last executing test programs: 36.741555321s ago: executing program 32 (id=103): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0xfffffeff, 0x80800) 31.145017053s ago: executing program 33 (id=161): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 31.049277165s ago: executing program 34 (id=162): syz_io_uring_setup(0x4443, &(0x7f0000000200)={0x0, 0x4b58, 0x80, 0x2, 0x159}, 0x0, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 28.619999203s ago: executing program 1 (id=187): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f801ffe8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 28.567909464s ago: executing program 1 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x801, 0x0, 0x3ff, 0x1, 0x1000, 0x8001, 0x1001002, 0x1d60, 0x8000006000000, 0x4, 0x1000006, 0x63, 0x8bd5, 0x8, 0x401, 0x20100000000020], 0x25000, 0x216146}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.417418177s ago: executing program 1 (id=191): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001cc0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000000), 0xc002, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') lstat(&(0x7f0000000040)='./file0\x00', 0x0) 28.353219009s ago: executing program 1 (id=193): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000080)='bpf_lsm_path_symlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe082b36b6b90b74e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 28.239984972s ago: executing program 1 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x1000) pread64$ublk_bdev(r0, &(0x7f0000004080)=""/4096, 0x1000, 0x3ec) 28.199990563s ago: executing program 35 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/bus/pci/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000700), 0x1000) pread64$ublk_bdev(r0, &(0x7f0000004080)=""/4096, 0x1000, 0x3ec) 27.665791265s ago: executing program 3 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x2, 0x2, 0x1, 0x0, @msi={0xffffff79, 0x80000008, 0xfffffffc, 0x2}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.557554338s ago: executing program 3 (id=205): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getgroups(0x27, &(0x7f0000002540)) 27.517706979s ago: executing program 3 (id=206): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffd, 0x2e44) r2 = dup3(r1, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 27.44825673s ago: executing program 3 (id=207): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xa, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$FUSE_BMAP(r0, &(0x7f00000026c0)={0x18, 0x7b3620c31cc0b28a}, 0x18) 27.103046258s ago: executing program 3 (id=211): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 26.851951374s ago: executing program 3 (id=212): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001c03010902"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 26.722760388s ago: executing program 36 (id=212): syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e001c03010902"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_debugfs\x00', 0x4) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_debugfs/usb/devices\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) 17.958627705s ago: executing program 6 (id=362): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) nanosleep(0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x4, "3512a263"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_4={0x3, 0x1, 0x1, "5cf3d095"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x200, 0x7}) 16.45731147s ago: executing program 9 (id=404): r0 = socket(0x1, 0x5, 0x0) close(r0) io_uring_setup(0x5013, &(0x7f0000000140)={0x0, 0xfffffffa, 0x3681, 0x0, 0x276}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80002017}) 16.400828702s ago: executing program 9 (id=406): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0xeeef0000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f0000000100)={0x1}) 16.260688215s ago: executing program 9 (id=410): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2012}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 16.208340676s ago: executing program 9 (id=411): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x440, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2k776+uXUJVHH0CgICIeSZOW0gMXEEgcQEKCQzmGJK1C0wY1QaJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpS0no7V3E9ux3TycuKk/H2nbmd1xZr7eHXtmxxtAzxpM/0ki9kfEnxHRX83WFxis/nd7aWHiztLCRBLl8jv/JJVyt5YWJvKi+ev25ZlSROGLJI42qXfuytUL4zMzU5ez/Mj8xQ9H5q5cfWH64vj5qfNTl8bOnDl1cvSl02MvdiTONK5bRz6ZPXb4jfeuvzVx9vr7v36f5PE3xNEhg+0OPl0ud7i67jpQk05KXWwI61KsdtPoq/T//ijGysnrj9c/72rjgC1VLpfLD7U+vFgG7mNJbOLF+UcIsAPlX/Tp/DfftmfkcW+4+Up1ApTGfTvbqkdKUcjK9DXMbztpMCLOLv77TbrF1tyHAACo82M6/nm+2fivELX3hf6fraEMRMQDEXEwIk5HxKGIeDCiUvbhiHikWSVJ6/obF0lWj38KNzYc3Bqk47+Xs7Wt+vFfPvqLgWKWO1CJvy85Nz0zdSJ7T4aib3eaH21Tx0+v/fFVq2O14790S+vPx4JZO26Udte/ZnJ8fnwzMde6+VnEkVKz+JPllYD09B2OiCMbrGP62e+OtTp29/jb6MA6U/nbiGeq538xGuLPJe3XJ0f+FzNTJ0byq2K1336/9vZyplh/bFPxd0B6/vc2vf6X4x9Iatdr59Zfx7W/vmw5p9no9b8rebdu38fj8/OXRyN2JW9WG127f6yh3NhK+TT+oePN+//BWHknjkZEehE/GhGPRcTjWdufiIgnSxHH28T/y6tPfbCx+He3+audkcY/ua7zv5LYFY17mieKF37+oa7SgbXGH9n5P1VJDWV71vL5t5Z2bexqBgAAgJ2nEBH7IykML6cLheHh6m/4D8XeYszOzT93bvajS5PVZwQGoq+Q3+nqr7kfOppN6/P8WEP+ZHbf+Ovinkp+eGJ25s799RN42HH2tej/qb+L3W4dsOU8rwW9S/+H3qX/Q+/S/6F3Nen/e7rRDmD7Nfv+/7QL7QC2X0P/t+wHPcT8H3qX/g+9S/+HnjS3J+7+kLyExKpEFO6JZkhsUaLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8V8AAAD//4sp5BA=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000001180)=""/4093, 0xffd) 16.04948623s ago: executing program 9 (id=414): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be002829ff060000000000000000000000000008aaff020000000000000000000000000001"], 0xfdef) 15.497185993s ago: executing program 6 (id=418): connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1269, 0x0) 15.463878674s ago: executing program 6 (id=419): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000004c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x6e, {"488d054900000048c7c30052020066890348c1e8106689430648c1e810894308b91b0000000f320d000c00000f30b90f08000031d2b8ff0100000f30b93008000031d2b8200000000f30fb90909090b93a0900000f32b90b08000031d231c00f3048cf"}}], 0xffffffffffffffc6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.264824278s ago: executing program 6 (id=423): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) 15.149005461s ago: executing program 6 (id=426): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) close(0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) 15.011963594s ago: executing program 9 (id=431): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 15.011800385s ago: executing program 6 (id=432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x106, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 14.964768986s ago: executing program 37 (id=431): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x800000e}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 14.962254506s ago: executing program 38 (id=432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x106, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r1) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r1) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 10.395854243s ago: executing program 2 (id=509): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) 10.335362175s ago: executing program 2 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000000705020240"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8.554496247s ago: executing program 2 (id=536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.506885599s ago: executing program 2 (id=540): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000300)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) lstat(&(0x7f0000000880)='./file1\x00', &(0x7f00000008c0)) 8.371763061s ago: executing program 2 (id=543): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@global=@item_012={0x1, 0x1, 0x8, "ca"}, @main=@item_4={0x3, 0x0, 0x8, "62966124"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @main=@item_4={0x3, 0x0, 0x8, "f39eb3ba"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) close(0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 8.287877223s ago: executing program 2 (id=546): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 8.196783766s ago: executing program 39 (id=546): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70b92d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 4.879884484s ago: executing program 7 (id=620): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x11, r2, 0x1, 0x80, 