last executing test programs: 1m55.806029655s ago: executing program 32 (id=134): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c3400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1m45.959894949s ago: executing program 33 (id=389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 1m29.496226718s ago: executing program 34 (id=876): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x2, 0x400122a0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m27.037512386s ago: executing program 35 (id=918): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000180)) 1m23.196843336s ago: executing program 36 (id=1019): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 1m22.539936189s ago: executing program 37 (id=1035): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000001580)=""/112, 0x70}) 1m1.317616302s ago: executing program 8 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m1.317203922s ago: executing program 8 (id=1587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m1.21424238s ago: executing program 8 (id=1592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000001c0)={0x1, 0x0, [{0x484, 0x0, 0xaee2}]}) 1m1.067638702s ago: executing program 8 (id=1595): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) 1m1.044491074s ago: executing program 8 (id=1599): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x88ff, 0x88) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x8060, 0x1a0) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 1m0.950561001s ago: executing program 8 (id=1602): mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0xffffff63) 1m0.884656967s ago: executing program 38 (id=1602): mkdir(&(0x7f00000007c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0xffffff63) 53.713277895s ago: executing program 1 (id=1800): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000007, 0x2172, 0xffffffffffffffff, 0xffffc000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000006c0)={[{@nolazytime}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) 53.624155273s ago: executing program 1 (id=1801): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x101000) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 51.740422425s ago: executing program 1 (id=1831): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) 50.835693738s ago: executing program 1 (id=1842): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000080), &(0x7f0000000040)=@v3={0x3000000, [{0x9, 0xfffffff5}, {0x1, 0x6}]}, 0x18, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) truncate(&(0x7f0000000180)='./file0/file1\x00', 0x73d) 50.494713275s ago: executing program 1 (id=1843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 49.552037861s ago: executing program 4 (id=1864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) 49.522111714s ago: executing program 4 (id=1865): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r0, 0x0, r0, 0x0, 0xfffffffffffffffe, 0x0) 49.501908115s ago: executing program 4 (id=1867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) 49.464045788s ago: executing program 1 (id=1869): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x5, 0x8, 0xb, 0x50}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 49.411205713s ago: executing program 39 (id=1869): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x5, 0x8, 0xb, 0x50}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 49.408965863s ago: executing program 4 (id=1873): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000080), &(0x7f0000000040)=@v3={0x3000000, [{0x9, 0xfffffff5}, {0x1, 0x6}]}, 0x18, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) truncate(&(0x7f0000000180)='./file0/file1\x00', 0x73d) 49.244269036s ago: executing program 4 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) 48.518654294s ago: executing program 4 (id=1883): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x1, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 48.44929494s ago: executing program 40 (id=1883): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$poke(0x1, r0, &(0x7f00000011c0), 0xfffffffffffffffe) 37.310665989s ago: executing program 3 (id=2206): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000000006"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008814) r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) 37.29660512s ago: executing program 3 (id=2207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) 37.278306562s ago: executing program 3 (id=2208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040101000000000000000031781f7a0500010001"], 0x1c}}, 0x0) close(0x3) 37.266069873s ago: executing program 3 (id=2209): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x1809449, 0x0, 0xff, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 37.233156015s ago: executing program 3 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 37.106629606s ago: executing program 3 (id=2213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.106538675s ago: executing program 41 (id=2213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.567832863s ago: executing program 2 (id=2761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xe}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) 16.550083035s ago: executing program 2 (id=2762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 16.499248989s ago: executing program 2 (id=2765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 16.469091661s ago: executing program 2 (id=2767): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='fmask=00000000000000000000002,utf8,errors=continue,errors=continue,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00t_dots,\x00'], 0x1, 0x152b, &(0x7f00000034c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x808005, 0x0, 0x3, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000e6d60210000000000000000000000100", [0x200, 0x1000]}) 16.321609293s ago: executing program 2 (id=2769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, &(0x7f0000000040)="9ae2d8ca52b200c4e17be6a509000000c4c2610691060fbddb360f070f01bc3315700000c4e285bb16660f35b9200000000f3266b966000fc72caa", 0x3b}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.218593931s ago: executing program 2 (id=2771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000ebff80040000"]) 16.173642104s ago: executing program 42 (id=2771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000ebff80040000"]) 5.498586266s ago: executing program 6 (id=3149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, 0x0, 0x0) 5.410669353s ago: executing program 6 (id=3150): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x7d) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x2005, 0x0, 0x0, 0x0, "df3f040100010f0000000000f2150609000040"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 5.410102453s ago: executing program 6 (id=3160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)}, 0x10) 4.678200082s ago: executing program 6 (id=3152): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) 4.429567572s ago: executing program 0 (id=3161): socket$vsock_stream(0x28, 0x5, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 3.875838067s ago: executing program 6 (id=3183): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000300)) 2.274022136s ago: executing program 5 (id=3204): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000080)) 1.909051086s ago: executing program 6 (id=3220): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000900)={0x34, &(0x7f0000000600)={0x0, 0x18, 0x4, "a7c3ad4c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x10, &(0x7f0000000100)={0x0, 0xe, 0x4, "d65ebdb1"}, 0x0, 0x0}) 1.61109224s ago: executing program 0 (id=3234): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) 1.497866429s ago: executing program 0 (id=3236): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x8, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.480036721s ago: executing program 0 (id=3238): r0 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x800) 1.438130104s ago: executing program 0 (id=3240): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[], 0x0) 1.392709957s ago: executing program 0 (id=3242): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1.192616443s ago: executing program 9 (id=3251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) 1.170110305s ago: executing program 9 (id=3252): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 1.154812367s ago: executing program 9 (id=3253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 360.802561ms ago: executing program 5 (id=3254): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 357.395291ms ago: executing program 9 (id=3264): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = epoll_create(0x7ff40000) epoll_wait(r0, 0x0, 0x14e, 0xfffffffd) r1 = eventfd(0xeac) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) 292.260146ms ago: executing program 9 (id=3256): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x1, 0x1506, &(0x7f0000002ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 219.406952ms ago: executing program 7 (id=3257): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e00"], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 193.419954ms ago: executing program 7 (id=3258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 162.861547ms ago: executing program 7 (id=3259): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04007b000400bc80e35bc4585fbb93870bbd870a3d61cae74df5fa206668fce221f48d97a1750441f8160be40d02ad177ee4c2876cbbec020aef5309cafb9d556fb5aae0e3f94d4ee6a7ade68dd4b0a5193e9440377b25a9209ded00a38a96060810bbb2697acdbcf74f8a6e9eaaad0e817373bf420f19f7b607247fc74fbf58f2396f8c94e16871701529c442742da25bc8d0d765e837727d1d47cc8305c4e13628ab24813abf41529c2b4271db300719d95bc6a3d0662b0c794d2522b25b5f150e3b3cdac58a0f8ed2"], 0x23c}, 0x1, 0x0, 0x0, 0x100}, 0x20000050) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r0, 0x0, 0x100000000000000}, 0x38) 154.792957ms ago: executing program 9 (id=3260): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224"], 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 142.648328ms ago: executing program 5 (id=3261): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc4) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) write$FUSE_INIT(r0, &(0x7f0000000300)={0xfdef, 0x0, 0x0, {0x7, 0x2b, 0x7, 0x40020008, 0x1, 0x3, 0x0, 0x80, 0x0, 0x0, 0x2, 0x5b5}}, 0x50) 102.506442ms ago: executing program 7 (id=3262): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 83.881073ms ago: executing program 5 (id=3263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xfe, 0x4, 0x0, 0x0, @adapter={0x8001, 0x8, 0x6, 0x0, 0x2}}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 57.097235ms ago: executing program 7 (id=3265): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 43.746926ms ago: executing program 7 (id=3266): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208248dd, &(0x7f0000000200)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRES16, @ANYRESDEC, @ANYBLOB="f32be912e474ad5bd8cc0a19c9d7610b52abc6d5058fd8ecb25b45c12a91c16c105e53a45c82", @ANYRES64], 0x80, 0x1511, &(0x7f0000001ac0)="$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") utime(&(0x7f0000000280)='./file0\x00', 0x0) 14.636829ms ago: executing program 5 (id=3267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 0s ago: executing program 5 (id=3268): add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$chown(0x4, 0x0, 0xee01, 0x0) syz_usb_connect(0x5, 0x59, &(0x7f0000000780)={{0x12, 0x1, 0xf223dc2b392ca1b, 0x5d, 0x6e, 0x9f, 0x40, 0x499, 0x101b, 0x5629, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0xa, 0x3, 0xaee7019a03ac0f75, 0x8, [{{0x9, 0x4, 0x29, 0x20, 0x0, 0xe, 0x1, 0x0, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x1, 0x8, 0x1}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "38b2f0"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0xdc90, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x82, 0x5, 0xfc}, @mbim_extended={0x8, 0x24, 0x1c, 0x401, 0x5, 0xfff1}]}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) rt_sigqueueinfo(0x0, 0x32, 0x0) kernel console output (not intermixed with test programs): 0 to 512 [ 108.207886][ T5792] EXT4-fs (loop9): Test dummy encryption mode enabled [ 108.243069][ T5792] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 108.256879][ T5792] EXT4-fs (loop9): shut down requested (2) [ 108.268261][ T5799] loop6: detected capacity change from 0 to 2048 [ 108.290661][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 108.314299][ T5799] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 108.338245][ T5799] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.354920][ T5799] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2142: bg 0: block 345: padding at end of block bitmap is not set [ 108.370113][ T5799] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 108.383105][ T5799] EXT4-fs (loop6): This should not happen!! Data will be lost [ 108.383105][ T5799] [ 108.405090][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 108.432334][ T5808] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2148'. [ 108.581159][ T5818] loop9: detected capacity change from 0 to 2048 [ 108.599475][ T5818] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 108.608353][ T5818] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.624511][ T5818] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2151: bg 0: block 345: padding at end of block bitmap is not set [ 108.646437][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 108.664319][ T5822] IPv4: Oversized IP packet from 127.0.0.1 [ 108.670251][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 108.690289][ T5824] loop9: detected capacity change from 0 to 256 [ 108.702902][ T5824] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 108.900783][ T5840] loop3: detected capacity change from 0 to 256 [ 108.910273][ T5840] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 109.197606][ T5882] loop3: detected capacity change from 0 to 2048 [ 109.224587][ T5882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.235290][ T5885] netem: change failed [ 109.241372][ T5882] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.264372][ T5882] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2181: bg 0: block 345: padding at end of block bitmap is not set [ 109.293898][ T5139] EXT4-fs (loop3): unmounting filesystem. [ 109.308015][ T5892] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2186'. [ 109.321842][ T5894] loop3: detected capacity change from 0 to 128 [ 109.335162][ T5894] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.348292][ T5894] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.405063][ T5139] EXT4-fs (loop3): unmounting filesystem. [ 109.444187][ T5903] loop3: detected capacity change from 0 to 2048 [ 109.474979][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 109.483613][ T5903] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.499964][ T5903] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2189: bg 0: block 345: padding at end of block bitmap is not set [ 109.515886][ T5903] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 109.529972][ T5903] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.529972][ T5903] [ 109.549512][ T5139] EXT4-fs (loop3): unmounting filesystem. [ 109.562445][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2194'. [ 109.684454][ T28] audit: type=1400 audit(2000000024.075:920): avc: denied { mount } for pid=5928 comm="syz.9.2201" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.852557][ T28] audit: type=1400 audit(2000000024.258:921): avc: denied { mounton } for pid=5944 comm="syz.3.2209" path="/72/file0/file0" dev="incremental-fs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.886070][ T307] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 109.886475][ T28] audit: type=1400 audit(2000000024.301:922): avc: denied { rmdir } for pid=5139 comm="syz-executor" name=".index" dev="incremental-fs" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.060918][ T307] usb 7-1: Using ep0 maxpacket: 16 [ 110.074589][ T307] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.086621][ T307] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.096492][ T307] usb 7-1: config 0 interface 0 has no altsetting 0 [ 110.103207][ T307] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 110.114369][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.123285][ T307] usb 7-1: config 0 descriptor?? [ 110.133098][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.140250][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.147865][ T5952] device bridge_slave_0 entered promiscuous mode [ 