last executing test programs: 2m49.222907876s ago: executing program 32 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0x0, 0xfff1}, {0xb, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x9, 0x2, 0x8, 0xe, 0x1, 0x7, 0x6, 0xd, 0xfffffffd, 0x67d, 0xfffffff8, 0x6, 0x3, 0x6, 0x3, 0x100, 0x0, 0x5, 0x2, 0x1, 0xd878, 0xd165, 0x7, 0x80, 0x9, 0x40, 0xc, 0x1, 0x100, 0xffffffff, 0x5, 0x9, 0x8, 0x8, 0x3, 0x9, 0x401, 0x1200000, 0x7f, 0x8, 0xff, 0xa1, 0x5d9a, 0x9, 0x8000, 0x3aab5dc6, 0x7c, 0x80000000, 0x3, 0x7, 0x74, 0x2000, 0x4, 0xffffffff, 0x96ff, 0x8, 0x7, 0x6, 0x3, 0x1, 0x3747, 0x5, 0x400, 0xf, 0x18f82cba, 0x0, 0x81, 0x2, 0xfffffffa, 0x80000001, 0x2, 0x2, 0xc6, 0x10, 0x1, 0x62, 0x9, 0x4, 0x1, 0xa, 0x100, 0x490, 0x3, 0x3, 0x80000000, 0xc, 0x40, 0x9, 0x1ff, 0xce8, 0xfff, 0x300000, 0x20000009, 0x4, 0xc2, 0x6, 0x8, 0x1000, 0x1, 0x282, 0x6, 0xcb, 0xc22, 0x5, 0x6, 0x8, 0x0, 0x3788, 0x6e4a, 0xbfc, 0x6, 0x24, 0x9, 0x52f308db, 0x7, 0x5616, 0x8000, 0x9, 0x9, 0xfffffffc, 0x308f, 0x3, 0x800, 0x1, 0x3, 0x2, 0x5, 0x3, 0x7, 0x2, 0x4b3, 0x200000, 0x7, 0x1c8848d7, 0xc8, 0x2, 0xaf2, 0x7, 0xc, 0xff, 0x81, 0x8, 0x7, 0xfffff16e, 0x5, 0x30d5, 0x1, 0x3, 0x0, 0x7, 0x7, 0x1, 0x9, 0xe5, 0x40, 0x1c, 0xfffff001, 0x1, 0x8, 0xa0000000, 0x2, 0x3, 0x6, 0x7ff, 0xffffffff, 0xa9c, 0x66, 0x8df, 0x3ff, 0x2179, 0xe18, 0x0, 0x3, 0x8, 0x1, 0xffff0001, 0x8, 0xffff646f, 0x3ff, 0x4, 0x3, 0x2, 0x6, 0x800, 0x8, 0x1497, 0xfffffff9, 0x5, 0x0, 0x6, 0xeca, 0xfffffff0, 0x10001, 0x5, 0x9, 0x4, 0x7, 0x0, 0x2, 0x62ec5fea, 0x7, 0xfd4, 0x9, 0x101, 0x4, 0x6, 0xfffffffc, 0x2, 0x8, 0x4, 0xb, 0x401, 0x8bd, 0x0, 0x1c, 0x2, 0x80000001, 0x5112, 0x15, 0x6, 0xf8c, 0x100, 0x0, 0x4, 0x8, 0x7, 0x8, 0x9, 0x1, 0xfffffffc, 0x800, 0x3, 0x3, 0x2, 0x7ff, 0x3, 0x1, 0xc0e9, 0xfffffff9, 0x2, 0xb26, 0x7, 0x3, 0x1, 0xffff, 0x4, 0x10001, 0x7fffffff, 0x0, 0x18bd, 0xfc0, 0x9, 0x7, 0x0, 0x7fffffff]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xa4}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 2m45.69531727s ago: executing program 4 (id=365): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES64=0x0, @ANYBLOB="7eaa25c137141ed74f2eef250e17dfe97ce7152b87bc3a13fb356157140935f10849fb521b4b8c0764273c520ac698f0ec3973391cab362004b48c020caafffb427fc22f4bd00b97f3e47fa88c27a7205291240cb918d00cdca31c9c9232e270a23a9e116a125fd3c630f355d2555a6a5e381dc7a221c3d20eddfe5f8168edbdcf1f90ebf5437b85348455d1a574f3f183cf0bace7091beb9090b70d12b9a946e2140e2e3ec61241a268701d0a99a2d3c06fbba86c4c44af536ceedd962523123d2d0bc6dd79b43e9ea115dae6cf028b5e8428d0eb8f96d062eac335d139b4210e3d253b31d7250b3e996123aacd4c", @ANYRES32=0x0, @ANYRES8], 0x4, 0x127d, &(0x7f00000011c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0xab) sendmsg$netlink(r0, 0x0, 0x4080) ftruncate(r0, 0x8008976) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x100) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 2m45.24998274s ago: executing program 4 (id=379): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24f569f3439698fa20f", 0xde}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001bc0)="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", 0x149}], 0x1}}], 0x2, 0x2090) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x2}], 0x1, 0x4020, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x59a, 0x0, 0x0, 0x64) 2m45.115504651s ago: executing program 4 (id=385): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendto$packet(r0, &(0x7f0000000080)="11ebfce0ae01c62a832631938b21", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 2m45.049514307s ago: executing program 33 (id=385): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) sendto$packet(r0, &(0x7f0000000080)="11ebfce0ae01c62a832631938b21", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) 2m41.613892003s ago: executing program 6 (id=487): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0xfff, 0x5f91, 0x5, 0x7}) 2m41.544320889s ago: executing program 6 (id=489): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x1c}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 2m41.544143919s ago: executing program 6 (id=490): chdir(0x0) syz_read_part_table(0x63a, &(0x7f0000000640)="$eJzs0z+IXFUbB+DfvXdn7ky+XSZ8pBAjZgtrC7eJxZIs+AexSFC0sLGyE4uAhYXMLAloJ4IgFpomoFgYBLWKaCG7YiHGKlhJWGxFEG0CV+6Zmd0gosIGo+F52L33nnPec85757w3/KcN57fqoGdy7wd9q5tOk9lKMlj0X29HmSVd13XzjvXkqfefeOjJx9u8ubqcvV6Vx2FZcNzP7f9PPlsGm4NduskDV7Myzmx214ff7jb7OVypkxPJqZvTKqM/pXn70vdVLh7/q1d6JUfKfe2PBsejv//b8O93eXNncr7u2rW1UsulWB+sZmVsr2vSTatqsKzypY3Pksxuyf7NskqrKtcefXnvvqsn+xzqNsnuZB7TLoN/KMW3vWiV76ja//Sm5TorX0zzQvaD+rDtgw1P95ePq9Vbkj2HVervwrnh5yvlZK5dPHa9qur051enzvT1wa9dt70okhvdKDmxniN1qZv2dicPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcUVaSDPdbX2VjnPHx1+rTqavkm9K5kfYgvknydbVovNEeev/LmzuT8xfOjdMuFh0MB8ux3UHOvFPSO5r0w3X5y3aS0dMlZHjoBLityvn3p/jS5i+Lg1/N/LTz/+++GC/jfh6OpsdeLM1ZMlp2f3TTUtWpUs1ZTu/NC/R/i1bXlJmKBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADubA8/8tj62a26TVJVo0lSH720U0Zm5dp1Te7+9Jn3nv9ya7T7XHKm/STJjer365xt5/crddrck9y/0reG2Xs1efet/rnZj636Zbd+/IfekD/zWwAAAP//HUJmeQ==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62f81, 0x54) 2m41.243908466s ago: executing program 6 (id=500): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000002c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0x4f7}}, {@fat=@nocase}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff9}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10000}}, {@nodots}, {@fat=@quiet}, {@fat=@showexec}, {@fat=@quiet}, {@fat=@fmask={'fmask', 0x3d, 0x1fe}}, {@fat=@nfs_stale_rw}, {@fat=@quiet}, {@dots}, {@fat=@nfs_nostale_ro}, {@dots}, {@fat=@dos1xfloppy}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") setfsgid(0xee00) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='map_files\x00') fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 2m41.108233728s ago: executing program 6 (id=507): syz_mount_image$msdos(&(0x7f0000000300), &(0x7f00000001c0)='./file1\x00', 0x80000, &(0x7f0000002400)=ANY=[], 0xff, 0x2a2, &(0x7f0000001140)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0xa0, &(0x7f00000004c0)=ANY=[], 0xff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f00000009c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 2m40.982650989s ago: executing program 6 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20008850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 2m40.867523879s ago: executing program 34 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x20008850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd23, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 2m33.676636569s ago: executing program 3 (id=741): mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 2m33.466148337s ago: executing program 3 (id=743): ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12b100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r1, 0xffffffffffffffff, 0x26, 0x0, @val=@netkit}, 0x1c) close(0xffffffffffffffff) close(r2) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) socket(0x2b, 0x4, 0xfffffff7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000300000001dbdf25120000000900018021ac849e4e00053467655f736c6176655f310000fa0009"], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'pimreg\x00', @link_local}) 2m33.172602124s ago: executing program 3 (id=747): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002380)=ANY=[@ANYBLOB="8800000010000104000000400300d79c3790dd3d", @ANYRES32=r1, @ANYBLOB="24200400858d0000680012800e00010069703665727370616e00000054000280050016000200000004001200140007000000000000000000000000000000000014000600fc00000000000000000000000000000114000700fc"], 0x88}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x2008018, &(0x7f0000000700)=ANY=[], 0x0, 0x310, &(0x7f00000003c0)="$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") 2m32.835887154s ago: executing program 3 (id=754): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@shortname_mixed}, {@fat=@showexec}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@sys_immutable}, {@fat=@uid}, {@uni_xlate}, {@utf8}, {@uni_xlateno}, {@fat=@discard}]}, 0x0, 0x2a1, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1133c0e, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 2m32.640610861s ago: executing program 3 (id=757): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x2, 0xfec00000, 0x1000, &(0x7f0000000000/0x1000)=nil}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8, 0x80000000, 0x0, 0x100000000, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m32.496591684s ago: executing program 3 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m32.472930696s ago: executing program 35 (id=760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m15.998619649s ago: executing program 8 (id=2013): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a00), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002a40)={0x14, r1, 0xb01, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400) 1m15.977750121s ago: executing program 8 (id=2014): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1m15.834843094s ago: executing program 8 (id=2018): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x30008000}, 0x0) 1m15.720218164s ago: executing program 8 (id=2021): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0xc0ed0044, &(0x7f00000005c0)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@usrquota}]}, 0xfe, 0x475, &(0x7f0000001600)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x4202080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m14.212022538s ago: executing program 8 (id=2029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000003680)={0x2020}, 0x2020) 1m13.758248398s ago: executing program 8 (id=2036): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write(r0, 0x7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000680)={[{@nodiscard}, {@discard}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resuid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000000140)="$eJzs28tvG8UfAPDvrpP2lz5+CVAefSACBVHxSJq0QA9cQCBxAAmJSzmGJK1K3QY1QaJVBSlC5YgqcUcckfgDECe4IOCExBXuqFKFeqFwMlp7t7Fd23k5WcCfj7TJzM44M9/Mznp21w5gYI1nP5KIPRHxS0SMNrKtFcYbv27dvDz7583Ls0nUam/8ntTr/XHz8mxRtXjd7jxzJI1IP0riYId2Fy9eOjtTrc5fyPOTS+femVy8eOnpM+dmTs+fnj8/feLE8WNTzz07/Uxf4rwr6+uB9xcO7X/lzWuvzZ689tYPXyZF/G1x9Ml4r8LHarU+N1euvU3pZKjEjrAulYjIhmu4Pv9HoxIrgzcaL39YaueALVXLdSlergH/YUmU3QOgHMUbfXb9W2zbt/oo340XGhdAWdy38q1RMhRpXme47fq2n8Yj4uTyX59lW6x6H8KFNQCwed9k65+nOq3/0rivqd7/82dDY/mzlLsj4p6I2BcR90bU694fEQ+ss/22hyQ7I6Jt/ZNe31hka5Ot/57Pn22NtLZbJMYqeW5vPf7h5NSZ6vzR/H9yJIZ3ZvmpHm18+9LPn3Qra17/ZVvWj2ItmPfj+tDO1tfMzSzNbCjYDm5ciTgw1Ii/df2b3F5tJhGxPyIObLCNM098cahb2erx99CH5XDt84jHG+O/HG3xF5Lezycn/xfV+aOTxVFxpx9/uvp6t/Y3FX8fZOO/KzqPf24saX5eu7j+Nq7++nHXa5qJDR3/Kzt25L/fm1laujAVsSN5tdHp5v3TK68t8kX9LP4jhzvFn9bPccV/4mBEZAfxg/V8Eg/lY/dwRDwSEYd7xP/9i4++3a3snzD+c23jP9ZapW38VxI7on1P50Tl7Hdft/7FleTazn/Ha6P19FfZqbjn+a84HtbSr40dzQAAAPDvk0bEnkjSidvpNJ2YaHyGf1/sSqsLi0tPnlp49/xc4zsCYzGcFne6Rpvuh07ll/VFfrotfyy/b/xpZaSen5hdqM6VHTwMuN2d5n+lUfZbpezeAVvOx8pgcJn/MLjMfxhc5j8Mrg7zf6SMfgDbr9P7/wcl9APYfm3z32M/GCCu/2Fwmf8wuJrnf1JiP4BttTgSq39JXkLijkSkPetc2XwTxTG6DeEkWzwL9mxJn/Mp3FqULDd2r+cP1joUlXRCAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LO/AwAA//9ywdjk") syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000000)=ANY=[]) 1m13.467506854s ago: executing program 36 (id=2036): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_ep_write(r0, 0x7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000680)={[{@nodiscard}, {@discard}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resuid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000000140)="$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") syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000000)=ANY=[]) 35.41260508s ago: executing program 9 (id=2432): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000d1de95"], &(0x7f0000000180)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000001540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000540)=""/18, 0x12, 0x3, 0x4, 0x4, 0x0, 0xc05}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 35.136547784s ago: executing program 9 (id=2435): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000006a00)={0x2020}, 0x2020) 34.939589212s ago: executing program 9 (id=2438): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prlimit64(0x0, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0}) 34.05605209s ago: executing program 9 (id=2445): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 34.040612872s ago: executing program 9 (id=2446): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 33.94856907s ago: executing program 9 (id=2447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 33.94835437s ago: executing program 37 (id=2447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.752751435s ago: executing program 1 (id=2951): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa3000000000000070300000afeffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a08fee10000007303030100000000b500feff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a53"], 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000600)="c74424001c310000c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.508203407s ago: executing program 7 (id=2953): mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 2.392508507s ago: executing program 7 (id=2955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x2}) 2.383130468s ago: executing program 7 (id=2957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) wait4(r3, 0x0, 0xa, &(0x7f00000000c0)) 2.346064651s ago: executing program 7 (id=2958): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 2.172345897s ago: executing program 7 (id=2959): bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 1.759441804s ago: executing program 1 (id=2960): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x4000000a, 0x0) 1.646243443s ago: executing program 7 (id=2962): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000180)) 1.619189216s ago: executing program 38 (id=2962): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000180)) 1.582425409s ago: executing program 1 (id=2964): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xbdee, 0x801000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.379715587s ago: executing program 2 (id=2967): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) 1.272551187s ago: executing program 2 (id=2968): getpid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x8800) 833.988396ms ago: executing program 5 (id=2970): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000380)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x40}}, {@grpid}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0/file0\x00') 594.026447ms ago: executing program 2 (id=2971): setuid(0xee00) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) 536.114062ms ago: executing program 4 (id=2963): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x100000000) 533.490473ms ago: executing program 1 (id=2972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x2, 0x2, r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2, 0xb, 0x3}) 430.639982ms ago: executing program 4 (id=2973): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) fallocate(r0, 0x0, 0x9, 0x2000403) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 393.322605ms ago: executing program 1 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x2}) 284.003594ms ago: executing program 1 (id=2978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) pipe2(&(0x7f00000000c0), 0x80000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 283.823314ms ago: executing