261729][ T7021] netlink: 'syz.7.2779': attribute type 3 has an invalid length. [ 142.270225][ T7021] netlink: 'syz.7.2779': attribute type 3 has an invalid length. [ 142.287790][ T7023] xt_hashlimit: size too large, truncated to 1048576 [ 142.526704][ T4254] isku 0003:1E7D:319C.0031: item fetching failed at offset 5/7 [ 142.534677][ T4254] isku 0003:1E7D:319C.0031: parse failed [ 142.540758][ T4254] isku: probe of 0003:1E7D:319C.0031 failed with error -22 [ 142.570075][ T7048] loop5: detected capacity change from 0 to 512 [ 142.577118][ T7048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 142.598245][ T7048] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.607476][ T7048] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.615459][ T7053] SELinux: failed to load policy [ 142.629636][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 142.629651][ T28] audit: type=1400 audit(1766467594.199:944): avc: denied { map } for pid=7047 comm="syz.5.2791" path="/352/bus/blkio.bfq.io_merged" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.675293][ T2462] EXT4-fs (loop5): unmounting filesystem. [ 142.731939][ T729] usb 9-1: USB disconnect, device number 11 [ 142.767626][ T7057] loop7: detected capacity change from 0 to 40427 [ 142.778157][ T7057] F2FS-fs (loop7): invalid crc value [ 142.791583][ T7057] F2FS-fs (loop7): Found nat_bits in checkpoint [ 142.806051][ T2462] ------------[ cut here ]------------ [ 142.811917][ T2462] WARNING: CPU: 1 PID: 2462 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 142.820784][ T2462] Modules linked in: [ 142.823255][ T28] audit: type=1400 audit(1766467594.369:945): avc: denied { rmdir } for pid=7066 comm="syz.5.2798" name="file0" dev="incremental-fs" ino=1893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.824726][ T2462] CPU: 1 PID: 2462 Comm: syz-executor Not tainted syzkaller #0 [ 142.857680][ T2462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.868076][ T2462] RIP: 0010:drop_nlink+0xc5/0x110 [ 142.873194][ T2462] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 83 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 63 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 142.893143][ T2462] RSP: 0018:ffffc90000ba7c38 EFLAGS: 00010293 [ 142.899280][ T2462] RAX: ffffffff81c3c665 RBX: ffff8881143eea18 RCX: ffff88811d0b3cc0 [ 142.907359][ T2462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.915334][ T2462] RBP: ffffc90000ba7c60 R08: 0000000000000004 R09: 0000000000000003 [ 142.923366][ T2462] R10: fffff52000174f78 R11: 1ffff92000174f78 R12: dffffc0000000000 [ 142.931457][ T2462] R13: 1ffff1102287dd4c R14: ffff8881143eea60 R15: 0000000000000000 [ 142.939465][ T2462] FS: 00005555928c1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 142.948440][ T2462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.955036][ T2462] CR2: 00005555928e44e8 CR3: 0000000121a6c000 CR4: 00000000003506a0 [ 142.963089][ T2462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.971102][ T2462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.979159][ T2462] Call Trace: [ 142.982476][ T2462] [ 142.985425][ T2462] shmem_rmdir+0x5b/0x90 [ 142.989763][ T2462] vfs_rmdir+0x393/0x500 [ 142.994174][ T2462] incfs_kill_sb+0x105/0x220 [ 142.999020][ T2462] deactivate_locked_super+0xb5/0x120 [ 143.004942][ T2462] deactivate_super+0xaf/0xe0 [ 143.009873][ T2462] cleanup_mnt+0x45f/0x4e0 [ 143.014301][ T2462] __cleanup_mnt+0x19/0x20 [ 143.017088][ T7062] loop9: detected capacity change from 0 to 40427 [ 143.018953][ T2462] task_work_run+0x1db/0x240 [ 143.029985][ T2462] ? __cfi_task_work_run+0x10/0x10 [ 143.035319][ T2462] ? __x64_sys_umount+0x125/0x160 [ 143.040452][ T2462] ? __cfi___x64_sys_umount+0x10/0x10 [ 143.041298][ T7062] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 143.046321][ T2462] exit_to_user_mode_loop+0x9b/0xb0 [ 143.046350][ T2462] exit_to_user_mode_prepare+0x87/0xd0 [ 143.061455][ T7062] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 143.065661][ T2462] syscall_exit_to_user_mode+0x1a/0x30 [ 143.065694][ T2462] do_syscall_64+0x58/0xa0 [ 143.074782][ T7062] F2FS-fs (loop9): fault_injection options not supported [ 143.079679][ T2462] ? clear_bhb_loop+0x30/0x80 [ 143.085469][ T7062] F2FS-fs (loop9): invalid crc value [ 143.091239][ T2462] ? clear_bhb_loop+0x30/0x80 [ 143.097478][ T7062] F2FS-fs (loop9): Found nat_bits in checkpoint [ 143.101397][ T2462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.101427][ T2462] RIP: 0033:0x7f0838d90a77 [ 143.101442][ T2462] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 143.101454][ T2462] RSP: 002b:00007ffdf73fd208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 143.101472][ T2462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0838d90a77 [ 143.101482][ T2462] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf73fd2c0 [ 143.101493][ T2462] RBP: 00007ffdf73fd2c0 R08: 0000000000000000 R09: 0000000000000000 [ 143.101503][ T2462] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf73fe350 [ 143.132753][ T7062] F2FS-fs (loop9): Start checkpoint disabled! [ 143.142733][ T2462] R13: 00007f0838e13d7d R14: 0000000000022dbb R15: 00007ffdf73fe390 [ 143.142758][ T2462] [ 143.152970][ T7062] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 143.159365][ T2462] ---[ end trace 0000000000000000 ]--- [ 143.163363][ T2462] ================================================================== [ 143.168113][ T7062] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 143.175476][ T2462] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 143.214439][ T28] audit: type=1400 audit(1766467594.779:946): avc: denied { mount } for pid=7075 comm="syz.3.2803" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 143.221584][ T2462] Write of size 4 at addr 0000000000000170 by task syz-executor/2462 [ 143.221607][ T2462] [ 143.221612][ T2462] CPU: 1 PID: 2462 Comm: syz-executor Tainted: G W syzkaller #0 [ 143.221629][ T2462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.221637][ T2462] Call Trace: [ 143.221645][ T2462] [ 143.221653][ T2462] __dump_stack+0x21/0x24 [ 143.230200][ T7076] overlayfs: failed to clone lowerpath [ 143.235595][ T2462] dump_stack_lvl+0xee/0x150 [ 143.309445][ T2462] ? __cfi_dump_stack_lvl+0x8/0x8 [ 143.311756][ T28] audit: type=1326 audit(1766467594.849:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7077 comm="syz.8.2804" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606cb8f749 code=0x0 [ 143.314570][ T2462] ? ihold+0x20/0x60 [ 143.314594][ T2462] ? ihold+0x20/0x60 [ 143.345379][ T2462] print_report+0x3d/0x60 [ 143.349722][ T2462] kasan_report+0x122/0x150 [ 143.354216][ T2462] ? ihold+0x20/0x60 [ 143.358243][ T2462] kasan_check_range+0x280/0x290 [ 143.363346][ T2462] __kasan_check_write+0x14/0x20 [ 143.368311][ T2462] ihold+0x20/0x60 [ 143.372051][ T2462] vfs_rmdir+0x25f/0x500 [ 143.376282][ T2462] incfs_kill_sb+0x105/0x220 [ 143.380889][ T2462] deactivate_locked_super+0xb5/0x120 [ 143.386251][ T2462] deactivate_super+0xaf/0xe0 [ 143.391073][ T2462] cleanup_mnt+0x45f/0x4e0 [ 143.395485][ T2462] __cleanup_mnt+0x19/0x20 [ 143.399900][ T2462] task_work_run+0x1db/0x240 [ 143.404482][ T2462] ? __cfi_task_work_run+0x10/0x10 [ 143.409586][ T2462] ? __x64_sys_umount+0x125/0x160 [ 143.414602][ T2462] ? __cfi___x64_sys_umount+0x10/0x10 [ 143.420104][ T2462] exit_to_user_mode_loop+0x9b/0xb0 [ 143.425290][ T2462] exit_to_user_mode_prepare+0x87/0xd0 [ 143.430820][ T2462] syscall_exit_to_user_mode+0x1a/0x30 [ 143.436274][ T2462] do_syscall_64+0x58/0xa0 [ 143.440675][ T2462] ? clear_bhb_loop+0x30/0x80 [ 143.445476][ T2462] ? clear_bhb_loop+0x30/0x80 [ 143.450172][ T2462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.456157][ T2462] RIP: 0033:0x7f0838d90a77 [ 143.460558][ T2462] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 143.480325][ T2462] RSP: 002b:00007ffdf73fd208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 143.488728][ T2462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0838d90a77 [ 143.496687][ T2462] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf73fd2c0 [ 143.504660][ T2462] RBP: 00007ffdf73fd2c0 R08: 0000000000000000 R09: 0000000000000000 [ 143.512705][ T2462] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf73fe350 [ 143.520758][ T2462] R13: 00007f0838e13d7d R14: 0000000000022dbb R15: 00007ffdf73fe390 [ 143.528729][ T2462] [ 143.531742][ T2462] ================================================================== [ 143.545927][ T2462] Disabling lock debugging due to kernel taint [ 143.552256][ T7057] F2FS-fs (loop7): Start checkpoint disabled! [ 143.560715][ T2462] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 143.568139][ T7057] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 143.568534][ T2462] #PF: supervisor write access in kernel mode [ 143.568545][ T2462] #PF: error_code(0x0002) - not-present