last executing test programs: 1m4.979450565s ago: executing program 2 (id=308): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x11, r0, 0xffffc000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) 1m4.881278496s ago: executing program 2 (id=312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}}, 0x18}}, 0x0) 1m4.778880177s ago: executing program 2 (id=314): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a4, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 1m4.759095167s ago: executing program 2 (id=315): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1, 0x307}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m4.610367009s ago: executing program 2 (id=320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) 1m4.589080429s ago: executing program 32 (id=320): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x8a, &(0x7f0000000140)=0x7, 0x4) 23.317421502s ago: executing program 3 (id=1851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0) 23.278929683s ago: executing program 3 (id=1852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 23.159560994s ago: executing program 3 (id=1857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x9, 0x7, "13648b1a", "33109067"}}, 0x0}, 0x0) 22.938194926s ago: executing program 1 (id=1869): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'dvmrp1\x00', 0x1}) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) write$binfmt_elf32(r0, &(0x7f0000000780)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x81, 0xf7, 0x10, 0x7, 0x2, 0x3, 0x1, 0x3cd, 0x38, 0x2a3, 0x1, 0xfffb, 0x20, 0x1, 0x7, 0xfffc, 0x80}, [{0x1, 0x1, 0x6, 0x4, 0x5, 0xf, 0x9}]}, 0x58) 22.071324567s ago: executing program 1 (id=1886): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x311, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6976a11002db21"], 0x0) 21.927871059s ago: executing program 1 (id=1899): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0x0, r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 21.82253536s ago: executing program 1 (id=1894): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fdatasync(0xffffffffffffffff) 21.80776294s ago: executing program 1 (id=1896): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21.77542943s ago: executing program 33 (id=1896): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 21.719248671s ago: executing program 6 (id=1908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000100)=0x9, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) 21.682489381s ago: executing program 34 (id=1908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000100)=0x9, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) 21.630510622s ago: executing program 3 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f0000000000)=""/35) 21.562114953s ago: executing program 3 (id=1903): timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a000000fe800000000000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x11}, 0x0) 21.535264643s ago: executing program 35 (id=1903): timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a000000fe800000000000001400050000000000000000000000000000000001"], 0x30}, 0x1, 0x11}, 0x0) 21.532392393s ago: executing program 36 (id=1897): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x20c, &(0x7f0000000680)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) 21.451105454s ago: executing program 37 (id=1909): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 21.354079176s ago: executing program 38 (id=1907): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10) 21.333812556s ago: executing program 8 (id=1905): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3000) 21.321270526s ago: executing program 39 (id=1905): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3000) 21.317240426s ago: executing program 2 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) 21.196041047s ago: executing program 40 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) 21.154820438s ago: executing program 6 (id=1912): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r1, 0x0, &(0x7f0000000640)) 21.090322639s ago: executing program 41 (id=1912): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r1, 0x0, &(0x7f0000000640)) 21.080076249s ago: executing program 3 (id=1913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) 21.079835408s ago: executing program 1 (id=1911): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_delete(r2) 21.079738539s ago: executing program 42 (id=1911): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) timer_delete(r2) 20.98799629s ago: executing program 43 (id=1913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x8, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) 4.064076162s ago: executing program 9 (id=2463): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) 4.025256663s ago: executing program 9 (id=2466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x9, 0x7, "13648b1a", "33109067"}}, 0x0}, 0x0) 2.57528402s ago: executing program 9 (id=2474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) exit(0x0) 2.277296313s ago: executing program 7 (id=2482): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r2, 0x4018aee2, &(0x7f0000000200)=@attr_pmu_filter={0x0, 0x0, 0x2, 0x0}) 2.276691483s ago: executing program 5 (id=2494): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2.189630984s ago: executing program 7 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 2.155064725s ago: executing program 7 (id=2490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r1) 2.115430715s ago: executing program 7 (id=2491): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000580)) 1.73298122s ago: executing program 9 (id=2495): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, 0xffffffffffffffff, 0x0) unshare(0x26020480) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000200)={0x27, 0x0, 0x1}, 0x6) 1.73223096s ago: executing program 0 (id=2506): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x7, 0x4d, [@dev={0xac, 0x14, 0x14, 0x21}]}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1.638175161s ago: executing program 9 (id=2496): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x6, 0x2, r1, 0x0}]) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.471307193s ago: executing program 9 (id=2497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1.466992713s ago: executing program 0 (id=2510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe0, 0x8}, 0x50) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0xb, 0x6, 0x9, 0x0, r0, 0x100}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1.342670684s ago: executing program 5 (id=2502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)) 1.339722404s ago: executing program 0 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.116164857s ago: executing program 0 (id=2517): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f00000001c0)=""/153, 0x99) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) 892.1363ms ago: executing program 4 (id=2508): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 476.756475ms ago: executing program 5 (id=2509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000400), &(0x7f0000000a80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 272.130527ms ago: executing program 0 (id=2511): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000a92000/0x1000)=nil, 0x1000}}) 271.822317ms ago: executing program 4 (id=2512): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000e0095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x1000000, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@lazytime}, {@jqfmt_vfsv1}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 271.471917ms ago: executing program 5 (id=2522): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 210.877688ms ago: executing program 4 (id=2513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) 191.602968ms ago: executing program 4 (id=2514): socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1, 0x33, 0x0) 62.561969ms ago: executing program 7 (id=2515): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 62.39504ms ago: executing program 4 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) 58.200109ms ago: executing program 0 (id=2528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) 56.96952ms ago: executing program 5 (id=2529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, 0x0, 0x0) 2.12981ms ago: executing program 7 (id=2518): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) llistxattr(&(0x7f00000001c0)='./bus\x00', 0x0, 0x19) 1.91944ms ago: executing program 4 (id=2519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7ffffffc) close(r1) 0s ago: executing program 5 (id=2531): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): 3] hub 6-1:4.0: USB hub found [ 58.418516][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.430484][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.437905][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.445296][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.452770][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.460188][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.467806][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.475329][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.482948][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.490355][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.497746][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.505134][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.512530][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.519918][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.527317][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.534715][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.542121][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.549519][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.556918][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.564317][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.571732][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.579131][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.586507][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.593900][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.601293][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.608712][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.613561][ T293] hub 6-1:4.0: 2 ports detected [ 58.616100][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.628325][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.635696][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.643078][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.650473][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.658625][ T19] holtek_mouse 0003:04D9:A067.000B: bogus close delimiter [ 58.665763][ T19] holtek_mouse 0003:04D9:A067.000B: item 0 2 2 10 parsing failed [ 58.673530][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.680943][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.688542][ T19] holtek_mouse 0003:04D9:A067.000B: hid parse failed: -22 [ 58.695673][ T19] holtek_mouse: probe of 0003:04D9:A067.000B failed with error -22 [ 58.703587][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.710990][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.719507][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.726939][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.734339][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.741734][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.749126][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.756494][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.763879][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.771260][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.778661][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.786032][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.793441][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.800838][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.808227][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.815743][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.822436][ T293] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 58.823142][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.829730][ T293] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 58.836812][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.851573][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.858986][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.860504][ T839] usb 4-1: USB disconnect, device number 7 [ 58.866368][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.866390][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.874310][ T293] usb 6-1: USB disconnect, device number 4 [ 58.879641][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.900225][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.907617][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.914986][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.922370][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.929762][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.937173][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.944558][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.951968][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.959354][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.966712][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.974114][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.981514][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.988907][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 58.996290][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.003699][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.011082][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.018470][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.025848][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.033248][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.040654][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.048053][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.055438][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.062822][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.070239][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.077635][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.085007][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.092406][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.099820][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.107220][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.114595][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.121975][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.129358][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.136713][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.144088][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.151473][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.158887][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.166260][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.173647][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.181075][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.188461][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.195834][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.203218][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.210613][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.218014][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.225384][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.232772][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.240169][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.247570][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.254942][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.262321][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.269738][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.277232][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.284598][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.291982][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.299366][