program 5 (id=2979): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="1100000042000106"], 0x18}], 0x1}, 0x0) 221.25735ms ago: executing program 0 (id=2980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) close(0x3) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) 205.843682ms ago: executing program 5 (id=2981): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=@bridge_getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8}]}, 0x28}}, 0x0) 163.735505ms ago: executing program 0 (id=2982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x20, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 116.554619ms ago: executing program 2 (id=2983): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x20082) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 116.31551ms ago: executing program 5 (id=2984): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340), 0x4) 116.00892ms ago: executing program 4 (id=2985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r5, 0x2007ffb) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x200) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f0000000180), 0x4000190, 0x0) 115.7383ms ago: executing program 5 (id=2986): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080"], 0x24}}, 0x0) 115.62095ms ago: executing program 5 (id=2987): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x59dc, 0xd, 0x1, {0x22, 0x230}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x6, 0x40}}}}}]}}]}}, 0x0) 107.547711ms ago: executing program 2 (id=2988): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/41, 0x29) getdents64(r0, 0xfffffffffffffffe, 0x29) 94.034332ms ago: executing program 0 (id=2989): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001440)=""/126, 0xb, 0x35) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000680)="f2435f01000880fb0000ac850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0xe7, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 585.44µs ago: executing program 0 (id=2990): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x18, 0x39, 0x1, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 244.6µs ago: executing program 2 (id=2991): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000180)={[{@noinline_xattr}, {@four_active_logs}, {@discard}, {@fault_injection={'fault_injection', 0x3d, 0xa0c8}}, {@fault_type={'fault_type', 0x3d, 0x302}}, {@lfs_mode}, {@inline_data}, {@fastboot}, {@fsync_mode_strict}, {@discard_unit_section}]}, 0x21, 0x5548, &(0x7f00000058c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) lseek(r0, 0x100000000, 0x2) 124.47µs ago: executing program 0 (id=2992): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x0}, 0x30) 0s ago: executing program 0 (id=2993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000040)={0xa8, 0x0, 0x3}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) kernel console output (not intermixed with test programs): main item tag 0x0 [ 102.831764][ T3865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1415'. [ 102.837107][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.857503][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.865032][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.872530][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.880070][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.889820][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.897776][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.905450][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.913604][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.921132][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.928606][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.936059][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.943565][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.951079][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.958599][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.966230][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.973790][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.981343][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.988954][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 102.996470][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.004012][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.011524][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.019065][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.026546][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x1 [ 103.034172][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.041695][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.049217][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.056800][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.064305][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x1 [ 103.071931][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.079452][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.086971][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.094455][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.102079][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.109620][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.117151][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.124653][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.132184][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x5 [ 103.139664][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.147132][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.154594][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.162438][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.169977][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.177467][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.184906][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.192381][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.199815][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.207345][ T692] hid-generic 0003:060B:500A.0007: unknown main item tag 0x0 [ 103.214767][ T692] hid-generic 0003:060B:500A.0007: unexpected long global item [ 103.222569][ T692] hid-generic: probe of 0003:060B:500A.0007 failed with error -22 [ 103.232837][ T692] usb 6-1: USB disconnect, device number 4 [ 103.280615][ T3882] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 103.506934][ T286] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 103.606978][ T692] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 103.636925][ T60] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 103.856956][ T692] usb 6-1: Using ep0 maxpacket: 32 [ 103.863143][ T3902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1432'. [ 103.872260][ T3902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 103.907012][ T60] usb 8-1: device descriptor read/64, error -71 [ 103.957090][ T286] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 103.966256][ T286] usb 9-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0 [ 103.974404][ T286] usb 9-1: Manufacturer: syz [ 103.979146][ T692] usb 6-1: config 0 has an invalid interface number: 206 but max is 0 [ 103.987682][ T692] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.998406][ T286] usb 9-1: config 0 descriptor?? [ 104.003468][ T692] usb 6-1: config 0 has no interface number 0 [ 104.009904][ T692] usb 6-1: config 0 interface 206 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 104.020090][ T692] usb 6-1: config 0 interface 206 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.037398][ T286] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 104.050030][ T286] usb 9-1: Detected FT-X [ 104.076629][ T3912] Invalid ELF header type: 3 != 1 [ 104.197015][ T692] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=e9.b5 [ 104.206471][ T692] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 104.214787][ T692] usb 6-1: Product: syz [ 104.219227][ T692] usb 6-1: Manufacturer: syz [ 104.223848][ T692] usb 6-1: SerialNumber: syz [ 104.229873][ T692] usb 6-1: config 0 descriptor?? [ 104.247109][ T3880] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.257104][ T286] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 104.275746][ T464] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 104.287145][ T286] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 104.306998][ T286] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 104.314201][ T286] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.323599][ T286] usb 9-1: USB disconnect, device number 5 [ 104.330888][ T286] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.341404][ T286] ftdi_sio 9-1:0.0: device disconnected [ 104.456959][ T60] usb 8-1: device descriptor read/64, error -71 [ 104.482897][ T20] usb 6-1: USB disconnect, device number 5 [ 104.516966][ T464] usb 2-1: Using ep0 maxpacket: 16 [ 104.637011][ T464] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.647517][ T464] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.726957][ T60] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 104.812389][ T3928] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1445'. [ 104.817283][ T464] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.830696][ T464] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.838790][ T464] usb 2-1: Product: syz [ 104.843017][ T464] usb 2-1: Manufacturer: syz [ 104.848884][ T464] usb 2-1: SerialNumber: syz [ 104.873308][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1445'. [ 104.946847][ T3943] bridge0: port 3(syz_tun) entered blocking state [ 104.953774][ T3943] bridge0: port 3(syz_tun) entered disabled state [ 104.960980][ T3943] device syz_tun entered promiscuous mode [ 105.016931][ T60] usb 8-1: device descriptor read/64, error -71 [ 105.177022][ T464] usb 2-1: 0:2 : does not exist [ 105.199875][ T464] usb 2-1: USB disconnect, device number 9 [ 105.406957][ T60] usb 8-1: device descriptor read/64, error -71 [ 105.413945][ T338] udevd[338]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 105.546990][ T60] usb usb8-port1: attempt power cycle [ 105.718979][ T3973] tipc: Enabling of bearer rejected, failed to enable media [ 106.046931][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 106.126933][ T385] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 106.216953][ T60] usb 8-1: device descriptor read/8, error -71 [ 106.367080][ T385] usb 9-1: Using ep0 maxpacket: 8 [ 106.427023][ T60] usb 8-1: device descriptor read/8, error -71 [ 106.486984][ T385] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.497193][ T385] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 106.506236][ T385] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.515046][ T385] usb 9-1: config 0 descriptor?? [ 106.579199][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 106.579215][ T30] audit: type=1326 audit(1767512791.378:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.608820][ T30] audit: type=1326 audit(1767512791.378:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.635621][ T30] audit: type=1326 audit(1767512791.378:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.659578][ T30] audit: type=1326 audit(1767512791.378:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.683576][ T30] audit: type=1326 audit(1767512791.378:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.707256][ T30] audit: type=1326 audit(1767512791.378:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.731066][ T30] audit: type=1326 audit(1767512791.378:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.754796][ T30] audit: type=1326 audit(1767512791.378:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.778258][ T30] audit: type=1326 audit(1767512791.378:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4013 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 106.917011][ T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 107.006972][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 107.126952][ T60] usb 8-1: config 0 has an invalid interface number: 177 but max is 0 [ 107.136434][ T60] usb 8-1: config 0 has no interface number 0 [ 107.144915][ T60] usb 8-1: config 0 interface 177 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 107.161236][ T60] usb 8-1: config 0 interface 177 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 107.178021][ T60] usb 8-1: config 0 interface 177 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.387061][ T60] usb 8-1: New USB device found, idVendor=045e, idProduct=04e5, bcdDevice=e7.f2 [ 107.400712][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.416460][ T60] usb 8-1: Product: syz [ 107.426321][ T60] usb 8-1: Manufacturer: syz [ 107.435492][ T60] usb 8-1: SerialNumber: syz [ 107.469691][ T60] usb 8-1: config 0 descriptor?? [ 107.500338][ T4081] netlink: 'syz.5.1516': attribute type 3 has an invalid length. [ 107.524871][ T4081] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1516'. [ 107.699823][ T4092] serio: Serial port ttyS3 [ 107.720420][ T60] usb 8-1: USB disconnect, device number 6 [ 107.782714][ T4105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1526'. [ 108.036938][ T286] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 108.301607][ T4130] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1536'. [ 108.311120][ T4130] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1536'. [ 108.352728][ T4135] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1538'. [ 108.535216][ T30] audit: type=1326 audit(1767512793.328:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.0.