0x6, @random="1ef28cf78b6a"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 4.801211286s ago: executing program 7 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 4.571920061s ago: executing program 7 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xffe0, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20048850) 4.548418021s ago: executing program 7 (id=627): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x440, &(0x7f0000000d40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000001180)=""/4093, 0xffd) 4.455917784s ago: executing program 7 (id=629): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x3) 3.923442487s ago: executing program 7 (id=631): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x120) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7ff, 0x100000001, 0x0, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 3.877240728s ago: executing program 40 (id=631): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x120) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7ff, 0x100000001, 0x0, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 3.558484275s ago: executing program 5 (id=638): r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) setrlimit(0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) 3.493973047s ago: executing program 5 (id=640): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000200)={0xe, {0x3, 0x6e, 0x9}}, 0xc) 2.624705037s ago: executing program 1 (id=632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000100)={0x1, 0xffffffff, 0x2, 0x5, 0x3, 0x5}) 2.551970199s ago: executing program 5 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2.162706098s ago: executing program 8 (id=662): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f0000000340)="a766b810008ee80f20c035000001000f22c0360f2202660f3881910e000000b9c8080000b81eeee7d3baf632e05b0f3066baf80cb8d0681986ef66bafc0c66b87a4d66ef0f01c3ea008000002b01660f00dd", 0x52}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.915769024s ago: executing program 8 (id=668): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x4044}, {r0, 0xe80}], 0x2, 0x0, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000400)={[0x9]}, 0x0, 0x8) r1 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000140)=0x0) timer_settime(r2, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 1.857897405s ago: executing program 4 (id=670): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000007e00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.787761907s ago: executing program 4 (id=673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000008b000000050010000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, &(0x7f00000002c0), &(0x7f0000000380)=""/107}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000040)}, 0x20) 1.769517557s ago: executing program 4 (id=674): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xb) chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) 1.697696199s ago: executing program 5 (id=675): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=ANY=[], 0xdd12}], 0x1, 0x0, 0x0, 0x30008803}, 0x44040) r0 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2, 0x1, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.581235062s ago: executing program 5 (id=676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r1 = openat(r0, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x15) 1.580685872s ago: executing program 4 (id=678): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0x1, 0x255, 0x0, r2}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x126, {0x0, 0x0, 0x0, 0x4, 0x8}}) 1.555187952s ago: executing program 5 (id=679): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f011a6df5211b0000000006241a0000000905810300020000000904010000020d00200904010102020d0000090582020002000004090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c, {0x30, 0x10, 0x10, 0x10, 0x9881, 0xe, 0x3500, 0x10, 0x12, 0x3, 0xd, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.399603956s ago: executing program 4 (id=682): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe80000000000000000000000000000f00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000000000004400050000000000000000000000ffff7f000001000000003c00"], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 578.884086ms ago: executing program 4 (id=686): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 578.326726ms ago: executing program 8 (id=696): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x57, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x21, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x21, 0x0, @gue={{0x2}, "4a3f5ebfaebeaee64abc2bb306ceb19bf2"}}}}}}}, 0x0) 565.160006ms ago: executing program 8 (id=688): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x4007, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) 499.962498ms ago: executing program 8 (id=689): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "310002", 0x10, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 499.776578ms ago: executing program 8 (id=690): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b01b4550182185f57586b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 178.424425ms ago: executing program 0 (id=697): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 71.868597ms ago: executing program 0 (id=698): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d84bd8191f589ecd2f50cc9b8e07f76ea782d8cecdf9ec"}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, &(0x7f0000000280)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 71.540817ms ago: executing program 0 (id=699): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000000)={[{@data_journal}, {@init_itable}]}, 0x2, 0x573, &(0x7f0000001400)="$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") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) epoll_create(0x4002008) close(r0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0xf097, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280), 0x0) 71.367317ms ago: executing program 0 (id=700): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) 27.256928ms ago: executing program 0 (id=701): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x1b4) ftruncate(r1, 0x6000000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0xc, r0, 0xc000, 0x2, 0x3, 0x4}) 0s ago: executing program 0 (id=702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0x60000, 0x58000, 0xe, 0x5, 0x1, 0x7, 0x4, 0xc2, 0x0, 0x84, 0x0, 0x7}, {0x4000, 0x8080000, 0xa, 0x3, 0x3, 0x7, 0x6, 0x10, 0x1, 0x2, 0xf7, 0x5}, {0xa000, 0xeeef0000, 0xd, 0x4, 0xd7, 0x81, 0x3, 0x13, 0x3, 0x4, 0x95, 0x5e}, {0xd000, 0x30000, 0xa, 0x7, 0x6, 0x40, 0x2, 0xfd, 0xfd, 0x29, 0x19, 0x9}, {0xeeeea000, 0xfec00000, 0xd, 0xb, 0x5, 0x1, 0x7, 0xf1, 0x9, 0x6c, 0x2, 0x2}, {0x4000, 0x2000, 0xe, 0x2, 0x0, 0x2, 0x4, 0x5, 0x3, 0xe, 0x6, 0xa}, {0x4000, 0x60000, 0xb, 0x0, 0xcd, 0xc8, 0x5, 0x2, 0x9, 0xaa, 0xff}, {0x1, 0x200000, 0xe, 0x2, 0x13, 0x7f, 0x3, 0x0, 0x7, 0x6, 0xfc, 0x7a}, {0x100000, 0x105}, {0xffffffff, 0x9}, 0x80000003, 0x0, 0x6000, 0x442021, 0x5, 0xf800, 0xfec00000, 0x1, [0x6, 0x2, 0x9, 0x7]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) kernel console output (not intermixed with test programs): [ 35.378415][ T688] __x64_sys_bpf+0x7c/0x90 [ 35.382922][ T688] x64_sys_call+0x488/0x9a0 [ 35.387435][ T688] do_syscall_64+0x4c/0xa0 [ 35.391963][ T688] ? clear_bhb_loop+0x30/0x80 [ 35.396661][ T688] ? clear_bhb_loop+0x30/0x80 [ 35.401355][ T688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 35.407252][ T688] RIP: 0033:0x7f56a159e159 [ 35.411852][ T688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.431647][ T688] RSP: 002b:00007f56a253e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 35.440086][ T688] RAX: ffffffffffffffda RBX: 00007f56a1825fa0 RCX: 00007f56a159e159 [ 35.448156][ T688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 35.456227][ T688] RBP: 00007f56a163503b R08: 0000000000000000 R09: 0000000000000000 [ 35.464203][ T688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.472364][ T688] R13: 00007f56a1826038 R14: 00007f56a1825fa0 R15: 00007ffdae4108b8 [ 35.480354][ T688] [ 35.486188][ T60] usb 4-1: USB disconnect, device number 2 [ 35.597965][ T698] loop0: detected capacity change from 0 to 2048 [ 35.641536][ T698] GPT:first_usable_lbas don't match. [ 35.646971][ T698] GPT:34 != 290 [ 35.650719][ T698] GPT: Use GNU Parted to correct GPT errors. [ 35.656818][ T698] loop0: p1 p2 p3 [ 35.728475][ T700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 35.756914][ T466] udevd[466]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 