110.156637][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.163869][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.171410][ T5952] device bridge_slave_1 entered promiscuous mode [ 110.238701][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.245782][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.253121][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.260206][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.286801][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.294925][ T2365] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.302380][ T2365] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.312300][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.321193][ T2365] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.328457][ T2365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.339980][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.348779][ T2365] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.355879][ T2365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.372609][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.382175][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.399509][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.413877][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.422190][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.430103][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.438953][ T5952] device veth0_vlan entered promiscuous mode [ 110.446275][ T2479] device bridge_slave_1 left promiscuous mode [ 110.452523][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.460075][ T2479] device bridge_slave_0 left promiscuous mode [ 110.466347][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.474372][ T2479] device veth1_macvtap left promiscuous mode [ 110.480467][ T2479] device veth0_vlan left promiscuous mode [ 110.516862][ T307] apple 0003:05AC:0247.0020: unexpected long global item [ 110.528671][ T307] apple 0003:05AC:0247.0020: parse failed [ 110.534454][ T307] apple: probe of 0003:05AC:0247.0020 failed with error -22 [ 110.571280][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.581046][ T5952] device veth1_macvtap entered promiscuous mode [ 110.594058][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.608220][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.700427][ T5973] loop9: detected capacity change from 0 to 1024 [ 110.707384][ T5973] EXT4-fs: Ignoring removed orlov option [ 110.710548][ T5270] usb 7-1: USB disconnect, device number 6 [ 110.713067][ T5973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.738901][ T5973] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 110.791885][ T5982] input: syz1 as /devices/virtual/input/input45 [ 110.815464][ T28] audit: type=1400 audit(2000000025.288:923): avc: denied { ioctl } for pid=5983 comm="syz.2.2223" path="/492/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 110.852070][ T5987] device ip6gretap0 entered promiscuous mode [ 110.858234][ T5987] device macsec1 entered promiscuous mode [ 110.865523][ T5987] device ip6gretap0 left promiscuous mode [ 110.872994][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 110.892271][ T5989] loop9: detected capacity change from 0 to 256 [ 110.899927][ T603] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.059438][ T28] audit: type=1326 audit(2000000025.556:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.2.2236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda8658e9a9 code=0x0 [ 111.084943][ T603] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.096773][ T603] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.108096][ T603] usb 6-1: config 0 interface 0 has no altsetting 0 [ 111.114843][ T603] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 111.124054][ T603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.133681][ T603] usb 6-1: config 0 descriptor?? [ 111.184141][ T6018] device ip6gretap0 entered promiscuous mode [ 111.190431][ T6018] device macsec1 entered promiscuous mode [ 111.202877][ T6018] device ip6gretap0 left promiscuous mode [ 111.264784][ T6024] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2241'. [ 111.352439][ T6034] loop9: detected capacity change from 0 to 2048 [ 111.367617][ T6034] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 111.376230][ T6034] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.392531][ T28] audit: type=1400 audit(2000000025.910:925): avc: denied { append } for pid=6033 comm="syz.9.2246" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.417493][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 111.477588][ T5270] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 111.519306][ T28] audit: type=1400 audit(2000000026.050:926): avc: denied { watch } for pid=6047 comm="syz.9.2252" path="/46/file0" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.645647][ T5270] usb 7-1: Using ep0 maxpacket: 16 [ 111.651819][ T5270] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 111.660296][ T5270] usb 7-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 111.670642][ T5270] usb 7-1: config 166 has 1 interface, different from the descriptor's value: 2 [ 111.679739][ T5270] usb 7-1: config 166 has no interface number 0 [ 111.686103][ T5270] usb 7-1: config 166 interface 177 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.699392][ T5270] usb 7-1: config 166 interface 177 has no altsetting 0 [ 111.708234][ T5270] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 111.717450][ T5270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.725546][ T5270] usb 7-1: Product: syz [ 111.729758][ T5270] usb 7-1: Manufacturer: syz [ 111.734476][ T5270] usb 7-1: SerialNumber: syz [ 111.887731][ T28] audit: type=1400 audit(2000000026.436:927): avc: denied { create } for pid=6062 comm="syz.9.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 111.916998][ T603] usb 6-1: string descriptor 0 read error: -71 [ 111.929576][ T603] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #200: -71 [ 111.960828][ T603] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 111.969084][ T603] uclogic 0003:256C:006D.0021: failed probing pen v2 parameters: -71 [ 111.977936][ T603] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 111.996140][ T603] uclogic: probe of 0003:256C:006D.0021 failed with error -71 [ 112.005108][ T603] usb 6-1: USB disconnect, device number 6 [ 112.080753][ T6078] loop2: detected capacity change from 0 to 512 [ 112.093604][ T6078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.105098][ T6078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2265'. [ 112.123376][ T286] EXT4-fs (loop2): unmounting filesystem. [ 112.142742][ T6081] loop2: detected capacity change from 0 to 1024 [ 112.150108][ T6081] EXT4-fs: Ignoring removed bh option [ 112.158211][ T6081] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.186569][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.223221][ T286] EXT4-fs (loop2): unmounting filesystem. [ 112.309030][ T6087] loop9: detected capacity change from 0 to 40427 [ 112.317327][ T6087] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504) [ 112.324322][ T6087] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 112.333337][ T6087] F2FS-fs (loop9): invalid crc value [ 112.340212][ T6087] F2FS-fs (loop9): Found nat_bits in checkpoint [ 112.371076][ T6087] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 112.378266][ T6087] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 112.395969][ T6087] syz.9.2269: attempt to access beyond end of device [ 112.395969][ T6087] loop9: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 112.415998][ T6095] loop5: detected capacity change from 0 to 128 [ 112.422673][ T5707] syz-executor: attempt to access beyond end of device [ 112.422673][ T5707] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.530017][ T307] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 112.587378][ T6095] loop5: detected capacity change from 0 to 40427 [ 112.595078][ T6095] F2FS-fs (loop5): fault_injection options not supported [ 112.612456][ T6095] F2FS-fs (loop5): invalid crc value [ 112.633786][ T6095] F2FS-fs (loop5): Found nat_bits in checkpoint [ 112.669829][ T6095] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 112.698128][ T6095] syz.5.2271: attempt to access beyond end of device [ 112.698128][ T6095] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.712030][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 112.719986][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.737151][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.770513][ T307] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 112.789165][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.798085][ T307] usb 3-1: config 0 descriptor?? [ 113.172832][ T28] audit: type=1400 audit(2000000027.820:928): avc: denied { read write } for pid=5707 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.197611][ T28] audit: type=1400 audit(2000000027.820:929): avc: denied { open } for pid=5707 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.225541][ T307] savu 0003:1E7D:2D5A.0022: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 113.238612][ T28] audit: type=1400 audit(2000000027.820:930): avc: denied { ioctl } for pid=5707 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=127 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 113.269478][ T28] audit: type=1400 audit(2000000027.852:931): avc: denied { ioctl } for pid=6088 comm="syz.2.2270" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 113.484895][ T603] usb 3-1: USB disconnect, device number 12 [ 113.587952][ T6138] loop9: detected capacity change from 0 to 131072 [ 113.595056][ T28] audit: type=1400 audit(2000000028.281:932): avc: denied { mounton } for pid=6137 comm="syz.9.2289" path="/70/file1" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 113.620731][ T6138] F2FS-fs (loop9): Found nat_bits in checkpoint [ 113.657754][ T6138] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 113.665960][ T28] audit: type=1400 audit(2000000028.346:933): avc: denied { mount } for pid=6137 comm="syz.9.2289" name="/" dev="loop9" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 113.697073][ T28] audit: type=1400 audit(2000000028.388:934): avc: denied { bpf } for pid=6144 comm="syz.5.2290" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.724280][ T28] audit: type=1400 audit(2000000028.388:935): avc: denied { map_create } for pid=6144 comm="syz.5.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.775709][ T28] audit: type=1400 audit(2000000028.388:936): avc: denied { map_read map_write } for pid=6144 comm="syz.5.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 113.825632][ T28] audit: type=1400 audit(2000000028.388:937): avc: denied { prog_load } for pid=6144 comm="syz.5.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.024864][ T19] usb 7-1: USB disconnect, device number 7 [ 114.045791][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2298'. [ 114.051934][ T6163] loop6: detected capacity change from 0 to 1024 [ 114.056606][ T6165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2298'. [ 114.063932][ T6163] EXT4-fs: Ignoring removed orlov option [ 114.088949][ T6163] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.098500][ T6163] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 114.173475][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 114.529137][ T6202] loop2: detected capacity change from 0 to 128 [ 114.558930][ T6202] FAT-fs (loop2): Directory bread(block 11554) failed [ 114.575519][ T6202] FAT-fs (loop2): Directory bread(block 11555) failed [ 114.590698][ T6202] FAT-fs (loop2): Directory bread(block 11556) failed [ 114.598046][ T6202] FAT-fs (loop2): Directory bread(block 11557) failed [ 114.605079][ T6202] FAT-fs (loop2): Directory bread(block 11558) failed [ 114.612123][ T6202] FAT-fs (loop2): Directory bread(block 11559) failed [ 114.619545][ T6202] FAT-fs (loop2): Directory bread(block 11560) failed [ 114.626436][ T6202] FAT-fs (loop2): Directory bread(block 11561) failed [ 114.639452][ T6202] FAT-fs (loop2): Directory bread(block 11562) failed [ 114.647551][ T6202] FAT-fs (loop2): Directory bread(block 11563) failed [ 114.655439][ T6204] syz.5.2316[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.655515][ T6204] syz.5.2316[6204] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.967475][ T6223] loop5: detected capacity change from 0 to 256 [ 115.035393][ T6223] FAT-fs (loop5): error, corrupted file size (i_pos 196, 2097152) [ 115.064786][ T6218] loop6: detected capacity change from 0 to 40427 [ 115.072207][ T6218] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 115.079342][ T6218] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 115.094371][ T6218] F2FS-fs (loop6): heap/no_heap options were deprecated [ 115.106855][ T6218] F2FS-fs (loop6): fault_injection options not supported [ 115.120410][ T6218] F2FS-fs (loop6): invalid crc value [ 115.154883][ T6218] F2FS-fs (loop6): Found nat_bits in checkpoint [ 115.235228][ T6218] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 115.244919][ T6218] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 115.329708][ T6249] syz.9.2335[6249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.329790][ T6249] syz.9.2335[6249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.346604][ T6218] syz.6.2323: attempt to access beyond end of device [ 115.346604][ T6218] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.408333][ T6218] syz.6.2323: attempt to access beyond end of device [ 115.408333][ T6218] loop6: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 115.451545][ T6237] loop0: detected capacity change from 0 to 40427 [ 115.463807][ T6237] F2FS-fs (loop0): fault_injection options not supported [ 115.471414][ T6237] F2FS-fs (loop0): Image doesn't support compression [ 115.485028][ T6237] F2FS-fs (loop0): Image doesn't support compression [ 115.492386][ T6237] F2FS-fs (loop0): fault_type options not supported [ 115.510841][ T6237] F2FS-fs (loop0): invalid crc value [ 115.532708][ T6237] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.595686][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2341'. [ 115.667092][ T6237] F2FS-fs (loop0): Start checkpoint disabled! [ 115.685595][ T6274] loop2: detected capacity change from 0 to 256 [ 115.707420][ T6237] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 115.739276][ T6274] FAT-fs (loop2): error, corrupted file size (i_pos 196, 2097152) [ 115.758280][ T6237] syz.0.2330: attempt to access beyond end of device [ 115.758280][ T6237] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.867241][ T5015] kworker/u4:350: attempt to access beyond end of device [ 115.867241][ T5015] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 115.891694][ T6285] xt_bpf: check failed: parse error [ 116.101342][ T6272] loop6: detected capacity change from 0 to 40427 [ 116.115589][ T6298] netlink: 52 bytes leftover after parsing attributes in process `kfree'. [ 116.120616][ T6272] F2FS-fs (loop6): fault_injection options not supported [ 116.141713][ T6272] F2FS-fs (loop6): invalid crc value [ 116.178195][ T6303] loop0: detected capacity change from 0 to 256 [ 116.192878][ T6272] F2FS-fs (loop6): Found nat_bits in checkpoint [ 116.256737][ T6312] overlayfs: invalid origin (0000) [ 116.290073][ T6272] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 116.332437][ T6316] loop0: detected capacity change from 0 to 4096 [ 116.398254][ T6316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.412694][ T6272] syz.6.2344: attempt to access beyond end of device [ 116.412694][ T6272] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.463627][ T3064] EXT4-fs (loop0): unmounting filesystem. [ 116.502837][ T5165] syz-executor: attempt to access beyond end of device [ 116.502837][ T5165] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 116.522905][ T6327] loop9: detected capacity change from 0 to 1024 [ 116.539271][ T6327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.562828][ T6327] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.592654][ T6327] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 116.633910][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 116.771691][ T307] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 116.864451][ T603] kernel write not supported for file bpf-prog (pid: 603 comm: kworker/1:3) [ 116.914822][ T6374] loop0: detected capacity change from 0 to 256 [ 116.929564][ T6374] FAT-fs (loop0): Directory bread(block 64) failed [ 116.936769][ T6374] FAT-fs (loop0): Directory bread(block 65) failed [ 116.943481][ T6374] FAT-fs (loop0): Directory bread(block 66) failed [ 116.950322][ T6374] FAT-fs (loop0): Directory bread(block 67) failed [ 116.956956][ T6374] FAT-fs (loop0): Directory bread(block 68) failed [ 116.958666][ T307] usb 6-1: Using ep0 maxpacket: 16 [ 116.963805][ T6374] FAT-fs (loop0): Directory bread(block 69) failed [ 116.972122][ T307] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 116.975348][ T6374] FAT-fs (loop0): Directory bread(block 70) failed [ 116.991185][ T6374] FAT-fs (loop0): Directory bread(block 71) failed [ 116.998095][ T6374] FAT-fs (loop0): Directory bread(block 72) failed [ 117.000543][ T307] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.004949][ T6374] FAT-fs (loop0): Directory bread(block 73) failed [ 117.019402][ T307] usb 6-1: Product: syz [ 117.046955][ T307] usb 6-1: Manufacturer: syz [ 117.053750][ T307] usb 6-1: SerialNumber: syz [ 117.064077][ T307] usb 6-1: config 0 descriptor?? [ 117.073776][ T307] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 117.082755][ T307] usb 6-1: Detected FT-X [ 117.135263][ T603] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 117.172308][ T6385] loop0: detected capacity change from 0 to 128 [ 117.259646][ T307] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.313612][ T603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.324902][ T603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.335218][ T603] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 117.357027][ T603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.372902][ T603] usb 7-1: config 0 descriptor?? [ 117.402900][ T6405] loop0: detected capacity change from 0 to 128 [ 117.431080][ T6405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.442869][ T6405] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.488960][ T6417] bridge0: port 3(syz_tun) entered blocking state [ 117.497087][ T6417] bridge0: port 3(syz_tun) entered disabled state [ 117.507587][ T6417] device syz_tun entered promiscuous mode [ 117.514485][ T3064] EXT4-fs (loop0): unmounting filesystem. [ 117.520490][ T6417] bridge0: port 3(syz_tun) entered blocking state [ 117.526969][ T6417] bridge0: port 3(syz_tun) entered forwarding state [ 117.601964][ T6427] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 117.634871][ T6430] loop0: detected capacity change from 0 to 128 [ 117.641987][ T307] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.651015][ T6430] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 117.652551][ T403] udevd[403]: incorrect ext4 checksum on /dev/loop0 [ 117.764786][ T603] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 117.771896][ T603] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 117.778867][ T603] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 117.785963][ T603] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 117.792988][ T39] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 117.800973][ T603] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 117.807885][ T603] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 117.814927][ T603] pyra 0003:1E7D:2CF6.0023: unknown main item tag 0x0 [ 117.822683][ T603] pyra 0003:1E7D:2CF6.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 117.838690][ T5270] usb 6-1: USB disconnect, device number 7 [ 117.848208][ T5270] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.857968][ T5270] ftdi_sio 6-1:0.0: device disconnected [ 117.983356][ T39] usb 10-1: Using ep0 maxpacket: 8 [ 117.989556][ T39] usb 10-1: config 251 has an invalid interface number: 29 but max is 0 [ 117.997999][ T39] usb 10-1: config 251 has no interface number 0 [ 118.004405][ T39] usb 10-1: config 251 interface 29 altsetting 71 has an invalid endpoint with address 0x0, skipping [ 118.015471][ T39] usb 10-1: config 251 interface 29 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 118.026847][ T39] usb 10-1: config 251 interface 29 has no altsetting 0 [ 118.034121][ T39] usb 10-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 118.043333][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.057976][ T307] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 118.227688][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.237583][ T307] usb 3-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 118.246763][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.250254][ T39] usb 10-1: string descriptor 0 read error: -71 [ 118.261238][ T307] usb 3-1: config 0 descriptor?? [ 118.261772][ T39] usb-storage 10-1:251.29: USB Mass Storage device detected [ 118.274818][ T39] usb-storage 10-1:251.29: Quirks match for vid 054c pid 0069: 1 [ 118.305402][ T39] usb 10-1: USB disconnect, device number 10 [ 118.324780][ T603] pyra 0003:1E7D:2CF6.0023: couldn't init struct pyra_device [ 118.332268][ T603] pyra 0003:1E7D:2CF6.0023: couldn't install mouse [ 118.345676][ T603] pyra: probe of 0003:1E7D:2CF6.0023 failed with error -71 [ 118.358117][ T603] usb 7-1: USB disconnect, device number 8 [ 118.395449][ T6449] fido_id[6449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 118.426716][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 118.426735][ T28] audit: type=1400 audit(2000000033.453:1019): avc: denied { create } for pid=6454 comm="syz.5.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.642865][ T307] wacom 0003:056A:00C6.0024: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.2-1/input0 [ 118.738940][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 118.787984][ T28] audit: type=1400 audit(2000000033.849:1020): avc: denied { relabelfrom } for pid=6465 comm="syz.9.2428" name="NETLINK" dev="sockfs" ino=41360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.812558][ T28] audit: type=1400 audit(2000000033.849:1021): avc: denied { relabelto } for pid=6465 comm="syz.9.2428" name="NETLINK" dev="sockfs" ino=41360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 118.837998][ T39] usb 3-1: USB disconnect, device number 13 [ 118.906091][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 118.912319][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.923485][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.933623][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.953069][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 118.964356][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.977361][ T24] usb 6-1: config 0 descriptor?? [ 118.982424][ T28] audit: type=1400 audit(2000000034.053:1022): avc: denied { read } for pid=6480 comm="syz.6.2435" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.006049][ T28] audit: type=1400 audit(2000000034.053:1023): avc: denied { open } for pid=6480 comm="syz.6.2435" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.039241][ T28] audit: type=1400 audit(2000000034.107:1024): avc: denied { ioctl } for pid=6480 comm="syz.6.2435" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 119.154432][ T28] audit: type=1400 audit(2000000034.236:1025): avc: denied { execute } for pid=6497 comm="syz.9.2442" path="/93/freezer.state" dev="tmpfs" ino=503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.182880][ T28] audit: type=1400 audit(2000000034.236:1026): avc: denied { create } for pid=6499 comm="syz.6.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.206758][ T6502] x_tables: duplicate underflow at hook 4 [ 119.209691][ T28] audit: type=1400 audit(2000000034.236:1027): avc: denied { connect } for pid=6499 comm="syz.6.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.233188][ T28] audit: type=1400 audit(2000000034.236:1028): avc: denied { write } for pid=6499 comm="syz.6.2443" path="socket:[41400]" dev="sockfs" ino=41400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.444422][ T24] cypress 0003:04B4:0001.0025: item fetching failed at offset 3/5 [ 119.456383][ T24] cypress 0003:04B4:0001.0025: parse failed [ 119.475256][ T24] cypress: probe of 0003:04B4:0001.0025 failed with error -22 [ 119.640703][ T307] usb 6-1: USB disconnect, device number 8 [ 119.732368][ T6546] loop2: detected capacity change from 0 to 1024 [ 119.756996][ T6546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.760808][ T6540] loop6: detected capacity change from 0 to 40427 [ 119.771319][ T6546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.778270][ T6540] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 119.798181][ T6540] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 119.807892][ T6540] F2FS-fs (loop6): invalid crc value [ 119.815395][ T6546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.816769][ T6540] F2FS-fs (loop6): Found nat_bits in checkpoint [ 119.848026][ T6555] tmpfs: Unknown parameter '' [ 119.872184][ T286] EXT4-fs (loop2): unmounting filesystem. [ 119.887001][ T6540] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 119.916012][ T6540] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 119.963554][ T6540] syz.6.2462: attempt to access beyond end of device [ 119.963554][ T6540] loop6: rw=2049, sector=53248, nr_sectors = 16 limit=40427 [ 119.983930][ T5165] syz-executor: attempt to access beyond end of device [ 119.983930][ T5165] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.008921][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.025873][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 120.044606][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 120.069583][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 120.089339][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.098647][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.112980][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.122321][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.130634][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.257055][ T6582] loop9: detected capacity change from 0 to 128 [ 120.326253][ T6592] loop6: detected capacity change from 0 to 128 [ 120.328054][ T6582] syz.9.2477: attempt to access beyond end of device [ 120.328054][ T6582] loop9: rw=1, sector=160, nr_sectors = 1 limit=128 [ 120.339384][ T6590] loop2: detected capacity change from 0 to 1024 [ 120.346485][ T6582] Buffer I/O error on dev loop9, logical block 160, lost async page write [ 120.367427][ T6594] device bridge0 entered promiscuous mode [ 120.374126][ T6594] device macsec1 entered promiscuous mode [ 120.378665][ T6592] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 120.380574][ T6594] bridge0: port 3(macsec1) entered blocking state [ 120.389117][ T6590] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.395287][ T6594] bridge0: port 3(macsec1) entered disabled state [ 120.414399][ T6594] device bridge0 left promiscuous mode [ 120.421335][ T6592] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.458662][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 120.461317][ T6590] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.504579][ T2365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.567031][ T286] EXT4-fs (loop2): unmounting filesystem. [ 120.664069][ T6620] loop5: detected capacity change from 0 to 256 [ 120.705210][ T19] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 120.767135][ T6632] netlink: 'syz.2.2500': attribute type 11 has an invalid length. [ 120.811370][ T6641] syz.2.2503[6641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.811466][ T6641] syz.2.2503[6641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.910662][ T19] usb 10-1: Using ep0 maxpacket: 32 [ 120.939533][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.950931][ T307] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 120.968926][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.981580][ T6652] loop0: detected capacity change from 0 to 512 [ 120.987969][ T19] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 120.997400][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.017351][ T19] usb 10-1: config 0 descriptor?? [ 121.032793][ T6652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.041907][ T6652] ext4 filesystem being mounted at /276/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.064089][ T6652] EXT4-fs error (device loop0): ext4_empty_dir:3145: inode #12: block 32: comm syz.0.2509: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 121.076563][ T6656] loop2: detected capacity change from 0 to 8192 [ 121.090231][ T6652] EXT4-fs (loop0): Remounting filesystem read-only [ 121.100685][ T6652] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #12: comm syz.0.2509: directory missing '.' [ 121.140635][ T3064] EXT4-fs (loop0): unmounting filesystem. [ 121.150345][ T307] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.187516][ T307] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.200584][ T307] usb 7-1: config 0 interface 0 has no altsetting 0 [ 121.208012][ T307] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.219810][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.229472][ T307] usb 7-1: config 0 descriptor?? [ 121.311271][ T6678] loop2: detected capacity change from 0 to 256 [ 121.320392][ T6678] exfat: Bad value for 'gid' [ 121.334674][ T3857] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 121.412652][ T19] savu 0003:1E7D:2D5A.0026: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 121.432099][ T6690] loop5: detected capacity change from 0 to 128 [ 121.471725][ T6690] syz.5.2525: attempt to access beyond end of device [ 121.471725][ T6690] loop5: rw=1, sector=160, nr_sectors = 1 limit=128 [ 121.491774][ T6690] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 121.647507][ T6703] loop2: detected capacity change from 0 to 512 [ 121.658379][ T6703] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.665351][ T6703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 121.678594][ T6] usb 10-1: USB disconnect, device number 11 [ 121.695139][ T6703] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.2531: bad orphan inode 131083 [ 121.752478][ T6713] device bridge0 entered promiscuous mode [ 121.758271][ T6713] device macsec1 entered promiscuous mode [ 121.764796][ T6713] bridge0: port 3(macsec1) entered blocking state [ 121.771504][ T6713] bridge0: port 3(macsec1) entered disabled state [ 121.779109][ T6713] device bridge0 left promiscuous mode [ 121.788365][ T6711] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.802970][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 121.811507][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.819995][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 121.829376][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.838150][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.846614][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.858961][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 121.867601][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.945807][ T6721] loop2: detected capacity change from 0 to 2048 [ 121.958421][ T6723] loop5: detected capacity change from 0 to 4096 [ 121.969258][ T6723] EXT4-fs (loop5): Test dummy encryption mode enabled [ 121.988712][ T307] usb 7-1: string descriptor 0 read error: -71 [ 121.996906][ T307] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #200: -71 [ 122.005838][ T307] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 122.014997][ T307] uclogic 0003:256C:006D.0027: failed probing pen v2 parameters: -71 [ 122.023299][ T307] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 122.031332][ T307] uclogic: probe of 0003:256C:006D.0027 failed with error -71 [ 122.040016][ T307] usb 7-1: USB disconnect, device number 9 [ 122.052437][ T6721] EXT4-fs error (device loop2): ext4_find_extent:936: inode #2: comm syz.2.2538: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 122.162512][ T6740] loop5: detected capacity change from 0 to 16 [ 122.187697][ T6740] erofs: (device loop5): mounted with root inode @ nid 36. [ 122.198524][ T6744] loop2: detected capacity change from 0 to 1024 [ 122.209394][ T6744] EXT4-fs: Ignoring removed nobh option [ 122.220192][ T6740] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 122.226338][ T6744] EXT4-fs: Ignoring removed bh option [ 122.231550][ T6740] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 122.244024][ T6740] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 122.244111][ T6744] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.265164][ T6740] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 122.275686][ T6740] syz.5.2546: attempt to access beyond end of device [ 122.275686][ T6740] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 122.284509][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 122.299186][ T6740] syz.5.2546: attempt to access beyond end of device [ 122.299186][ T6740] loop5: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 122.306148][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 122.323060][ T6747] syz.5.2546: attempt to access beyond end of device [ 122.323060][ T6747] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 