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x7ffc0000 [ 108.668773][ T4163] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.697003][ T286] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 108.706254][ T286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.714319][ T286] usb 2-1: Product: syz [ 108.718560][ T286] usb 2-1: Manufacturer: syz [ 108.723311][ T286] usb 2-1: SerialNumber: syz [ 108.729102][ T286] usb 2-1: config 0 descriptor?? [ 108.753338][ T26] usb 9-1: USB disconnect, device number 6 [ 108.765690][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1552'. [ 109.216916][ T26] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 109.299810][ T4187] loop7: detected capacity change from 0 to 256 [ 109.337630][ T4187] FAT-fs (loop7): Unrecognized mount option "umask=0000000000000ý000000004" or missing value [ 109.456970][ T26] usb 9-1: Using ep0 maxpacket: 16 [ 109.525213][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'. [ 109.569157][ T4210] loop7: detected capacity change from 0 to 512 [ 109.587029][ T26] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 109.598090][ T4210] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.610521][ T26] usb 9-1: config 1 has no interface number 0 [ 109.619397][ T4210] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 109.623517][ T26] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 109.632217][ T4210] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 109.646092][ T4210] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 109.655822][ T4210] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 109.664595][ T4210] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,noinit_itable,noblock_validity,data_err=abort,data_err=ignore,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 109.675225][ T26] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 109.693911][ T4210] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.1574: dx entry: limit 65535 != root limit 120 [ 109.709229][ T4210] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.1574: Corrupt directory, running e2fsck is recommended [ 109.723701][ T4210] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.1574: path /130/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 109.761441][ T26] usb 9-1: config 1 interface 105 has no altsetting 0 [ 109.926958][ T26] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 109.936146][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.944198][ T26] usb 9-1: Product: syz [ 109.948570][ T26] usb 9-1: Manufacturer: syz [ 109.953163][ T26] usb 9-1: SerialNumber: syz [ 109.977132][ T4171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.984219][ T4171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.056921][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 110.296917][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 110.417195][ T4171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.424277][ T4171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 110.427608][ T60] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.441397][ T60] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.617014][ T60] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.655852][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.664161][ T60] usb 8-1: Product: syz [ 110.668592][ T60] usb 8-1: Manufacturer: syz [ 110.673215][ T60] usb 8-1: SerialNumber: syz [ 110.774217][ T692] usb 2-1: USB disconnect, device number 10 [ 111.097002][ T26] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 111.127129][ T26] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 111.140722][ T26] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 7e:5d:b5:11:e2:a7 [ 111.155322][ T26] usb 9-1: USB disconnect, device number 7 [ 111.161839][ T26] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 111.179572][ T60] usb 8-1: cannot find UAC_HEADER [ 111.184704][ T60] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 111.207002][ T26] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 111.221161][ T26] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 111.237907][ T26] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 111.377759][ T60] usb 8-1: USB disconnect, device number 7 [ 111.394692][ T4287] loop9: detected capacity change from 0 to 7 [ 111.776956][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 111.776974][ T30] audit: type=1400 audit(1767512796.508:5930): avc: denied { setopt } for pid=4295 comm="syz.8.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.823258][ T30] audit: type=1400 audit(1767512796.618:5931): avc: denied { write } for pid=4303 comm="syz.5.1614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 111.964990][ T4300] loop8: detected capacity change from 0 to 40427 [ 112.009616][ T4300] F2FS-fs (loop8): Unrecognized mount option "age_extent_cache" or missing value [ 112.252622][ T4334] loop7: detected capacity change from 0 to 1024 [ 112.274675][ T4338] tipc: Can't bind to reserved service type 0 [ 112.291344][ T4334] EXT4-fs (loop7): Ignoring removed nobh option [ 112.300971][ T4334] EXT4-fs (loop7): Ignoring removed bh option [ 112.551175][ T4334] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 112.608721][ T30] audit: type=1400 audit(1767512797.398:5932): avc: denied { append } for pid=4333 comm="syz.7.1628" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.616029][ T4334] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3871: comm syz.7.1628: Allocating blocks 497-513 which overlap fs metadata [ 112.659813][ T4333] EXT4-fs (loop7): pa ffff8881125e0888: logic 16, phys. 129, len 24 [ 112.667981][ T4333] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 112.799168][ T4353] overlayfs: failed to clone upperpath [ 113.097516][ T4397] fuse: Bad value for 'fd' [ 113.196680][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1659'. [ 113.314240][ T30] audit: type=1326 audit(1767512798.108:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4420 comm="syz.0.1664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c13e7f749 code=0x0 [ 113.416954][ T26] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 113.456933][ T385] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 113.666924][ T26] usb 9-1: Using ep0 maxpacket: 8 [ 113.696903][ T385] usb 8-1: Using ep0 maxpacket: 8 [ 113.787067][ T26] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.797315][ T26] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 113.806401][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.815257][ T26] usb 9-1: config 0 descriptor?? [ 113.976993][ T385] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.986101][ T385] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.994359][ T385] usb 8-1: Product: syz [ 113.998732][ T385] usb 8-1: Manufacturer: syz [ 114.003361][ T385] usb 8-1: SerialNumber: syz [ 114.010002][ T385] usb 8-1: config 0 descriptor?? [ 114.133494][ T4431] overlayfs: failed to clone upperpath [ 114.180000][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 114.181264][ T4441] overlayfs: failed to clone lowerpath [ 114.189055][ T30] audit: type=1400 audit(1767512798.978:5934): avc: denied { mount } for pid=4439 comm="syz.0.1673" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 114.282885][ T4456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 114.441803][ T4463] loop2: detected capacity change from 0 to 7 [ 114.776967][ T286] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 115.237056][ T286] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 115.251996][ T286] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 115.261376][ T286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.270412][ T286] usb 2-1: config 0 descriptor?? [ 115.321645][ T4483] tmpfs: Unknown parameter 'usrquota' [ 115.509838][ T385] usb 2-1: USB disconnect, device number 11 [ 115.788900][ T4498] overlayfs: failed to clone upperpath [ 116.085889][ T60] usb 9-1: USB disconnect, device number 8 [ 116.207178][ T385] usb 8-1: USB disconnect, device number 8 [ 116.456297][ T4510] loop8: detected capacity change from 0 to 40427 [ 116.472104][ T4510] F2FS-fs (loop8): fault_injection options not supported [ 116.497188][ T4510] F2FS-fs (loop8): fault_type options not supported [ 116.524800][ T4510] F2FS-fs (loop8): invalid crc value [ 116.558308][ T4510] F2FS-fs (loop8): Found nat_bits in checkpoint [ 116.629895][ T4512] loop7: detected capacity change from 0 to 40427 [ 116.665608][ T4510] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 116.667988][ T4512] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 116.695043][ T30] audit: type=1400 audit(1767512801.488:5935): avc: denied { read write } for pid=4509 comm="syz.8.1706" path="/143/file0/file1" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.716792][ T4512] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 116.732164][ T4512] F2FS-fs (loop7): invalid crc value [ 116.737605][ T4510] attempt to access beyond end of device [ 116.737605][ T4510] loop8: rw=524288, want=45072, limit=40427 [ 116.761291][ T4510] attempt to access beyond end of device [ 116.761291][ T4510] loop8: rw=0, want=45072, limit=40427 [ 116.779573][ T30] audit: type=1400 audit(1767512801.518:5936): avc: denied { map } for pid=4509 comm="syz.8.1706" path="/143/file0/file1" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.792245][ T4534] attempt to access beyond end of device [ 116.792245][ T4534] loop8: rw=0, want=45072, limit=40427 [ 116.820374][ T4512] F2FS-fs (loop7): Found nat_bits in checkpoint [ 116.840019][ T4539] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.857415][ T4539] overlayfs: missing 'lowerdir' [ 116.877513][ T2223] attempt to access beyond end of device [ 116.877513][ T2223] loop8: rw=2049, want=45104, limit=40427 [ 116.922870][ T4512] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 116.933211][ T4512] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 117.224579][ T4562] loop8: detected capacity change from 0 to 256 [ 117.250094][ T30] audit: type=1400 audit(1767512802.048:5937): avc: denied { mounton } for pid=4563 comm="syz.0.1729" path="/530/file0" dev="tmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 117.313790][ T4568] loop7: detected capacity change from 0 to 512 [ 117.345915][ T4568] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 117.406634][ T4568] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.1723: bad orphan inode 13 [ 117.427074][ T4568] ext4_test_bit(bit=12, block=18) = 1 [ 117.432520][ T4568] is_bad_inode(inode)=0 [ 117.436691][ T4568] NEXT_ORPHAN(inode)=0 [ 117.440951][ T4568] max_ino=32 [ 117.444174][ T4568] i_nlink=1 [ 117.447414][ T4568] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 117.460559][ T30] audit: type=1400 audit(1767512802.258:5938): avc: denied { setattr } for pid=4567 comm="syz.7.1723" path="/146/file1" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.635717][ T4585] overlayfs: missing 'lowerdir' [ 117.816097][ T4572] loop8: detected capacity change from 0 to 40427 [ 117.850812][ T4572] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 117.867095][ T4572] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 117.937547][ T4574] overlayfs: failed to clone upperpath [ 117.940764][ T4572] F2FS-fs (loop8): Found nat_bits in checkpoint [ 118.009902][ T4568] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 118.037143][ T4572] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 118.044283][ T4572] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 118.084561][ T4568] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1723: bg 0: block 248: padding at end of block bitmap is not set [ 118.129770][ T4568] Quota error (device loop7): write_blk: dquota write failed [ 118.146944][ T4568] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 118.196962][ T4568] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1723: Failed to acquire dquot type 1 [ 118.235025][ T4568] syz.7.1723 (4568) used greatest stack depth: 20000 bytes left [ 118.584973][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1751'. [ 118.635810][ T30] audit: type=1400 audit(1767512803.428:5939): avc: denied { read } for pid=4625 comm="syz.1.1753" name="file0" dev="incremental-fs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.823942][ T30] audit: type=1400 audit(1767512803.558:5940): avc: denied { open } for pid=4625 comm="syz.1.1753" path="/336/file0/file0" dev="incremental-fs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.045589][ T4631] netlink: 'syz.8.1754': attribute type 4 has an invalid length. [ 119.265696][ T4641] loop7: detected capacity change from 0 to 1024 [ 119.311131][ T4641] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 119.377380][ T4641] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 119.528436][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1759'. [ 119.547617][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 119.578911][ T30] audit: type=1400 audit(1767512804.378:5941): avc: denied { map } for pid=4647 comm="syz.1.1759" path="socket:[35328]" dev="sockfs" ino=35328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.626924][ T30] audit: type=1400 audit(1767512804.378:5942): avc: denied { accept } for pid=4647 comm="syz.1.1759" path="socket:[35328]" dev="sockfs" ino=35328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.907023][ T4654] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000004D†ü0xffffffffffffffff [ 120.356711][ T30] audit: type=1326 audit(1767512805.148:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 120.387725][ T30] audit: type=1326 audit(1767512805.148:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4674 comm="syz.1.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 120.687543][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1769'. [ 121.798812][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 121.807940][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 121.817013][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 121.826079][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 121.835079][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 121.844115][ T4719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1780'. [ 122.536154][ T4742] device bridge0 entered promiscuous mode [ 122.562473][ T4742] device macsec1 entered promiscuous mode [ 122.582387][ T4742] bridge0: port 3(macsec1) entered blocking state [ 122.618780][ T4742] bridge0: port 3(macsec1) entered disabled state [ 122.637243][ T4742] device bridge0 left promiscuous mode [ 122.789016][ T26] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 123.022999][ T4777] fuse: Bad value for 'fd' [ 123.217153][ T26] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 123.254835][ T26] usb 2-1: can't read configurations, error -61 [ 123.496951][ T26] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 124.846992][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 124.847013][ T30] audit: type=1400 audit(1767512809.608:5968): avc: denied { mounton } for pid=4790 comm="syz.7.1814" path="/proc/393/cgroup" dev="proc" ino=34746 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 125.137170][ T26] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 125.151744][ T26] usb 2-1: can't read configurations, error -61 [ 125.172725][ T26] usb usb2-port1: attempt power cycle [ 125.249752][ T4815] __nla_validate_parse: 54 callbacks suppressed [ 125.249780][ T4815] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1822'. [ 125.438412][ T4817] loop8: detected capacity change from 0 to 512 [ 125.482591][ T4817] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 125.498351][ T4817] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.511884][ T4817] EXT4-fs error (device loop8): ext4_do_update_inode:5249: inode #2: comm syz.8.1823: corrupted inode contents [ 125.524570][ T4817] EXT4-fs error (device loop8): ext4_dirty_inode:6085: inode #2: comm syz.8.1823: mark_inode_dirty error [ 125.551675][ T4817] EXT4-fs error (device loop8): ext4_do_update_inode:5249: inode #2: comm syz.8.1823: corrupted inode contents [ 125.564172][ T4817] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #2: comm syz.8.1823: mark_inode_dirty error [ 125.578352][ T4817] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #18: comm syz.8.1823: directory missing '.' [ 125.764931][ T4832] overlayfs: failed to clone lowerpath [ 126.316141][ T4855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 126.432265][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 126.877400][ T4860] input: syz1 as /devices/virtual/input/input10 [ 127.308132][ T4873] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1843'. [ 127.315205][ T4872] binder: 4871:4872 ioctl c0306201 200000000540 returned -22 [ 127.545363][ T4890] loop7: detected capacity change from 0 to 512 [ 127.757896][ T4890] EXT4-fs (loop7): Unrecognized mount option "permit_directio" or missing value [ 129.314624][ T26] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 129.458408][ T4917] loop7: detected capacity change from 0 to 512 [ 129.502109][ T4917] EXT4-fs (loop7): Ignoring removed bh option [ 129.540342][ T4917] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 129.567407][ T4917] EXT4-fs (loop7): Unrecognized mount option "=" or missing value [ 130.457002][ T26] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.787714][ T26] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.806102][ T26] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.833655][ T26] usb 9-1: Product: syz [ 130.941814][ T26] usb 9-1: Manufacturer: syz [ 130.958528][ T26] usb 9-1: SerialNumber: syz [ 131.597019][ T26] cdc_ncm 9-1:1.0: bind() failure [ 131.618290][ T26] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 131.639241][ T26] cdc_ncm 9-1:1.1: bind() failure [ 131.656705][ T26] usb 9-1: USB disconnect, device number 9 [ 131.723634][ T30] audit: type=1400 audit(1767512816.518:5969): avc: denied { create } for pid=4962 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 132.431089][ T26] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 132.834534][ T4987] loop7: detected capacity change from 0 to 512 [ 132.948597][ T4987] EXT4-fs (loop7): Unrecognized mount option "permit_directio" or missing value [ 133.076982][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.113330][ T26] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.152144][ T26] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.220577][ T26] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.259906][ T26] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.297464][ T26] usb 9-1: config 0 descriptor?? [ 133.838267][ T26] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 133.868451][ T26] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 133.906022][ T5035] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1908'. [ 134.087179][ T5033] tmpfs: Unsupported parameter 'mpol' [ 134.762337][ T385] usb 9-1: USB disconnect, device number 10 [ 135.798686][ T5066] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 136.872471][ T30] audit: type=1400 audit(1767512821.668:5970): avc: denied { write } for pid=5074 comm="syz.8.1921" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 137.046477][ T30] audit: type=1400 audit(1767512821.808:5971): avc: denied { read } for pid=5087 comm="syz.7.