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.306750][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.314132][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.321634][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.329054][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.336425][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.343806][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.351186][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.358651][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.366530][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.374387][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.381834][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.389416][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.397032][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.404450][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.412351][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.419857][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.427369][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.434749][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.442151][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.449538][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.456918][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.464326][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.471727][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.479137][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.486504][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.493888][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.501288][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.508671][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.516047][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.523424][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.530800][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.538178][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.545556][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.552951][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.560328][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.567700][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.575075][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.582453][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.589841][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.597214][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.604592][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.611988][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.619379][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.626743][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.634122][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.641510][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.648909][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.656290][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.663664][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.671064][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.678444][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.685814][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.693190][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.700570][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.707944][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.715311][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.722685][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.730093][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.737499][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.744884][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.752269][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.759660][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.767031][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.774426][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.781807][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.789200][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.796591][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.803970][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.811349][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.818808][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.826188][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.833598][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.840983][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.848390][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.855762][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.863137][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 59.872478][ T6] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 59.931294][ T3289] futex_wake_op: syz.4.1281 tries to shift op by 32; fix this program [ 59.985757][ T3293] mmap: syz.0.1283 (3293) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.009565][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 60.009576][ T28] audit: type=1400 audit(2000003659.681:525): avc: denied { setopt } for pid=3300 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.013497][ T3294] fido_id[3294]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 60.018149][ T28] audit: type=1400 audit(2000003659.681:526): avc: denied { bind } for pid=3300 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.120513][ T3312] loop1: detected capacity change from 0 to 512 [ 60.150600][ T28] audit: type=1400 audit(2000003659.821:527): avc: denied { read write } for pid=3317 comm="syz.3.1296" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.179917][ T28] audit: type=1400 audit(2000003659.841:528): avc: denied { open } for pid=3317 comm="syz.3.1296" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.202962][ T3312] EXT4-fs (loop1): 1 orphan inode deleted [ 60.204016][ T28] audit: type=1400 audit(2000003659.841:529): avc: denied { mount } for pid=3317 comm="syz.3.1296" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 60.209300][ T3312] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.230673][ T28] audit: type=1400 audit(2000003659.861:530): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 60.271028][ T3329] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 60.283145][ T3330] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.309735][ T3332] loop5: detected capacity change from 0 to 512 [ 60.321412][ T3334] SELinux: Context @ is not valid (left unmapped). [ 60.330280][ T28] audit: type=1400 audit(2000003660.001:531): avc: denied { relabelto } for pid=3333 comm="syz.3.1301" name="cgroup.controllers" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 60.334702][ T3332] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 60.355338][ T28] audit: type=1400 audit(2000003660.001:532): avc: denied { associate } for pid=3333 comm="syz.3.1301" name="cgroup.controllers" dev="tmpfs" ino=1446 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="@" [ 60.389508][ T28] audit: type=1400 audit(2000003660.061:533): avc: denied { attach_queue } for pid=3336 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 60.414317][ T3332] EXT4-fs (loop5): 1 truncate cleaned up [ 60.415218][ T28] audit: type=1400 audit(2000003660.061:534): avc: denied { unlink } for pid=283 comm="syz-executor" name="cgroup.controllers" dev="tmpfs" ino=1446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 60.435443][ T3332] incfs: Options parsing error. -22 [ 60.450285][ T3332] incfs: mount failed -22 [ 60.457355][ T294] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.623957][ T3362] syz.1.1314[3362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.624021][ T3362] syz.1.1314[3362] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.648246][ T294] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 60.670623][ T294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 60.683607][ T294] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 60.692811][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.703986][ T3365] loop1: detected capacity change from 0 to 512 [ 60.705093][ T294] usb 1-1: config 0 descriptor?? [ 60.711149][ T3365] EXT4-fs: Ignoring removed oldalloc option [ 60.722563][ T3365] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.733321][ T3365] EXT4-fs (loop1): 1 truncate cleaned up [ 60.867207][ T3388] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1325'. [ 60.876208][ T3388] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1325'. [ 60.887500][ T3388] netlink: 'syz.1.1325': attribute type 6 has an invalid length. [ 60.895294][ T3388] netlink: 'syz.1.1325': attribute type 5 has an invalid length. [ 60.903377][ T3388] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1325'. [ 61.130760][ T294] kye 0003:0458:0138.000C: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 61.261948][ T3464] loop4: detected capacity change from 0 to 256 [ 61.302424][ T3464] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.333952][ T839] usb 1-1: USB disconnect, device number 5 [ 61.694878][ T3838] netem: change failed [ 62.349812][ T3939] loop3: detected capacity change from 0 to 2048 [ 62.359019][ T3932] loop5: detected capacity change from 0 to 40427 [ 62.375480][ T3932] F2FS-fs (loop5): invalid crc value [ 62.383224][ T3939] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.413665][ T3932] F2FS-fs (loop5): Found nat_bits in checkpoint [ 62.431081][ T3939] syz.3.1371 (3939) used greatest stack depth: 21072 bytes left [ 62.467244][ T3932] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 62.474895][ T3953] loop3: detected capacity change from 0 to 512 [ 62.530818][ T3953] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.548271][ T1081] syz-executor: attempt to access beyond end of device [ 62.548271][ T1081] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.589057][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 62.605274][ T3957] device wg2 entered promiscuous mode [ 62.615210][ T3957] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 62.925927][ T3981] xt_bpf: check failed: parse error [ 63.145557][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.166200][ T4014] loop5: detected capacity change from 0 to 512 [ 63.166584][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.189936][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.205583][ T4014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 63.209123][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.215722][ T4014] System zones: [ 63.232901][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.235002][ T4014] 1-12 [ 63.239751][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.264126][ T4014] [ 63.277147][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.287196][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.294664][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.297626][ T4014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1403: error while reading EA inode 32 err=-116 [ 63.310097][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.322372][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.329809][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.337289][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.346305][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.353747][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.361256][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.368714][ T39] hid-generic 0002:0004:0009.000D: unknown main item tag 0x0 [ 63.377154][ T4014] EXT4-fs (loop5): Remounting filesystem read-only [ 63.377733][ T39] hid-generic 0002:0004:0009.000D: hidraw0: HID v0.04 Device [syz0] on syz0 [ 63.406014][ T4014] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1403: error while reading EA inode 32 err=-116 [ 63.437879][ T4014] EXT4-fs (loop5): Remounting filesystem read-only [ 63.444510][ T4014] EXT4-fs (loop5): 1 orphan inode deleted [ 63.502353][ T4035] fido_id[4035]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.522882][ T4014] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.1403: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 63.572914][ T4014] EXT4-fs (loop5): Remounting filesystem read-only [ 63.614103][ T4042] loop4: detected capacity change from 0 to 8192 [ 63.655916][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.670467][ T4042] FAT-fs (loop4): Filesystem has been set read-only [ 63.677201][ T4058] loop1: detected capacity change from 0 to 512 [ 63.693650][ T4058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.702585][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.711540][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.720928][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.736080][ T4058] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1419: invalid indirect mapped block 4294967295 (level 1) [ 63.741922][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.756353][ T4058] EXT4-fs (loop1): Remounting filesystem read-only [ 63.761817][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.775443][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.776919][ T4067] loop3: detected capacity change from 0 to 256 [ 63.784189][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.799153][ T4058] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1419: invalid indirect mapped block 4294967295 (level 1) [ 63.804408][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.822907][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.831652][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.840369][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.848994][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.857701][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.866307][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.875016][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.876243][ T4058] EXT4-fs (loop1): Remounting filesystem read-only [ 63.883938][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.899143][ T4058] EXT4-fs (loop1): 2 truncates cleaned up [ 63.905819][ T4067] FAT-fs (loop3): Directory bread(block 64) failed [ 63.907489][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.913785][ T4067] FAT-fs (loop3): Directory bread(block 65) failed [ 63.936923][ T4067] FAT-fs (loop3): Directory bread(block 66) failed [ 63.943603][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.944048][ T4067] FAT-fs (loop3): Directory bread(block 67) failed [ 63.959117][ T4067] FAT-fs (loop3): Directory bread(block 68) failed [ 63.966536][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.972607][ T4067] FAT-fs (loop3): Directory bread(block 69) failed [ 63.984143][ T4067] FAT-fs (loop3): Directory bread(block 70) failed [ 63.984322][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 63.991020][ T4067] FAT-fs (loop3): Directory bread(block 71) failed [ 63.999800][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 64.006919][ T4067] FAT-fs (loop3): Directory bread(block 72) failed [ 64.014749][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 64.029789][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 64.038671][ T4067] FAT-fs (loop3): Directory bread(block 73) failed [ 64.058626][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 64.070374][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 64.079278][ T4042] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 64.440351][ T4107] loop5: detected capacity change from 0 to 256 [ 64.485459][ T4107] FAT-fs (loop5): Directory bread(block 64) failed [ 64.493969][ T4107] FAT-fs (loop5): Directory bread(block 65) failed [ 64.514537][ T4107] FAT-fs (loop5): Directory bread(block 66) failed [ 64.527164][ T4107] FAT-fs (loop5): Directory bread(block 67) failed [ 64.534781][ T4107] FAT-fs (loop5): Directory bread(block 68) failed [ 64.554283][ T4107] FAT-fs (loop5): Directory bread(block 69) failed [ 64.569878][ T4107] FAT-fs (loop5): Directory bread(block 70) failed [ 64.585776][ T4107] FAT-fs (loop5): Directory bread(block 71) failed [ 64.592559][ T4107] FAT-fs (loop5): Directory bread(block 72) failed [ 64.603101][ T4118] loop0: detected capacity change from 0 to 256 [ 64.609515][ T4107] FAT-fs (loop5): Directory bread(block 73) failed [ 