122.348474][ T6747] syz.5.2546: attempt to access beyond end of device [ 122.348474][ T6747] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 122.363156][ T6747] syz.5.2546: attempt to access beyond end of device [ 122.363156][ T6747] loop5: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 122.377160][ T6747] syz.5.2546: attempt to access beyond end of device [ 122.377160][ T6747] loop5: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 122.408986][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 319 @ nid 36 [ 122.424128][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 316 @ nid 36 [ 122.441126][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 315 @ nid 36 [ 122.450702][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 314 @ nid 36 [ 122.486346][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 313 @ nid 36 [ 122.500126][ T6766] loop2: detected capacity change from 0 to 512 [ 122.504687][ T6762] loop0: detected capacity change from 0 to 2048 [ 122.512779][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.522837][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 312 @ nid 36 [ 122.528199][ T6760] loop9: detected capacity change from 0 to 8192 [ 122.532485][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 309 @ nid 36 [ 122.549666][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 308 @ nid 36 [ 122.557568][ T6766] ext4 filesystem being mounted at /583/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.560201][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.579977][ T6762] loop0: p2 < > p3 < p5 > p4 [ 122.580471][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 307 @ nid 36 [ 122.584691][ T6762] loop0: partition table partially beyond EOD, [ 122.593878][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.609786][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 306 @ nid 36 [ 122.619120][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 302 @ nid 36 [ 122.630628][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 298 @ nid 36 [ 122.639850][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 297 @ nid 36 [ 122.649142][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 296 @ nid 36 [ 122.660986][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 295 @ nid 36 [ 122.670632][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.680151][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 294 @ nid 36 [ 122.685273][ T6766] EXT4-fs error (device loop2): ext4_empty_dir:3145: inode #12: block 32: comm syz.2.2556: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 122.689407][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 291 @ nid 36 [ 122.717753][ T6762] truncated [ 122.721540][ T6762] loop0: p2 start 4278190080 is beyond EOD, truncated [ 122.728795][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 290 @ nid 36 [ 122.738227][ T6762] loop0: p4 size 8192 extends beyond EOD, truncated [ 122.751062][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.760861][ T6762] loop0: p5 size 8192 extends beyond EOD, truncated [ 122.769125][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 289 @ nid 36 [ 122.782353][ T6766] EXT4-fs (loop2): Remounting filesystem read-only [ 122.839549][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 122.843442][ T6766] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #12: comm syz.2.2556: directory missing '.' [ 122.861855][ T367] udevd[367]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 122.862083][ T2611] udevd[2611]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 122.874097][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 122.894794][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 288 @ nid 36 [ 122.905206][ T6784] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2564'. [ 122.912896][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 286 @ nid 36 [ 122.974513][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 283 @ nid 36 [ 122.979516][ T6789] loop6: detected capacity change from 0 to 1024 [ 123.010544][ T6789] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.027243][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 280 @ nid 36 [ 123.074888][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 279 @ nid 36 [ 123.088243][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 278 @ nid 36 [ 123.097787][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 277 @ nid 36 [ 123.107324][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.116943][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 276 @ nid 36 [ 123.126223][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 273 @ nid 36 [ 123.136266][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 272 @ nid 36 [ 123.144478][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 123.144496][ T28] audit: type=1400 audit(2000000038.517:1066): avc: denied { remount } for pid=6805 comm="syz.9.2574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.146102][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.180943][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 271 @ nid 36 [ 123.190383][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.191800][ T28] audit: type=1400 audit(2000000038.570:1067): avc: denied { unmount } for pid=5707 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 123.200199][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 270 @ nid 36 [ 123.229600][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 266 @ nid 36 [ 123.237911][ T6809] loop0: detected capacity change from 0 to 2048 [ 123.239093][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 265 @ nid 36 [ 123.268545][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 262 @ nid 36 [ 123.292962][ T6809] loop0: p2 p3 p7 [ 123.306112][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 261 @ nid 36 [ 123.346884][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 260 @ nid 36 [ 123.393640][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 259 @ nid 36 [ 123.424571][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.442079][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 258 @ nid 36 [ 123.451709][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 255 @ nid 36 [ 123.461349][ T6832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6832 comm=syz.0.2583 [ 123.470346][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 254 @ nid 36 [ 123.478711][ T6832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6832 comm=syz.0.2583 [ 123.493102][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.506917][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 253 @ nid 36 [ 123.516690][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.539945][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 252 @ nid 36 [ 123.549735][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 248 @ nid 36 [ 123.559354][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 247 @ nid 36 [ 123.573589][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 244 @ nid 36 [ 123.583287][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 243 @ nid 36 [ 123.592572][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 242 @ nid 36 [ 123.601802][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 241 @ nid 36 [ 123.611611][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.621044][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 240 @ nid 36 [ 123.635685][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 237 @ nid 36 [ 123.653607][ T6842] loop6: detected capacity change from 0 to 128 [ 123.663244][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 236 @ nid 36 [ 123.698042][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.741657][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 235 @ nid 36 [ 123.765927][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.781128][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 234 @ nid 36 [ 123.795722][ T6851] loop9: detected capacity change from 0 to 128 [ 123.802330][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 230 @ nid 36 [ 123.828656][ T6851] ext4 filesystem being mounted at /126/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.832430][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 229 @ nid 36 [ 123.877715][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 226 @ nid 36 [ 123.886965][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 225 @ nid 36 [ 123.896220][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 224 @ nid 36 [ 123.910878][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 223 @ nid 36 [ 123.920426][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.922135][ T6836] loop2: detected capacity change from 0 to 40427 [ 123.929888][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 222 @ nid 36 [ 123.945455][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 219 @ nid 36 [ 123.954671][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 218 @ nid 36 [ 123.964188][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 123.980888][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 217 @ nid 36 [ 123.992579][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.002654][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 216 @ nid 36 [ 124.010001][ T6836] F2FS-fs (loop2): fault_type options not supported [ 124.012250][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 212 @ nid 36 [ 124.028571][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 211 @ nid 36 [ 124.046659][ T6836] F2FS-fs (loop2): invalid crc value [ 124.052216][ T28] audit: type=1400 audit(2000000039.493:1068): avc: denied { ioctl } for pid=6857 comm="syz.0.2597" path="socket:[43047]" dev="sockfs" ino=43047 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 124.087976][ T6836] F2FS-fs (loop2): Found nat_bits in checkpoint [ 124.116531][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 208 @ nid 36 [ 124.125726][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 207 @ nid 36 [ 124.153935][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 206 @ nid 36 [ 124.183008][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 205 @ nid 36 [ 124.208718][ T6836] F2FS-fs (loop2): Start checkpoint disabled! [ 124.211288][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.228261][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 204 @ nid 36 [ 124.244083][ T28] audit: type=1326 audit(2000000039.697:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ff8e9a9 code=0x7ffc0000 [ 124.249412][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 201 @ nid 36 [ 124.282144][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 200 @ nid 36 [ 124.291665][ T6836] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 124.291681][ T28] audit: type=1326 audit(2000000039.697:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa59ff8e9a9 code=0x7ffc0000 [ 124.307571][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.358257][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 199 @ nid 36 [ 124.365709][ T28] audit: type=1326 audit(2000000039.697:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59ff8e9a9 code=0x7ffc0000 [ 124.384327][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.391158][ T28] audit: type=1326 audit(2000000039.697:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.6.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fa59ff8e9a9 code=0x7ffc0000 [ 124.436883][ T28] audit: type=1326 audit(2000000039.697:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.6.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa59ffc1265 code=0x7ffc0000 [ 124.460172][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 198 @ nid 36 [ 124.467809][ T28] audit: type=1400 audit(2000000039.815:1074): avc: denied { rename } for pid=6835 comm="syz.2.2587" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 124.492906][ T28] audit: type=1326 audit(2000000039.868:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.6.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa59ff8e9a9 code=0x7ffc0000 [ 124.493860][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 194 @ nid 36 [ 124.551160][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 193 @ nid 36 [ 124.571898][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 190 @ nid 36 [ 124.593762][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 189 @ nid 36 [ 124.601367][ T5270] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 124.617720][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 188 @ nid 36 [ 124.639021][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 187 @ nid 36 [ 124.654730][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.664594][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 124.668559][ T6900] overlayfs: failed to set xattr on upper [ 124.674328][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 183 @ nid 36 [ 124.692947][ T6901] netlink: 'syz.6.2616': attribute type 5 has an invalid length. [ 124.708687][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 182 @ nid 36 [ 124.718141][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.734136][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 181 @ nid 36 [ 124.778413][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.788646][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 124.798019][ T5270] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.809324][ T5270] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.815975][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 176 @ nid 36 [ 124.829814][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 175 @ nid 36 [ 124.831520][ T5270] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.852632][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 172 @ nid 36 [ 124.868204][ T5270] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.869013][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 171 @ nid 36 [ 124.876397][ T5270] usb 10-1: Product: syz [ 124.876413][ T5270] usb 10-1: Manufacturer: syz [ 124.876428][ T5270] usb 10-1: SerialNumber: syz [ 124.905682][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 170 @ nid 36 [ 124.915207][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 165 @ nid 36 [ 124.924620][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 164 @ nid 36 [ 124.935341][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.944958][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 163 @ nid 36 [ 124.953428][ T6905] loop6: detected capacity change from 0 to 40427 [ 124.954181][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 124.971043][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 162 @ nid 36 [ 124.972618][ T6905] F2FS-fs (loop6): invalid crc value [ 124.980371][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 158 @ nid 36 [ 124.995104][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 157 @ nid 36 [ 124.998764][ T6905] F2FS-fs (loop6): Found nat_bits in checkpoint [ 125.004687][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 125.020135][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 125.029826][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 125.039262][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 151 @ nid 36 [ 125.048820][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.055174][ T6905] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 125.058571][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 150 @ nid 36 [ 125.082218][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 147 @ nid 36 [ 125.091698][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 146 @ nid 36 [ 125.101405][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.111069][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 145 @ nid 36 [ 125.120465][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.120778][ T5165] bio_check_eod: 1 callbacks suppressed [ 125.120795][ T5165] syz-executor: attempt to access beyond end of device [ 125.120795][ T5165] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.130208][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 125.158984][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 125.168548][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 125.177919][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 136 @ nid 36 [ 125.187541][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 135 @ nid 36 [ 125.196915][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 134 @ nid 36 [ 125.206272][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 133 @ nid 36 [ 125.215609][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.225134][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 132 @ nid 36 [ 125.235086][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 