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.086945][ T30] audit: type=1400 audit(1767512821.848:5972): avc: denied { write } for pid=5089 comm="syz.8.1929" path="socket:[36014]" dev="sockfs" ino=36014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.124195][ T5098] device bridge0 entered promiscuous mode [ 137.137945][ T5097] device bridge0 left promiscuous mode [ 137.147023][ T30] audit: type=1400 audit(1767512821.858:5973): avc: denied { write } for pid=5087 comm="syz.7.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.195875][ T30] audit: type=1400 audit(1767512821.908:5974): avc: denied { getopt } for pid=5095 comm="syz.0.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.199350][ T5105] binder: BINDER_SET_CONTEXT_MGR already set [ 137.226967][ T5105] binder: 5103:5105 ioctl 4018620d 200000000040 returned -16 [ 137.251361][ T5105] binder: 5103:5105 ioctl c0306201 200000000240 returned -11 [ 138.592914][ T5132] x_tables: duplicate underflow at hook 4 [ 140.386770][ T26] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 140.428155][ T5163] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5163 comm=syz.5.1957 [ 140.598583][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1960'. [ 140.750313][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.766309][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.781256][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.800305][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.817295][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.830139][ T26] usb 2-1: config 0 descriptor?? [ 140.868051][ T30] audit: type=1400 audit(1767512825.658:5975): avc: denied { read } for pid=5187 comm="syz.5.1966" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.934950][ T30] audit: type=1326 audit(1767512825.728:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5201 comm="syz.5.1972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f8f3ad749 code=0x0 [ 141.077422][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1975'. [ 141.310085][ T26] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 141.317779][ T26] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 141.325708][ T26] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 141.334752][ T26] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 141.379068][ T26] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 141.435707][ T30] audit: type=1400 audit(1767512826.228:5977): avc: denied { create } for pid=5217 comm="syz.0.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 141.457688][ T5220] syz.0.1978 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.589111][ T26] usb 2-1: USB disconnect, device number 15 [ 141.781613][ T5226] tipc: Enabled bearer , priority 0 [ 141.803947][ T5226] device syzkaller0 entered promiscuous mode [ 141.816207][ T5225] tipc: Resetting bearer [ 141.839771][ T5225] tipc: Disabling bearer [ 142.196958][ T385] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 142.456966][ T385] usb 8-1: Using ep0 maxpacket: 16 [ 142.657006][ T385] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.669131][ T385] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 142.679315][ T385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.696237][ T385] usb 8-1: config 0 descriptor?? [ 142.759884][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 142.795228][ T5282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2003'. [ 142.970099][ T5297] tmpfs: Unsupported parameter 'mpol' [ 142.992935][ T5300] loop8: detected capacity change from 0 to 128 [ 143.010077][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.017238][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.024745][ T5288] device bridge_slave_0 entered promiscuous mode [ 143.037665][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.052375][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.060157][ T5288] device bridge_slave_1 entered promiscuous mode [ 143.160510][ T5313] loop8: detected capacity change from 0 to 256 [ 143.164107][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.174079][ T5288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.181419][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.188486][ T5288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.242893][ T385] hid-generic 0003:04D8:00DD.000A: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 143.268946][ T1552] device syz_tun left promiscuous mode [ 143.274551][ T1552] bridge0: port 3(syz_tun) entered disabled state [ 143.307751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.315465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.324010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.366267][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.383012][ T5329] loop8: detected capacity change from 0 to 512 [ 143.395113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.428117][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.442040][ T5288] device veth0_vlan entered promiscuous mode [ 143.449553][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.458504][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.466049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.491538][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.500974][ T5288] device veth1_macvtap entered promiscuous mode [ 143.623753][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.640199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.680091][ T60] usb 8-1: USB disconnect, device number 9 [ 143.698223][ T5329] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.2021: Invalid inode bitmap blk 4 in block_group 0 [ 143.717413][ T5329] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 144.817441][ T30] audit: type=1400 audit(1767512829.618:5978): avc: denied { setopt } for pid=5351 comm="syz.5.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.837165][ T5344] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 144.887073][ T2223] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 20: comm syz-executor: path /196/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 145.015208][ T30] audit: type=1400 audit(1767512829.808:5979): avc: denied { rmdir } for pid=2223 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 145.039568][ T2223] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 145.073702][ T2223] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 20: comm syz-executor: path /196/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 145.096078][ T2223] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 145.117761][ T2223] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 20: comm syz-executor: path /196/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 145.140997][ T2223] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 145.182789][ T2223] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 20: comm syz-executor: path /196/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 145.205420][ T2223] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0 [ 145.232661][ T2223] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 20: comm syz-executor: path /196/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0 [ 145.297401][ T8] tipc: Left network mode [ 145.744262][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.751622][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.809774][ T5374] device bridge_slave_0 entered promiscuous mode [ 145.817216][ T5374] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.824481][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.832644][ T5374] device bridge_slave_1 entered promiscuous mode [ 146.508188][ T8] device bridge_slave_1 left promiscuous mode [ 146.514780][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.530777][ T8] device bridge_slave_0 left promiscuous mode [ 146.537640][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.554050][ T8] device veth1_macvtap left promiscuous mode [ 146.641042][ T8] device veth0_vlan left promiscuous mode [ 148.840611][ T5421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2052'. [ 149.312191][ T30] audit: type=1400 audit(1767512834.108:5980): avc: denied { accept } for pid=5430 comm="syz.0.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.455720][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.476357][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.497344][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.527552][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.556652][ T603] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.563780][ T603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.601283][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 149.637154][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.672293][ T603] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.679451][ T603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.172552][ T5449] mip6: mip6_destopt_init_state: spi is not 0: 3523477504 [ 150.459904][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.497284][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.535602][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.566028][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.596212][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 150.627063][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.665877][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 150.704347][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.725503][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.764895][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.792905][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.827765][ T5374] device veth0_vlan entered promiscuous mode [ 150.863168][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.874781][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.895125][ T5374] device veth1_macvtap entered promiscuous mode [ 151.018962][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.171490][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.236224][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.293732][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.368319][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.666985][ T60] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 151.813280][ T5476] xt_hashlimit: size too large, truncated to 1048576 [ 151.886925][ T20] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 152.016891][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 152.137008][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.148007][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.158121][ T60] usb 8-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 153.505575][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.787277][ T60] usb 8-1: config 0 descriptor?? [ 153.796953][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.831184][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.852634][ T20] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 153.872152][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.891464][ T20] usb 1-1: config 0 descriptor?? [ 154.166956][ T385] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 154.298978][ T60] wacom 0003:056A:00CC.000B: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.7-1/input0 [ 154.368224][ T20] steelseries_srws1 0003:1038:1410.000C: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 154.406890][ T385] usb 10-1: Using ep0 maxpacket: 32 [ 154.512246][ T286] usb 8-1: USB disconnect, device number 10 [ 154.527022][ T385] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 154.539083][ T385] usb 10-1: config 0 has no interface number 0 [ 154.556803][ T385] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 154.570839][ T26] usb 1-1: USB disconnect, device number 6 [ 154.586770][ T5616] incfs: Options parsing error. -22 [ 154.592579][ T5616] incfs: mount failed -22 [ 154.747030][ T385] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 154.756222][ T385] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.764412][ T385] usb 10-1: Product: syz [ 155.042399][ T385] usb 10-1: Manufacturer: syz [ 155.047332][ T385] usb 10-1: SerialNumber: syz [ 155.053269][ T385] usb 10-1: config 0 descriptor?? [ 155.077015][ T5505] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.246454][ T5632] syz.0.2090[5632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.246551][ T5632] syz.0.2090[5632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.302899][ T5505] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 155.858546][ T30] audit: type=1400 audit(1767512840.658:5981): avc: denied { bind } for pid=5642 comm="syz.5.2094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 155.879637][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2094'. [ 155.906905][ T20] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.056476][ T5649] loop7: detected capacity change from 0 to 512 [ 156.167762][ T5649] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.181320][ T5649] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.276993][ T20] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 156.296909][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 156.326236][ T20] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 156.338801][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.360858][ T20] usb 1-1: config 0 descriptor?? [ 156.848285][ T20] magicmouse 0003:05AC:0269.000D: item fetching failed at offset 5/7 [ 156.867106][ T20] magicmouse 0003:05AC:0269.000D: magicmouse hid parse failed [ 156.874666][ T20] magicmouse: probe of 0003:05AC:0269.000D failed with error -22 [ 157.145717][ T26] usb 1-1: USB disconnect, device number 7 [ 158.135197][ T361] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 158.256088][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2103'. [ 158.279164][ T30] audit: type=1400 audit(1767512843.078:5982): avc: denied { getopt } for pid=5673 