64.617810][ T4118] exfat: Deprecated parameter 'namecase' [ 64.652748][ T4087] loop3: detected capacity change from 0 to 40427 [ 64.653401][ T4118] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 64.679986][ T4087] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 64.708547][ T4087] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 64.743714][ T4087] F2FS-fs (loop3): invalid crc value [ 64.746735][ T4131] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1456'. [ 64.750698][ T4087] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 64.771143][ T4087] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 64.796627][ T4087] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 64.803748][ T4087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.847141][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 65.019080][ T4154] loop3: detected capacity change from 0 to 1024 [ 65.037316][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 65.043554][ T39] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 65.054669][ T39] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.059782][ T4154] EXT4-fs mount: 29 callbacks suppressed [ 65.059799][ T4154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.086510][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.096401][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.101123][ T283] EXT4-fs (loop3): unmounting filesystem. [ 65.109557][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 65.109571][ T28] audit: type=1400 audit(2000003920.785:569): avc: denied { ioctl } for pid=4159 comm="syz.0.1477" path="/312/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 65.147882][ T39] usb 2-1: Product: syz [ 65.152094][ T39] usb 2-1: Manufacturer: syz [ 65.156784][ T39] usb 2-1: SerialNumber: syz [ 65.232272][ T4144] loop4: detected capacity change from 0 to 40427 [ 65.270528][ T4144] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 65.284943][ T4144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 65.307394][ T4144] F2FS-fs (loop4): invalid crc value [ 65.316785][ T4144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.354138][ T4144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 65.367164][ T4144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 65.386978][ T28] audit: type=1400 audit(2000003921.055:570): avc: denied { mount } for pid=4178 comm="syz.0.1473" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.410229][ T39] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 65.432816][ T39] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 65.456216][ T3834] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 65.460716][ T39] usb 2-1: USB disconnect, device number 7 [ 65.471750][ T28] audit: type=1400 audit(2000003921.115:571): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.496296][ T3834] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 65.634408][ T4191] loop0: detected capacity change from 0 to 256 [ 65.663167][ T4191] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.680957][ T4191] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 65.691207][ T4191] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 65.713867][ T4203] loop5: detected capacity change from 0 to 128 [ 65.831674][ T4220] loop4: detected capacity change from 0 to 256 [ 65.836144][ T4224] SELinux: failed to load policy [ 65.879201][ T4220] FAT-fs (loop4): Directory bread(block 64) failed [ 65.885773][ T4220] FAT-fs (loop4): Directory bread(block 65) failed [ 65.912842][ T28] audit: type=1400 audit(2000003921.585:572): avc: denied { connect } for pid=4227 comm="syz.3.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.919621][ T4220] FAT-fs (loop4): Directory bread(block 66) failed [ 65.951855][ T28] audit: type=1400 audit(2000003921.615:573): avc: denied { write } for pid=4227 comm="syz.3.1499" path="socket:[29293]" dev="sockfs" ino=29293 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.959918][ T4220] FAT-fs (loop4): Directory bread(block 67) failed [ 66.007440][ T4220] FAT-fs (loop4): Directory bread(block 68) failed [ 66.028252][ T4220] FAT-fs (loop4): Directory bread(block 69) failed [ 66.035904][ T4220] FAT-fs (loop4): Directory bread(block 70) failed [ 66.051865][ T4220] FAT-fs (loop4): Directory bread(block 71) failed [ 66.072971][ T4220] FAT-fs (loop4): Directory bread(block 72) failed [ 66.087180][ T4220] FAT-fs (loop4): Directory bread(block 73) failed [ 66.180086][ T3521] kworker/u4:85: attempt to access beyond end of device [ 66.180086][ T3521] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 66.244518][ T28] audit: type=1400 audit(2000003921.915:574): avc: denied { read } for pid=4255 comm="syz.3.1511" path="socket:[29846]" dev="sockfs" ino=29846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.364852][ T4244] loop1: detected capacity change from 0 to 40427 [ 66.397634][ T4244] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 66.406912][ T4244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.438359][ T4244] F2FS-fs (loop1): invalid crc value [ 66.444983][ T28] audit: type=1400 audit(2000003922.115:575): avc: denied { mounton } for pid=4271 comm="syz.4.1517" path="/293/file0" dev="tmpfs" ino=1534 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 66.469279][ T4272] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.479056][ T4272] FAT-fs (loop9): unable to read boot sector [ 66.493576][ T4274] netlink: 'syz.3.1518': attribute type 2 has an invalid length. [ 66.504776][ T4244] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 66.522487][ T4244] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 66.557414][ T4244] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.564606][ T4244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.730433][ T4279] loop4: detected capacity change from 0 to 40427 [ 66.737640][ T4279] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 66.745087][ T4279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 66.754125][ T4279] F2FS-fs (loop4): invalid crc value [ 66.768006][ T4279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.788937][ T4285] loop5: detected capacity change from 0 to 40427 [ 66.798444][ T4285] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 66.815575][ T4285] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 66.828218][ T4279] F2FS-fs (loop4): Start checkpoint disabled! [ 66.835842][ T4279] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 66.848372][ T4279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 66.859659][ T4292] loop0: detected capacity change from 0 to 512 [ 66.870654][ T28] audit: type=1326 audit(2000003922.545:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f318e929 code=0x7ffc0000 [ 66.903075][ T4292] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 66.914413][ T4285] F2FS-fs (loop5): Found nat_bits in checkpoint [ 66.927327][ T4292] EXT4-fs (loop0): invalid journal inode [ 66.932996][ T4292] EXT4-fs (loop0): can't get journal size [ 66.948983][ T28] audit: type=1326 audit(2000003922.565:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f17f318e929 code=0x7ffc0000 [ 66.951272][ T4279] syz.4.1520: attempt to access beyond end of device [ 66.951272][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.987519][ T4292] EXT4-fs (loop0): 1 truncate cleaned up [ 66.998013][ T4292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.028755][ T284] EXT4-fs (loop0): unmounting filesystem. [ 67.034069][ T28] audit: type=1326 audit(2000003922.565:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.3.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f318e929 code=0x7ffc0000 [ 67.039629][ T4279] syz.4.1520: attempt to access beyond end of device [ 67.039629][ T4279] loop4: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 67.057900][ T4285] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 67.131769][ T4285] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 67.168296][ T3834] kworker/u4:387: attempt to access beyond end of device [ 67.168296][ T3834] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 67.212582][ T4312] syz.3.1529 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.223512][ T4244] F2FS-fs (loop1): Found FS corruption, run fsck to fix. [ 67.239536][ T4314] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1531'. [ 67.263080][ T1081] syz-executor: attempt to access beyond end of device [ 67.263080][ T1081] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 67.293520][ T4316] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.479756][ T4336] futex_wake_op: syz.1.1545 tries to shift op by 32; fix this program [ 67.526601][ T4342] SELinux: ebitmap start bit (4) is not a multiple of the map unit size (64) [ 67.538620][ T4342] SELinux: failed to load policy [ 67.589818][ T4352] SELinux: failed to load policy [ 67.687152][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 67.709096][ T4371] Â: renamed from pim6reg1 [ 67.746489][ T4376] loop5: detected capacity change from 0 to 4096 [ 67.763689][ T4376] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.770416][ T4376] EXT4-fs: Ignoring removed orlov option [ 67.776155][ T4376] EXT4-fs: Ignoring removed nobh option [ 67.788854][ T4376] EXT4-fs (loop5): Test dummy encryption mode enabled [ 67.801611][ T4376] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 67.807057][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1563'. [ 67.834161][ T4376] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 67.853284][ T1081] EXT4-fs (loop5): unmounting filesystem. [ 67.879590][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.886126][ T4385] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 67.912255][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.922576][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.936122][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.949902][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.959022][ T19] usb 5-1: config 0 descriptor?? [ 67.967849][ T4391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 68.378573][ T19] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 68.387708][ T19] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 68.407820][ T19] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 68.457598][ T4446] SELinux: Context system_u:object_r:systemd_logind_var_run_t:s0 is not valid (left unmapped). [ 68.606809][ T4463] loop0: detected capacity change from 0 to 512 [ 68.628721][ T4463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.650609][ T4463] EXT4-fs (loop0): 1 truncate cleaned up [ 68.661317][ T4468] loop1: detected capacity change from 0 to 512 [ 68.667014][ T4463] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.676867][ T4468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.701255][ T4468] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 68.711177][ T4468] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 68.719909][ T4468] EXT4-fs (loop1): 1 truncate cleaned up [ 68.725618][ T4468] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.744300][ T284] EXT4-fs (loop0): unmounting filesystem. [ 68.750922][ T282] EXT4-fs (loop1): unmounting filesystem. [ 68.962900][ T4482] loop0: detected capacity change from 0 to 40427 [ 68.969905][ T4482] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 68.978808][ T4482] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.988207][ T4482] F2FS-fs (loop0): invalid crc value [ 68.994858][ T4482] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.034908][ T4482] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 69.042694][ T4482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.347200][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.640304][ T4528] loop1: detected capacity change from 0 to 512 [ 69.659557][ T4528] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1622: bad orphan inode 11862016 [ 69.670547][ T4528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.679672][ T4528] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.706988][ T282] EXT4-fs (loop1): unmounting filesystem. [ 69.814573][ T4548] loop3: detected capacity change from 0 to 1024 [ 69.855293][ T4548] EXT4-fs (loop3): Test dummy encryption mode enabled [ 69.865448][ T4548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 69.893511][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 69.933014][ T283] EXT4-fs (loop3): unmounting filesystem. [ 70.031231][ T4584] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 70.101493][ T4594] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 70.180871][ T4611] loop4: detected capacity change from 0 to 512 [ 70.206327][ T4611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.216504][ T4612] device ip6_vti0 entered promiscuous mode [ 70.227776][ T4611] EXT4-fs (loop4): 1 truncate cleaned up [ 70.233504][ T4611] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.242663][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 70.242676][ T28] audit: type=1400 audit(2000003925.915:679): avc: denied { read } for pid=4617 comm="syz.1.1663" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.254392][ T4619] binder: 4617:4619 ioctl 541b 0 returned -22 [ 70.279334][ T290] EXT4-fs (loop4): unmounting filesystem. [ 70.310189][ T28] audit: type=1400 audit(2000003925.915:680): avc: denied { open } for pid=4617 comm="syz.1.1663" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.334892][ T28] audit: type=1400 audit(2000003925.915:681): avc: denied { setattr } for pid=4609 comm="syz.4.1660" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.366257][ T4627] IPv6: Can't replace route, no match found [ 70.398094][ T28] audit: type=1400 audit(2000003926.075:682): avc: denied { write } for pid=4628 comm="syz.4.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.398752][ T4629] tipc: Started in network mode [ 70.429367][ T4629] tipc: Node identity 8, cluster identity 4711 [ 70.435649][ T4629] tipc: Node number set to 8 [ 70.440844][ T4629] tipc: Cannot configure node identity twice [ 70.447360][ T28] audit: type=1400 audit(2000003926.075:683): avc: denied { read } for pid=4628 comm="syz.4.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.468129][ T19] usb 5-1: USB disconnect, device number 5 [ 70.518765][ T28] audit: type=1400 audit(2000003926.185:684): avc: denied { read } for pid=4638 comm="syz.1.1673" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.519278][ T4643] loop0: detected capacity change from 0 to 512 [ 70.549741][ T28] audit: type=1400 audit(2000003926.185:685): avc: denied { open } for pid=4638 comm="syz.1.1673" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.589331][ T4648] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 70.597176][ T28] audit: type=1400 audit(2000003926.185:686): avc: denied { ioctl } for pid=4638 comm="syz.1.1673" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 70.601920][ T4643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.646781][ T28] audit: type=1400 audit(2000003926.225:687): avc: denied { create } for pid=4644 comm="syz.1.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.669890][ T4643] EXT4-fs (loop0): 1 truncate cleaned up [ 70.675722][ T4643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 70.697952][ T28] audit: type=1400 audit(2000003926.225:688): avc: denied { write } for pid=4644 comm="syz.1.