129 @ nid 36 [ 125.244287][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 128 @ nid 36 [ 125.253922][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.263439][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 127 @ nid 36 [ 125.272723][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.282566][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 126 @ nid 36 [ 125.294650][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 122 @ nid 36 [ 125.304043][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 121 @ nid 36 [ 125.313345][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 118 @ nid 36 [ 125.322581][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 117 @ nid 36 [ 125.332131][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 116 @ nid 36 [ 125.346586][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 125.355822][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.365275][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 125.374500][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 125.383649][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 125.392873][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.402303][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 125.411478][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.420889][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 125.430255][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 104 @ nid 36 [ 125.439516][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 103 @ nid 36 [ 125.448882][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 102 @ nid 36 [ 125.458106][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 98 @ nid 36 [ 125.467179][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 96 @ nid 36 [ 125.476298][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 94 @ nid 36 [ 125.485368][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 93 @ nid 36 [ 125.494469][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 125.503557][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 91 @ nid 36 [ 125.512932][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 90 @ nid 36 [ 125.522071][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 125.531286][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 125.540469][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 125.549729][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 125.558835][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 125.568122][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 125.577520][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.587179][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 125.596760][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.607866][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 125.617649][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 125.628908][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 125.636764][ T6922] loop6: detected capacity change from 0 to 2048 [ 125.639525][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 125.653618][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 125.663289][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 125.672594][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 125.681734][ T6747] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 125.691224][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 125.700538][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 125.709909][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 125.719169][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 125.728391][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 125.737721][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 125.747122][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 125.756646][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 125.765720][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 30 @ nid 36 [ 125.767356][ T6923] loop2: detected capacity change from 0 to 512 [ 125.776347][ T6922] EXT4-fs mount: 14 callbacks suppressed [ 125.776369][ T6922] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 125.786855][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 125.786888][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 125.786907][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 125.786969][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 125.786989][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 125.787008][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 125.787027][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 125.787046][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 125.787079][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 125.832546][ T6922] EXT4-fs error (device loop6): ext4_find_extent:936: inode #2: comm syz.6.2623: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 125.847485][ T5270] cdc_ncm 10-1:1.0: bind() failure [ 125.850589][ T6747] erofs: (device loop5): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 125.865116][ T5270] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 125.869054][ T6747] syz.5.2546: attempt to access beyond end of device [ 125.869054][ T6747] loop5: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 125.915439][ T6923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.928857][ T6747] syz.5.2546: attempt to access beyond end of device [ 125.928857][ T6747] loop5: rw=524288, sector=525144, nr_sectors = 16 limit=16 [ 125.951266][ T5270] cdc_ncm 10-1:1.1: bind() failure [ 125.951292][ T6747] syz.5.2546: attempt to access beyond end of device [ 125.951292][ T6747] loop5: rw=524288, sector=13716630376, nr_sectors = 8 limit=16 [ 125.961540][ T5270] usb 10-1: USB disconnect, device number 12 [ 125.970778][ T6747] syz.5.2546: attempt to access beyond end of device [ 125.970778][ T6747] loop5: rw=524288, sector=72, nr_sectors = 16 limit=16 [ 125.990334][ T6747] syz.5.2546: attempt to access beyond end of device [ 125.990334][ T6747] loop5: rw=524288, sector=1183600, nr_sectors = 16 limit=16 [ 125.997232][ T6923] EXT4-fs (loop2): orphan cleanup on readonly fs [ 126.010933][ T6747] syz.5.2546: attempt to access beyond end of device [ 126.010933][ T6747] loop5: rw=524288, sector=24, nr_sectors = 8 limit=16 [ 126.014516][ T6923] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2633: bg 0: block 248: padding at end of block bitmap is not set [ 126.024926][ T6747] syz.5.2546: attempt to access beyond end of device [ 126.024926][ T6747] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 126.039955][ T6923] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.2633: Failed to acquire dquot type 1 [ 126.052556][ T6747] syz.5.2546: attempt to access beyond end of device [ 126.052556][ T6747] loop5: rw=524288, sector=1048976, nr_sectors = 16 limit=16 [ 126.075525][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 126.077981][ T6747] syz.5.2546: attempt to access beyond end of device [ 126.077981][ T6747] loop5: rw=524288, sector=672, nr_sectors = 16 limit=16 [ 126.090115][ T6923] EXT4-fs (loop2): 1 truncate cleaned up [ 126.106484][ T6923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.173377][ T286] EXT4-fs (loop2): unmounting filesystem. [ 126.238257][ T6943] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2630'. [ 126.298219][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.316798][ T6950] netlink: 'syz.6.2635': attribute type 2 has an invalid length. [ 126.461139][ T6963] loop5: detected capacity change from 0 to 1024 [ 126.517137][ T6963] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 126.615465][ T5952] EXT4-fs (loop5): unmounting filesystem. [ 126.808071][ T6993] loop6: detected capacity change from 0 to 16 [ 126.822222][ T6993] erofs: (device loop6): mounted with root inode @ nid 36. [ 126.938786][ T7005] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 126.953175][ T7005] netlink: 'syz.2.2660': attribute type 2 has an invalid length. [ 126.954197][ T7004] loop6: detected capacity change from 0 to 2048 [ 126.968645][ T7005] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 126.987490][ T7005] netlink: 'syz.2.2660': attribute type 2 has an invalid length. [ 127.023964][ T7004] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 127.078895][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 127.174121][ T24] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 127.231111][ T7024] incfs: Options parsing error. -22 [ 127.236486][ T7024] incfs: mount failed -22 [ 127.369435][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 127.377947][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.386389][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.399737][ T7037] device bridge_slave_0 left promiscuous mode [ 127.406087][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.413524][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.423480][ T24] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.432897][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.441844][ T24] usb 10-1: config 0 descriptor?? [ 127.450159][ T7037] device bridge_slave_1 left promiscuous mode [ 127.456875][ T24] hub 10-1:0.0: USB hub found [ 127.461809][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.495318][ T7039] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.515621][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2675'. [ 127.595684][ T7052] loop0: detected capacity change from 0 to 256 [ 127.621712][ T7052] exfat: Bad value for 'time_offset' [ 127.639140][ T24] hub 10-1:0.0: 1 port detected [ 127.806102][ T7070] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2688'. [ 127.826489][ T24] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 127.842556][ T24] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 127.845993][ T7076] syz.5.2691[7076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.853898][ T7076] syz.5.2691[7076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.865098][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 127.884113][ T7076] x_tables: duplicate underflow at hook 4 [ 127.907882][ T24] usbhid: probe of 10-1:0.0 failed with error -71 [ 127.956524][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 127.966164][ T24] usb 10-1: USB disconnect, device number 13 [ 127.978838][ T28] audit: type=1400 audit(2000000043.677:1101): avc: denied { read } for pid=7087 comm="syz.2.2697" path="socket:[43698]" dev="sockfs" ino=43698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.038981][ T7091] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.052630][ T28] audit: type=1326 audit(2000000043.763:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.078295][ T28] audit: type=1326 audit(2000000043.785:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.117668][ T28] audit: type=1326 audit(2000000043.785:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.141634][ T28] audit: type=1326 audit(2000000043.785:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.167264][ T28] audit: type=1326 audit(2000000043.860:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.192152][ T28] audit: type=1326 audit(2000000043.860:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.215819][ T28] audit: type=1326 audit(2000000043.945:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.236974][ T7100] loop0: detected capacity change from 0 to 128 [ 128.242815][ T28] audit: type=1326 audit(2000000043.945:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.275190][ T28] audit: type=1326 audit(2000000043.945:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4524d8e9a9 code=0x7ffc0000 [ 128.323606][ T7103] loop5: detected capacity change from 0 to 512 [ 128.373367][ T7103] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 128.390424][ T7103] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.461983][ T5952] EXT4-fs (loop5): unmounting filesystem. [ 128.584288][ T7129] loop5: detected capacity change from 0 to 128 [ 128.673023][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.722338][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.759042][ T5270] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 128.846908][ T7148] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 128.881598][ T7154] netlink: 'syz.5.2725': attribute type 4 has an invalid length. [ 128.936149][ T5270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.972272][ T5270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.973122][ T7164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.990926][ T5270] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.032964][ T5270] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.053718][ T5270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.072471][ T5270] usb 7-1: config 0 descriptor?? [ 129.358293][ T7171] loop0: detected capacity change from 0 to 40427 [ 129.381031][ T7171] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 129.398893][ T7171] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.409474][ T7171] F2FS-fs (loop0): invalid crc value [ 129.415234][ T7181] random: crng reseeded on system resumption [ 129.432536][ T7171] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 129.471945][ T5270] plantronics 0003:047F:FFFF.0028: unknown main item tag 0xd [ 129.480118][ T7171] F2FS-fs (loop0): Start checkpoint disabled! [ 129.487691][ T5270] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 129.497342][ T5270] plantronics 0003:047F:FFFF.0028: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 129.510273][ T7171] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.517418][ T7171] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 129.551953][ T7181] Restarting kernel threads ... done. [ 129.585802][ T7189] loop9: detected capacity change from 0 to 128 [ 129.603908][ T7189] EXT4-fs (loop9): Test dummy encryption mode enabled [ 129.628460][ T7189] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 129.643954][ T7189] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.690779][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 129.739515][ T5270] usb 7-1: USB disconnect, device number 10 [ 129.758866][ T7200] loop9: detected capacity change from 0 to 1024 [ 129.775363][ T7200] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 129.788235][ T7200] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 129.800063][ T7200] EXT4-fs (loop9): orphan cleanup on readonly fs [ 129.808002][ T7200] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.2743: Inode bitmap for bg 0 marked uninitialized [ 129.821165][ T7200] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 129.839699][ T7200] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (32298!