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 158.486925][ T385] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 158.507326][ T385] asix: probe of 10-1:0.188 failed with error -71 [ 158.535202][ T385] usb 10-1: USB disconnect, device number 2 [ 158.577394][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.588445][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.601806][ T361] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 158.611050][ T361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.619945][ T361] usb 1-1: config 0 descriptor?? [ 158.716573][ T5683] loop7: detected capacity change from 0 to 256 [ 158.759889][ T5683] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 158.770738][ T5683] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 158.794385][ T5683] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 159.106538][ T361] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 159.121819][ T361] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 159.136404][ T361] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 159.149055][ T361] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 159.161498][ T361] hid-steam 0003:28DE:1142.000E: unknown main item tag 0x0 [ 159.170279][ T361] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 159.674977][ T385] usb 1-1: USB disconnect, device number 8 [ 160.270884][ T5704] loop7: detected capacity change from 0 to 40427 [ 160.289684][ T5704] F2FS-fs (loop7): invalid crc value [ 160.295434][ T5704] F2FS-fs (loop7): invalid crc value [ 160.301094][ T5704] F2FS-fs (loop7): Failed to get valid F2FS checkpoint [ 160.413456][ T30] audit: type=1400 audit(1767512845.208:5983): avc: denied { audit_read } for pid=5705 comm="syz.5.2114" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.510858][ T5715] netlink: 'syz.0.2116': attribute type 298 has an invalid length. [ 161.389280][ T5704] loop7: detected capacity change from 0 to 40427 [ 161.468792][ T5704] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 161.491118][ T5704] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 161.637261][ T30] audit: type=1400 audit(1767512846.438:5984): avc: denied { append } for pid=5726 comm="syz.9.2120" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 161.736036][ T5704] F2FS-fs (loop7): Found nat_bits in checkpoint [ 161.836873][ T5704] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 161.844102][ T5704] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 162.501584][ T5746] fscrypt (loop7, inode 3): Error -61 getting encryption context [ 162.736765][ T5752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=5752 comm=syz.5.2129 [ 162.762900][ T5748] kernel profiling enabled (shift: 17) [ 163.818607][ T5771] Illegal XDP return value 4294967294, expect packet loss! [ 164.124936][ T5813] tipc: Started in network mode [ 164.129940][ T5813] tipc: Node identity ac14140f, cluster identity 4711 [ 164.137029][ T5813] tipc: New replicast peer: 255.255.255.255 [ 164.143598][ T5813] tipc: Enabled bearer , priority 10 [ 164.917728][ T5825] loop9: detected capacity change from 0 to 7 [ 165.136933][ T20] tipc: Node number set to 2886997007 [ 165.207094][ T60] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 165.266697][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2170'. [ 165.276917][ T692] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 165.459194][ T5861] tmpfs: Unsupported parameter 'mpol' [ 165.585242][ T5869] netlink: 'syz.1.2179': attribute type 3 has an invalid length. [ 165.676966][ T692] usb 10-1: unable to get BOS descriptor or descriptor too short [ 165.726970][ T692] usb 10-1: not running at top speed; connect to a high speed hub [ 165.756942][ T60] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 165.775700][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.793252][ T60] usb 8-1: Product: syz [ 165.801954][ T60] usb 8-1: Manufacturer: syz [ 165.806608][ T60] usb 8-1: SerialNumber: syz [ 165.817470][ T692] usb 10-1: config 1 has an invalid descriptor of length 36, skipping remainder of the config [ 165.835979][ T692] usb 10-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.874455][ T692] usb 10-1: config 1 interface 0 has no altsetting 0 [ 166.046967][ T692] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.056274][ T692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.077012][ T692] usb 10-1: Product: syz [ 166.081514][ T692] usb 10-1: SerialNumber: syz [ 166.115484][ T5907] overlayfs: failed to clone lowerpath [ 166.137403][ T692] cdc_ether 10-1:1.0: skipping garbage [ 166.142958][ T692] cdc_ether 10-1:1.0: skipping garbage [ 166.152007][ T692] cdc_ether: probe of 10-1:1.0 failed with error -22 [ 166.401580][ T6] usb 10-1: USB disconnect, device number 3 [ 168.043105][ T692] usb 8-1: USB disconnect, device number 11 [ 168.268451][ T5965] input: syz1 as /devices/virtual/input/input14 [ 168.452633][ T5985] loop7: detected capacity change from 0 to 128 [ 168.510700][ T5985] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 168.527047][ T5985] ext4 filesystem being mounted at /219/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.636101][ T5981] loop9: detected capacity change from 0 to 40427 [ 168.758747][ T5981] F2FS-fs (loop9): fault_injection options not supported [ 168.770126][ T30] audit: type=1400 audit(1767512853.568:5985): avc: denied { ioctl } for pid=5997 comm="syz.0.2229" path="socket:[38551]" dev="sockfs" ino=38551 ioctlcmd=0x942a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.817278][ T5981] F2FS-fs (loop9): fault_type options not supported [ 168.833422][ T5981] F2FS-fs (loop9): invalid crc value [ 169.313885][ T5981] F2FS-fs (loop9): Found nat_bits in checkpoint [ 169.484307][ T5981] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 169.546342][ T5374] attempt to access beyond end of device [ 169.546342][ T5374] loop9: rw=2049, want=45112, limit=40427 [ 170.264772][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2245'. [ 170.317459][ T30] audit: type=1400 audit(1767512855.118:5986): avc: denied { getopt } for pid=6053 comm="syz.1.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.391319][ T286] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 171.720782][ T6085] device wg0 left promiscuous mode [ 171.739769][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 171.748079][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.756407][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 171.766176][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.774659][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.783824][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.792270][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.801037][ T5600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.846925][ T6] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 171.896997][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 171.911403][ T286] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 171.920866][ T286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.969710][ T286] usb 1-1: config 0 descriptor?? [ 171.977255][ T20] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 172.000270][ T6060] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.086868][ T6] usb 8-1: Using ep0 maxpacket: 32 [ 172.207012][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 172.342338][ T286] usbhid 1-1:0.0: can't add hid device: -71 [ 172.356714][ T286] usbhid: probe of 1-1:0.0 failed with error -71 [ 172.372209][ T286] usb 1-1: USB disconnect, device number 9 [ 172.377307][ T20] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.388426][ T6] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.406700][ T6] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.417139][ T20] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 172.426634][ T6] usb 8-1: Product: syz [ 172.431366][ T20] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 172.442554][ T6] usb 8-1: Manufacturer: syz [ 172.448364][ T6] usb 8-1: SerialNumber: syz [ 172.453080][ T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.462322][ T6] usb 8-1: config 0 descriptor?? [ 172.475875][ T20] usb 10-1: config 0 descriptor?? [ 172.716244][ T692] usb 8-1: USB disconnect, device number 12 [ 172.731704][ T286] usb 10-1: USB disconnect, device number 4 [ 173.886984][ T692] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 174.157202][ T692] usb 10-1: Using ep0 maxpacket: 8 [ 174.307141][ T692] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.327044][ T692] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 174.361883][ T692] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 174.398296][ T692] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 174.535169][ T692] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.726973][ T692] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 174.739758][ T692] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.765616][ T692] usb 10-1: Product: syz [ 174.771501][ T692] usb 10-1: Manufacturer: syz [ 174.776239][ T692] usb 10-1: SerialNumber: syz [ 174.799103][ T692] usb 10-1: config 0 descriptor?? [ 174.826941][ T6549] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 174.905394][ T20] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 175.155276][ T692] usb 10-1: USB disconnect, device number 5 [ 176.046947][ T286] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 176.217170][ T20] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 176.306992][ T20] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.316107][ T20] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.327119][ T20] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.417096][ T20] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 176.426537][ T20] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 176.438345][ T20] usb 8-1: config 0 interface 0 has no altsetting 0 [ 176.487051][ T286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.531187][ T286] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.547064][ T20] usb 8-1: unable to read config index 2 descriptor/start: -71 [ 176.554205][ T286] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.555308][ T20] usb 8-1: can't read configurations, error -71 [ 176.596779][ T286] usb 10-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 176.606886][ T286] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.630041][ T286] usb 10-1: config 0 descriptor?? [ 177.199365][ T286] hid-generic 0003:057E:2019.000F: hidraw0: USB HID v0.00 Device [HID 057e:2019] on usb-dummy_hcd.9-1/input0 [ 177.688121][ T286] usb 10-1: USB disconnect, device number 6 [ 178.070895][ T20] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 178.127492][ T6665] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2332'. [ 178.283749][ T6676] loop9: detected capacity change from 0 to 512 [ 178.299871][ T6676] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.310058][ T6676] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 178.318488][ T20] usb 8-1: Using ep0 maxpacket: 8 [ 178.324738][ T6676] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 178.334278][ T6676] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 178.342809][ T6676] System zones: 0-2, 18-18, 34-35 [ 178.361787][ T6676] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.395303][ T30] audit: type=1400 audit(1767512863.188:5987): avc: denied { setattr } for pid=6672 comm="syz.9.2335" path="/31/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 178.456937][ T20] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.687032][ T20] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 178.700848][ T20] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.709082][ T20] usb 8-1: Product: syz [ 178.713349][ T20] usb 8-1: Manufacturer: syz [ 178.720883][ T20] usb 8-1: SerialNumber: syz [ 178.728679][ T20] usb 8-1: config 0 descriptor?? [ 179.555028][ T30] audit: type=1400 audit(1767512864.348:5988): avc: denied { read write } for pid=6708 comm="syz.0.2347" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 179.582333][ T30] audit: type=1400 audit(1767512864.358:5989): avc: denied { open } for pid=6708 comm="syz.0.2347" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 180.015312][ T6] usb 8-1: USB disconnect, device number 14 [ 180.095104][ T6733] netlink: 'syz.1.2360': attribute type 15 has an invalid length. [ 180.281606][ T6731] loop7: detected capacity change from 0 to 40427 [ 180.439445][ T6731] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 180.447490][ T6731] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 180.457130][ T6731] F2FS-fs (loop7): invalid crc value [ 180.532894][ T6731] F2FS-fs (loop7): Found nat_bits in checkpoint [ 180.589986][ T6772] loop9: detected capacity change from 0 to 256 [ 180.596704][ T6731] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 180.604601][ T6772] exfat: Deprecated parameter 'namecase' [ 180.613242][ T6772] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 180.617225][ T6731] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 180.676990][ T30] audit: type=1400 audit(1767512865.448:5990): avc: denied { create } for pid=6730 comm="syz.7.2358" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 180.705701][ T30] audit: type=1400 audit(1767512865.448:5991): avc: denied { link } for pid=6730 comm="syz.7.2358" name="file1" dev="overlay" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 180.738189][ T30] audit: type=1400 audit(1767512865.448:5992): avc: denied { read } for pid=6730 comm="syz.7.2358" name="file1" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 180.762373][ T30] audit: type=1400 audit(1767512865.448:5993): avc: denied { setattr } for pid=6730 comm="syz.7.2358" name="#35" dev="loop7" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 180.784715][ T30] audit: type=1400 audit(1767512865.448:5994): avc: denied { rename } for pid=6730 comm="syz.7.2358" name="#35" dev="loop7" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 180.808126][ T30] audit: type=1400 audit(1767512865.498:5995): avc: denied { unlink } for pid=1636 comm="syz-executor" name="file1" dev="loop7" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 180.965403][ T30] audit: type=1400 audit(1767512865.758:5996): avc: denied { read } for pid=6771 comm="syz.9.2375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.567962][ T6792] loop9: detected capacity change from 0 to 512 [ 181.670721][ T6792] EXT4-fs (loop9): dax option not supported [ 181.763897][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2388'. [ 181.799669][ T6810] loop7: detected capacity change from 0 to 512 [ 181.814686][ T6810] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 181.826967][ T6810] EXT4-fs (loop7): 1 truncate cleaned up [ 181.832718][ T6810] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 181.855121][ T6810] syz.7.2391 (pid 6810) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 181.856292][ T6815] tmpfs: Unknown parameter 'usrquota' [ 181.869455][ T6810] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 181.880343][ T6810] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 181.890096][ T6810] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 181.899316][ T6810] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 182.004562][ T6833] loop7: detected capacity change from 0 to 256 [ 182.077322][ T6833] exfat: Deprecated parameter 'utf8' [ 182.082933][ T6833] exfat: Unknown parameter 'keep_last_dots' [ 182.526951][ T6] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 182.725668][ T6854] overlayfs: failed to clone upperpath [ 182.732100][ T6854] overlayfs: failed to clone upperpath [ 182.776950][ T6] usb 10-1: Using ep0 maxpacket: 32 [ 182.896993][ T6] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.909107][ T6] usb 10-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 182.920117][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.929753][ T6] usb 10-1: config 0 descriptor?? [ 183.174379][ T6] usb 10-1: USB disconnect, device number 7 [ 183.370514][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2422'. [ 183.712895][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.720925][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.728622][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.736188][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.743909][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.751861][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.760229][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.768496][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.776300][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.784946][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.793159][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.801654][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.809816][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.818138][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.825789][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.834475][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.842666][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.851015][ T361] hid-generic 0003:0004:0004.0010: unknown main item tag 0x0 [ 183.862903][ T361] hid-generic 0003:0004:0004.0010: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 184.110930][ T6914] fido_id[6914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.141495][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2436'. [ 184.163844][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2436'. [ 184.641607][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 184.641626][ T30] audit: type=1326 audit(1767512869.408:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.671601][ T30] audit: type=1326 audit(1767512869.418:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.695942][ T30] audit: type=1326 audit(1767512869.418:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.721778][ T30] audit: type=1326 audit(1767512869.418:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.750571][ T30] audit: type=1326 audit(1767512869.418:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.774067][ T30] audit: type=1326 audit(1767512869.418:6007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.797511][ T30] audit: type=1326 audit(1767512869.428:6008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.821506][ T30] audit: type=1326 audit(1767512869.428:6009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.1.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9160137749 code=0x7ffc0000 [ 184.866931][ T361] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.874595][ T286] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 185.253347][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.261558][ T6948] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.269416][ T6948] device bridge_slave_0 entered promiscuous mode [ 185.277130][ T286] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 185.279679][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.287938][ T361] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 185.294868][ T6948] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.296300][ T6948] device bridge_slave_1 entered promiscuous mode [ 185.308783][ T286] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.331109][ T361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.341188][ T286] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.350607][ T286] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.367231][ T286] usb 8-1: config 0 descriptor?? [ 185.395457][ T6963] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 185.409835][ T286] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 185.437008][ T361] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 185.446178][ T361] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 185.454312][ T361] usb 1-1: Manufacturer: syz [ 185.460833][ T361] usb 1-1: config 0 descriptor?? [ 185.482156][ T6948] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.489254][ T6948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.496558][ T6948] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.503653][ T6948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.527046][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.534738][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.542421][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.554309][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.562740][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.569851][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.579223][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.587789][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.594870][ T6404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.625038][ T6948] device veth0_vlan entered promiscuous mode [ 185.639406][ T6948] device veth1_macvtap entered promiscuous mode [ 185.679383][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.688735][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.698230][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.707087][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.715393][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.724399][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.737714][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.774150][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.789060][ T6404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.796429][ T6982] overlayfs: failed to clone upperpath [ 185.841263][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 185.868399][ T6405] device bridge_slave_1 left promiscuous mode [ 185.874729][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.884961][ T6405] device bridge_slave_0 left promiscuous mode [ 185.891530][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.906365][ T6933] UDC core: couldn't find an available UDC or it's busy: -16 [ 185.914055][ T6405] device veth1_macvtap left promiscuous mode [ 185.920352][ T6933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 185.928340][ T6405] device veth0_vlan left promiscuous mode [ 185.929937][ T6] usb 1-1: USB disconnect, device number 10 [ 186.251548][ T7013] netlink: 'syz.2.2472': attribute type 7 has an invalid length. [ 186.259465][ T7013] netlink: 'syz.2.2472': attribute type 8 has an invalid length. [ 186.292509][ T7019] loop2: detected capacity change from 0 to 256 [ 186.383540][ T7019] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 186.398471][ T30] audit: type=1400 audit(1767512871.198:6010): avc: denied { write } for pid=7018 comm="syz.2.2474" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.420490][ T30] audit: type=1400 audit(1767512871.198:6011): avc: denied { add_name } for pid=7018 comm="syz.2.2474" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.499958][ T7026] loop2: detected capacity change from 0 to 2048 [ 186.603947][ T7026] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.614712][ T7026] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.678308][ T7033] loop2: detected capacity change from 0 to 512 [ 186.687639][ T7033] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.706331][ T7033] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2479: inode has both inline data and extents flags [ 186.719939][ T7033] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2479: couldn't read orphan inode 15 (err -117) [ 186.732537][ T7033] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.407649][ T7068] overlayfs: failed to clone upperpath [ 187.536503][ T286] usb 8-1: USB disconnect, device number 15 [ 187.570854][ T7075] device ip6gre1 entered promiscuous mode [ 187.601484][ T7075] syz.7.2496 (7075) used greatest stack depth: 15904 bytes left [ 189.316865][ T286] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 189.586945][ T286] usb 8-1: Using ep0 maxpacket: 32 [ 189.707102][ T286] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.753077][ T7126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7126 comm=syz.0.2512 [ 189.758863][ T286] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.766479][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2512'. [ 189.789798][ T7126] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2512'. [ 189.937247][ T286] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.969490][ T7157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3884551189 (124305638048 ns) > initial count (121102246752 ns). Using initial count to start timer. [ 189.987028][ T286] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 189.995789][ T286] usb 8-1: Product: syz [ 190.001076][ T286] usb 8-1: Manufacturer: syz [ 190.109931][ T286] hub 8-1:4.0: USB hub found [ 190.286954][ T286] hub 8-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 190.606986][ T286] usb 8-1: USB disconnect, device number 16 [ 191.030370][ T7160] loop2: detected capacity change from 0 to 262144 [ 191.589822][ T7160] F2FS-fs (loop2): invalid crc value [ 191.650183][ T7160] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.698260][ T7160] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 191.712977][ T7160] F2FS-fs (loop2): sanity_check_inode: inode (ino=7, mode=33261) should not have inline_data, run fsck to fix [ 191.748105][ T7199] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2543'. [ 191.834864][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 191.834882][ T30] audit: type=1400 audit(1767512876.628:6019): avc: denied { module_load } for pid=7200 comm="syz.7.2545" path="/251/bus" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 191.866018][ T7202] Invalid ELF header magic: != ELF [ 192.322346][ T7219] input: syz0 as /devices/virtual/input/input16 [ 193.646861][ T7185] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.906871][ T7185] usb 3-1: Using ep0 maxpacket: 16 [ 194.026956][ T7185] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 255, using maximum allowed: 30 [ 194.037994][ T7185] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 194.051424][ T7185] usb 3-1: config 0 interface 0 has no altsetting 0 [ 194.058267][ T7185] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 194.067596][ T7185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.077011][ T7185] usb 3-1: config 0 descriptor?? [ 194.484110][ T7282] loop7: detected capacity change from 0 to 1024 [ 194.499517][ T7282] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,errors=remount-ro,. Quota mode: none. [ 194.517098][ T7282] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.530365][ T7282] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2580: bg 0: block 112: padding at end of block bitmap is not set [ 194.545071][ T7282] EXT4-fs (loop7): Remounting filesystem read-only [ 194.552274][ T7282] EXT4-fs error (device loop7): ext4_map_blocks:740: inode #15: comm syz.7.2580: lblock 0 mapped to illegal pblock 0 (length 6) [ 194.565813][ T7282] EXT4-fs (loop7): Remounting filesystem read-only [ 194.579601][ T7185] hid-generic 0003:20A0:4287.0011: hidraw0: USB HID v0.00 Device [HID 20a0:4287] on usb-dummy_hcd.2-1/input0 [ 194.794128][ T30] audit: type=1400 audit(1767512879.568:6020): avc: denied { create } for pid=7286 comm="syz.0.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 194.849312][ T332] usb 3-1: USB disconnect, device number 7 [ 195.066859][ T7185] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 195.306883][ T7185] usb 8-1: Using ep0 maxpacket: 16 [ 195.426925][ T7185] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.437004][ T7185] usb 8-1: config 1 interface 0 has no altsetting 0 [ 195.447486][ T7323] loop2: detected capacity change from 0 to 512 [ 195.503328][ T7323] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,auto_da_alloc,minixdf,errors=remount-ro,min_batch_time=0x000000000000bbbe,. Quota mode: writeback. [ 195.520345][ T7323] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.534755][ T30] audit: type=1400 audit(1767512880.328:6021): avc: denied { rename } for pid=7322 comm="syz.2.2596" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.535290][ T7323] EXT4-fs error (device loop2): ext4_get_first_dir_block:3605: inode #12: block 32: comm syz.2.2596: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 195.568869][ T30] audit: type=1400 audit(1767512880.328:6022): avc: denied { reparent } for pid=7322 comm="syz.2.2596" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 195.583887][ T7323] EXT4-fs (loop2): Remounting filesystem read-only [ 195.606029][ T7323] EXT4-fs error (device loop2): ext4_get_first_dir_block:3608: inode #12: comm syz.2.2596: directory missing '.' [ 195.618372][ T7323] EXT4-fs (loop2): Remounting filesystem read-only [ 195.656999][ T7185] usb 8-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.40 [ 195.666265][ T7185] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.674528][ T7185] usb 8-1: Product: syz [ 195.678835][ T7185] usb 8-1: SerialNumber: syz [ 195.866880][ T286] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 195.898791][ T6] hid-generic 000B:0002:0009.0012: item fetching failed at offset 0/1 [ 195.907986][ T6] hid-generic: probe of 000B:0002:0009.0012 failed with error -22 [ 196.164089][ T7350] loop2: detected capacity change from 0 to 40427 [ 196.196977][ T7185] usbhid 8-1:1.0: can't add hid device: -71 [ 196.203068][ T7185] usbhid: probe of 8-1:1.0 failed with error -71 [ 196.210471][ T7185] usb 8-1: USB disconnect, device number 17 [ 196.218825][ T7350] F2FS-fs (loop2): fault_injection options not supported [ 196.225980][ T7350] F2FS-fs (loop2): fault_type options not supported [ 196.233797][ T7350] F2FS-fs (loop2): invalid crc value [ 196.242699][ T7350] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.274980][ T7350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 196.356920][ T286] usb 1-1: config 4 has no interfaces? [ 196.385269][ T7356] loop2: detected capacity change from 0 to 256 [ 196.417569][ T7356] exfat: Deprecated parameter 'namecase' [ 196.466633][ T7356] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 196.688306][ T286] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 196.707513][ T286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.717215][ T286] usb 1-1: Product: syz [ 196.721503][ T286] usb 1-1: Manufacturer: syz [ 196.726218][ T286] usb 1-1: SerialNumber: syz [ 196.815543][ T7376] loop7: detected capacity change from 0 to 128 [ 196.850634][ T7383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2619'. [ 196.860259][ T7376] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.876063][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2620'. [ 196.885250][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2620'. [ 196.899054][ T7376] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.074558][ T286] usb 1-1: USB disconnect, device number 11 [ 197.816935][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'. [ 197.826029][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2622'. [ 197.834932][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2622'. [ 198.356886][ T385] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 