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.722604][ T4643] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.1672: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.765558][ T4631] loop5: detected capacity change from 0 to 40427 [ 70.779170][ T284] EXT4-fs (loop0): unmounting filesystem. [ 70.793028][ T869] I/O error, dev loop5, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 70.835272][ T4658] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1680'. [ 70.938980][ T4666] loop1: detected capacity change from 0 to 1024 [ 70.976980][ T4666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 70.990684][ T4666] EXT4-fs: Ignoring removed bh option [ 71.019239][ T4666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.052094][ T4693] loop3: detected capacity change from 0 to 256 [ 71.075223][ T282] EXT4-fs (loop1): unmounting filesystem. [ 71.086449][ T4693] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.110023][ T4693] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 71.136635][ T4693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 71.238930][ T4715] loop3: detected capacity change from 0 to 256 [ 71.257228][ T4715] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 71.272041][ T4717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1705'. [ 71.326618][ T19] kernel read not supported for file /vcs (pid: 19 comm: kworker/0:1) [ 71.326812][ T4725] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 71.371396][ T3523] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.383506][ T4733] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 71.492507][ T4744] loop4: detected capacity change from 0 to 4096 [ 71.500769][ T4744] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.680891][ T4750] loop0: detected capacity change from 0 to 2048 [ 71.698435][ T4750] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.709177][ T4750] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 71.723802][ T4750] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.736065][ T4750] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.736065][ T4750] [ 71.745727][ T4750] EXT4-fs (loop0): Total free blocks count 0 [ 71.751771][ T4750] EXT4-fs (loop0): Free/Dirty block details [ 71.757730][ T4750] EXT4-fs (loop0): free_blocks=66060288 [ 71.763298][ T4750] EXT4-fs (loop0): dirty_blocks=16 [ 71.768446][ T4750] EXT4-fs (loop0): Block reservation details [ 71.774416][ T4750] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 71.785441][ T3523] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 71.995448][ T4768] loop1: detected capacity change from 0 to 512 [ 72.002540][ T4768] EXT4-fs (loop1): unable to read superblock [ 72.048118][ T4768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 72.271952][ T290] EXT4-fs (loop4): unmounting filesystem. [ 72.313631][ T4805] loop4: detected capacity change from 0 to 256 [ 72.445135][ T4818] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 72.453067][ T4818] netlink: 'syz.4.1750': attribute type 2 has an invalid length. [ 72.463885][ T4818] netlink: 'syz.4.1750': attribute type 1 has an invalid length. [ 72.472018][ T4818] netlink: 'syz.4.1750': attribute type 2 has an invalid length. [ 72.492354][ T4823] loop4: detected capacity change from 0 to 128 [ 72.499367][ T4823] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.533656][ T3523] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 72.693139][ T4846] loop3: detected capacity change from 0 to 8192 [ 72.706592][ T4846] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.797378][ T4862] loop3: detected capacity change from 0 to 512 [ 72.808737][ T4862] EXT4-fs warning (device loop3): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 72.823803][ T4862] EXT4-fs (loop3): mount failed [ 72.987161][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 73.167135][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 73.173352][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 73.184601][ T19] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 73.193649][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.202265][ T19] usb 1-1: config 0 descriptor?? [ 73.269931][ T4877] syz.1.1776 uses obsolete (PF_INET,SOCK_PACKET) [ 73.325482][ T4887] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1781'. [ 73.427130][ T4872] Bluetooth: hci0: command 0x1003 tx timeout [ 73.427140][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.557753][ T4902] loop5: detected capacity change from 0 to 512 [ 73.564544][ T4902] EXT4-fs (loop5): Test dummy encryption mode enabled [ 73.572668][ T4902] EXT4-fs error (device loop5): __ext4_iget:5078: inode #11: block 1: comm syz.5.1788: invalid block [ 73.583792][ T4902] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1788: couldn't read orphan inode 11 (err -117) [ 73.595797][ T4902] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.608114][ T4902] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 73.610504][ T19] wacom 0003:056A:00D0.000F: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 73.632640][ T1081] EXT4-fs (loop5): unmounting filesystem. [ 73.638588][ T19] wacom 0003:056A:00D0.000F: hidraw0: USB HID v20.00 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 73.650150][ T19] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.000F/input/input10 [ 73.707046][ T4908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1790'. [ 73.716835][ T4908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1790'. [ 73.809223][ T4925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1797'. [ 73.835622][ T24] usb 1-1: USB disconnect, device number 6 [ 73.869591][ T4935] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1802'. [ 73.908770][ T4941] loop1: detected capacity change from 0 to 256 [ 74.099491][ T4969] loop1: detected capacity change from 0 to 512 [ 74.106408][ T4969] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.119716][ T4969] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.1819: bg 0: block 5: invalid block bitmap [ 74.132620][ T4969] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 74.142380][ T4969] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1819: invalid indirect mapped block 3 (level 2) [ 74.155959][ T4969] EXT4-fs (loop1): 2 truncates cleaned up [ 74.161986][ T4969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.179563][ T282] EXT4-fs (loop1): unmounting filesystem. [ 74.405066][ T5022] loop3: detected capacity change from 0 to 512 [ 74.437142][ T5022] EXT4-fs (loop3): 1 orphan inode deleted [ 74.444594][ T5022] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.453356][ T5022] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.453648][ T5033] futex_wake_op: syz.1.1847 tries to shift op by 32; fix this program [ 74.477491][ T283] EXT4-fs (loop3): unmounting filesystem. [ 74.522922][ T5042] netlink: 'syz.3.1851': attribute type 3 has an invalid length. [ 74.530825][ T5042] netlink: 'syz.3.1851': attribute type 3 has an invalid length. [ 74.539106][ T5042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1851'. [ 74.746158][ T5059] syz.5.1858[5059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.746223][ T5059] syz.5.1858[5059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.758409][ T5061] 9pnet: p9_errstr2errno: server reported unknown error [ 74.800971][ T5065] device vlan2 entered promiscuous mode [ 74.817124][ T5065] device veth0 entered promiscuous mode [ 74.818522][ T5069] syz.5.1865[5069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.822776][ T5069] syz.5.1865[5069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.947169][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 74.958491][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 74.958528][ T2594] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 75.137182][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 75.142960][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.164069][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.164105][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.164127][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.174330][ T24] usb 4-1: config 0 descriptor?? [ 75.212643][ T24] hub 4-1:0.0: USB hub found [ 75.411214][ T24] hub 4-1:0.0: 4 ports detected [ 75.617159][ T24] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 75.617180][ T24] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 75.641801][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 75.641850][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 75.679141][ T24] usb 4-1: USB disconnect, device number 8 [ 75.911176][ T5123] loop1: detected capacity change from 0 to 128 [ 75.922623][ T5123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.931533][ T5123] ext4 filesystem being mounted at /363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.987523][ T282] EXT4-fs (loop1): unmounting filesystem. [ 76.257141][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.458179][ T39] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 76.477134][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 76.507125][ T39] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 76.537118][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.556124][ T39] usb 5-1: config 0 descriptor?? [ 76.578079][ T3523] device bridge_slave_1 left promiscuous mode [ 76.586431][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.609209][ T3523] device bridge_slave_0 left promiscuous mode [ 76.620903][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.638441][ T3523] device veth1_macvtap left promiscuous mode [ 76.655288][ T3523] device veth0_vlan left promiscuous mode [ 76.871845][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 76.871858][ T28] audit: type=1400 audit(2000007575.542:751): avc: denied { mounton } for pid=5166 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.961607][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.968823][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.976253][ T5166] device bridge_slave_0 entered promiscuous mode [ 76.984220][ T39] kye 0003:0458:0138.0010: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0 [ 76.998304][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.005365][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.012884][ T5166] device bridge_slave_1 entered promiscuous mode [ 77.038596][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.045641][ T5167] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.053046][ T5167] device bridge_slave_0 entered promiscuous mode [ 77.059897][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.066924][ T5167] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.074317][ T5167] device bridge_slave_1 entered promiscuous mode [ 77.189600][ T6] usb 5-1: USB disconnect, device number 6 [ 77.193988][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.202476][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.209752][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.216782][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.233622][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.240708][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.248444][ T5171] device bridge_slave_0 entered promiscuous mode [ 77.255341][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.262440][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.269799][ T5171] device bridge_slave_1 entered promiscuous mode [ 77.306378][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.313430][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.320698][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.327726][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.355847][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.363635][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.370971][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.378754][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.386000][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.395837][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.404109][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.411152][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.435615][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.443873][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.450916][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.468421][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.476456][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.508416][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.516329][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.524509][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.531544][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.538984][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.547460][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.554485][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.561779][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.569693][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.582515][ T5167] device veth0_vlan entered promiscuous mode [ 77.592691][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.600678][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.608094][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.615455][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.635600][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.648101][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.656687][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.665049][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.672092][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.685647][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.693253][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.703474][ T5166] device veth0_vlan entered promiscuous mode [ 77.710522][ T5167] device veth1_macvtap entered promiscuous mode [ 77.724367][ T28] audit: type=1400 audit(2000007576.392:752): avc: denied { bind } for pid=5178 comm="syz.5.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.745025][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.753264][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.761491][ T28] audit: type=1400 audit(2000007576.392:753): avc: denied { name_bind } for pid=5178 comm="syz.5.1924" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 77.783432][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.790491][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.798311][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.806158][ T28] audit: type=1400 audit(2000007576.392:754): avc: denied { node_bind } for pid=5178 comm="syz.5.1924" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 77.826994][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.832839][ T5183] loop5: detected capacity change from 0 to 512 [ 77.835068][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.848668][ T28] audit: type=1400 audit(2000007576.392:755): avc: denied { setopt } for pid=5178 comm="syz.5.