=35945) [ 129.861136][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 129.891961][ T7210] loop2: detected capacity change from 0 to 512 [ 129.909893][ T7210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.922975][ T844] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 129.947709][ T7210] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 130.119164][ T844] usb 6-1: Using ep0 maxpacket: 16 [ 130.125417][ T844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.136476][ T844] usb 6-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 130.145690][ T844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.153715][ T844] usb 6-1: Product: syz [ 130.157893][ T844] usb 6-1: Manufacturer: syz [ 130.162498][ T844] usb 6-1: SerialNumber: syz [ 130.168101][ T844] usb 6-1: config 0 descriptor?? [ 130.174029][ T844] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 130.230620][ T6] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 130.278911][ T7227] loop0: detected capacity change from 0 to 8192 [ 130.304483][ T7227] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.367786][ T844] usb 6-1: USB disconnect, device number 9 [ 130.421492][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 130.436080][ T6] usb 10-1: config 8 has an invalid interface number: 39 but max is 0 [ 130.445835][ T6] usb 10-1: config 8 has no interface number 0 [ 130.452197][ T6] usb 10-1: config 8 interface 39 altsetting 1 has an invalid endpoint with address 0xDF, skipping [ 130.475279][ T7227] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 130.484383][ T6] usb 10-1: config 8 interface 39 has no altsetting 0 [ 130.491298][ T7227] FAT-fs (loop0): Filesystem has been set read-only [ 130.504574][ T7227] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 130.514061][ T7227] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 130.524713][ T6] usb 10-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 130.535049][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.544092][ T6] usb 10-1: Product: syz [ 130.554005][ T6] usb 10-1: Manufacturer: syz [ 130.558940][ T6] usb 10-1: SerialNumber: syz [ 130.616809][ T3064] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 130.661933][ T7257] loop2: detected capacity change from 0 to 256 [ 130.677916][ T7257] exfat: Deprecated parameter 'utf8' [ 130.690568][ T7257] exfat: Deprecated parameter 'namecase' [ 130.708308][ T7257] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xeb475cb8, utbl_chksum : 0xe619d30d) [ 130.763023][ T6] ipheth 10-1:8.39: Unable to find endpoints [ 130.825238][ T2479] tipc: Disabling bearer [ 130.835925][ T7265] loop6: detected capacity change from 0 to 512 [ 130.842702][ T2479] tipc: Left network mode [ 130.874295][ T7265] EXT4-fs: Ignoring removed bh option [ 130.881901][ T7265] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 130.894725][ T7265] EXT4-fs error (device loop6): __ext4_iget:5079: inode #15: block 1803188595: comm syz.6.2770: invalid block [ 130.906751][ T7265] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2770: couldn't read orphan inode 15 (err -117) [ 130.919347][ T7265] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 130.994754][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 131.071303][ T7283] 9pnet: p9_errstr2errno: server reported unknown error @ [ 131.141679][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.149388][ T7280] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.163910][ T7280] device bridge_slave_0 entered promiscuous mode [ 131.171188][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.178431][ T7280] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.186082][ T7280] device bridge_slave_1 entered promiscuous mode [ 131.256482][ T7303] loop0: detected capacity change from 0 to 1024 [ 131.279169][ T7303] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.287619][ T7280] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.294988][ T7280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.302299][ T7280] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.309369][ T7280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.324723][ T3064] EXT4-fs (loop0): unmounting filesystem. [ 131.347047][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.363201][ T5012] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.371809][ T5012] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.383014][ T2479] device veth1_macvtap left promiscuous mode [ 131.389431][ T2479] device veth0_vlan left promiscuous mode [ 131.495912][ T7318] loop0: detected capacity change from 0 to 2048 [ 131.513351][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.521493][ T5270] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 131.521789][ T5012] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.531653][ T7318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 131.536157][ T5012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.552437][ T7318] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 131.563086][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.567763][ T7318] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 131.581888][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.588047][ T7318] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.588047][ T7318] [ 131.594651][ T5012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.605067][ T7318] EXT4-fs (loop0): Total free blocks count 0 [ 131.617686][ T7318] EXT4-fs (loop0): Free/Dirty block details [ 131.623729][ T7318] EXT4-fs (loop0): free_blocks=2415919504 [ 131.629763][ T7318] EXT4-fs (loop0): dirty_blocks=32 [ 131.635330][ T7318] EXT4-fs (loop0): Block reservation details [ 131.641726][ T7318] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 131.648649][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.658408][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.666779][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.678630][ T7280] device veth0_vlan entered promiscuous mode [ 131.685115][ T5025] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 131.693363][ T7280] device veth1_macvtap entered promiscuous mode [ 131.704793][ T5270] usb 7-1: Using ep0 maxpacket: 16 [ 131.706190][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.718206][ T5270] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.718640][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.728524][ T5270] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.738052][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.753624][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.761684][ T5270] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.777754][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.786064][ T5270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.793050][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.794153][ T5270] usb 7-1: Product: syz [ 131.804281][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.807025][ T5270] usb 7-1: Manufacturer: syz [ 131.819234][ T5270] usb 7-1: SerialNumber: syz [ 131.828739][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.017257][ T5270] usb 7-1: 0:2 : does not exist [ 132.026120][ T5270] usb 7-1: USB disconnect, device number 11 [ 132.183424][ T7356] loop5: detected capacity change from 0 to 128 [ 132.253744][ T2611] udevd[2611]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 132.445619][ T7381] raw_sendmsg: syz.7.2813 forgot to set AF_INET. Fix it! [ 132.667247][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 132.667263][ T28] audit: type=1400 audit(2000000048.741:1190): avc: denied { create } for pid=7404 comm="syz.7.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 132.705343][ T7407] loop7: detected capacity change from 0 to 1024 [ 132.721026][ T7407] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 132.729702][ T28] audit: type=1400 audit(2000000048.806:1191): avc: denied { mount } for pid=7406 comm="syz.7.2825" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.729703][ T7407] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.755650][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2825'. [ 132.791477][ T603] usb 10-1: USB disconnect, device number 14 [ 132.798395][ T7280] EXT4-fs (loop7): unmounting filesystem. [ 132.812362][ T28] audit: type=1400 audit(2000000048.892:1192): avc: denied { create } for pid=7412 comm="syz.6.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.841622][ T28] audit: type=1400 audit(2000000048.913:1193): avc: denied { read } for pid=7412 comm="syz.6.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.864126][ T7417] loop7: detected capacity change from 0 to 128 [ 132.887499][ T28] audit: type=1400 audit(2000000048.967:1194): avc: denied { write } for pid=7412 comm="syz.6.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.912505][ T7420] xt_bpf: check failed: parse error [ 132.924099][ T28] audit: type=1400 audit(2000000049.010:1195): avc: denied { shutdown } for pid=7412 comm="syz.6.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.970884][ T28] audit: type=1400 audit(2000000049.052:1196): avc: denied { read write } for pid=7423 comm="syz.5.2832" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.007860][ T28] audit: type=1400 audit(2000000049.052:1197): avc: denied { open } for pid=7423 comm="syz.5.2832" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.032764][ T28] audit: type=1400 audit(2000000049.052:1198): avc: denied { read } for pid=7423 comm="syz.5.2832" dev="nsfs" ino=4026532323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.062819][ T7430] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.071481][ T28] audit: type=1400 audit(2000000049.052:1199): avc: denied { open } for pid=7423 comm="syz.5.2832" path="net:[4026532323]" dev="nsfs" ino=4026532323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.177418][ T7436] loop7: detected capacity change from 0 to 1024 [ 133.196319][ T7436] EXT4-fs: Ignoring removed orlov option [ 133.228782][ T7436] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 133.305181][ T7280] EXT4-fs (loop7): unmounting filesystem. [ 133.329147][ T7446] loop9: detected capacity change from 0 to 512 [ 133.370425][ T7446] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2840: casefold flag without casefold feature [ 133.406495][ T7446] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2840: couldn't read orphan inode 15 (err -117) [ 133.423138][ T7439] loop5: detected capacity change from 0 to 40427 [ 133.443832][ T7439] F2FS-fs (loop5): invalid crc value [ 133.450922][ T7446] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 133.468706][ T7439] F2FS-fs (loop5): Found nat_bits in checkpoint [ 133.499959][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 133.521035][ T7439] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 133.579217][ T7461] device bridge0 entered promiscuous mode [ 133.593617][ T7461] bridge0: port 3(macsec1) entered blocking state [ 133.600948][ T7461] bridge0: port 3(macsec1) entered disabled state [ 133.601104][ T5952] bio_check_eod: 15 callbacks suppressed [ 133.601118][ T5952] syz-executor: attempt to access beyond end of device [ 133.601118][ T5952] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.633277][ T7461] device bridge0 left promiscuous mode [ 133.783187][ T7468] loop6: detected capacity change from 0 to 256 [ 133.814646][ T7468] FAT-fs (loop6): Directory bread(block 64) failed [ 133.838815][ T7468] FAT-fs (loop6): Directory bread(block 65) failed [ 133.861717][ T7468] FAT-fs (loop6): Directory bread(block 66) failed [ 133.881530][ T7468] FAT-fs (loop6): Directory bread(block 67) failed [ 133.893853][ T7468] FAT-fs (loop6): Directory bread(block 68) failed [ 133.900627][ T7468] FAT-fs (loop6): Directory bread(block 69) failed [ 133.907371][ T7468] FAT-fs (loop6): Directory bread(block 70) failed [ 133.914677][ T7468] FAT-fs (loop6): Directory bread(block 71) failed [ 133.930087][ T7468] FAT-fs (loop6): Directory bread(block 72) failed [ 133.936759][ T7468] FAT-fs (loop6): Directory bread(block 73) failed [ 134.061283][ T7500] loop5: detected capacity change from 0 to 512 [ 134.074155][ T7500] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2860: casefold flag without casefold feature [ 134.087150][ T7500] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2860: couldn't read orphan inode 15 (err -117) [ 134.099479][ T7500] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 134.120669][ T5952] EXT4-fs (loop5): unmounting filesystem. [ 134.409082][ T7540] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 134.418793][ T7540] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.430052][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 134.444663][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.460177][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.468936][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.609103][ T7563] loop7: detected capacity change from 0 to 256 [ 134.760682][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 134.827786][ T7574] device veth1_macvtap left promiscuous mode [ 134.833929][ T7574] device macsec0 entered promiscuous mode [ 134.844395][ T7574] device veth1_macvtap entered promiscuous mode [ 134.850846][ T7574] device macsec0 left promiscuous mode [ 134.856839][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.920678][ T7582] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 134.946485][ T7582] syz.9.2896 (7582) used greatest stack depth: 19056 bytes left [ 134.955668][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.967459][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.984631][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.002682][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.012599][ T24] usb 6-1: Product: syz [ 135.020067][ T24] usb 6-1: Manufacturer: syz [ 135.030297][ T24] usb 6-1: SerialNumber: syz [ 135.141853][ T7590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7590 comm=syz.9.2899 [ 135.213368][ T7594] loop9: detected capacity change from 0 to 128 [ 135.234041][ T7594] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 135.244524][ T7594] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.278955][ T5707] EXT4-fs (loop9): unmounting filesystem. [ 135.601313][ T7629] loop6: detected capacity change from 0 to 512 [ 135.631414][ T7631] syz.0.2918[7631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.631486][ T7631] syz.0.2918[7631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.638625][ T7629] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 135.668022][ T7629] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.738541][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 135.751261][ T7638] overlayfs: missing 'lowerdir' [ 135.860195][ T7650] loop7: detected capacity change from 0 to 8192 [ 135.870461][ T7650] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.976414][ T24] cdc_ncm 6-1:1.0: bind() failure [ 135.985412][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 136.000503][ T24] cdc_ncm 6-1:1.1: bind() failure [ 136.000529][ T7650] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 136.018485][ T24] usb 6-1: USB disconnect, device number 10 [ 136.034181][ T7650] FAT-fs (loop7): Filesystem has been set read-only [ 136.046590][ T7650] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 136.061130][ T7650] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 136.065992][ T7680] loop0: detected capacity change from 0 to 512 [ 136.124305][ T7680] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2940: casefold flag without casefold feature [ 136.158353][ T7680] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2940: couldn't read orphan inode 15 (err -117) [ 136.181386][ T7680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.188321][ T7280] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 136.259383][ T3064] EXT4-fs (loop0): unmounting filesystem. [ 136.381848][ T7720] device bridge2 entered promiscuous mode [ 136.533302][ T7745] loop5: detected capacity change from 0 to 256 [ 136.554336][ T7745] FAT-fs (loop5): Directory bread(block 64) failed [ 136.573833][ T7745] FAT-fs (loop5): Directory bread(block 65) failed [ 136.599735][ T7751] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2973'. [ 136.606419][ T7745] FAT-fs (loop5): Directory bread(block 66) failed [ 136.629026][ T7745] FAT-fs (loop5): Directory bread(block 67) failed [ 136.639191][ T7745] FAT-fs (loop5): Directory bread(block 68) failed [ 136.646250][ T7745] FAT-fs (loop5): Directory bread(block 69) failed [ 136.657314][ T7745] FAT-fs (loop5): Directory bread(block 70) failed [ 136.666985][ T7745] FAT-fs (loop5): Directory bread(block 71) failed [ 136.676138][ T7745] FAT-fs (loop5): Directory bread(block 72) failed [ 136.684454][ T7745] FAT-fs (loop5): Directory bread(block 73) failed [ 136.910951][ T7785] loop0: detected capacity change from 0 to 1024 [ 136.925690][ T7785] EXT4-fs: Ignoring removed oldalloc option [ 136.974725][ T7785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.042672][ T3064] EXT4-fs (loop0): unmounting filesystem. [ 137.181379][ T7825] loop0: detected capacity change from 0 to 512 [ 137.238634][ T7825] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3003: casefold flag without casefold feature [ 137.273003][ T7825] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3003: couldn't read orphan inode 15 (err -117) [ 137.285362][ T7825] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.358939][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 137.358956][ T28] audit: type=1400 audit(2000000053.763:1279): avc: denied { map } for pid=7839 comm="syz.6.3012" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 137.389191][ T3064] EXT4-fs (loop0): unmounting filesystem. [ 137.529052][ T28] audit: type=1400 audit(2000000053.956:1280): avc: denied { write } for pid=7863 comm="syz.5.3022" path="socket:[48299]" dev="sockfs" ino=48299 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 137.655797][ T7871] overlayfs: missing 'lowerdir' [ 137.663395][ T28] audit: type=1400 audit(2000000054.095:1281): avc: denied { read } for pid=7872 comm="syz.5.3026" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.711577][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 137.721217][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3030'. [ 137.730694][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 137.738758][ T28] audit: type=1400 audit(2000000054.095:1282): avc: denied { open } for pid=7872 comm="syz.5.3026" path="/145/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.740044][ T7881] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3030'. [ 137.773606][ T7881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3030'. [ 137.783319][ T28] audit: type=1400 audit(2000000054.095:1283): avc: denied { ioctl } for pid=7872 comm="syz.5.3026" path="/145/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.821595][ T28] audit: type=1326 audit(2000000054.267:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac018e9a9 code=0x7ffc0000 [ 137.845418][ T28] audit: type=1326 audit(2000000054.267:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac018e9a9 code=0x7ffc0000 [ 137.871488][ T28] audit: type=1326 audit(2000000054.320:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3ac018e9a9 code=0x7ffc0000 [ 137.944847][ T28] audit: type=1326 audit(2000000054.320:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac018e9a9 code=0x7ffc0000 [ 137.969063][ T28] audit: type=1326 audit(2000000054.320:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7882 comm="syz.5.