35.768679][ T310] udevd[310]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 35.783864][ T343] udevd[343]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 35.797838][ T700] device gretap0 entered promiscuous mode [ 35.812852][ T704] device gretap1 entered promiscuous mode [ 35.888079][ T309] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 35.910737][ T309] dm9601 6-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 06:39:64:f4:d4:c5 [ 35.939991][ T309] usb 6-1: USB disconnect, device number 2 [ 35.964200][ T309] dm9601 6-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet [ 36.277537][ T736] loop4: detected capacity change from 0 to 1024 [ 36.319767][ T736] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 36.340663][ T736] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 36.348808][ T736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.444259][ T288] EXT4-fs (loop4): unmounting filesystem. [ 36.770458][ T702] loop0: detected capacity change from 0 to 131072 [ 36.798258][ T702] F2FS-fs (loop0): Test dummy encryption mode enabled [ 36.829910][ T702] F2FS-fs (loop0): invalid crc value [ 36.860348][ T773] SELinux: failed to load policy [ 36.866723][ T702] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.906089][ T778] loop3: detected capacity change from 0 to 512 [ 36.939136][ T778] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.960900][ T778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.964748][ T768] loop4: detected capacity change from 0 to 40427 [ 36.972816][ T778] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.977786][ T309] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 36.991670][ T778] EXT4-fs (loop3): 1 truncate cleaned up [ 37.004407][ T702] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.007703][ T711] loop1: detected capacity change from 0 to 131072 [ 37.012239][ T778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 37.030053][ T711] F2FS-fs (loop1): invalid crc value [ 37.039444][ T768] F2FS-fs (loop4): invalid crc value [ 37.075531][ T768] F2FS-fs (loop4): Found nat_bits in checkpoint [ 37.117026][ T711] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.163289][ T291] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 37.179458][ T309] usb 6-1: Using ep0 maxpacket: 16 [ 37.188019][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.204029][ T768] F2FS-fs (loop4): Start checkpoint disabled! [ 37.210456][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.220314][ T711] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 37.221254][ T291] EXT4-fs (loop3): unmounting filesystem. [ 37.240093][ T768] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 37.263693][ T768] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 37.267428][ T788] loop3: detected capacity change from 0 to 512 [ 37.279497][ T309] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 37.321066][ T788] EXT4-fs: Ignoring removed orlov option [ 37.322490][ T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.333577][ T788] EXT4-fs error (device loop3): ext4_get_journal_inode:5749: comm syz.3.155: inode #1191182336: comm syz.3.155: iget: illegal inode # [ 37.355310][ T309] usb 6-1: config 0 descriptor?? [ 37.377913][ T788] EXT4-fs (loop3): no journal found [ 37.388014][ T788] EXT4-fs (loop3): can't get journal size [ 37.406370][ T790] loop0: detected capacity change from 0 to 512 [ 37.416424][ T788] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 37.449942][ T288] syz-executor: attempt to access beyond end of device [ 37.449942][ T288] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 37.465570][ T790] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.154: inode has both inline data and extents flags [ 37.469811][ T788] EXT4-fs (loop3): failed to initialize system zone (-22) [ 37.486873][ T788] EXT4-fs (loop3): mount failed [ 37.499802][ T790] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.154: couldn't read orphan inode 15 (err -117) [ 37.509535][ T288] syz-executor: attempt to access beyond end of device [ 37.509535][ T288] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 37.526933][ T790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.556040][ T338] kworker/u4:4: attempt to access beyond end of device [ 37.556040][ T338] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 37.610641][ T790] loop0: detected capacity change from 512 to 64 [ 37.643339][ T289] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 37.718054][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.746112][ T801] loop3: detected capacity change from 0 to 1024 [ 37.759808][ T801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.776171][ T309] apple 0003:05AC:024B.0004: fixing up MacBook JIS keyboard report descriptor [ 37.790520][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 37.790536][ T28] audit: type=1400 audit(1789038417.050:266): avc: denied { read write } for pid=802 comm="syz.1.160" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.832581][ T801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 37.841997][ T309] apple 0003:05AC:024B.0004: unknown global tag 0xe [ 37.848902][ T309] apple 0003:05AC:024B.0004: item 0 1 1 14 parsing failed [ 37.856389][ T28] audit: type=1400 audit(1789038417.080:267): avc: denied { open } for pid=802 comm="syz.1.160" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.884828][ T28] audit: type=1400 audit(1789038417.080:268): avc: denied { ioctl } for pid=802 comm="syz.1.160" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.919640][ T309] apple 0003:05AC:024B.0004: parse failed [ 37.922405][ T28] audit: type=1400 audit(1789038417.110:269): avc: denied { create } for pid=802 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.943208][ T309] apple: probe of 0003:05AC:024B.0004 failed with error -22 [ 37.946961][ T28] audit: type=1400 audit(1789038417.110:270): avc: denied { connect } for pid=802 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.973818][ T291] EXT4-fs (loop3): unmounting filesystem. [ 37.993058][ T28] audit: type=1400 audit(1789038417.170:271): avc: denied { setopt } for pid=802 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.018028][ T309] usb 6-1: USB disconnect, device number 3 [ 38.040507][ T817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 38.187557][ T828] loop5: detected capacity change from 0 to 7 [ 38.219899][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.229810][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.237855][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.247289][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.256442][ T470] loop5: unable to read partition table [ 38.263338][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.272619][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.281117][ T8] device bridge_slave_1 left promiscuous mode [ 38.281836][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.287350][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.296482][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.311723][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.323589][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.331781][ T828] loop5: unable to read partition table [ 38.331914][ T8] device bridge_slave_0 left promiscuous mode [ 38.338483][ T828] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰•¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ`ÉæÖã«…ˆ) failed (rc=-5) [ 38.344144][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.344175][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.350396][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.357682][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.390795][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.399698][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.410109][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.420284][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.420529][ T8] device veth1_macvtap left promiscuous mode [ 38.429680][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.436543][ T8] device veth0_vlan left promiscuous mode [ 38.451358][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 38.460735][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 38.625885][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.633046][ T824] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.641819][ T824] device bridge_slave_0 entered promiscuous mode [ 38.659926][ T824] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.681186][ T824] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.688781][ T824] device bridge_slave_1 entered promiscuous mode [ 38.769484][ T833] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.777016][ T833] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.790052][ T833] device bridge_slave_0 entered promiscuous mode [ 38.811965][ T833] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.830823][ T833] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.845587][ T833] device bridge_slave_1 entered promiscuous mode [ 38.969500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.977278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.994955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.004169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.013057][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.020325][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.028400][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.037907][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.046942][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.047592][ T877] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 39.054025][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.075031][ T877] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 39.087499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.095886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.100182][ T877] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 39.103874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.112775][ T877] EXT4-fs (loop5): unmounting filesystem. [ 39.122177][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.134930][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.144049][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.151265][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.159343][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.167746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.182581][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.189680][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.197484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.205846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.214154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.222514][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.222678][ T877] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 39.230671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.251827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.264568][ T824] device veth0_vlan entered promiscuous mode [ 39.278797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.286924][ T28] audit: type=1400 audit(1789038418.540:272): avc: denied { setattr } for pid=876 comm="syz.5.173" name="file0" dev="loop5" ino=1048605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.292766][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.317901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.351866][ T882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.366501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.381477][ T882] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 39.390296][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.398205][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.408083][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.416500][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.425141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.425913][ T882] EXT4-fs (loop5): 1 truncate cleaned up [ 39.433338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.439290][ T882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 39.448215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.465565][ T824] device veth1_macvtap entered promiscuous mode [ 39.482363][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.491053][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.502250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.509708][ T28] audit: type=1400 audit(1789038418.760:273): avc: denied { setattr } for pid=881 comm="syz.5.175" name="11000000000000000000000000000000" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.537109][ T28] audit: type=1400 audit(1789038418.760:274): avc: denied { link } for pid=881 comm="syz.5.175" name="11000000000000000000000000000000" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.537803][ T601] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 39.564972][ T833] device veth0_vlan entered promiscuous mode [ 39.583246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.593070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.601672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.604682][ T601] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 39.611333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.624854][ T601] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 39.633658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.656941][ T601] EXT4-fs (loop5): unmounting filesystem. [ 39.662654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.694945][ T28] audit: type=1400 audit(1789038418.950:275): avc: denied { mount } for pid=824 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.720998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.728616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.753326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.770209][ T833] device veth1_macvtap entered promiscuous mode [ 39.784394][ T898] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 39.811275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.831318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.853252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.869921][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.901510][ T8] device bridge_slave_1 left promiscuous mode [ 39.907875][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.929987][ T8] device bridge_slave_0 left promiscuous mode [ 39.936963][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.960067][ T8] device veth1_macvtap left promiscuous mode [ 39.966489][ T8] device veth0_vlan left promiscuous mode [ 40.004559][ T905] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 4000000000 [ 40.199564][ T39] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 40.266089][ T896] F2FS-fs (loop3): Test dummy encryption mode enabled [ 40.273643][ T896] F2FS-fs (loop3): invalid crc value [ 40.281369][ T896] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.326357][ T896] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.334117][ T309] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 40.384971][ T39] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.396810][ T896] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 40.408793][ T39] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.434892][ T39] usb 6-1: config 0 interface 0 has no altsetting 0 [ 40.442075][ T39] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 40.451789][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.464378][ T39] usb 6-1: config 0 descriptor?? [ 40.532623][ T309] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 40.546234][ T309] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 40.560076][ T309] usb 7-1: config 0 interface 0 has no altsetting 0 [ 40.566871][ T309] usb 7-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 40.577976][ T309] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.590922][ T309] usb 7-1: config 0 descriptor?? [ 40.659172][ T935] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 40.742805][ T8] tipc: Left network mode [ 40.895407][ T39] hid-multitouch 0003:0EEF:72C4.0005: ignoring exceeding usage max [ 40.914076][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.932573][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.941194][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.953208][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.961676][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.970023][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.977988][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.986675][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 40.995916][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 41.004503][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 41.011090][ T309] wacom 0003:056A:0013.0006: ignoring exceeding usage max [ 41.030646][ T965] using random self ethernet address [ 41.032456][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 41.036561][ T965] using random host ethernet address [ 41.044668][ T39] hid-multitouch 0003:0EEF:72C4.0005: unknown main item tag 0x0 [ 41.065300][ T309] wacom 0003:056A:0013.0006: ignoring exceeding usage max [ 41.077135][ T309] wacom 0003:056A:0013.0006: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 41.087806][ T39] hid-multitouch 0003:0EEF:72C4.0005: unbalanced collection at end of report description [ 41.095332][ T959] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.110372][ T309] wacom 0003:056A:0013.0006: hidraw0: USB HID v0.81 Device [HID 056a:0013] on usb-dummy_hcd.6-1/input0 [ 41.113840][ T959] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.136799][ T959] device bridge_slave_0 entered promiscuous mode [ 41.140073][ T39] hid-multitouch: probe of 0003:0EEF:72C4.0005 failed with error -22 [ 41.146388][ T959] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.162267][ T959] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.170593][ T959] device bridge_slave_1 entered promiscuous mode [ 41.180663][ T970] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 41.190348][ T903] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 41.197520][ T309] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0013.0006/input/input5 [ 41.236060][ T39] usb 6-1: USB disconnect, device number 4 [ 41.242247][ T309] usb 7-1: USB disconnect, device number 2 [ 41.310661][ T8] device bridge_slave_1 left promiscuous mode [ 41.328729][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.349929][ T8] device bridge_slave_0 left promiscuous mode [ 41.356319][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.384945][ T8] device veth1_macvtap left promiscuous mode [ 41.393128][ T8] device veth0_vlan left promiscuous mode [ 41.563267][ T989] input: syz0 as /devices/virtual/input/input8 [ 41.612177][ T991] set_capacity_and_notify: 7 callbacks suppressed [ 41.612200][ T991] loop3: detected capacity change from 0 to 512 [ 41.629217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.637591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.655083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.670494][ T991] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.207: inode has both inline data and extents flags [ 41.677187][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.692903][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.699977][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.707942][ T991] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.207: couldn't read orphan inode 15 (err -117) [ 41.722341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.731399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.739830][ T991] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.765044][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.772443][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.800264][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.810327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.830129][ T994] netlink: 16 bytes leftover after parsing attributes in process `syz.6.208'. [ 41.839121][ T994] netlink: 16 bytes leftover after parsing attributes in process `syz.6.208'. [ 41.848690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.860406][ T991] loop3: detected capacity change from 512 to 64 [ 41.875517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.895935][ T959] device veth0_vlan entered promiscuous mode [ 41.919906][ T601] EXT4-fs (loop5): unmounting filesystem. [ 41.926398][ T291] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 41.930796][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.950089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.970069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.970127][ T999] loop5: detected capacity change from 0 to 256 [ 41.992666][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.998833][ T999] exfat: Deprecated parameter 'utf8' [ 42.014284][ T291] EXT4-fs (loop3): unmounting filesystem. [ 42.014475][ T959] device veth1_macvtap entered promiscuous mode [ 42.028603][ T999] exfat: Deprecated parameter 'namecase' [ 42.039541][ T999] exfat: Deprecated parameter 'namecase' [ 42.053007][ T980] loop7: detected capacity change from 0 to 131072 [ 42.056404][ T999] exfat: Deprecated parameter 'utf8' [ 42.063340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.086275][ T999] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 42.086682][ T980] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945) [ 42.115066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.143207][ T980] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 42.152668][ T980] F2FS-fs (loop7): invalid crc value [ 42.164572][ T308] tipc: Left network mode [ 42.216955][ T980] F2FS-fs (loop7): Found nat_bits in checkpoint [ 42.281508][ T980] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 42.288779][ T980] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 42.658897][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.699450][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.707060][ T1015] device bridge_slave_0 entered promiscuous mode [ 42.726496][ T1020] loop8: detected capacity change from 0 to 2048 [ 42.761048][ T308] device bridge_slave_1 left promiscuous mode [ 42.767623][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.779973][ T1020] EXT4-fs: Ignoring removed i_version option [ 42.799954][ T308] device bridge_slave_0 left promiscuous mode [ 42.806406][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.830786][ T308] device veth1_macvtap left promiscuous mode [ 42.837243][ T308] device veth0_vlan left promiscuous mode [ 42.890506][ T1020] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 42.899312][ T1020] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.001027][ T1020] fs-verity: sha512 using implementation "sha512-avx2" [ 43.045225][ T1020] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only [ 43.085270][ T1020] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 43.099036][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.107810][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.123037][ T1015] device bridge_slave_1 entered promiscuous mode [ 43.126749][ T1020] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 43.146201][ T997] loop6: detected capacity change from 0 to 131072 [ 43.163897][ T997] F2FS-fs (loop6): invalid crc value [ 43.204270][ T997] F2FS-fs (loop6): Found nat_bits in checkpoint [ 43.252526][ T959] EXT4-fs (loop8): unmounting filesystem. [ 43.271999][ T1007] loop5: detected capacity change from 0 to 131072 [ 43.299496][ T997] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 43.317827][ T1007] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 43.325434][ T1024] loop7: detected capacity change from 0 to 40427 [ 43.358841][ T1007] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 43.380075][ T1024] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 43.398312][ T1007] F2FS-fs (loop5): invalid crc value [ 43.414882][ T1024] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 43.430440][ T1024] F2FS-fs (loop7): Image doesn't support compression [ 43.440322][ T1024] F2FS-fs (loop7): Image doesn't support compression [ 43.441203][ T1007] F2FS-fs (loop5): Found nat_bits in checkpoint [ 43.459748][ T1024] F2FS-fs (loop7): invalid crc value [ 43.465596][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.475729][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.500082][ T1007] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 43.512517][ T1024] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 43.512683][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.527195][ T1007] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 43.533125][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.551025][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.558533][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.576290][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.599863][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.608306][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.609898][ T1024] F2FS-fs (loop7): Start checkpoint disabled! [ 43.615976][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.630935][ T1007] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, max: 903 [ 43.642032][ T1024] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 43.649877][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.658510][ T1024] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 43.666595][ T1037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.220'. [ 43.681776][ T1024] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 