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.857506][ T5183] EXT4-fs: Ignoring removed oldalloc option [ 77.868606][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.881706][ T5183] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.918013][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.926727][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.935523][ T5183] EXT4-fs (loop5): 1 truncate cleaned up [ 77.936050][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.941288][ T5183] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 77.960587][ T28] audit: type=1400 audit(2000007576.632:756): avc: denied { setattr } for pid=5182 comm="syz.5.1918" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.984575][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.993549][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.001585][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.009073][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.018242][ T5166] device veth1_macvtap entered promiscuous mode [ 78.028192][ T1081] EXT4-fs (loop5): unmounting filesystem. [ 78.036074][ T5171] device veth0_vlan entered promiscuous mode [ 78.052907][ T28] audit: type=1400 audit(2000007576.722:757): avc: denied { mounton } for pid=5167 comm="syz-executor" path="/root/syzkaller.LfdB64/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 78.081455][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.081534][ T28] audit: type=1400 audit(2000007576.722:758): avc: denied { mount } for pid=5167 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 78.111822][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.112863][ T28] audit: type=1400 audit(2000007576.722:759): avc: denied { mount } for pid=5167 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 78.122842][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.142749][ T28] audit: type=1400 audit(2000007576.722:760): avc: denied { mounton } for pid=5167 comm="syz-executor" path="/root/syzkaller.LfdB64/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 78.178504][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.193260][ T5171] device veth1_macvtap entered promiscuous mode [ 78.218096][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.226840][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.230064][ T5198] loop5: detected capacity change from 0 to 512 [ 78.242355][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.266826][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.277200][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.285599][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.298308][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.310558][ T5198] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 78.318659][ T5198] System zones: 0-2, 18-18, 34-35 [ 78.324562][ T5198] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 78.333675][ T5198] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.357684][ T5198] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 78.367964][ T5198] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 78.369023][ T3523] device bridge_slave_1 left promiscuous mode [ 78.394084][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.403431][ T3523] device bridge_slave_0 left promiscuous mode [ 78.409726][ T5198] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 78.415228][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.440953][ T3523] device bridge_slave_1 left promiscuous mode [ 78.447502][ T1081] EXT4-fs (loop5): unmounting filesystem. [ 78.454222][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.469798][ T3523] device bridge_slave_0 left promiscuous mode [ 78.479779][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.498598][ T3523] device veth1_macvtap left promiscuous mode [ 78.505817][ T3523] device veth0_vlan left promiscuous mode [ 78.512025][ T3523] device veth1_macvtap left promiscuous mode [ 78.518430][ T3523] device veth0_vlan left promiscuous mode [ 78.625752][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1936'. [ 78.679588][ T5251] loop0: detected capacity change from 0 to 512 [ 78.697615][ T5251] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 78.706054][ T5251] EXT4-fs (loop0): 1 truncate cleaned up [ 78.712169][ T5251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 78.725359][ T5251] incfs: Options parsing error. -22 [ 78.730666][ T5251] incfs: mount failed -22 [ 78.777935][ T5166] EXT4-fs (loop0): unmounting filesystem. [ 78.825746][ T5262] SELinux: failed to load policy [ 78.873361][ T5283] Falling back ldisc for ptm1. [ 79.011428][ T5303] loop0: detected capacity change from 0 to 16 [ 79.041957][ T5303] erofs: (device loop0): mounted with root inode @ nid 36. [ 79.255669][ T5332] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 79.294162][ T5336] loop4: detected capacity change from 0 to 512 [ 79.314468][ T5336] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.329145][ T5336] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.354473][ T290] EXT4-fs (loop4): unmounting filesystem. [ 79.517189][ T4531] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.650922][ T5367] loop0: detected capacity change from 0 to 8192 [ 79.665760][ T5371] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2001'. [ 79.686880][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.707122][ T4531] usb 8-1: Using ep0 maxpacket: 32 [ 79.710604][ T5367] FAT-fs (loop0): Filesystem has been set read-only [ 79.713342][ T4531] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 79.722235][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.735961][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.747037][ T4531] usb 8-1: config 0 has no interface number 0 [ 79.753752][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.770093][ T4531] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.785417][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.797221][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.804447][ T4531] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.805931][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.825534][ T4531] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 79.830664][ T5377] loop4: detected capacity change from 0 to 512 [ 79.841140][ T4531] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.853161][ T5377] EXT4-fs: Ignoring removed nobh option [ 79.855165][ T4531] usb 8-1: config 0 descriptor?? [ 79.864128][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.872993][ T5377] EXT4-fs: Ignoring removed i_version option [ 79.878904][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.882986][ T5377] EXT4-fs: Ignoring removed orlov option [ 79.887879][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.902136][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.912809][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.921678][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.930635][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.931732][ T5377] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 79.939348][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.947559][ T5377] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2004: invalid indirect mapped block 2683928664 (level 1) [ 79.955940][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.970308][ T5377] EXT4-fs (loop4): 1 truncate cleaned up [ 79.978596][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.984391][ T5377] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 79.992895][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 79.992957][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.019411][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.028205][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.036937][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.038021][ T290] EXT4-fs (loop4): unmounting filesystem. [ 80.045902][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.067321][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.079899][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.088961][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.097672][ T5367] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 2070) [ 80.174337][ T5402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2015'. [ 80.185855][ T5400] loop0: detected capacity change from 0 to 512 [ 80.227850][ T5400] EXT4-fs (loop0): too many log groups per flexible block group [ 80.235614][ T5400] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 80.242605][ T5400] EXT4-fs (loop0): mount failed [ 80.339548][ T5405] loop4: detected capacity change from 0 to 40427 [ 80.341703][ T5424] loop5: detected capacity change from 0 to 512 [ 80.347867][ T5405] F2FS-fs (loop4): invalid crc value [ 80.352945][ T5424] EXT4-fs: Ignoring removed nobh option [ 80.365804][ T5424] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2025: invalid indirect mapped block 256 (level 2) [ 80.377940][ T5405] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.380087][ T5424] EXT4-fs (loop5): 2 truncates cleaned up [ 80.391189][ T5424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 80.411043][ T1081] EXT4-fs (loop5): unmounting filesystem. [ 80.422762][ T5405] F2FS-fs (loop4): Start checkpoint disabled! [ 80.429607][ T5405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 80.447262][ T5431] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2028'. [ 80.477551][ T4531] uclogic 0003:28BD:0094.0011: pen parameters not found [ 80.485091][ T4531] uclogic 0003:28BD:0094.0011: interface is invalid, ignoring [ 80.505844][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.516874][ T3553] kworker/u4:117: attempt to access beyond end of device [ 80.516874][ T3553] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 80.517848][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.553160][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.560598][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.568267][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.577136][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.586470][ T5445] loop9: detected capacity change from 0 to 256 [ 80.592828][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.600257][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.608267][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.615815][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.623458][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.631006][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.638488][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.646174][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.653964][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.669698][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.677184][ T4531] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 80.681842][ T839] usb 8-1: USB disconnect, device number 2 [ 80.685180][ T4531] hid-generic 0002:0004:0009.0012: hidraw0: HID v0.04 Device [syz0] on syz0 [ 80.708829][ T5445] FAT-fs (loop9): Directory bread(block 64) failed [ 80.715443][ T5445] FAT-fs (loop9): Directory bread(block 65) failed [ 80.727151][ T5445] FAT-fs (loop9): Directory bread(block 66) failed [ 80.733671][ T5445] FAT-fs (loop9): Directory bread(block 67) failed [ 80.747185][ T5445] FAT-fs (loop9): Directory bread(block 68) failed [ 80.753717][ T5445] FAT-fs (loop9): Directory bread(block 69) failed [ 80.767149][ T5445] FAT-fs (loop9): Directory bread(block 70) failed [ 80.773670][ T5445] FAT-fs (loop9): Directory bread(block 71) failed [ 80.786188][ T5445] FAT-fs (loop9): Directory bread(block 72) failed [ 80.793331][ T5445] FAT-fs (loop9): Directory bread(block 73) failed [ 80.831824][ T5458] loop0: detected capacity change from 0 to 512 [ 80.850574][ T5458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0102] [ 80.855759][ T5465] loop9: detected capacity change from 0 to 1024 [ 80.858917][ T5458] System zones: 1-12 [ 80.869795][ T5458] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2038: error while reading EA inode 32 err=-116 [ 80.882513][ T5458] EXT4-fs (loop0): Remounting filesystem read-only [ 80.889223][ T5458] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2038: error while reading EA inode 32 err=-116 [ 80.901994][ T5458] EXT4-fs (loop0): Remounting filesystem read-only [ 80.908993][ T5458] EXT4-fs (loop0): 1 orphan inode deleted [ 80.909015][ T5458] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 80.934481][ T5458] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.2038: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 80.959146][ T5465] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 80.971342][ T5458] EXT4-fs (loop0): Remounting filesystem read-only [ 80.985447][ T5171] EXT4-fs (loop9): unmounting filesystem. [ 81.005718][ T5166] EXT4-fs (loop0): unmounting filesystem. [ 81.018275][ T5473] loop9: detected capacity change from 0 to 512 [ 81.034288][ T5473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.044238][ T5473] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.2044: invalid block [ 81.058020][ T5473] EXT4-fs (loop9): Remounting filesystem read-only [ 81.064627][ T5473] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2044: invalid indirect mapped block 4294967295 (level 1) [ 81.078787][ T5473] EXT4-fs (loop9): Remounting filesystem read-only [ 81.085352][ T5473] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2044: invalid indirect mapped block 4294967295 (level 1) [ 81.099547][ T5473] EXT4-fs (loop9): Remounting filesystem read-only [ 81.106232][ T5473] EXT4-fs (loop9): 2 truncates cleaned up [ 81.118971][ T5473] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 81.167395][ T5171] EXT4-fs (loop9): unmounting filesystem. [ 81.312370][ T5479] loop5: detected capacity change from 0 to 40427 [ 81.327562][ T5479] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 81.345405][ T5479] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 81.366336][ T5479] F2FS-fs (loop5): invalid crc value [ 81.386474][ T5479] F2FS-fs (loop5): Found nat_bits in checkpoint [ 81.429361][ T5479] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 81.446535][ T5479] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 81.526193][ T5497] loop0: detected capacity change from 0 to 40427 [ 81.527141][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 81.541405][ T5497] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.557132][ T5497] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.566383][ T3439] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 81.576201][ T5497] F2FS-fs (loop0): invalid crc value [ 81.580103][ T5495] loop9: detected capacity change from 0 to 40427 [ 81.588272][ T3439] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 81.599404][ T5495] F2FS-fs (loop9): invalid crc value [ 81.605410][ T5497] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 81.619481][ T5495] F2FS-fs (loop9): Found nat_bits in checkpoint [ 81.628226][ T5497] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 81.681222][ T5495] F2FS-fs (loop9): Start checkpoint disabled! [ 81.697696][ T5497] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.701365][ T5495] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 81.707187][ T5497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.748297][ T39] usb 8-1: config 1 interface 0 altsetting 96 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.791652][ T39] usb 8-1: config 1 interface 0 has no altsetting 0 [ 81.801943][ T3553] kworker/u4:117: attempt to access beyond end of device [ 81.801943][ T3553] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 81.817279][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.825425][ T5513] loop5: detected capacity change from 0 to 512 [ 81.832769][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.832788][ T39] usb 8-1: SerialNumber: syz [ 81.861805][ T5513] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2058: casefold flag without casefold feature [ 81.886448][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 81.886479][ T28] audit: type=1400 audit(2000007580.552:789): avc: denied { remove_name } for pid=5166 comm="syz-executor" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.938895][ T28] audit: type=1400 audit(2000007580.552:790): avc: denied { rmdir } for pid=5166 comm="syz-executor" name="file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.960794][ T28] audit: type=1400 audit(2000007580.602:791): avc: denied { mount } for pid=5520 comm="syz.9.2061" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 81.967414][ T5513] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2058: couldn't read orphan inode 15 (err -117) [ 81.982961][ T28] audit: type=1400 audit(2000007580.602:792): avc: denied { unmount } for pid=5171 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 82.017287][ T5513] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 82.043320][ T1081] EXT4-fs (loop5): unmounting filesystem. [ 82.164948][ T28] audit: type=1400 audit(2000007580.832:793): avc: denied { write } for pid=5539 comm="syz.0.2060" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.206503][ T5517] loop4: detected capacity change from 0 to 40427 [ 82.214223][ T5517] F2FS-fs (loop4): invalid crc value [ 82.220483][ T5517] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.239735][ T5544] loop9: detected capacity change from 0 to 128 [ 82.257198][ T5517] F2FS-fs (loop4): Start checkpoint disabled! [ 82.263978][ T5517] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 82.289414][ T5550] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2072'. [ 82.330404][ T3439] kworker/u4:17: attempt to access beyond end of device [ 82.330404][ T3439] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 82.406589][ T5564] loop9: detected capacity change from 0 to 512 [ 82.416371][ T28] audit: type=1400 audit(2000007581.082:794): avc: denied { connect } for pid=5567 comm="syz.4.2074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.419505][ T5564] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 82.445433][ T5564] EXT4-fs (loop9): invalid journal inode [ 82.451447][ T5564] EXT4-fs (loop9): can't get journal size [ 82.461619][ T5564] EXT4-fs (loop9): 1 truncate cleaned up [ 82.467485][ T5564] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 82.504378][ T28] audit: type=1400 audit(2000007581.172:795): avc: denied { append } for pid=5563 comm="syz.9.2091" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.541340][ T5171] EXT4-fs (loop9): unmounting filesystem. [ 82.550530][ T28] audit: type=1400 audit(2000007581.192:796): avc: denied { map } for pid=5563 comm="syz.9.2091" path="/46/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.573839][ T28] audit: type=1400 audit(2000007581.202:797): avc: denied { execute } for pid=5563 comm="syz.9.2091" path="/46/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.627002][ T28] audit: type=1400 audit(2000007581.292:798): avc: denied { read } for pid=5589 comm="syz.4.2090" path="socket:[35812]" dev="sockfs" ino=35812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.658370][ T39] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 82.674804][ T39] usb 8-1: USB disconnect, device number 3 [ 82.675333][ T5594] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.690405][ T5594] FAT-fs (loop19): unable to read boot sector [ 82.767670][ T5612] loop9: detected capacity change from 0 to 256 [ 82.778196][ T5612] FAT-fs (loop9): Directory bread(block 64) failed [ 82.784756][ T5612] FAT-fs (loop9): Directory bread(block 65) failed [ 82.791695][ T5612] FAT-fs (loop9): Directory bread(block 66) failed [ 82.798366][ T5612] FAT-fs (loop9): Directory bread(block 67) failed [ 82.804962][ T5612] FAT-fs (loop9): Directory bread(block 68) failed [ 82.811657][ T5612] FAT-fs (loop9): Directory bread(block 69) failed [ 82.821793][ T5612] FAT-fs (loop9): Directory bread(block 70) failed [ 82.834866][ T5612] FAT-fs (loop9): Directory bread(block 71) failed [ 82.847209][ T5612] FAT-fs (loop9): Directory bread(block 72) failed [ 82.856625][ T5612] FAT-fs (loop9): Directory bread(block 73) failed [ 82.913408][ T5599] loop0: detected capacity change from 0 to 40427 [ 82.926431][ T5599] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 82.934451][ T5599] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 82.953959][ T3505] kworker/u4:69: attempt to access beyond end of device [ 82.953959][ T3505] loop9: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 82.955080][ T5609] loop5: detected capacity change from 0 to 40427 [ 82.975024][ T5609] F2FS-fs (loop5): Invalid log blocks per segment (83886089) [ 82.982890][ T5599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 82.988073][ T5618] loop4: detected capacity change from 0 to 1024 [ 82.995527][ T5609] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 83.004329][ T5618] EXT4-fs: Invalid want_extra_isize 0 [ 83.010788][ T5609] F2FS-fs (loop5): invalid crc value [ 83.029306][ T5599] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 83.037745][ T5609] F2FS-fs (loop5): Found nat_bits in checkpoint [ 83.048381][ T5599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.091066][ T5609] F2FS-fs (loop5): Start checkpoint disabled! [ 83.108771][ T5609] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 83.116957][ T5609] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 83.127590][ T5166] syz-executor: attempt to access beyond end of device [ 83.127590][ T5166] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 83.149245][ T5639] loop9: detected capacity change from 0 to 512 [ 83.186801][ T5639] EXT4-fs (loop9): Test dummy encryption mode enabled [ 83.195875][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2116'. [ 83.205295][ T5609] syz.5.2100: attempt to access beyond end of device [ 83.205295][ T5609] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.220837][ T5639] EXT4-fs error (device loop9): __ext4_iget:5078: inode #11: block 1: comm syz.9.2111: invalid block [ 83.233633][ T5609] syz.5.2100: attempt to access beyond end of device [ 83.233633][ T5609] loop5: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 83.287988][ T5650] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2118'. [ 83.303200][ T5639] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2111: couldn't read orphan inode 11 (err -117) [ 83.317015][ T5652] futex_wake_op: syz.4.2120 tries to shift op by 32; fix this program [ 83.326508][ T3509] kworker/u4:73: attempt to access beyond end of device [ 83.326508][ T3509] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 83.339126][ T5656] loop0: detected capacity change from 0 to 1024 [ 83.348051][ T5656] EXT4-fs: Invalid want_extra_isize 0 [ 83.353663][ T5639] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 83.391858][ T5171] EXT4-fs (loop9): unmounting filesystem. [ 83.474485][ T5673] Â: renamed from pim6reg1 [ 83.573697][ T5683] SELinux: ebitmap start bit (4) is not a multiple of the map unit size (64) [ 83.598570][ T5683] SELinux: failed to load policy [ 83.605012][ T5666] loop9: detected capacity change from 0 to 40427 [ 83.617299][ T5666] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 83.629329][ T5688] loop7: detected capacity change from 0 to 256 [ 83.632128][ T5666] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 83.638314][ T5688] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 83.656055][ T5688] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 83.678994][ T5666] F2FS-fs (loop9): Found nat_bits in checkpoint [ 83.727956][ T5666] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 83.735239][ T5666] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 83.798842][ T5171] syz-executor: attempt to access beyond end of device [ 83.798842][ T5171] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 83.951244][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2142'. [ 83.971140][ T5718] loop9: detected capacity change from 0 to 256 [ 83.978186][ T5718] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.012114][ T5724] loop9: detected capacity change from 0 to 4096 [ 84.018693][ T5724] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.025166][ T5724] EXT4-fs: Ignoring removed orlov option [ 84.030887][ T5724] EXT4-fs: Ignoring removed nobh option [ 84.036770][ T5724] EXT4-fs (loop9): Test dummy encryption mode enabled [ 84.045077][ T5724] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 84.059649][ T5724] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 84.071858][ T5171] EXT4-fs (loop9): unmounting filesystem. [ 84.087501][ T5730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2148'. [ 84.120301][ T5738] loop9: detected capacity change from 0 to 256 [ 84.128849][ T5738] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 84.141082][ T5738] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 84.350732][ T5753] loop0: detected capacity change from 0 to 40427 [ 84.358418][ T5753] F2FS-fs (loop0): invalid crc value [ 84.364879][ T5753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.398388][ T5753] F2FS-fs (loop0): Start checkpoint disabled! [ 84.408712][ T5753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 84.410569][ T5765] loop5: detected capacity change from 0 to 512 [ 84.437630][ T5765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.452435][ T5765] EXT4-fs (loop5): 1 truncate cleaned up [ 84.458178][ T293] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 84.465691][ T5765] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 84.499261][ T3505] kworker/u4:69: attempt to access beyond end of device [ 84.499261][ T3505] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 84.554229][ T5774] loop9: detected capacity change from 0 to 512 [ 84.560770][ T5774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.574239][ T1081] EXT4-fs (loop5): unmounting filesystem. [ 84.583053][ T5774] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 84.591510][ T5774] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 84.599938][ T5774] EXT4-fs (loop9): 1 truncate cleaned up [ 84.605646][ T5774] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 84.627622][ T5171] EXT4-fs (loop9): unmounting filesystem. [ 84.651534][ T293] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 84.667299][ T293] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 84.697834][ T293] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.706872][ T293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.725013][ T293] usb 8-1: Product: syz [ 84.745880][ T293] usb 8-1: Manufacturer: syz [ 84.750538][ T293] usb 8-1: SerialNumber: syz [ 84.829258][ T5780] loop5: detected capacity change from 0 to 40427 [ 84.836438][ T5780] F2FS-fs (loop5): heap/no_heap options were deprecated [ 84.845855][ T5780] F2FS-fs (loop5): invalid crc value [ 84.848488][ T5790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2175'. [ 84.853966][ T5780] F2FS-fs (loop5): Found nat_bits in checkpoint [ 84.920373][ T5780] F2FS-fs (loop5): Start checkpoint disabled! [ 84.937156][ T5780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 84.958394][ T293] cdc_ncm 8-1:1.0: bind() failure [ 84.964296][ T293] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 84.987161][ T293] cdc_ncm 8-1:1.1: bind() failure [ 84.997202][ T293] usb 8-1: USB disconnect, device number 4 [ 84.998200][ T5797] loop4: detected capacity change from 0 to 256 [ 85.039296][ T5797] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 85.061696][ T5797] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 85.141994][ T5792] loop0: detected capacity change from 0 to 40427 [ 85.149113][ T5792] F2FS-fs (loop0): Invalid log blocks per segment (83886089) [ 85.156515][ T5792] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 85.165620][ T5792] F2FS-fs (loop0): invalid crc value [ 85.172106][ T5792] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.202029][ T5792] F2FS-fs (loop0): Start checkpoint disabled! [ 85.208900][ T5792] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 85.215942][ T5792] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 85.321526][ T5820] loop4: detected capacity change from 0 to 4096 [ 85.328542][ T5820] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.334975][ T5820] EXT4-fs: Ignoring removed orlov option [ 85.342678][ T5820] EXT4-fs: Ignoring removed nobh option [ 85.349013][ T5820] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.357057][ T5820] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.371857][ T5825] loop9: detected capacity change from 0 to 256 [ 85.397877][ T5820] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 85.407284][ T5825] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 85.437532][ T290] EXT4-fs (loop4): unmounting filesystem. [ 85.443773][ T5825] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 85.450265][ T5816] loop5: detected capacity change from 0 to 40427 [ 85.482293][ T3439] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.494542][ T5827] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.501038][ T3439] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.511441][ T5816] F2FS-fs (loop5): invalid crc value [ 85.517714][ T5816] F2FS-fs (loop5): Found nat_bits in checkpoint [ 85.563149][ T5816] F2FS-fs (loop5): Start checkpoint disabled! [ 85.580686][ T5816] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 85.631107][ T3439] bio_check_eod: 4 callbacks suppressed [ 85.631120][ T3439] kworker/u4:17: attempt to access beyond end of device [ 85.631120][ T3439] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 85.676393][ T5841] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 85.697824][ T5837] loop0: detected capacity change from 0 to 40427 [ 85.704745][ T5837] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 85.713437][ T5837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.722371][ T5837] F2FS-fs (loop0): invalid crc value [ 85.728872][ T5837] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 85.741224][ T5837] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 85.763925][ T5846] Â: renamed from pim6reg1 [ 85.780713][ T5837] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.787995][ T5837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.017147][ T839] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 86.033415][ T5837] F2FS-fs (loop0): Found FS corruption, run fsck to fix. [ 86.079092][ T5861] loop7: detected capacity change from 0 to 40427 [ 86.086150][ T5861] F2FS-fs (loop7): Invalid log blocks per segment (83886089) [ 86.093647][ T5861] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 86.102601][ T5861] F2FS-fs (loop7): invalid crc value [ 86.109834][ T5861] F2FS-fs (loop7): Found nat_bits in checkpoint [ 86.134749][ T5861] F2FS-fs (loop7): Start checkpoint disabled! [ 86.141625][ T5861] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 86.148767][ T5861] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 86.169321][ T5861] syz.7.2201: attempt to access beyond end of device [ 86.169321][ T5861] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.192323][ T5861] syz.7.2201: attempt to access beyond end of device [ 86.192323][ T5861] loop7: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 86.208251][ T839] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 86.218376][ T839] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 86.229719][ T839] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.238902][ T839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.250482][ T5870] loop0: detected capacity change from 0 to 512 [ 86.257138][ T839] usb 10-1: Product: syz [ 86.261389][ T839] usb 10-1: Manufacturer: syz [ 86.262650][ T3509] kworker/u4:73: attempt to access beyond end of device [ 86.262650][ T3509] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 86.266061][ T839] usb 10-1: SerialNumber: syz [ 86.289060][ T5870] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.310295][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'. [ 86.412074][ T5881] loop7: detected capacity change from 0 to 4096 [ 86.418844][ T5881] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.425312][ T5881] EXT4-fs: Ignoring removed orlov option [ 86.431045][ T5881] EXT4-fs: Ignoring removed nobh option [ 86.436947][ T5881] EXT4-fs (loop7): Test dummy encryption mode enabled [ 86.450537][ T5881] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 86.481856][ T839] cdc_ncm 10-1:1.0: bind() failure [ 86.487888][ T839] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 86.494760][ T839] cdc_ncm 10-1:1.1: bind() failure [ 86.500759][ T839] usb 10-1: USB disconnect, device number 2 [ 86.623297][ T5892] loop7: detected capacity change from 0 to 40427 [ 86.630209][ T5892] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 86.637969][ T5892] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 86.646744][ T5892] F2FS-fs (loop7): invalid crc value [ 86.653231][ T5892] F2FS-fs (loop7): Found nat_bits in checkpoint [ 86.678769][ T5892] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 86.685889][ T5892] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 86.809499][ T5911] loop7: detected capacity change from 0 to 1024 [ 86.816352][ T5911] EXT4-fs (loop7): Test dummy encryption mode enabled [ 86.999444][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 86.999458][ T28] audit: type=1326 audit(2000007585.672:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d6d8e929 code=0x7ffc0000 [ 87.034110][ T5930] loop7: detected capacity change from 0 to 1024 [ 87.041132][ T28] audit: type=1326 audit(2000007585.702:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe0d6d8e929 code=0x7ffc0000 [ 87.064912][ T28] audit: type=1326 audit(2000007585.702:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0d6d8e963 code=0x7ffc0000 [ 87.088129][ T28] audit: type=1326 audit(2000007585.702:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe0d6d8d3df code=0x7ffc0000 [ 87.111382][ T28] audit: type=1326 audit(2000007585.702:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe0d6d8e9b7 code=0x7ffc0000 [ 87.135029][ T28] audit: type=1326 audit(2000007585.702:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0d6d8d290 code=0x7ffc0000 [ 87.158571][ T28] audit: type=1326 audit(2000007585.702:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0d6d8e52b code=0x7ffc0000 [ 87.181844][ T28] audit: type=1326 audit(2000007585.712:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0d6d8d58a code=0x7ffc0000 [ 87.205155][ T28] audit: type=1326 audit(2000007585.712:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe0d6d8d58a code=0x7ffc0000 [ 87.235869][ T5940] loop5: detected capacity change from 0 to 16 [ 87.237348][ T5942] loop0: detected capacity change from 0 to 16 [ 87.244178][ T28] audit: type=1326 