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac018e9a9 code=0x7ffc0000 [ 138.089370][ T7893] loop7: detected capacity change from 0 to 40427 [ 138.097686][ T7893] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 138.105550][ T7893] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 138.118403][ T7893] F2FS-fs (loop7): invalid crc value [ 138.135398][ T7893] F2FS-fs (loop7): Found nat_bits in checkpoint [ 138.177158][ T7893] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 138.200267][ T7893] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 138.262055][ T7919] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3046'. [ 138.271622][ T2365] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 138.289021][ T2365] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 138.490948][ T7937] loop6: detected capacity change from 0 to 256 [ 138.519450][ T7937] FAT-fs (loop6): Directory bread(block 64) failed [ 138.529497][ T7937] FAT-fs (loop6): Directory bread(block 65) failed [ 138.537670][ T7937] FAT-fs (loop6): Directory bread(block 66) failed [ 138.544299][ T7937] FAT-fs (loop6): Directory bread(block 67) failed [ 138.551623][ T7937] FAT-fs (loop6): Directory bread(block 68) failed [ 138.558424][ T7937] FAT-fs (loop6): Directory bread(block 69) failed [ 138.565465][ T7937] FAT-fs (loop6): Directory bread(block 70) failed [ 138.572080][ T7937] FAT-fs (loop6): Directory bread(block 71) failed [ 138.578966][ T7937] FAT-fs (loop6): Directory bread(block 72) failed [ 138.585772][ T7937] FAT-fs (loop6): Directory bread(block 73) failed [ 139.046148][ T7977] loop7: detected capacity change from 0 to 512 [ 139.063956][ T7979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.093260][ T7977] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.3074: casefold flag without casefold feature [ 139.189053][ T7977] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.3074: couldn't read orphan inode 15 (err -117) [ 139.227923][ T7986] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.253685][ T7977] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 139.376825][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 139.397092][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.425352][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 139.434279][ T7280] EXT4-fs (loop7): unmounting filesystem. [ 139.445914][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.474652][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.512893][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.535254][ T8006] loop7: detected capacity change from 0 to 128 [ 139.544043][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.563665][ T2479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.580848][ T6] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 139.666975][ T8012] loop5: detected capacity change from 0 to 2048 [ 139.684540][ T8012] loop5: p1 < > p4 [ 139.694075][ T8012] loop5: p4 size 8388608 extends beyond EOD, truncated [ 139.727843][ T103] loop5: p1 < > p4 [ 139.733374][ T103] loop5: p4 size 8388608 extends beyond EOD, truncated [ 139.814021][ T103] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.832339][ T103] Buffer I/O error on dev loop5, logical block 0, async page read [ 139.849345][ T103] loop5: unable to read partition table [ 139.858862][ T103] loop5: partition table beyond EOD, truncated [ 139.912659][ T2611] udevd[2611]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 139.927881][ T403] udevd[403]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 140.085761][ T8046] loop6: detected capacity change from 0 to 2048 [ 140.119231][ T8048] loop7: detected capacity change from 0 to 128 [ 140.139168][ T8046] loop6: p1 < > p4 [ 140.147804][ T8046] loop6: p4 size 8388608 extends beyond EOD, truncated [ 140.151437][ T8048] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.261447][ T8054] loop6: detected capacity change from 0 to 512 [ 140.295603][ T8058] netlink: 'syz.7.3109': attribute type 5 has an invalid length. [ 140.326168][ T8054] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 140.354750][ T8054] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.389460][ T8064] loop7: detected capacity change from 0 to 2048 [ 140.416887][ T8054] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.3107: corrupted inode contents [ 140.429745][ T8054] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #2: comm syz.6.3107: mark_inode_dirty error [ 140.441680][ T8054] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.3107: corrupted inode contents [ 140.453851][ T8054] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.3107: mark_inode_dirty error [ 140.477440][ T8064] Alternate GPT is invalid, using primary GPT. [ 140.484230][ T8064] loop7: p2 p3 p7 [ 140.489498][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 140.531053][ T7280] __loop_clr_fd: partition scan of loop7 failed (rc=-16) [ 140.538515][ T367] I/O error, dev loop7, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.548371][ T3857] I/O error, dev loop7, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.558206][ T3857] I/O error, dev loop7, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.567888][ T2611] I/O error, dev loop7, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.578020][ T2611] I/O error, dev loop7, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.595170][ T367] I/O error, dev loop7, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.612109][ T367] Buffer I/O error on dev loop7p3, logical block 8, async page read [ 140.625749][ T2611] Buffer I/O error on dev loop7p2, logical block 8, async page read [ 140.633882][ T3857] Buffer I/O error on dev loop7p7, logical block 8, async page read [ 140.641918][ T3857] I/O error, dev loop7, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.651562][ T2611] I/O error, dev loop7, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.661580][ T367] I/O error, dev loop7, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.671832][ T2611] Buffer I/O error on dev loop7p2, logical block 9, async page read [ 140.680176][ T3857] Buffer I/O error on dev loop7p7, logical block 9, async page read [ 140.688368][ T367] Buffer I/O error on dev loop7p3, logical block 9, async page read [ 140.696507][ T367] Buffer I/O error on dev loop7p3, logical block 10, async page read [ 140.704746][ T2611] Buffer I/O error on dev loop7p2, logical block 10, async page read [ 140.713041][ T3857] Buffer I/O error on dev loop7p7, logical block 10, async page read [ 140.749492][ T367] udevd[367]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 140.760673][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 140.774926][ T2611] udevd[2611]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 140.792269][ T3857] udevd[3857]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 140.803802][ T367] udevd[367]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 140.811737][ T2611] udevd[2611]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 140.897326][ T8082] overlayfs: failed to resolve './file0': -2 [ 141.148162][ T603] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 141.332711][ T603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.352492][ T603] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.363184][ T603] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 141.372633][ T603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.385035][ T603] usb 6-1: config 0 descriptor?? [ 141.570296][ T8139] loop6: detected capacity change from 0 to 256 [ 141.577020][ T8139] exfat: Deprecated parameter 'namecase' [ 141.585705][ T8139] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 141.622242][ T8141] loop6: detected capacity change from 0 to 1024 [ 141.640842][ T8141] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 141.657953][ T5165] EXT4-fs (loop6): unmounting filesystem. [ 141.771832][ T603] hid-led 0003:0FC5:B080.0029: item fetching failed at offset 0/3 [ 141.780008][ T603] hid-led: probe of 0003:0FC5:B080.0029 failed with error -22 [ 141.963226][ T603] usb 6-1: USB disconnect, device number 11 [ 142.440727][ T28] kauditd_printk_skb: 4823 callbacks suppressed [ 142.440747][ T28] audit: type=1400 audit(2000000059.213:6112): avc: denied { wake_alarm } for pid=8150 comm="syz.6.3152" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.724951][ T28] audit: type=1400 audit(2000000059.524:6113): avc: denied { getopt } for pid=8173 comm="syz.5.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.770701][ T28] audit: type=1400 audit(2000000059.578:6114): avc: denied { ioctl } for pid=8177 comm="syz.5.3166" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 142.853124][ T8191] loop5: detected capacity change from 0 to 1024 [ 142.868086][ T8191] EXT4-fs: Ignoring removed bh option [ 142.880269][ T8191] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.906079][ T8191] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.3172: Allocating blocks 497-513 which overlap fs metadata [ 142.920734][ T8191] EXT4-fs (loop5): Remounting filesystem read-only [ 142.927541][ T8191] EXT4-fs (loop5): pa ffff888116d84348: logic 256, phys. 385, len 8 [ 142.935712][ T8191] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 142.946436][ T8191] EXT4-fs (loop5): Remounting filesystem read-only [ 142.962863][ T28] audit: type=1400 audit(2000000059.781:6115): avc: denied { remove_name } for pid=8190 comm="syz.5.3172" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.985538][ T28] audit: type=1400 audit(2000000059.781:6116): avc: denied { unlink } for pid=8190 comm="syz.5.3172" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 143.009258][ T5952] EXT4-fs (loop5): unmounting filesystem. [ 143.111603][ T8206] IPv6: sit1: Disabled Multicast RS [ 143.236450][ T28] audit: type=1400 audit(2000000060.082:6117): avc: denied { name_bind } for pid=8214 comm="syz.9.3181" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 143.258824][ T28] audit: type=1400 audit(2000000060.103:6118): avc: denied { node_bind } for pid=8214 comm="syz.9.3181" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 143.273688][ T2479] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.287675][ T28] audit: type=1400 audit(2000000060.103:6119): avc: denied { ioctl } for pid=8218 comm="syz.6.3183" path="socket:[49236]" dev="sockfs" ino=49236 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.605513][ T603] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 143.670972][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 143.774339][ T603] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.784526][ T603] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.794167][ T603] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.803260][ T603] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.811403][ T603] usb 6-1: SerialNumber: syz [ 144.006899][ T603] usb 6-1: 0:2 : does not exist [ 144.013628][ T603] usb 6-1: USB disconnect, device number 12 [ 144.212446][ T2611] udevd[2611]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 144.632552][ T8255] loop7: detected capacity change from 0 to 256 [ 144.655240][ T8255] exFAT-fs (loop7): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 144.690476][ T28] audit: type=1400 audit(2000000061.638:6120): avc: denied { write } for pid=8254 comm="syz.7.3200" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.691463][ T8255] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008) [ 144.723437][ T8255] exFAT-fs (loop7): Filesystem has been set read-only [ 144.724184][ T28] audit: type=1400 audit(2000000061.638:6121): avc: denied { add_name } for pid=8254 comm="syz.7.3200" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.731101][ T8255] exFAT-fs (loop7): error, failed to bmap (inode : ffff888116e065f0 iblock : 8, err : -5) [ 144.761104][ T8255] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008) [ 144.772537][ T8261] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008) [ 144.781866][ T8261] exFAT-fs (loop7): error, failed to bmap (inode : ffff888116e065f0 iblock : 8, err : -5) [ 144.792077][ T8261] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008) [ 144.801325][ T8261] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000008) [ 144.821926][ T8264] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 144.852080][ T5015] Bluetooth: hci1: Frame reassembly failed (-84) [ 144.920886][ T8279] tmpfs: Unknown parameter 'gr' [ 144.933958][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3212'. [ 145.082573][ T8287] loop7: detected capacity change from 0 to 40427 [ 145.100018][ T8287] F2FS-fs (loop7): heap/no_heap options were deprecated [ 145.108144][ T8287] F2FS-fs (loop7): invalid crc value [ 145.120849][ T8287] F2FS-fs (loop7): Found nat_bits in checkpoint [ 145.159864][ T8287] F2FS-fs (loop7): Start checkpoint disabled! [ 145.166180][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 145.166807][ T2665] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.172701][ T8287] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 145.182088][ T8219] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 145.231746][ T8287] F2FS-fs (loop7): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 145.261545][ T8287] F2FS-fs (loop7): ino:10, start:0, end:0, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 145.294801][ T5015] kworker/u4:350: attempt to access beyond end of device [ 145.294801][ T5015] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 145.451112][ T307] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 145.573763][ T8322] loop7: detected capacity change from 0 to 40427 [ 145.590483][ T8322] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 145.598384][ T8322] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 145.618872][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 145.631166][ T307] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 145.654957][ T307] usb 7-1: config 0 has no interface number 0 [ 145.661888][ T8322] F2FS-fs (loop7): Found nat_bits in checkpoint [ 145.670687][ T307] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 145.693135][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.705031][ T307] usb 7-1: Product: syz [ 145.709385][ T307] usb 7-1: Manufacturer: syz [ 145.721098][ T307] usb 7-1: SerialNumber: syz [ 145.728848][ T2479] Bluetooth: hci0: Frame reassembly failed (-84) [ 145.731231][ T307] usb 7-1: config 0 descriptor?? [ 145.742275][ T8322] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 145.748285][ T307] smsc95xx v2.0.0 [ 145.756058][ T8322] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 145.763579][ T8322] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 145.807344][ T8322] syz.7.3230: attempt to access beyond end of device [ 145.807344][ T8322] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 145.822651][ T8322] syz.7.3230: attempt to access beyond end of device [ 145.822651][ T8322] loop7: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 146.497230][ T307] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 146.685311][ T307] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 146.696293][ T307] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 146.703942][ T307] usb 7-1: USB disconnect, device number 12 [ 146.728128][ T2621] Bluetooth: hci1: command 0x1003 tx timeout [ 146.728131][ T4244] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 146.898495][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3257'. [ 147.006140][ T8395] 9pnet_fd: Insufficient options for proto=fd [ 147.085825][ T8404] loop7: detected capacity change from 0 to 256 [ 147.109992][ C0] ================================================================== [ 147.118212][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 147.125422][ C0] Write of size 8 at addr ffff88811ce28a00 by task syz-executor/5952 [ 147.133972][ C0] [ 147.136467][ C0] CPU: 0 