page [ 143.588905][ T2462] PGD 12b0f0067 P4D 12b0f0067 PUD 0 [ 143.594254][ T2462] Oops: 0002 [#1] PREEMPT SMP KASAN [ 143.599635][ T2462] CPU: 0 PID: 2462 Comm: syz-executor Tainted: G B W syzkaller #0 [ 143.601579][ T919] kworker/u4:94: attempt to access beyond end of device [ 143.601579][ T919] loop9: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 143.609552][ T2462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.609570][ T2462] RIP: 0010:ihold+0x26/0x60 [ 143.609593][ T2462] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 5b ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 143.609609][ T2462] RSP: 0018:ffffc90000ba7c78 EFLAGS: 00010246 [ 143.609625][ T2462] RAX: ffff88811d0b3c00 RBX: 0000000000000000 RCX: ffff88811d0b3cc0 [ 143.672461][ T2462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.680416][ T2462] RBP: ffffc90000ba7c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 143.688561][ T2462] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff8881143eea24 [ 143.696520][ T2462] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 143.704482][ T2462] FS: 00005555928c1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 143.713748][ T2462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.720320][ T2462] CR2: 0000000000000170 CR3: 0000000121a6c000 CR4: 00000000003506b0 [ 143.728813][ T2462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.736825][ T2462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.744789][ T2462] Call Trace: [ 143.748147][ T2462] [ 143.751162][ T2462] vfs_rmdir+0x25f/0x500 [ 143.755397][ T2462] incfs_kill_sb+0x105/0x220 [ 143.760165][ T2462] deactivate_locked_super+0xb5/0x120 [ 143.765631][ T2462] deactivate_super+0xaf/0xe0 [ 143.770386][ T2462] cleanup_mnt+0x45f/0x4e0 [ 143.774789][ T2462] __cleanup_mnt+0x19/0x20 [ 143.779186][ T2462] task_work_run+0x1db/0x240 [ 143.783764][ T2462] ? __cfi_task_work_run+0x10/0x10 [ 143.789120][ T2462] ? __x64_sys_umount+0x125/0x160 [ 143.794140][ T2462] ? __cfi___x64_sys_umount+0x10/0x10 [ 143.799691][ T2462] exit_to_user_mode_loop+0x9b/0xb0 [ 143.805063][ T2462] exit_to_user_mode_prepare+0x87/0xd0 [ 143.811046][ T2462] syscall_exit_to_user_mode+0x1a/0x30 [ 143.816504][ T2462] do_syscall_64+0x58/0xa0 [ 143.821186][ T2462] ? clear_bhb_loop+0x30/0x80 [ 143.825983][ T2462] ? clear_bhb_loop+0x30/0x80 [ 143.830767][ T2462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.836739][ T2462] RIP: 0033:0x7f0838d90a77 [ 143.841139][ T2462] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 143.861076][ T2462] RSP: 002b:00007ffdf73fd208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 143.869476][ T2462] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0838d90a77 [ 143.877430][ T2462] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf73fd2c0 [ 143.885387][ T2462] RBP: 00007ffdf73fd2c0 R08: 0000000000000000 R09: 0000000000000000 [ 143.893342][ T2462] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf73fe350 [ 143.901310][ T2462] R13: 00007f0838e13d7d R14: 0000000000022dbb R15: 00007ffdf73fe390 [ 143.909354][ T2462] [ 143.912357][ T2462] Modules linked in: [ 143.916255][ T2462] CR2: 0000000000000170 [ 143.920506][ T2462] ---[ end trace 0000000000000000 ]--- [ 143.925940][ T2462] RIP: 0010:ihold+0x26/0x60 [ 143.930434][ T2462] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 5b ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 143.950115][ T2462] RSP: 0018:ffffc90000ba7c78 EFLAGS: 00010246 [ 143.956174][ T2462] RAX: ffff88811d0b3c00 RBX: 0000000000000000 RCX: ffff88811d0b3cc0 [ 143.964478][ T2462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.972438][ T2462] RBP: ffffc90000ba7c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 143.980398][ T2462] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff8881143eea24 [ 143.988364][ T2462] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 143.996345][ T2462] FS: 00005555928c1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 144.005348][ T2462] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.012006][ T2462] CR2: 0000000000000170 CR3: 0000000121a6c000 CR4: 00000000003506b0 [ 144.019982][ T2462] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.028398][ T2462] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.036375][ T2462] Kernel panic - not syncing: Fatal exception [ 144.043464][ T2462] Kernel Offset: disabled [ 144.047780][ T2462] Rebooting in 86400 seconds..