198.406867][ T7397] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 198.756961][ T385] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.768136][ T385] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.777327][ T385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.789585][ T385] usb 8-1: config 0 descriptor?? [ 198.886972][ T7397] usb 3-1: config index 0 descriptor too short (expected 2075, got 27) [ 198.895458][ T7397] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 198.903703][ T7397] usb 3-1: config 0 has no interface number 0 [ 198.909898][ T7397] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 198.919815][ T7397] usb 3-1: config 0 interface 200 has no altsetting 0 [ 198.977910][ T6405] device bridge_slave_1 left promiscuous mode [ 198.984149][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.991900][ T6405] device bridge_slave_0 left promiscuous mode [ 198.998226][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.076953][ T7397] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 199.086064][ T7397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.094155][ T7397] usb 3-1: Product: syz [ 199.098460][ T7397] usb 3-1: Manufacturer: syz [ 199.103142][ T7397] usb 3-1: SerialNumber: syz [ 199.107211][ T332] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 199.116969][ T385] usbhid 8-1:0.0: can't add hid device: -71 [ 199.123160][ T385] usbhid: probe of 8-1:0.0 failed with error -71 [ 199.123708][ T7397] usb 3-1: config 0 descriptor?? [ 199.139916][ T385] usb 8-1: USB disconnect, device number 18 [ 199.465986][ T7397] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input17 [ 199.479369][ T7397] usb 3-1: USB disconnect, device number 8 [ 199.626959][ T332] usb 1-1: unable to get BOS descriptor or descriptor too short [ 199.666931][ T332] usb 1-1: not running at top speed; connect to a high speed hub [ 199.696891][ T385] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 199.746981][ T332] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 199.755333][ T332] usb 1-1: config 12 has no interface number 0 [ 199.761828][ T332] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 199.926978][ T332] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 199.936147][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.944243][ T385] usb 8-1: Using ep0 maxpacket: 32 [ 199.949504][ T332] usb 1-1: Product: syz [ 199.953740][ T332] usb 1-1: Manufacturer: syz [ 199.958441][ T332] usb 1-1: SerialNumber: syz [ 200.066907][ T385] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.077913][ T385] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 200.123584][ T385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.135967][ T385] usb 8-1: config 0 descriptor?? [ 200.292626][ T332] usb 1-1: USB disconnect, device number 12 [ 200.386901][ T692] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 200.636887][ T692] usb 3-1: Using ep0 maxpacket: 16 [ 200.724842][ T30] audit: type=1400 audit(1767512885.518:6023): avc: denied { mount } for pid=7449 comm="syz.0.2645" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 200.748299][ T30] audit: type=1400 audit(1767512885.528:6024): avc: denied { search } for pid=7449 comm="syz.0.2645" name="/" dev="configfs" ino=13681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 200.770814][ T692] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.777892][ T692] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 200.787185][ T692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.799125][ T692] usb 3-1: config 0 descriptor?? [ 200.809973][ T30] audit: type=1326 audit(1767512885.608:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 200.833685][ T30] audit: type=1326 audit(1767512885.608:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 200.859550][ T30] audit: type=1326 audit(1767512885.608:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 200.883154][ T30] audit: type=1326 audit(1767512885.608:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 200.906703][ T30] audit: type=1326 audit(1767512885.608:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 200.930410][ T30] audit: type=1326 audit(1767512885.608:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 200.954027][ T30] audit: type=1326 audit(1767512885.608:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 200.978469][ T30] audit: type=1326 audit(1767512885.608:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7454 comm="syz.0.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae85d39749 code=0x7ffc0000 [ 201.011031][ T7465] tmpfs: Unknown parameter 'usrquota' [ 201.288071][ T692] hid-generic 0003:07B5:0312.0013: unbalanced collection at end of report description [ 201.297888][ T692] hid-generic: probe of 0003:07B5:0312.0013 failed with error -22 [ 201.308260][ T7397] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.488336][ T692] usb 3-1: USB disconnect, device number 9 [ 201.546934][ T7397] usb 1-1: Using ep0 maxpacket: 16 [ 201.666953][ T7397] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.677225][ T7397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 201.686115][ T7397] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.779460][ T692] usb 8-1: USB disconnect, device number 19 [ 201.822689][ T7483] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.830341][ T7483] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.866977][ T7397] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.878361][ T7397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.885794][ T7487] loop7: detected capacity change from 0 to 128 [ 201.886720][ T7397] usb 1-1: Product: syz [ 201.897820][ T7397] usb 1-1: Manufacturer: syz [ 201.902523][ T7397] usb 1-1: SerialNumber: syz [ 202.123350][ T7513] overlayfs: unrecognized mount option "\ÿ" or missing value [ 202.187309][ T7397] cdc_ncm 1-1:1.0: skipping garbage [ 202.192570][ T7397] cdc_ncm 1-1:1.0: skipping garbage [ 202.198593][ T7397] cdc_ncm 1-1:1.0: skipping garbage [ 202.203836][ T7397] cdc_ncm 1-1:1.0: invalid descriptor buffer length [ 202.210770][ T7397] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 202.217786][ T7397] cdc_ncm 1-1:1.0: bind() failure [ 202.229455][ T7397] usb 1-1: USB disconnect, device number 13 [ 202.260474][ T7528] loop7: detected capacity change from 0 to 512 [ 202.307682][ T7528] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 202.316222][ T7528] EXT4-fs (loop7): orphan cleanup on readonly fs [ 202.323098][ T7528] EXT4-fs warning (device loop7): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 202.337883][ T7528] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 202.345005][ T7528] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2683: bg 0: block 40: padding at end of block bitmap is not set [ 202.359724][ T7528] EXT4-fs (loop7): Remounting filesystem read-only [ 202.366284][ T7528] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 202.375266][ T7528] EXT4-fs (loop7): Remounting filesystem read-only [ 202.382020][ T7528] EXT4-fs (loop7): 1 truncate cleaned up [ 202.387785][ T7528] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsddf,errors=remount-ro,errors=remount-ro,noinit_itable,. Quota mode: writeback. [ 202.416939][ T385] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.498823][ T7538] loop7: detected capacity change from 0 to 256 [ 202.699539][ T7538] FAT-fs (loop7): Directory bread(block 64) failed [ 202.801325][ T7538] FAT-fs (loop7): Directory bread(block 65) failed [ 202.839260][ T7538] FAT-fs (loop7): Directory bread(block 66) failed [ 202.865453][ T7538] FAT-fs (loop7): Directory bread(block 67) failed [ 202.873676][ T7538] FAT-fs (loop7): Directory bread(block 68) failed [ 202.881766][ T7538] FAT-fs (loop7): Directory bread(block 69) failed [ 202.889693][ T7538] FAT-fs (loop7): Directory bread(block 70) failed [ 202.896495][ T7538] FAT-fs (loop7): Directory bread(block 71) failed [ 202.903368][ T7538] FAT-fs (loop7): Directory bread(block 72) failed [ 202.910148][ T7538] FAT-fs (loop7): Directory bread(block 73) failed [ 202.956858][ T385] usb 3-1: Using ep0 maxpacket: 32 [ 203.087004][ T385] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.106903][ T385] usb 3-1: config 1 interface 0 has no altsetting 0 [ 203.268570][ T385] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.40 [ 203.277860][ T385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.285926][ T385] usb 3-1: Product: syz [ 203.290446][ T385] usb 3-1: Manufacturer: syz [ 203.295077][ T385] usb 3-1: SerialNumber: syz [ 203.335124][ T7565] loop7: detected capacity change from 0 to 512 [ 203.395780][ T7573] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2699'. [ 203.407351][ T7565] EXT4-fs (loop7): 1 orphan inode deleted [ 203.413839][ T7565] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.426112][ T7565] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.473877][ T7584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.536775][ T7589] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.587835][ T7596] futex_wake_op: syz.0.2709 tries to shift op by -1; fix this program [ 203.867963][ T385] usbhid 3-1:1.0: can't add hid device: -71 [ 203.874133][ T385] usbhid: probe of 3-1:1.0 failed with error -71 [ 203.881200][ T20] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 203.898533][ T385] usb 3-1: USB disconnect, device number 10 [ 204.110196][ T7603] loop2: detected capacity change from 0 to 256 [ 204.146346][ T7603] FAT-fs (loop2): Directory bread(block 64) failed [ 204.153051][ T7603] FAT-fs (loop2): Directory bread(block 65) failed [ 204.159965][ T7603] FAT-fs (loop2): Directory bread(block 66) failed [ 204.168122][ T7603] FAT-fs (loop2): Directory bread(block 67) failed [ 204.174712][ T7603] FAT-fs (loop2): Directory bread(block 68) failed [ 204.181589][ T7603] FAT-fs (loop2): Directory bread(block 69) failed [ 204.188371][ T7603] FAT-fs (loop2): Directory bread(block 70) failed [ 204.195013][ T7603] FAT-fs (loop2): Directory bread(block 71) failed [ 204.201823][ T7603] FAT-fs (loop2): Directory bread(block 72) failed [ 204.208846][ T7603] FAT-fs (loop2): Directory bread(block 73) failed [ 204.247205][ T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.268548][ T20] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.366984][ T20] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 204.383094][ T20] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 204.410230][ T20] usb 8-1: Manufacturer: syz [ 204.425251][ T20] usb 8-1: config 0 descriptor?? [ 206.214436][ T7662] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.2737'. [ 206.246959][ T20] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71 [ 206.257188][ T20] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 206.264761][ T20] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 206.282276][ T20] usb 8-1: USB disconnect, device number 20 [ 207.403659][ T7695] loop2: detected capacity change from 0 to 40427 [ 207.420917][ T7695] F2FS-fs (loop2): fault_injection options not supported [ 207.433671][ T7695] F2FS-fs (loop2): invalid crc value [ 207.440863][ T7695] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.480520][ T7695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.525155][ T6948] attempt to access beyond end of device [ 207.525155][ T6948] loop2: rw=2049, want=45104, limit=40427 [ 207.586902][ T692] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 207.625948][ T7718] loop7: detected capacity change from 0 to 1024 [ 207.730669][ T7718] EXT4-fs (loop7): Ignoring removed orlov option [ 207.806789][ T7721] loop2: detected capacity change from 0 to 2048 [ 207.816614][ T7718] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,auto_da_alloc,sysvgroups,norecovery,jqfmt=vfsv0,orlov,nogrpid,noauto_da_alloc,grpid,,errors=continue. Quota mode: none. [ 207.866897][ T692] usb 1-1: Using ep0 maxpacket: 8 [ 207.896176][ T7721] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.928608][ T7721] EXT4-fs (loop2): shut down requested (2) [ 208.006974][ T692] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 208.016283][ T692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.029349][ T692] usb 1-1: config 0 descriptor?? [ 208.474789][ T7763] loop2: detected capacity change from 0 to 2048 [ 208.510874][ T692] uclogic 0003:145F:0212.0015: interface is invalid, ignoring [ 208.528130][ T7763] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.538864][ T7763] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.551887][ T7763] fs-verity: sha512 using implementation "sha512-avx2" [ 208.559563][ T7763] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2777: bg 0: block 349: padding at end of block bitmap is not set [ 208.574420][ T7763] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117 [ 208.586892][ T286] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 208.708266][ T692] usb 1-1: USB disconnect, device number 14 [ 208.809347][ T7773] Invalid ELF header type: 25773 != 1 [ 208.846869][ T286] usb 8-1: Using ep0 maxpacket: 8 [ 209.004224][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 209.004241][ T30] audit: type=1400 audit(1767512893.798:6039): avc: denied { read } for pid=7776 comm="syz.5.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.040810][ T30] audit: type=1326 audit(1767512893.838:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.5.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8f3ad749 code=0x7ffc0000 [ 209.064584][ T30] audit: type=1326 audit(1767512893.838:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.5.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8f3ad749 code=0x7ffc0000 [ 209.088191][ T30] audit: type=1326 audit(1767512893.838:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.5.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f0f8f3ad749 code=0x7ffc0000 [ 209.112302][ T30] audit: type=1326 audit(1767512893.838:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.5.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8f3ad749 code=0x7ffc0000 [ 209.136527][ T30] audit: type=1326 audit(1767512893.838:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7778 comm="syz.5.2783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8f3ad749 code=0x7ffc0000 [ 209.160549][ T286] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 209.169724][ T286] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.178077][ T286] usb 8-1: Product: syz [ 209.182268][ T286] usb 8-1: Manufacturer: syz [ 209.187087][ T286] usb 8-1: SerialNumber: syz [ 209.196385][ T286] usb 8-1: config 0 descriptor?? [ 209.284704][ T7801] netlink: 'syz.5.2794': attribute type 12 has an invalid length. [ 209.293157][ T7801] netlink: 'syz.5.2794': attribute type 3 has an invalid length. [ 209.301482][ T7801] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2794'. [ 209.650599][ T7824] netlink: 'syz.0.2804': attribute type 8 has an invalid length. [ 211.365371][ T385] usb 8-1: USB disconnect, device number 21 [ 211.477816][ T30] audit: type=1400 audit(1767512896.278:6045): avc: denied { create } for pid=7864 comm="syz.7.