43.751902][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.760477][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.787702][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.808794][ T1015] device veth0_vlan entered promiscuous mode [ 43.831312][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.845449][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.847582][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 43.847598][ T28] audit: type=1400 audit(1789038423.100:301): avc: denied { mount } for pid=1040 comm="syz.8.224" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 43.860032][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.922969][ T28] audit: type=1400 audit(1789038423.150:302): avc: denied { search } for pid=1040 comm="syz.8.224" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.923999][ T1015] device veth1_macvtap entered promiscuous mode [ 43.948156][ T28] audit: type=1400 audit(1789038423.150:303): avc: denied { read } for pid=1040 comm="syz.8.224" name="buffer_size_kb" dev="tracefs" ino=13302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 43.982915][ T28] audit: type=1400 audit(1789038423.150:304): avc: denied { open } for pid=1040 comm="syz.8.224" path="/7/tracefs_dir/buffer_size_kb" dev="tracefs" ino=13302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 43.998866][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.012029][ T28] audit: type=1400 audit(1789038423.170:305): avc: denied { unmount } for pid=959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 44.045402][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.059562][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 44.068169][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.078493][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.192110][ T1061] loop9: detected capacity change from 0 to 512 [ 44.199150][ T1061] EXT4-fs: Ignoring removed nobh option [ 44.205425][ T496] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 44.235685][ T1061] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 44.245838][ T1061] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.257374][ T28] audit: type=1400 audit(1789038423.510:306): avc: denied { load_policy } for pid=1063 comm="syz.5.231" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.274765][ T1065] SELinux: failed to load policy [ 44.279192][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 44.294847][ T1061] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #2: comm syz.9.230: corrupted inode contents [ 44.307817][ T60] usb 8-1: unable to get BOS descriptor or descriptor too short [ 44.317857][ T1061] EXT4-fs error (device loop9): ext4_dirty_inode:6158: inode #2: comm syz.9.230: mark_inode_dirty error [ 44.329829][ T60] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 44.342000][ T1068] device batadv_slave_1 entered promiscuous mode [ 44.346193][ T1061] EXT4-fs error (device loop9): ext4_do_update_inode:5281: inode #2: comm syz.9.230: corrupted inode contents [ 44.348550][ T60] usb 8-1: can't read configurations, error -71 [ 44.361256][ T1061] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #2: comm syz.9.230: mark_inode_dirty error [ 44.368254][ T1067] device batadv_slave_1 left promiscuous mode [ 44.390498][ T496] usb 9-1: config 6 interface 0 has no altsetting 0 [ 44.406199][ T1061] overlayfs: './file0' not a directory [ 44.407300][ T1070] netlink: 27 bytes leftover after parsing attributes in process `syz.5.233'. [ 44.412422][ T496] usb 9-1: New USB device found, idVendor=e582, idProduct=416b, bcdDevice=d4.3f [ 44.436239][ T496] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.445311][ T1061] EXT4-fs (loop9): unmounting filesystem. [ 44.451662][ T496] usb 9-1: Product: syz [ 44.455920][ T496] usb 9-1: Manufacturer: syz [ 44.460900][ T496] usb 9-1: SerialNumber: syz [ 44.493969][ T1076] loop9: detected capacity change from 0 to 2048 [ 44.517283][ T1076] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 44.526670][ T1076] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.599760][ T1080] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.236: bg 0: block 345: padding at end of block bitmap is not set [ 44.614899][ T1080] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117 [ 44.629410][ T1080] EXT4-fs (loop9): This should not happen!! Data will be lost [ 44.629410][ T1080] [ 44.640810][ T308] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 44.656567][ T308] EXT4-fs (loop9): This should not happen!! Data will be lost [ 44.656567][ T308] [ 44.666723][ T308] EXT4-fs (loop9): Total free blocks count 0 [ 44.674351][ T308] EXT4-fs (loop9): Free/Dirty block details [ 44.681106][ T308] EXT4-fs (loop9): free_blocks=0 [ 44.686492][ T308] EXT4-fs (loop9): dirty_blocks=1952 [ 44.692760][ T308] EXT4-fs (loop9): Block reservation details [ 44.821523][ T43] kworker/u4:2: attempt to access beyond end of device [ 44.821523][ T43] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.871178][ T496] usb-storage 9-1:6.0: USB Mass Storage device detected [ 44.957173][ T1092] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 44.967173][ T1092] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.968302][ T496] usb 9-1: USB disconnect, device number 2 [ 44.996589][ T1092] EXT4-fs error (device loop7): ext4_map_blocks:747: inode #15: block 3: comm syz.7.239: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.015888][ T1092] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 45.028763][ T1092] EXT4-fs (loop7): This should not happen!! Data will be lost [ 45.028763][ T1092] [ 45.041644][ T1092] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #15: block 3: comm syz.7.239: lblock 3 mapped to illegal pblock 3 (length 1) [ 45.067652][ T833] EXT4-fs (loop7): unmounting filesystem. [ 45.111010][ T1103] FAT-fs (loop7): Directory bread(block 64) failed [ 45.117814][ T1103] FAT-fs (loop7): Directory bread(block 65) failed [ 45.124954][ T1103] FAT-fs (loop7): Directory bread(block 66) failed [ 45.129490][ T309] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 45.132066][ T1103] FAT-fs (loop7): Directory bread(block 67) failed [ 45.146604][ T1103] FAT-fs (loop7): Directory bread(block 68) failed [ 45.153539][ T1103] FAT-fs (loop7): Directory bread(block 69) failed [ 45.160751][ T1103] FAT-fs (loop7): Directory bread(block 70) failed [ 45.167651][ T1103] FAT-fs (loop7): Directory bread(block 71) failed [ 45.175891][ T1103] FAT-fs (loop7): Directory bread(block 72) failed [ 45.182613][ T1103] FAT-fs (loop7): Directory bread(block 73) failed [ 45.192262][ T28] audit: type=1400 audit(1789038424.450:307): avc: denied { mount } for pid=1102 comm="syz.7.244" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.277706][ T28] audit: type=1326 audit(1789038424.530:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1071 comm="syz.5.234" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e8d9e159 code=0x7fc00000 [ 45.319582][ T309] usb 10-1: Using ep0 maxpacket: 16 [ 45.326701][ T309] usb 10-1: unable to get BOS descriptor or descriptor too short [ 45.336097][ T309] usb 10-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.350446][ T309] usb 10-1: config 1 interface 0 has no altsetting 0 [ 45.366334][ T309] usb 10-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.40 [ 45.380082][ T309] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.383230][ T1106] syz.7.244: attempt to access beyond end of device [ 45.383230][ T1106] loop7: rw=2049, sector=1232, nr_sectors = 536 limit=256 [ 45.388729][ T309] usb 10-1: Product: syz [ 45.405112][ T1106] syz.7.244: attempt to access beyond end of device [ 45.405112][ T1106] loop7: rw=2049, sector=1800, nr_sectors = 128 limit=256 [ 45.411997][ T309] usb 10-1: Manufacturer: syz [ 45.422412][ T1106] syz.7.244: attempt to access beyond end of device [ 45.422412][ T1106] loop7: rw=2049, sector=1960, nr_sectors = 312 limit=256 [ 45.431203][ T309] usb 10-1: SerialNumber: syz [ 45.529640][ T28] audit: type=1400 audit(1789038424.790:309): avc: denied { unmount } for pid=833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.553902][ T308] kworker/u4:3: attempt to access beyond end of device [ 45.553902][ T308] loop7: rw=1, sector=1192, nr_sectors = 40 limit=256 [ 45.577912][ T308] kworker/u4:3: attempt to access beyond end of device [ 45.577912][ T308] loop7: rw=1, sector=2272, nr_sectors = 16640 limit=256 [ 45.607610][ T308] kworker/u4:3: attempt to access beyond end of device [ 45.607610][ T308] loop7: rw=1, sector=18912, nr_sectors = 14888 limit=256 [ 45.690260][ T28] audit: type=1400 audit(1789038424.950:310): avc: denied { connect } for pid=1120 comm="syz.8.