audit(2000007585.712:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz.7.2230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe0d6d8d197 code=0x7ffc0000 [ 87.271986][ T5941] loop7: detected capacity change from 0 to 512 [ 87.272003][ T5942] erofs: (device loop0): mounted with root inode @ nid 36. [ 87.278709][ T5940] erofs: (device loop5): mounted with root inode @ nid 36. [ 87.298529][ T5940] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 87.307586][ T5940] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 87.316625][ T5940] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 87.325750][ T5940] overlayfs: failed to get redirect (-117) [ 87.333451][ T5941] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.353621][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2233'. [ 87.398399][ T5961] loop7: detected capacity change from 0 to 512 [ 87.406869][ T5961] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 87.414083][ T5963] loop5: detected capacity change from 0 to 4096 [ 87.418565][ T5965] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 87.423463][ T5963] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.430195][ T5961] EXT4-fs (loop7): 1 truncate cleaned up [ 87.435844][ T5963] EXT4-fs: Ignoring removed orlov option [ 87.446754][ T5963] EXT4-fs: Ignoring removed nobh option [ 87.452850][ T5963] EXT4-fs (loop5): Test dummy encryption mode enabled [ 87.467257][ T5961] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 13: comm syz.7.2243: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 87.499927][ T5963] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 87.507172][ T2594] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.513286][ T2591] Bluetooth: hci0: command 0x1003 tx timeout [ 87.622666][ T5992] loop4: detected capacity change from 0 to 16 [ 87.629439][ T5992] erofs: (device loop4): mounted with root inode @ nid 36. [ 87.645520][ T5992] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 87.654622][ T5992] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 87.663781][ T5992] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 87.674959][ T5992] overlayfs: failed to get redirect (-117) [ 87.696805][ T6004] loop7: detected capacity change from 0 to 256 [ 87.707153][ T6004] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.717812][ T6004] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 87.729744][ T6000] SELinux: ebitmap start bit (4) is not a multiple of the map unit size (64) [ 87.739636][ T6004] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 87.740778][ T6000] SELinux: failed to load policy [ 87.755296][ T6007] loop4: detected capacity change from 0 to 4096 [ 87.763358][ T6007] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.770343][ T6007] EXT4-fs: Ignoring removed orlov option [ 87.776560][ T6007] EXT4-fs: Ignoring removed nobh option [ 87.783193][ T6007] EXT4-fs (loop4): Test dummy encryption mode enabled [ 87.783602][ T6009] loop5: detected capacity change from 0 to 1024 [ 87.800233][ T6009] EXT4-fs (loop5): Test dummy encryption mode enabled [ 87.817203][ T6007] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 87.849644][ T6018] loop4: detected capacity change from 0 to 256 [ 87.859450][ T6018] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 87.946831][ T6033] tipc: Started in network mode [ 87.955063][ T6033] tipc: Node identity 8, cluster identity 4711 [ 87.965426][ T6033] tipc: Node number set to 8 [ 87.970359][ T6033] tipc: Cannot configure node identity twice [ 87.979144][ T6037] IPv6: Can't replace route, no match found [ 87.993585][ T6039] device ip6_vti0 entered promiscuous mode [ 88.185199][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2294'. [ 88.307131][ T839] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.363735][ T6088] loop7: detected capacity change from 0 to 16 [ 88.377845][ T6088] erofs: (device loop7): mounted with root inode @ nid 36. [ 88.390197][ T6088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=46 [ 88.399322][ T6088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=46 [ 88.408852][ T6088] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=46 [ 88.417890][ T6088] overlayfs: failed to get redirect (-117) [ 88.461193][ T6098] loop7: detected capacity change from 0 to 1024 [ 88.479297][ T6098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.486031][ T6098] EXT4-fs: Ignoring removed bh option [ 88.497158][ T839] usb 5-1: Using ep0 maxpacket: 16 [ 88.509605][ T839] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 88.522660][ T839] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.541874][ T839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.551110][ T839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.559132][ T839] usb 5-1: Product: syz [ 88.563336][ T839] usb 5-1: Manufacturer: syz [ 88.567959][ T839] usb 5-1: SerialNumber: syz [ 88.711602][ T6125] loop0: detected capacity change from 0 to 4096 [ 88.724726][ T6125] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.731274][ T6125] EXT4-fs: Ignoring removed orlov option [ 88.738213][ T6122] loop5: detected capacity change from 0 to 40427 [ 88.738355][ T6125] EXT4-fs: Ignoring removed nobh option [ 88.757277][ T6122] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 88.765047][ T6122] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 88.781280][ T839] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 88.789799][ T6125] EXT4-fs (loop0): Test dummy encryption mode enabled [ 88.792215][ T839] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 88.804861][ T839] usb 5-1: USB disconnect, device number 7 [ 88.810989][ T6122] F2FS-fs (loop5): invalid crc value [ 88.830211][ T6122] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 88.849470][ T6141] netlink: 'syz.9.2331': attribute type 1 has an invalid length. [ 88.856026][ T6122] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 88.871302][ T6141] netlink: 'syz.9.2331': attribute type 2 has an invalid length. [ 88.893324][ T6141] netlink: 'syz.9.2331': attribute type 1 has an invalid length. [ 88.900576][ T6122] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 88.908229][ T6122] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 88.915798][ T6141] netlink: 'syz.9.2331': attribute type 2 has an invalid length. [ 88.923900][ T6125] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 88.983732][ T6155] loop0: detected capacity change from 0 to 1024 [ 88.990569][ T6155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.997264][ T6155] EXT4-fs: Ignoring removed bh option [ 89.001481][ T6153] loop7: detected capacity change from 0 to 4096 [ 89.124357][ T6122] F2FS-fs (loop5): Found FS corruption, run fsck to fix. [ 89.474939][ T6179] SELinux: ebitmap start bit (4) is not a multiple of the map unit size (64) [ 89.484769][ T6179] SELinux: failed to load policy [ 89.781412][ T6186] loop5: detected capacity change from 0 to 128 [ 89.804857][ T6189] loop7: detected capacity change from 0 to 4096 [ 89.808786][ T6186] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 89.812774][ T6189] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.826831][ T6189] EXT4-fs: Ignoring removed orlov option [ 89.833087][ T6189] EXT4-fs: Ignoring removed nobh option [ 89.846229][ T6189] EXT4-fs (loop7): Test dummy encryption mode enabled [ 89.859984][ T3509] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 89.883156][ T6195] loop4: detected capacity change from 0 to 512 [ 89.909852][ T6189] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 89.914550][ T6203] loop0: detected capacity change from 0 to 128 [ 89.927848][ T6204] loop9: detected capacity change from 0 to 1024 [ 89.934591][ T6204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.942221][ T6204] EXT4-fs: Ignoring removed bh option [ 89.949046][ T6195] EXT4-fs warning (device loop4): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 89.965564][ T6195] EXT4-fs (loop4): mount failed [ 89.966787][ T6203] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 90.002832][ T3530] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 90.150559][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2370'. [ 90.167166][ T6236] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2370'. [ 90.248196][ T6247] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2361'. [ 90.315229][ T6264] loop7: detected capacity change from 0 to 512 [ 90.331168][ T6264] EXT4-fs (loop7): Test dummy encryption mode enabled [ 90.339457][ T6264] EXT4-fs error (device loop7): __ext4_iget:5078: inode #11: block 1: comm syz.7.2371: invalid block [ 90.350708][ T6264] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2371: couldn't read orphan inode 11 (err -117) [ 90.366551][ T6264] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 90.528306][ T3439] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.571702][ T6297] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2386'. [ 90.938345][ T6319] loop5: detected capacity change from 0 to 256 [ 90.945555][ T6318] loop4: detected capacity change from 0 to 1024 [ 90.955848][ T6318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.962756][ T6318] EXT4-fs: Ignoring removed bh option [ 90.993060][ T6327] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2400'. [ 91.015767][ T6331] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2402'. [ 91.284998][ T6348] loop4: detected capacity change from 0 to 512 [ 91.287216][ T6350] loop9: detected capacity change from 0 to 512 [ 91.300097][ T6348] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.304975][ T6352] loop5: detected capacity change from 0 to 1024 [ 91.308586][ T6348] EXT4-fs error (device loop4): __ext4_iget:5078: inode #11: block 1: comm syz.4.2410: invalid block [ 91.321166][ T6352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.324548][ T6348] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2410: couldn't read orphan inode 11 (err -117) [ 91.339444][ T6352] EXT4-fs: Ignoring removed bh option [ 91.350784][ T6350] EXT4-fs warning (device loop9): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 91.365881][ T6350] EXT4-fs (loop9): mount failed [ 91.366230][ T6348] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 92.331801][ T6378] loop9: detected capacity change from 0 to 256 [ 92.547159][ T2594] Bluetooth: hci0: command 0x1003 tx timeout [ 92.553306][ T2591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.719138][ T6419] syz.7.2438[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.719209][ T6419] syz.7.2438[6419] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.766175][ T6421] loop7: detected capacity change from 0 to 256 [ 93.212203][ T6453] syz.4.2450[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.212247][ T6453] syz.4.2450[6453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.824854][ T6467] loop0: detected capacity change from 0 to 256 [ 93.906573][ T6477] 9pnet: p9_errstr2errno: server reported unknown error [ 94.107135][ T39] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 94.257143][ T4531] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 94.287152][ T39] usb 10-1: Using ep0 maxpacket: 32 [ 94.293474][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.304486][ T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.314340][ T39] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.323623][ T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.332373][ T39] usb 10-1: config 0 descriptor?? [ 94.338040][ T39] hub 10-1:0.0: USB hub found [ 94.447214][ T4531] usb 5-1: Using ep0 maxpacket: 16 [ 94.454681][ T4531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.465587][ T4531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.475341][ T4531] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 94.484381][ T4531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.493152][ T4531] usb 5-1: config 0 descriptor?? [ 94.538958][ T39] hub 10-1:0.0: 4 ports detected [ 94.739302][ T39] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 94.745785][ T39] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 94.754664][ T39] usbhid 10-1:0.0: can't add hid device: -71 [ 94.760707][ T39] usbhid: probe of 10-1:0.0 failed with error -71 [ 94.797498][ T39] usb 10-1: USB disconnect, device number 3 [ 94.900915][ T4531] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 94.908117][ T4531] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 94.915236][ T4531] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 94.922365][ T4531] konepure 0003:1E7D:2DB4.0013: unknown main item tag 0x0 [ 94.937220][ T4531] konepure 0003:1E7D:2DB4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 95.105243][ T6115] usb 5-1: USB disconnect, device number 8 [ 95.268160][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 95.268175][ T28] audit: type=1400 audit(2000011236.940:924): avc: denied { bind } for pid=6508 comm="syz.0.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.446591][ T6525] loop0: detected capacity change from 0 to 256 [ 95.685525][ T28] audit: type=1400 audit(2000011237.350:925): avc: denied { ioctl } for pid=6549 comm="syz.7.2490" path="/dev/input/event2" dev="devtmpfs" ino=275 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.622803][ T6583] loop4: detected capacity change from 0 to 40427 [ 96.623985][ T6583] F2FS-fs (loop4): invalid crc value [ 96.636303][ T6583] F2FS-fs (loop4): Found nat_bits in checkpoint [ 96.642972][ T4531] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 96.667064][ T6583] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 96.702094][ T290] syz-executor: attempt to access beyond end of device [ 96.702094][ T290] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.801184][ T6595] loop4: detected capacity change from 0 to 512 [ 96.817829][ T6595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 96.817875][ T6595] System zones: 0-2, 18-18, 34-35 [ 96.818872][ T6595] EXT4-fs mount: 38 callbacks suppressed [ 96.818886][ T6595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 96.837147][ T4531] usb 10-1: Using ep0 maxpacket: 16 [ 96.846438][ T6595] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.852490][ T4531] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.873850][ T6595] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 96.881376][ T4531] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.881412][ T4531] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 96.881434][ T4531] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.882741][ T4531] usb 10-1: config 0 descriptor?? [ 96.891787][ T6595] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 96.927490][ T6595] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 96.940501][ T290] EXT4-fs (loop4): unmounting filesystem. [ 97.303558][ T4531] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 97.303583][ T4531] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 97.303603][ T4531] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 97.303621][ T4531] konepure 0003:1E7D:2DB4.0014: unknown main item tag 0x0 [ 97.304313][ T4531] konepure 0003:1E7D:2DB4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.9-1/input0 [ 97.516692][ T39] usb 10-1: USB disconnect, device number 4 [ 97.571065][ T6610] loop4: detected capacity change from 0 to 512 [ 97.577730][ T6610] EXT4-fs: Ignoring removed oldalloc option [ 97.583920][ T6610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.595235][ T6610] EXT4-fs (loop4): 1 truncate cleaned up [ 97.600983][ T6610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.622234][ T290] EXT4-fs (loop4): unmounting filesystem. [ 97.747179][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 97.747198][ T2591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.759392][ T6552] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 97.837231][ C0] ================================================================== [ 97.845317][ C0] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 97.852338][ C0] Write of size 8 at addr ffff88813714ca00 by task syz-executor/5167 [ 97.860379][ C0] [ 97.862688][ C0] CPU: 0 PID: 5167 Comm: syz-executor Not tainted 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 97.872640][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.882680][ C0] Call Trace: [ 97.885942][ C0] [ 