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 211.511709][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 211.684719][ T7881] device ip6gretap0 entered promiscuous mode [ 211.978102][ T7896] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 211.987642][ T7896] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 212.199154][ T7919] 9pnet: Could not find request transport: rdma [ 212.615174][ T7940] loop7: detected capacity change from 0 to 512 [ 212.637399][ T7940] EXT4-fs (loop7): Ignoring removed oldalloc option [ 212.657903][ T7940] EXT4-fs (loop7): 1 truncate cleaned up [ 212.663730][ T7940] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 213.071514][ T7963] loop7: detected capacity change from 0 to 512 [ 213.109018][ T7963] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.137773][ T7963] EXT4-fs (loop7): dax option not supported [ 213.314473][ T7977] binder: 7976:7977 ioctl c0306201 200000000080 returned -14 [ 213.323997][ T7977] binder: BINDER_SET_CONTEXT_MGR already set [ 213.330931][ T7977] binder: 7976:7977 ioctl 4018620d 200000000040 returned -16 [ 213.505335][ T7991] xt_l2tp: v2 doesn't support IP mode [ 213.828069][ T7995] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 213.915602][ T8029] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2890'. [ 214.437387][ T8061] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 214.461921][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2905'. [ 214.476880][ T286] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 214.605622][ T30] audit: type=1326 audit(1767512899.398:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.640748][ T30] audit: type=1326 audit(1767512899.428:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.664352][ T30] audit: type=1326 audit(1767512899.428:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.688227][ T30] audit: type=1326 audit(1767512899.428:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.711876][ T30] audit: type=1326 audit(1767512899.428:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.735373][ T30] audit: type=1326 audit(1767512899.428:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.758839][ T30] audit: type=1326 audit(1767512899.428:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.782389][ T30] audit: type=1326 audit(1767512899.428:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.805862][ T30] audit: type=1326 audit(1767512899.428:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 214.925285][ T30] audit: type=1326 audit(1767512899.428:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8074 comm="syz.2.2912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f1516e1d749 code=0x7ffc0000 [ 215.217436][ T286] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 215.229676][ T286] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 215.243789][ T286] usb 8-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 215.253019][ T286] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.313613][ T286] usb 8-1: config 0 descriptor?? [ 215.749989][ T8119] loop2: detected capacity change from 0 to 1024 [ 215.838587][ T8119] EXT4-fs (loop2): orphan cleanup on readonly fs [ 215.846908][ T8119] EXT4-fs (loop2): 1 truncate cleaned up [ 215.856290][ T8119] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 215.878216][ T286] magicmouse 0003:05AC:0269.0016: item fetching failed at offset 5/7 [ 215.886510][ T286] magicmouse 0003:05AC:0269.0016: magicmouse hid parse failed [ 215.894268][ T286] magicmouse: probe of 0003:05AC:0269.0016 failed with error -22 [ 216.076890][ T332] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 216.089923][ T7185] usb 8-1: USB disconnect, device number 22 [ 216.346875][ T332] usb 1-1: Using ep0 maxpacket: 32 [ 216.493259][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.500507][ T332] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 216.509435][ T332] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 216.518155][ T332] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 216.527410][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.537492][ T332] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.547221][ T332] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 216.550019][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.560382][ T332] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 216.578852][ T8171] device bridge_slave_0 entered promiscuous mode [ 216.595238][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.602407][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.614987][ T332] usb 1-1: config 0 descriptor?? [ 216.620246][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.627994][ T8171] device bridge_slave_1 entered promiscuous mode [ 216.687258][ T8181] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2954'. [ 216.786149][ T8191] loop7: detected capacity change from 0 to 2048 [ 216.798018][ T8191] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 216.816759][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.823893][ T8171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.840788][ T8191] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback. [ 216.869330][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.881260][ T332] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 216.896794][ T1636] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 2: invalid block bitmap [ 216.908219][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.917445][ T1636] EXT4-fs (loop7): Remounting filesystem read-only [ 216.925964][ T1636] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 216.935542][ T1636] EXT4-fs (loop7): Remounting filesystem read-only [ 216.941810][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.968620][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.980287][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.992585][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.999713][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.010453][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.018873][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.025942][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.044663][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.053263][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.070674][ T385] usb 1-1: USB disconnect, device number 15 [ 217.083587][ T6405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.091806][ C0] usblp0: nonzero read bulk status received: -108 [ 217.113174][ T8171] device veth0_vlan entered promiscuous mode [ 217.120540][ T6405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.129758][ T6405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.137707][ T6405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.168332][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.178932][ T8171] device veth1_macvtap entered promiscuous mode [ 217.208265][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.232312][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.278051][ T8124] usblp0: removed [ 217.673514][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.680949][ T8211] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.688954][ T8211] device bridge_slave_0 entered promiscuous mode [ 217.696545][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.703951][ T8211] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.711714][ T8211] device bridge_slave_1 entered promiscuous mode [ 217.719014][ T6405] device bridge_slave_1 left promiscuous mode [ 217.725403][ T6405] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.733246][ T6405] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.746377][ T6405] device veth1_macvtap left promiscuous mode [ 217.755432][ T6405] device veth0_vlan left promiscuous mode [ 218.187099][ T8211] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.194374][ T8211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.201796][ T8211] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.208881][ T8211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.284190][ T8241] loop5: detected capacity change from 0 to 512 [ 218.365394][ T8211] device veth0_vlan entered promiscuous mode [ 218.382151][ T8241] EXT4-fs (loop5): orphan cleanup on readonly fs [ 218.391930][ T8241] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 218.416935][ T8241] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2970: attempt to clear invalid blocks 2 len 1 [ 218.435390][ T8211] device veth1_macvtap entered promiscuous mode [ 218.459541][ T8241] EXT4-fs (loop5): Remounting filesystem read-only [ 218.489225][ T8241] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 218.517831][ T8241] EXT4-fs (loop5): Remounting filesystem read-only [ 218.524637][ T8241] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2970: invalid indirect mapped block 1819239214 (level 0) [ 218.545171][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.560588][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.583216][ T8241] EXT4-fs (loop5): Remounting filesystem read-only [ 218.593138][ T8241] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2970: invalid indirect mapped block 1819239214 (level 1) [ 218.607670][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.622703][ T8241] EXT4-fs (loop5): Remounting filesystem read-only [ 218.636953][ T8241] EXT4-fs (loop5): 1 truncate cleaned up [ 218.662634][ T8241] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000040,grpid,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 218.681404][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.698121][ T8250] loop4: detected capacity change from 0 to 512 [ 218.701544][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.727667][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.735807][ T8241] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 218.748717][ T8250] EXT4-fs (loop4): Ignoring removed bh option [ 218.756306][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.786438][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.799826][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.809270][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.818149][ T8250] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,usrquota,bh,,errors=continue. Quota mode: writeback. [ 218.831966][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.840003][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.858292][ T8250] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.124436][ T8297] general protection fault, probably for non-canonical address 0xe06ff51e000fc600: 0000 [#1] PREEMPT SMP KASAN [ 219.136349][ T8297] KASAN: maybe wild-memory-access in range [0x037fc8f0007e3000-0x037fc8f0007e3007] [ 219.145654][ T8297] CPU: 1 PID: 8297 Comm: syz.0.2993 Not tainted syzkaller #0 [ 219.153054][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.163146][ T8297] RIP: 0010:__rmap_write_protect+0x2d/0x3a0 [ 219.169080][ T8297] Code: e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 41 89 f4 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 5a 91 4f 00 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f4 13 8e 00 4c 8b 33 31 ff 4c 89 [ 219.188730][ T8297] RSP: 0018:ffffc9000261f898 EFLAGS: 00010206 [ 219.194836][ T8297] RAX: 006ff91e000fc600 RBX: 037fc8f0007e3000 RCX: 0000000000080000 [ 219.202974][ T8297] RDX: ffffc9000722b000 RSI: 000000000000002b RDI: 000000000000002c [ 219.210986][ T8297] RBP: ffffc9000261f8d8 R08: 0000000000000004 R09: 0000000000000003 [ 219.218998][ T8297] R10: fffff520004c3f28 R11: 1ffff920004c3f28 R12: 0000000000000001 [ 219.227028][ T8297] R13: 037fc8f0007e3000 R14: dffffc0000000000 R15: ffff8881272f0348 [ 219.235027][ T8297] FS: 00007fae847a16c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 219.243992][ T8297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.250617][ T8297] CR2: 0000200000c42000 CR3: 0000000128ce7000 CR4: 00000000003526a0 [ 219.258711][ T8297] DR0: 0000000000000000 DR1: 0000000000001000 DR2: 0000000000000000 [ 219.266720][ T8297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.266929][ T20] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 219.274720][ T8297] Call Trace: [ 219.274728][ T8297] [ 219.274735][ T8297] ? futex_wake+0x643/0x8e0 [ 219.292973][ T8297] ? id_to_memslot+0xb7/0x130 [ 219.297698][ T8297] kvm_mmu_slot_gfn_write_protect+0x14a/0x270 [ 219.303801][ T8297] kvm_arch_mmu_enable_log_dirty_pt_masked+0x10c/0x3d0 [ 219.310697][ T8297] kvm_reset_dirty_gfn+0x19d/0x210 [ 219.315856][ T8297] kvm_dirty_ring_reset+0x4a9/0x620 [ 219.321098][ T8297] ? __mutex_lock_slowpath+0x10/0x10 [ 219.326432][ T8297] kvm_vm_ioctl_reset_dirty_pages+0x1a3/0x3b0 [ 219.332536][ T8297] kvm_vm_ioctl+0x385/0xa80 [ 219.337077][ T8297] ? kvm_device_release+0x220/0x220 [ 219.342315][ T8297] ? memcpy+0x56/0x70 [ 219.346328][ T8297] ? ioctl_has_perm+0x3eb/0x4d0 [ 219.351213][ T8297] ? has_cap_mac_admin+0x330/0x330 [ 219.356371][ T8297] ? slab_free_freelist_hook+0xc2/0x190 [ 219.361987][ T8297] ? find_vma_from_tree+0xfd/0x110 [ 219.367140][ T8297] ? __kasan_check_write+0x14/0x20 [ 219.372284][ T8297] ? put_vma+0x44/0x60 [ 219.376385][ T8297] ? do_user_addr_fault+0xa64/0x1180 [ 219.381710][ T8297] ? selinux_file_ioctl+0x377/0x480 [ 219.386944][ T8297] ? selinux_file_alloc_security+0x120/0x120 [ 219.392956][ T8297] ? __fget_files+0x2c4/0x320 [ 219.397679][ T8297] ? security_file_ioctl+0x84/0xa0 [ 219.402825][ T8297] ? kvm_device_release+0x220/0x220 [ 219.408081][ T8297] __se_sys_ioctl+0x121/0x1a0 [ 219.412808][ T8297] __x64_sys_ioctl+0x7b/0x90 [ 219.417436][ T8297] x64_sys_call+0x2f/0x9a0 [ 219.421889][ T8297] do_syscall_64+0x4c/0xa0 [ 219.426366][ T8297] ? clear_bhb_loop+0x50/0xa0 [ 219.431076][ T8297] ? clear_bhb_loop+0x50/0xa0 [ 219.435796][ T8297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.441733][ T8297] RIP: 0033:0x7fae85d39749 [ 219.446192][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.465832][ T8297] RSP: 002b:00007fae847a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.474281][ T8297] RAX: ffffffffffffffda RBX: 00007fae85f8ffa0 RCX: 00007fae85d39749 [ 219.482302][ T8297] RDX: 0000000000000000 RSI: 000000000000aec7 RDI: 0000000000000004 [ 219.490304][ T8297] RBP: 00007fae85dbdf91 R08: 0000000000000000 R09: 0000000000000000 [ 219.496631][ T8293] loop2: detected capacity change from 0 to 40427 [ 219.498321][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.498338][ T8297] R13: 00007fae85f90038 R14: 00007fae85f8ffa0 R15: 00007fff36c296b8 [ 219.498358][ T8297] [ 219.498380][ T8297] Modules linked in: [ 219.499947][ T8297] ---[ end trace b12d0e697281c68a ]--- [ 219.527011][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 219.528734][ T8297] RIP: 0010:__rmap_write_protect+0x2d/0x3a0 [ 219.545216][ T8297] Code: e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 41 89 f4 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 5a 91 4f 00 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 f4 13 8e 00 4c 8b 33 31 ff 4c 89 [ 219.564987][ T8297] RSP: 0018:ffffc9000261f898 EFLAGS: 00010206 [ 219.571210][ T8297] RAX: 006ff91e000fc600 RBX: 037fc8f0007e3000 RCX: 0000000000080000 [ 219.579354][ T8297] RDX: ffffc9000722b000 RSI: 000000000000002b RDI: 000000000000002c [ 219.587533][ T8297] RBP: ffffc9000261f8d8 R08: 0000000000000004 R09: 0000000000000003 [ 219.595645][ T8297] R10: fffff520004c3f28 R11: 1ffff920004c3f28 R12: 0000000000000001 [ 219.603806][ T8297] R13: 037fc8f0007e3000 R14: dffffc0000000000 R15: ffff8881272f0348 [ 219.611956][ T8297] FS: 00007fae847a16c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 219.621138][ T8297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.627881][ T8297] CR2: 0000200000c42000 CR3: 0000000128ce7000 CR4: 00000000003526a0 [ 219.635973][ T8297] DR0: 0000000000000000 DR1: 0000000000001000 DR2: 0000000000000000 [ 219.644129][ T8297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.652286][ T8297] Kernel panic - not syncing: Fatal exception [ 219.658723][ T8297] Kernel Offset: disabled [ 219.663056][ T8297] Rebooting in 86400 seconds..