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.812192][ T1130] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 45.829576][ T1130] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.877628][ T959] EXT4-fs (loop8): unmounting filesystem. [ 45.932614][ T1138] kvm [1137]: vcpu3, guest rIP: 0x913b Unhandled WRMSR(0x11e) = 0x0 [ 46.010441][ T1147] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 46.025383][ T1147] EXT4-fs (loop8): 1 truncate cleaned up [ 46.032903][ T1147] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 46.057110][ T1147] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.059582][ T309] usbhid 10-1:1.0: can't add hid device: -71 [ 46.079085][ T309] usbhid: probe of 10-1:1.0 failed with error -71 [ 46.089328][ T309] usb 10-1: USB disconnect, device number 2 [ 46.118134][ T1147] EXT4-fs (loop8): Remounting filesystem read-only [ 46.145376][ T959] EXT4-fs (loop8): unmounting filesystem. [ 46.261021][ T1165] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 46.311075][ T1165] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 46.329052][ T1165] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 482 with error 28 [ 46.342322][ T1165] EXT4-fs (loop7): This should not happen!! Data will be lost [ 46.342322][ T1165] [ 46.352434][ T1165] EXT4-fs (loop7): Total free blocks count 0 [ 46.358536][ T1165] EXT4-fs (loop7): Free/Dirty block details [ 46.364910][ T1165] EXT4-fs (loop7): free_blocks=4096 [ 46.370344][ T1165] EXT4-fs (loop7): dirty_blocks=512 [ 46.375876][ T1165] EXT4-fs (loop7): Block reservation details [ 46.382112][ T1165] EXT4-fs (loop7): i_reserved_data_blocks=32 [ 46.403231][ T8] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 46.489475][ T496] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 46.679427][ T496] usb 9-1: Using ep0 maxpacket: 8 [ 46.686385][ T496] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.708697][ T496] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 46.722162][ T496] usb 9-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 46.730164][ T1201] set_capacity_and_notify: 5 callbacks suppressed [ 46.730184][ T1201] loop5: detected capacity change from 0 to 512 [ 46.731555][ T496] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.752357][ T1199] Bluetooth: ISO socket layer initialized [ 46.759212][ T496] usb 9-1: config 0 descriptor?? [ 46.781045][ T1201] EXT4-fs error (device loop5): __ext4_iget:5104: inode #11: block 1: comm syz.5.284: invalid block [ 46.792094][ T60] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 46.799957][ T1201] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.284: couldn't read orphan inode 11 (err -117) [ 46.814004][ T1201] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 46.831943][ T1201] EXT4-fs (loop5): shut down requested (2) [ 46.852656][ T601] EXT4-fs (loop5): unmounting filesystem. [ 46.989484][ T60] usb 8-1: Using ep0 maxpacket: 32 [ 46.996586][ T60] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 47.009541][ T60] usb 8-1: config 0 has no interface number 0 [ 47.016446][ T60] usb 8-1: config 0 interface 184 has no altsetting 0 [ 47.029337][ T60] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 47.040247][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.050484][ T60] usb 8-1: Product: syz [ 47.057354][ T60] usb 8-1: Manufacturer: syz [ 47.063079][ T60] usb 8-1: SerialNumber: syz [ 47.070874][ T60] usb 8-1: config 0 descriptor?? [ 47.081331][ T60] smsc75xx v1.0.0 [ 47.091270][ T1220] loop9: detected capacity change from 0 to 256 [ 47.170860][ T496] wacom 0003:056A:00B8.0007: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 47.185707][ T496] wacom 0003:056A:00B8.0007: hidraw0: USB HID v0.02 Joystick [HID 056a:00b8] on usb-dummy_hcd.8-1/input0 [ 47.200006][ T496] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:00B8.0007/input/input9 [ 47.330311][ T6] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 47.347881][ T1235] loop9: detected capacity change from 0 to 1024 [ 47.391900][ T1235] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 47.395744][ T19] usb 9-1: USB disconnect, device number 3 [ 47.423795][ T1015] EXT4-fs (loop9): unmounting filesystem. [ 47.429999][ T496] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 47.484393][ T1242] loop9: detected capacity change from 0 to 4096 [ 47.495305][ T1242] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.510046][ T1242] EXT4-fs (loop9): Test dummy encryption mode enabled [ 47.526619][ T1242] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 47.548157][ T1242] System zones: 0-5 [ 47.549649][ T6] usb 6-1: unable to get BOS descriptor or descriptor too short [ 47.555492][ T1242] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 47.567369][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.604547][ T6] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.615759][ T1015] EXT4-fs (loop9): unmounting filesystem. [ 47.616818][ T6] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 47.632650][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.643794][ T6] usb 6-1: Product: syz [ 47.648404][ T6] usb 6-1: Manufacturer: syz [ 47.654342][ T6] usb 6-1: SerialNumber: syz [ 47.659524][ T496] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 47.668544][ T496] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.681167][ T496] usb 7-1: config 0 has no interface number 0 [ 47.687662][ T60] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 47.699862][ T6] usb 6-1: selecting invalid altsetting 1 [ 47.708095][ T6] usb 6-1: unit 6 not found! [ 47.712756][ T60] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 47.723126][ T496] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 47.734000][ T496] usb 7-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 47.745300][ T496] usb 7-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 47.757715][ T496] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.769328][ T496] usb 7-1: config 0 descriptor?? [ 47.939414][ T307] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 47.961219][ T1247] loop8: detected capacity change from 0 to 512 [ 47.968404][ T1247] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 47.982502][ T1247] EXT4-fs (loop8): 1 truncate cleaned up [ 47.996802][ T1247] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 48.043951][ T959] EXT4-fs (loop8): unmounting filesystem. [ 48.130794][ T307] usb 10-1: config 0 has no interfaces? [ 48.138577][ T307] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.151794][ T307] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.160711][ T60] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 48.162434][ T307] usb 10-1: Product: syz [ 48.177625][ T60] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 48.184404][ T307] usb 10-1: Manufacturer: syz [ 48.188687][ T60] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 48.194897][ T307] usb 10-1: SerialNumber: syz [ 48.205796][ T1257] loop8: detected capacity change from 0 to 256 [ 48.216065][ T60] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 48.216722][ T307] usb 10-1: config 0 descriptor?? [ 48.242155][ T60] usb 8-1: USB disconnect, device number 4 [ 48.353094][ T1259] 9pnet: p9_errstr2errno: server reported unknown error ¦î)9nGqÅRóð [ 48.468374][ T307] usb 10-1: USB disconnect, device number 3 [ 48.503347][ T6] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 48.534353][ T496] usb 7-1: USB disconnect, device number 3 [ 48.544005][ T6] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 48.555356][ T6] usb 6-1: USB disconnect, device number 5 [ 48.590106][ T1271] loop6: detected capacity change from 0 to 2048 [ 48.614052][ T1271] loop6: p1 p2 < > p3 < p5 p6 > p4 [ 48.621106][ T1271] loop6: partition table partially beyond EOD, truncated [ 48.630322][ T1271] loop6: p2 start 4278190080 is beyond EOD, truncated [ 48.638095][ T1271] loop6: p4 size 8192 extends beyond EOD, truncated [ 48.653072][ T1271] loop6: p6 size 8192 extends beyond EOD, truncated [ 48.747639][ T466] udevd[466]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 48.763121][ T1285] loop8: detected capacity change from 0 to 512 [ 48.772846][ T343] udevd[343]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 48.775676][ T310] udevd[310]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 48.800054][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.826162][ T343] udevd[343]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 48.839017][ T1285] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 