97.888769][ C0] __dump_stack+0x21/0x24 [ 97.893092][ C0] dump_stack_lvl+0xee/0x150 [ 97.897674][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 97.902689][ C0] ? __cfi__printk+0x8/0x8 [ 97.907090][ C0] ? enqueue_timer+0xae/0x480 [ 97.911752][ C0] print_address_description+0x71/0x210 [ 97.917284][ C0] print_report+0x4a/0x60 [ 97.921603][ C0] kasan_report+0x122/0x150 [ 97.926086][ C0] ? enqueue_timer+0xae/0x480 [ 97.930749][ C0] __asan_report_store8_noabort+0x17/0x20 [ 97.936464][ C0] enqueue_timer+0xae/0x480 [ 97.940956][ C0] __mod_timer+0x79f/0xb30 [ 97.945357][ C0] mod_timer+0x1f/0x30 [ 97.949413][ C0] br_hello_timer_expired+0x120/0x180 [ 97.954772][ C0] ? __cfi_br_hello_timer_expired+0x10/0x10 [ 97.960645][ C0] call_timer_fn+0x46/0x2a0 [ 97.965131][ C0] ? __cfi_br_hello_timer_expired+0x10/0x10 [ 97.971004][ C0] __run_timers+0x639/0x9a0 [ 97.975493][ C0] ? calc_index+0x200/0x200 [ 97.979981][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 97.985167][ C0] run_timer_softirq+0x6a/0xf0 [ 97.989917][ C0] handle_softirqs+0x1d7/0x600 [ 97.994666][ C0] ? irqtime_account_irq+0xc4/0x240 [ 97.999849][ C0] __irq_exit_rcu+0x52/0xf0 [ 98.004336][ C0] irq_exit_rcu+0x9/0x10 [ 98.008576][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 98.014194][ C0] [ 98.017111][ C0] [ 98.020023][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 98.026000][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x80 [ 98.032752][ C0] Code: 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 80 f8 fd 6f 55 48 89 e5 48 8b 45 08 <65> 48 8b 0d 80 71 92 7e 65 8b 15 81 71 92 7e 81 e2 00 01 ff 00 74 [ 98.052339][ C0] RSP: 0018:ffffc90011a87790 EFLAGS: 00000246 [ 98.058388][ C0] RAX: ffffffff81a8b1d1 RBX: 8000000120cad045 RCX: ffff888137a11440 [ 98.066343][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 98.074296][ C0] RBP: ffffc90011a87790 R08: dffffc0000000000 R09: ffffed1026f42289 [ 98.082251][ C0] R10: ffffed1026f42289 R11: 1ffff11026f42288 R12: 0400000000000080 [ 98.090206][ C0] R13: 1ffff11024fbb8fc R14: 0000000000000000 R15: dffffc0000000000 [ 98.098168][ C0] ? unmap_page_range+0xca1/0x2310 [ 98.103267][ C0] unmap_page_range+0xca1/0x2310 [ 98.108194][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 98.113551][ C0] ? mas_find+0x155/0x370 [ 98.117876][ C0] unmap_vmas+0x31c/0x430 [ 98.122187][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 98.127022][ C0] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 98.132480][ C0] ? __kasan_check_write+0x14/0x20 [ 98.137577][ C0] exit_mmap+0x263/0xa40 [ 98.141804][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 98.147598][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 98.152347][ C0] ? __cfi_exit_aio+0x10/0x10 [ 98.157011][ C0] ? uprobe_clear_state+0x2c1/0x320 [ 98.162194][ C0] __mmput+0x93/0x320 [ 98.166170][ C0] ? mmput+0x43/0x150 [ 98.170137][ C0] mmput+0x4b/0x150 [ 98.173927][ C0] do_exit+0x979/0x2650 [ 98.178075][ C0] ? __cfi_do_exit+0x10/0x10 [ 98.182653][ C0] ? __kasan_check_write+0x14/0x20 [ 98.187750][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 98.192757][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 98.198292][ C0] ? zap_other_threads+0x2c1/0x2f0 [ 98.203396][ C0] do_group_exit+0x210/0x2d0 [ 98.207985][ C0] __x64_sys_exit_group+0x3f/0x40 [ 98.212994][ C0] x64_sys_call+0x7b4/0x9a0 [ 98.217479][ C0] do_syscall_64+0x4c/0xa0 [ 98.221877][ C0] ? clear_bhb_loop+0x30/0x80 [ 98.226533][ C0] ? clear_bhb_loop+0x30/0x80 [ 98.231194][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.237068][ C0] RIP: 0033:0x7fe0d6d8e929 [ 98.241470][ C0] Code: Unable to access opcode bytes at 0x7fe0d6d8e8ff. [ 98.248475][ C0] RSP: 002b:00007fff78012878 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 98.256868][ C0] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fe0d6d8e929 [ 98.264820][ C0] RDX: 00007fe0d6d9081a RSI: 0000000000000000 RDI: 0000000000000007 [ 98.272780][ C0] RBP: 0000000000000003 R08: 0079746972756365 R09: 0000000000000007 [ 98.280740][ C0] R10: 00000000000003b8 R11: 0000000000000246 R12: 00007fe0d6f80c80 [ 98.288692][ C0] R13: 00007fff78012e9c R14: 0000000000000000 R15: 00007fe0d6f82e40 [ 98.296650][ C0] [ 98.299652][ C0] [ 98.301969][ C0] Allocated by task 6552: [ 98.306271][ C0] kasan_set_track+0x4b/0x70 [ 98.310842][ C0] kasan_save_alloc_info+0x25/0x30 [ 98.315937][ C0] __kasan_kmalloc+0x95/0xb0 [ 98.320512][ C0] __kmalloc+0xb1/0x1e0 [ 98.324652][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 98.329658][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 98.334668][ C0] tty_ioctl+0x8ef/0xc60 [ 98.338922][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 98.343588][ C0] __x64_sys_ioctl+0x7b/0x90 [ 98.348166][ C0] x64_sys_call+0x58b/0x9a0 [ 98.352670][ C0] do_syscall_64+0x4c/0xa0 [ 98.357072][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.362948][ C0] [ 98.365253][ C0] Freed by task 6552: [ 98.369243][ C0] kasan_set_track+0x4b/0x70 [ 98.373830][ C0] kasan_save_free_info+0x31/0x50 [ 98.378853][ C0] ____kasan_slab_free+0x132/0x180 [ 98.383951][ C0] __kasan_slab_free+0x11/0x20 [ 98.388694][ C0] slab_free_freelist_hook+0xc2/0x190 [ 98.394053][ C0] __kmem_cache_free+0xb7/0x1b0 [ 98.398894][ C0] kfree+0x6f/0xf0 [ 98.402602][ C0] hci_release_dev+0x13ad/0x1500 [ 98.407528][ C0] bt_host_release+0x82/0x90 [ 98.412112][ C0] device_release+0xa4/0x1d0 [ 98.416681][ C0] kobject_put+0x19d/0x280 [ 98.421078][ C0] put_device+0x1f/0x30 [ 98.425222][ C0] hci_dev_cmd+0x265/0x720 [ 98.429642][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 98.434312][ C0] sock_do_ioctl+0x101/0x310 [ 98.438890][ C0] sock_ioctl+0x4d8/0x6e0 [ 98.443203][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 98.447892][ C0] __x64_sys_ioctl+0x7b/0x90 [ 98.452469][ C0] x64_sys_call+0x58b/0x9a0 [ 98.456957][ C0] do_syscall_64+0x4c/0xa0 [ 98.461367][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.467242][ C0] [ 98.469561][ C0] Last potentially related work creation: [ 98.475250][ C0] kasan_save_stack+0x3a/0x60 [ 98.479948][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 98.485310][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 98.491103][ C0] insert_work+0x51/0x300 [ 98.495453][ C0] __queue_work+0x9b1/0xd30 [ 98.499941][ C0] queue_work_on+0xd2/0x140 [ 98.504424][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 98.509350][ C0] hci_cmd_sync_status+0x53/0x120 [ 98.514358][ C0] hci_dev_cmd+0x628/0x720 [ 98.518758][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 98.523415][ C0] sock_do_ioctl+0x101/0x310 [ 98.527992][ C0] sock_ioctl+0x4d8/0x6e0 [ 98.532304][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 98.536971][ C0] __x64_sys_ioctl+0x7b/0x90 [ 98.541546][ C0] x64_sys_call+0x58b/0x9a0 [ 98.546032][ C0] do_syscall_64+0x4c/0xa0 [ 98.550427][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.556319][ C0] [ 98.558624][ C0] Second to last potentially related work creation: [ 98.565188][ C0] kasan_save_stack+0x3a/0x60 [ 98.569844][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 98.575202][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 98.580991][ C0] insert_work+0x51/0x300 [ 98.585308][ C0] __queue_work+0x9b1/0xd30 [ 98.589795][ C0] queue_work_on+0xd2/0x140 [ 98.594290][ C0] hci_cmd_timeout+0x191/0x200 [ 98.599044][ C0] process_one_work+0x71f/0xc40 [ 98.603885][ C0] worker_thread+0xa29/0x11f0 [ 98.608568][ C0] kthread+0x281/0x320 [ 98.612637][ C0] ret_from_fork+0x1f/0x30 [ 98.617032][ C0] [ 98.619339][ C0] The buggy address belongs to the object at ffff88813714c000 [ 98.619339][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 98.633371][ C0] The buggy address is located 2560 bytes inside of [ 98.633371][ C0] 8192-byte region [ffff88813714c000, ffff88813714e000) [ 98.646799][ C0] [ 98.649182][ C0] The buggy address belongs to the physical page: [ 98.655580][ C0] page:ffffea0004dc5200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x137148 [ 98.665797][ C0] head:ffffea0004dc5200 order:3 compound_mapcount:0 compound_pincount:0 [ 98.674110][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 98.680178][ C0] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043500 [ 98.688742][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 98.697303][ C0] page dumped because: kasan: bad access detected [ 98.703694][ C0] page_owner tracks the page as allocated [ 98.709389][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6533, tgid 6530 (syz.5.2494), ts 95581209869, free_ts 95572022298 [ 98.731947][ C0] post_alloc_hook+0x1f5/0x210 [ 98.736699][ C0] prep_new_page+0x1c/0x110 [ 98.741189][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 98.746720][ C0] __alloc_pages+0x19e/0x3a0 [ 98.751301][ C0] alloc_slab_page+0x6e/0xf0 [ 98.755888][ C0] new_slab+0x98/0x3d0 [ 98.759943][ C0] ___slab_alloc+0x6f6/0xb50 [ 98.764511][ C0] __slab_alloc+0x5e/0xa0 [ 98.768823][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 98.774267][ C0] __kmalloc+0xa1/0x1e0 [ 98.778409][ C0] ops_init+0x89/0x4a0 [ 98.782466][ C0] setup_net+0x4ab/0xcb0 [ 98.786693][ C0] copy_net_ns+0x355/0x5c0 [ 98.791087][ C0] create_new_namespaces+0x3a2/0x660 [ 98.796358][ C0] copy_namespaces+0x1d1/0x220 [ 98.801105][ C0] copy_process+0x12e0/0x3420 [ 98.805767][ C0] page last free stack trace: [ 98.810418][ C0] free_unref_page_prepare+0x742/0x750 [ 98.815859][ C0] free_unref_page+0x8f/0x530 [ 98.820515][ C0] __free_pages+0x67/0x100 [ 98.824912][ C0] __free_slab+0xca/0x1a0 [ 98.829227][ C0] __unfreeze_partials+0x160/0x190 [ 98.834328][ C0] put_cpu_partial+0xa9/0x100 [ 98.838986][ C0] __slab_free+0x1c4/0x280 [ 98.843386][ C0] ___cache_free+0xbf/0xd0 [ 98.847788][ C0] qlist_free_all+0xc6/0x140 [ 98.852378][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 98.857843][ C0] __kasan_slab_alloc+0x24/0x80 [ 98.862676][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 98.867777][ C0] __kmem_cache_alloc_node+0x192/0x2c0 [ 98.873224][ C0] kmalloc_trace+0x29/0xb0 [ 98.877628][ C0] ref_tracker_alloc+0x139/0x430 [ 98.882554][ C0] netdev_hold+0x80/0xc0 [ 98.886780][ C0] [ 98.889087][ C0] Memory state around the buggy address: [ 98.894712][ C0] ffff88813714c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.902760][ C0] ffff88813714c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.910808][ C0] >ffff88813714ca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.918849][ C0] ^ [ 98.922899][ C0] ffff88813714ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.930940][ C0] ffff88813714cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 98.938984][ C0] ================================================================== [ 98.947050][ C0] Disabling lock debugging due to kernel taint [ 99.508359][ T3509] device bridge_slave_1 left promiscuous mode [ 99.514537][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.522043][ T3509] device bridge_slave_0 left promiscuous mode [ 99.528266][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.536294][ T3509] device veth1_macvtap left promiscuous mode [ 99.542358][ T3509] device veth0_vlan left promiscuous mode [ 99.828722][ T3509] tipc: Left network mode [ 99.833352][ T3509] tipc: Left network mode [ 99.837162][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 99.849390][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 99.857784][ C0] CPU: 0 PID: 274 Comm: syz-executor Tainted: G B 6.1.141-syzkaller-00038-ge2deb0b42a3a #0 [ 99.869131][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.879179][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 99.884473][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 d2 28 00 4c 89 ff e8 f0 1f a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2c 6d 00 49 8b 7d 00 e8 d3 1b [ 99.904061][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 99.910107][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811402a880 [ 99.918061][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 99.926015][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 99.933978][ C0] R10: ffffed1026e29939 R11: 1ffff11026e29939 R12: dffffc0000000000 [ 99.941943][ C0] R13: 0000000000000000 R14: ffff88813714c9c8 R15: 0000000000000008 [ 99.949901][ C0] FS: 0000555588732500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 99.958816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.965383][ C0] CR2: 00007f344a2e8710 CR3: 0000000116825000 CR4: 00000000003506b0 [ 99.973342][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 99.981306][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 99.989289][ C0] Call Trace: [ 99.992559][ C0] [ 99.995403][ C0] delayed_work_timer_fn+0x61/0x80 [ 100.000521][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 100.006334][ C0] call_timer_fn+0x46/0x2a0 [ 100.010839][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 100.016637][ C0] __run_timers+0x667/0x9a0 [ 100.021133][ C0] ? calc_index+0x200/0x200 [ 100.025633][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 100.030827][ C0] run_timer_softirq+0x6a/0xf0 [ 100.035584][ C0] handle_softirqs+0x1d7/0x600 [ 100.040347][ C0] __irq_exit_rcu+0x52/0xf0 [ 100.044846][ C0] irq_exit_rcu+0x9/0x10 [ 100.049099][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 100.054730][ C0] [ 100.057665][ C0] [ 100.060591][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 100.066569][ C0] RIP: 0010:__x64_sys_read+0x38/0x90 [ 100.071856][ C0] Code: 49 bc 00 00 00 00 00 fc ff df e8 73 6a b3 ff 48 8d 7b 70 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 2c c4 f7 ff 4c 8b 73 70 <48> 8d 7b 68 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 11 c4 f7 [ 100.091449][ C0] RSP: 0018:ffffc90000d27ee0 EFLAGS: 00000246 [ 100.097508][ C0] RAX: 1ffff920001a4ff9 RBX: ffffc90000d27f58 RCX: ffff88811402a880 [ 100.105474][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000d27fc8 [ 100.113439][ C0] RBP: ffffc90000d27f00 R08: 0000000000000000 R09: 0000000000000000 [ 100.121400][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 100.129361][ C0] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000000 [ 100.137327][ C0] x64_sys_call+0x2f/0x9a0 [ 100.141739][ C0] do_syscall_64+0x4c/0xa0 [ 100.146143][ C0] ? clear_bhb_loop+0x30/0x80 [ 100.150812][ C0] ? clear_bhb_loop+0x30/0x80 [ 100.155476][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.161358][ C0] RIP: 0033:0x7fb29e18d2fd [ 100.165760][ C0] Code: a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b5 e8 a8 48 00 00 0f 1f 84 00 00 00 00 00 80 3d 41 92 1f 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 100.185353][ C0] RSP: 002b:00007ffd1a0c0578 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.193755][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb29e18d2fd [ 100.201713][ C0] RDX: 0000000000000004 RSI: 00007ffd1a0c058c RDI: 0000000000000003 [ 100.209668][ C0] RBP: 0000000000000000 R08: 0000000000000062 R09: 0037717ab74297e6 [ 100.217633][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1a0c09a0 [ 100.225601][ C0] R13: 0000000000000004 R14: 00007ffd1a0c058c R15: 00007ffd1a0c0620 [ 100.233566][ C0] [ 100.236586][ C0] Modules linked in: [ 100.240482][ C0] ---[ end trace 0000000000000000 ]--- [ 100.245924][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 100.251212][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 b8 d2 28 00 4c 89 ff e8 f0 1f a9 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5c 2c 6d 00 49 8b 7d 00 e8 d3 1b [ 100.270812][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 100.276873][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811402a880 [ 100.284834][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 100.292796][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 100.300758][ C0] R10: ffffed1026e29939 R11: 1ffff11026e29939 R12: dffffc0000000000 [ 100.308722][ C0] R13: 0000000000000000 R14: ffff88813714c9c8 R15: 0000000000000008 [ 100.316683][ C0] FS: 0000555588732500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 100.325619][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.332195][ C0] CR2: 00007f344a2e8710 CR3: 0000000116825000 CR4: 00000000003506b0 [ 100.340187][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.348151][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.356109][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 100.363561][ C0] Kernel Offset: disabled [ 100.367876][ C0] Rebooting in 86400 seconds..