PID: 5952 Comm: syz-executor Tainted: G W 6.1.145-syzkaller-00023-g2245c50c5f5f #0 [ 147.148214][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.158371][ C0] Call Trace: [ 147.161690][ C0] [ 147.164541][ C0] __dump_stack+0x21/0x24 [ 147.168880][ C0] dump_stack_lvl+0xee/0x150 [ 147.173481][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 147.178516][ C0] ? update_rq_clock+0x536/0x5c0 [ 147.183726][ C0] ? __run_timers+0x32b/0x9a0 [ 147.188417][ C0] print_address_description+0x71/0x210 [ 147.193972][ C0] print_report+0x4a/0x60 [ 147.198315][ C0] kasan_report+0x122/0x150 [ 147.202823][ C0] ? __run_timers+0x32b/0x9a0 [ 147.207507][ C0] __asan_report_store8_noabort+0x17/0x20 [ 147.213233][ C0] __run_timers+0x32b/0x9a0 [ 147.217756][ C0] ? sched_clock+0x9/0x10 [ 147.222087][ C0] ? sched_clock_cpu+0x6e/0x250 [ 147.226937][ C0] ? calc_index+0x200/0x200 [ 147.231444][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 147.236678][ C0] run_timer_softirq+0x6a/0xf0 [ 147.241457][ C0] handle_softirqs+0x1d7/0x600 [ 147.246313][ C0] ? irqtime_account_irq+0xc4/0x240 [ 147.251557][ C0] __irq_exit_rcu+0x52/0xf0 [ 147.256079][ C0] irq_exit_rcu+0x9/0x10 [ 147.260342][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 147.266003][ C0] [ 147.268934][ C0] [ 147.271865][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 147.277876][ C0] RIP: 0010:copy_page_range+0x111c/0x2850 [ 147.283619][ C0] Code: e8 29 68 c7 ff 4d 89 fe 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 49 8d 7e 34 be 04 00 00 00 e8 99 c7 0b 00 f0 41 ff 46 34 <4c> 89 ff 48 83 c7 30 be 04 00 00 00 e8 83 c7 0b 00 f0 41 ff 47 30 [ 147.303315][ C0] RSP: 0018:ffffc900037df6a0 EFLAGS: 00000202 [ 147.309401][ C0] RAX: ffffffff81a89601 RBX: ffffea00040d38c8 RCX: ffffffff81a89697 [ 147.317402][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea00040d38f4 [ 147.325414][ C0] RBP: ffffc900037df950 R08: dffffc0000000000 R09: fffff9400081a71f [ 147.333576][ C0] R10: fffff9400081a71f R11: 1ffffd400081a71e R12: dffffc0000000000 [ 147.341572][ C0] R13: 80000001034e3007 R14: ffffea00040d38c0 R15: ffffea00040d38c0 [ 147.349585][ C0] ? copy_page_range+0x1081/0x2850 [ 147.354717][ C0] ? copy_page_range+0x1117/0x2850 [ 147.359857][ C0] ? __cfi_copy_page_range+0x10/0x10 [ 147.365162][ C0] ? rwsem_write_trylock+0x130/0x300 [ 147.370466][ C0] copy_mm+0xf04/0x1a10 [ 147.374654][ C0] ? copy_signal+0x630/0x630 [ 147.379258][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 147.383962][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 147.389190][ C0] ? __init_rwsem+0x12c/0x240 [ 147.393878][ C0] ? copy_signal+0x4ea/0x630 [ 147.398487][ C0] copy_process+0x12b4/0x3420 [ 147.403213][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 147.409129][ C0] ? idle_dummy+0x10/0x10 [ 147.413472][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 147.419304][ C0] kernel_clone+0x23a/0x810 [ 147.423828][ C0] ? from_kuid+0x155/0x670 [ 147.428276][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 147.433319][ C0] __x64_sys_clone+0x168/0x1b0 [ 147.438097][ C0] ? __cfi___x64_sys_clone+0x10/0x10 [ 147.443426][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 147.448719][ C0] ? trace_sys_enter+0x3d/0x50 [ 147.453512][ C0] x64_sys_call+0x990/0x9a0 [ 147.458023][ C0] do_syscall_64+0x4c/0xa0 [ 147.462486][ C0] ? clear_bhb_loop+0x30/0x80 [ 147.467191][ C0] ? clear_bhb_loop+0x30/0x80 [ 147.471875][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.477773][ C0] RIP: 0033:0x7f3ac0185213 [ 147.482200][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 147.502009][ C0] RSP: 002b:00007ffc557d56d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 147.510472][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ac0185213 [ 147.518644][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 147.526619][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 147.534591][ C0] R10: 00005555579e97d0 R11: 0000000000000246 R12: 0000000000000001 [ 147.542574][ C0] R13: 00000000000927c0 R14: 0000000000025506 R15: 00007ffc557d5870 [ 147.550560][ C0] [ 147.553596][ C0] [ 147.555955][ C0] Allocated by task 8219: [ 147.560475][ C0] kasan_set_track+0x4b/0x70 [ 147.565069][ C0] kasan_save_alloc_info+0x25/0x30 [ 147.570281][ C0] __kasan_kmalloc+0x95/0xb0 [ 147.575133][ C0] __kmalloc+0xb1/0x1e0 [ 147.579410][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 147.584463][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 147.589489][ C0] tty_ioctl+0x8ef/0xc60 [ 147.593730][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 147.598418][ C0] __x64_sys_ioctl+0x7b/0x90 [ 147.603019][ C0] x64_sys_call+0x58b/0x9a0 [ 147.607535][ C0] do_syscall_64+0x4c/0xa0 [ 147.612048][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.618066][ C0] [ 147.620391][ C0] Freed by task 8219: [ 147.622646][ T8374] Bluetooth: hci0: command 0x1003 tx timeout [ 147.624360][ C0] kasan_set_track+0x4b/0x70 [ 147.634963][ C0] kasan_save_free_info+0x31/0x50 [ 147.640021][ C0] ____kasan_slab_free+0x132/0x180 [ 147.645151][ C0] __kasan_slab_free+0x11/0x20 [ 147.650000][ C0] slab_free_freelist_hook+0xc2/0x190 [ 147.655405][ C0] __kmem_cache_free+0xb7/0x1b0 [ 147.660272][ C0] kfree+0x6f/0xf0 [ 147.663997][ C0] hci_release_dev+0x12a3/0x13b0 [ 147.668963][ C0] bt_host_release+0x82/0x90 [ 147.673558][ C0] device_release+0xa4/0x1d0 [ 147.678153][ C0] kobject_put+0x19d/0x280 [ 147.682603][ C0] put_device+0x1f/0x30 [ 147.686768][ C0] hci_dev_cmd+0x265/0x720 [ 147.691197][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 147.695922][ C0] sock_do_ioctl+0x101/0x310 [ 147.700514][ C0] sock_ioctl+0x4d8/0x6e0 [ 147.704855][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 147.709550][ C0] __x64_sys_ioctl+0x7b/0x90 [ 147.714148][ C0] x64_sys_call+0x58b/0x9a0 [ 147.718764][ C0] do_syscall_64+0x4c/0xa0 [ 147.723274][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.729170][ C0] [ 147.731508][ C0] Last potentially related work creation: [ 147.737237][ C0] kasan_save_stack+0x3a/0x60 [ 147.742275][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 147.747657][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 147.753814][ C0] insert_work+0x51/0x300 [ 147.758148][ C0] __queue_work+0x9b1/0xd30 [ 147.762650][ C0] queue_work_on+0xd2/0x140 [ 147.767157][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 147.772092][ C0] hci_cmd_sync_status+0x53/0x120 [ 147.777130][ C0] hci_dev_cmd+0x628/0x720 [ 147.781553][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 147.786230][ C0] sock_do_ioctl+0x101/0x310 [ 147.790847][ C0] sock_ioctl+0x4d8/0x6e0 [ 147.795271][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 147.799957][ C0] __x64_sys_ioctl+0x7b/0x90 [ 147.804554][ C0] x64_sys_call+0x58b/0x9a0 [ 147.809061][ C0] do_syscall_64+0x4c/0xa0 [ 147.813501][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.819390][ C0] [ 147.821716][ C0] Second to last potentially related work creation: [ 147.828302][ C0] kasan_save_stack+0x3a/0x60 [ 147.832988][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 147.838373][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 147.844198][ C0] insert_work+0x51/0x300 [ 147.848627][ C0] __queue_work+0x9b1/0xd30 [ 147.853138][ C0] queue_work_on+0xd2/0x140 [ 147.857647][ C0] hci_cmd_timeout+0x191/0x200 [ 147.862429][ C0] process_one_work+0x71f/0xc40 [ 147.867297][ C0] worker_thread+0xa29/0x11f0 [ 147.872014][ C0] kthread+0x281/0x320 [ 147.876092][ C0] ret_from_fork+0x1f/0x30 [ 147.880515][ C0] [ 147.882837][ C0] The buggy address belongs to the object at ffff88811ce28000 [ 147.882837][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 147.897407][ C0] The buggy address is located 2560 bytes inside of [ 147.897407][ C0] 8192-byte region [ffff88811ce28000, ffff88811ce2a000) [ 147.910977][ C0] [ 147.913323][ C0] The buggy address belongs to the physical page: [ 147.919743][ C0] page:ffffea0004738a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ce28 [ 147.929980][ C0] head:ffffea0004738a00 order:3 compound_mapcount:0 compound_pincount:0 [ 147.938330][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 147.944434][ C0] raw: 4000000000010200 ffffea00049e0800 dead000000000003 ffff888100043500 [ 147.953028][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 147.961622][ C0] page dumped because: kasan: bad access detected [ 147.968035][ C0] page_owner tracks the page as allocated [ 147.973739][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4436, tgid 4436 (syz-executor), ts 86617528631, free_ts 86572037772 [ 147.996576][ C0] post_alloc_hook+0x1f5/0x210 [ 148.001366][ C0] prep_new_page+0x1c/0x110 [ 148.005877][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 148.011438][ C0] __alloc_pages+0x1c3/0x450 [ 148.016050][ C0] alloc_slab_page+0x6e/0xf0 [ 148.020646][ C0] new_slab+0x98/0x3d0 [ 148.024725][ C0] ___slab_alloc+0x6f6/0xb50 [ 148.029333][ C0] __slab_alloc+0x5e/0xa0 [ 148.033672][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 148.039150][ C0] __kmalloc_node+0xa1/0x1e0 [ 148.043773][ C0] kvmalloc_node+0x294/0x480 [ 148.048379][ C0] pfifo_fast_init+0x3af/0x7a0 [ 148.053196][ C0] qdisc_create_dflt+0x150/0x3b0 [ 148.058155][ C0] dev_activate+0x2cf/0x1040 [ 148.062752][ C0] __dev_open+0x3ce/0x4f0 [ 148.067093][ C0] __dev_change_flags+0x21b/0x6b0 [ 148.072115][ C0] page last free stack trace: [ 148.076778][ C0] free_unref_page_prepare+0x742/0x750 [ 148.082313][ C0] free_unref_page+0x8f/0x530 [ 148.087124][ C0] __free_pages+0x67/0x100 [ 148.091556][ C0] __free_slab+0xca/0x1a0 [ 148.095888][ C0] __unfreeze_partials+0x160/0x190 [ 148.101071][ C0] put_cpu_partial+0xa9/0x100 [ 148.105784][ C0] __slab_free+0x1c4/0x280 [ 148.110333][ C0] ___cache_free+0xbf/0xd0 [ 148.114786][ C0] qlist_free_all+0xc6/0x140 [ 148.119380][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 148.124882][ C0] __kasan_slab_alloc+0x24/0x80 [ 148.129742][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 148.134864][ C0] __kmem_cache_alloc_node+0x192/0x2c0 [ 148.140333][ C0] kmalloc_trace+0x29/0xb0 [ 148.144841][ C0] ref_tracker_alloc+0x139/0x430 [ 148.149868][ C0] netdev_queue_update_kobjects+0x185/0x470 [ 148.155936][ C0] [ 148.158260][ C0] Memory state around the buggy address: [ 148.164054][ C0] ffff88811ce28900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.172197][ C0] ffff88811ce28980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.180268][ C0] >ffff88811ce28a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.188343][ C0] ^ [ 148.192417][ C0] ffff88811ce28a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.200485][ C0] ffff88811ce28b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 148.208648][ C0] ================================================================== [ 148.216710][ C0] Disabling lock debugging due to kernel taint [ 148.222915][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 148.234627][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 148.243045][ C0] CPU: 0 PID: 5952 Comm: syz-executor Tainted: G B W 6.1.145-syzkaller-00023-g2245c50c5f5f #0 [ 148.254531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.264692][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 148.269998][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 d3 28 00 4c 89 ff e8 d0 39 a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 6c 30 6d 00 49 8b 7d 00 e8 b3 35 [ 148.289607][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 148.295677][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811c5a3cc0 [ 148.303646][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 148.311629][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 148.319661][ C0] R10: ffffed10239c5139 R11: 1ffff110239c5139 R12: dffffc0000000000 [ 148.327640][ C0] R13: 0000000000000000 R14: ffff88811ce289c8 R15: 0000000000000008 [ 148.335641][ C0] FS: 00005555579e9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 148.344575][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.351163][ C0] CR2: 00007f3ac0ee56c0 CR3: 000000012816d000 CR4: 00000000003506b0 [ 148.359150][ C0] Call Trace: [ 148.362443][ C0] [ 148.365307][ C0] delayed_work_timer_fn+0x61/0x80 [ 148.370438][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 148.376250][ C0] call_timer_fn+0x46/0x2a0 [ 148.380756][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 148.386568][ C0] __run_timers+0x667/0x9a0 [ 148.391075][ C0] ? calc_index+0x200/0x200 [ 148.395581][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 148.400786][ C0] run_timer_softirq+0x6a/0xf0 [ 148.405561][ C0] handle_softirqs+0x1d7/0x600 [ 148.410339][ C0] ? irqtime_account_irq+0xc4/0x240 [ 148.415718][ C0] __irq_exit_rcu+0x52/0xf0 [ 148.420254][ C0] irq_exit_rcu+0x9/0x10 [ 148.424585][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 148.430249][ C0] [ 148.433208][ C0] [ 148.436164][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 148.442148][ C0] RIP: 0010:copy_page_range+0x111c/0x2850 [ 148.447878][ C0] Code: e8 29 68 c7 ff 4d 89 fe 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 20 49 8d 7e 34 be 04 00 00 00 e8 99 c7 0b 00 f0 41 ff 46 34 <4c> 89 ff 48 83 c7 30 be 04 00 00 00 e8 83 c7 0b 00 f0 41 ff 47 30 [ 148.467584][ C0] RSP: 0018:ffffc900037df6a0 EFLAGS: 00000202 [ 148.473681][ C0] RAX: ffffffff81a89601 RBX: ffffea00040d38c8 RCX: ffffffff81a89697 [ 148.482092][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea00040d38f4 [ 148.490067][ C0] RBP: ffffc900037df950 R08: dffffc0000000000 R09: fffff9400081a71f [ 148.498126][ C0] R10: fffff9400081a71f R11: 1ffffd400081a71e R12: dffffc0000000000 [ 148.506101][ C0] R13: 80000001034e3007 R14: ffffea00040d38c0 R15: ffffea00040d38c0 [ 148.514073][ C0] ? copy_page_range+0x1081/0x2850 [ 148.519203][ C0] ? copy_page_range+0x1117/0x2850 [ 148.524330][ C0] ? __cfi_copy_page_range+0x10/0x10 [ 148.529630][ C0] ? rwsem_write_trylock+0x130/0x300 [ 148.534943][ C0] copy_mm+0xf04/0x1a10 [ 148.539115][ C0] ? copy_signal+0x630/0x630 [ 148.543719][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 148.548416][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 148.553658][ C0] ? __init_rwsem+0x12c/0x240 [ 148.558369][ C0] ? copy_signal+0x4ea/0x630 [ 148.562972][ C0] copy_process+0x12b4/0x3420 [ 148.567668][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 148.573576][ C0] ? idle_dummy+0x10/0x10 [ 148.577940][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 148.583793][ C0] kernel_clone+0x23a/0x810 [ 148.588916][ C0] ? from_kuid+0x155/0x670 [ 148.593342][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 148.598415][ C0] __x64_sys_clone+0x168/0x1b0 [ 148.603224][ C0] ? __cfi___x64_sys_clone+0x10/0x10 [ 148.608525][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 148.613841][ C0] ? trace_sys_enter+0x3d/0x50 [ 148.618612][ C0] x64_sys_call+0x990/0x9a0 [ 148.623213][ C0] do_syscall_64+0x4c/0xa0 [ 148.627659][ C0] ? clear_bhb_loop+0x30/0x80 [ 148.632340][ C0] ? clear_bhb_loop+0x30/0x80 [ 148.637016][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.642918][ C0] RIP: 0033:0x7f3ac0185213 [ 148.647336][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 148.666943][ C0] RSP: 002b:00007ffc557d56d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 148.675361][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ac0185213 [ 148.683344][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 148.691332][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 148.699346][ C0] R10: 00005555579e97d0 R11: 0000000000000246 R12: 0000000000000001 [ 148.707328][ C0] R13: 00000000000927c0 R14: 0000000000025506 R15: 00007ffc557d5870 [ 148.715428][ C0] [ 148.718500][ C0] Modules linked in: [ 148.722407][ C0] ---[ end trace 0000000000000000 ]--- [ 148.727891][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 148.733189][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 d3 28 00 4c 89 ff e8 d0 39 a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 6c 30 6d 00 49 8b 7d 00 e8 b3 35 [ 148.752988][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 148.759073][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811c5a3cc0 [ 148.767070][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 148.775043][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 148.783019][ C0] R10: ffffed10239c5139 R11: 1ffff110239c5139 R12: dffffc0000000000 [ 148.790992][ C0] R13: 0000000000000000 R14: ffff88811ce289c8 R15: 0000000000000008 [ 148.798960][ C0] FS: 00005555579e9500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 148.807887][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.814492][ C0] CR2: 00007f3ac0ee56c0 CR3: 000000012816d000 CR4: 00000000003506b0 [ 148.822484][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 148.830723][ C0] Kernel Offset: disabled [ 148.835048][ C0] Rebooting in 86400 seconds..