48.852280][ T466] udevd[466]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 48.868502][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 48.914171][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 48.914188][ T28] audit: type=1400 audit(1789038428.170:336): avc: denied { read } for pid=1284 comm="syz.8.319" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="overlay" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.969456][ T6] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 48.978315][ T959] EXT4-fs (loop8): unmounting filesystem. [ 48.982079][ T28] audit: type=1400 audit(1789038428.230:337): avc: denied { unlink } for pid=959 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 49.029566][ T1245] syz.9.301 (1245) used greatest stack depth: 21256 bytes left [ 49.061102][ T28] audit: type=1400 audit(1789038428.320:338): avc: denied { write } for pid=1298 comm="syz.8.323" name="filter" dev="tracefs" ino=2506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 49.115380][ T1305] loop8: detected capacity change from 0 to 512 [ 49.130397][ T1305] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.137601][ T1305] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 49.148366][ T1305] EXT4-fs (loop8): 1 truncate cleaned up [ 49.154489][ T1305] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 49.167727][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.197205][ T959] EXT4-fs (loop8): unmounting filesystem. [ 49.215554][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.226454][ T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.250139][ T6] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.265038][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.274981][ T6] usb 8-1: config 0 descriptor?? [ 49.317756][ T1316] loop8: detected capacity change from 0 to 512 [ 49.324581][ T28] audit: type=1400 audit(1789038428.580:339): avc: denied { write } for pid=1317 comm="syz.9.333" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.328665][ T1318] EXT4-fs: Ignoring removed oldalloc option [ 49.354522][ T1318] EXT4-fs: Ignoring removed orlov option [ 49.382010][ T1316] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 49.391451][ T1316] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.422493][ T1318] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 49.453293][ T959] EXT4-fs (loop8): unmounting filesystem. [ 49.517486][ T1015] EXT4-fs (loop9): unmounting filesystem. [ 49.688625][ T6] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 49.711245][ T6] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 49.786152][ T1341] F2FS-fs (loop9): invalid crc value [ 49.800320][ T1341] F2FS-fs (loop9): Found nat_bits in checkpoint [ 49.849112][ T1337] F2FS-fs (loop5): invalid crc value [ 49.858038][ T1339] F2FS-fs (loop8): invalid crc value [ 49.869343][ T1337] F2FS-fs (loop5): Found nat_bits in checkpoint [ 49.891500][ T1339] F2FS-fs (loop8): Found nat_bits in checkpoint [ 49.897326][ T1341] F2FS-fs (loop9): Start checkpoint disabled! [ 49.927652][ T1341] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 49.940063][ T1341] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 49.969319][ T1337] F2FS-fs (loop5): Start checkpoint disabled! [ 49.973189][ T1339] F2FS-fs (loop8): Start checkpoint disabled! [ 49.985000][ T1337] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 49.985018][ T6] usb 8-1: USB disconnect, device number 5 [ 50.008336][ T28] audit: type=1400 audit(1789038429.260:340): avc: denied { read write open } for pid=1340 comm="syz.9.341" path="/26/bus/file1" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.031107][ T1337] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 50.034559][ T1339] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 50.074527][ T43] kworker/u4:2: attempt to access beyond end of device [ 50.074527][ T43] loop9: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 50.089647][ T1339] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 50.109476][ T43] kworker/u4:2: attempt to access beyond end of device [ 50.109476][ T43] loop9: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 50.133521][ T1337] syz.5.340: attempt to access beyond end of device [ 50.133521][ T1337] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 50.150842][ T28] audit: type=1400 audit(1789038429.410:341): avc: denied { ioctl } for pid=1338 comm="syz.8.342" path="/38/file0/file0" dev="loop8" ino=10 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.177038][ T28] audit: type=1400 audit(1789038429.420:342): avc: denied { map } for pid=1336 comm="syz.5.340" path="/44/file1/file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.237872][ T308] kworker/u4:3: attempt to access beyond end of device [ 50.237872][ T308] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 50.257975][ T43] kworker/u4:2: attempt to access beyond end of device [ 50.257975][ T43] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 50.310900][ T1358] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 50.326295][ T1358] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.385276][ T28] audit: type=1400 audit(1789038429.640:343): avc: denied { link } for pid=1357 comm="syz.6.350" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.418501][ T1358] EXT4-fs (loop6): shut down requested (2) [ 50.433026][ T824] EXT4-fs (loop6): unmounting filesystem. [ 50.469443][ T28] audit: type=1400 audit(1789038429.720:344): avc: denied { ioctl } for pid=1370 comm="syz.6.351" path="socket:[22312]" dev="sockfs" ino=22312 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.528472][ T28] audit: type=1400 audit(1789038429.780:345): avc: denied { write } for pid=1373 comm="syz.7.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.666140][ T1382] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 50.689509][ T1382] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.744074][ T1382] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 50.792838][ T1382] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 50.832610][ T1390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.851665][ T1382] EXT4-fs (loop8): This should not happen!! Data will be lost [ 50.851665][ T1382] [ 50.869605][ T1382] EXT4-fs (loop8): Total free blocks count 0 [ 50.889451][ T1382] EXT4-fs (loop8): Free/Dirty block details [ 50.891007][ T1390] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 50.901952][ T1382] EXT4-fs (loop8): free_blocks=65280 [ 50.910040][ T1382] EXT4-fs (loop8): dirty_blocks=1 [ 50.915414][ T1382] EXT4-fs (loop8): Block reservation details [ 50.921959][ T1382] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 50.928328][ T1390] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.004354][ T959] EXT4-fs (loop8): unmounting filesystem. [ 51.019568][ T8] loop: Write error at byte offset 8, length 3584. [ 51.027575][ C1] blk_print_req_error: 5 callbacks suppressed [ 51.027594][ C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 51.043563][ C1] buffer_io_error: 5 callbacks suppressed [ 51.043578][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 51.193675][ T833] EXT4-fs (loop7): unmounting filesystem. [ 51.369408][ T307] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 51.421799][ T1432] ip_tables: iptables: counters copy to user failed while replacing table [ 51.485456][ T1434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 51.496124][ T1434] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.560411][ T19] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 51.705775][ T1440] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.753790][ T1440] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 51.764705][ T19] usb 9-1: not running at top speed; connect to a high speed hub [ 51.779648][ T1440] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.791512][ T19] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.804895][ T601] EXT4-fs (loop5): unmounting filesystem. [ 51.830614][ T19] usb 9-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 51.876012][ T19] usb 9-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 51.926266][ T19] usb 9-1: Product: syz [ 51.936360][ T19] usb 9-1: Manufacturer: syz [ 51.967231][ T19] usb 9-1: Found UVC 1.00 device syz (225a:e1d4) [ 51.979533][ T19] usb 9-1: No streaming interface found for terminal 2. [ 52.022037][ T1015] EXT4-fs (loop9): unmounting filesystem. [ 52.110590][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.144747][ T307] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.155986][ T1479] set_capacity_and_notify: 10 callbacks suppressed [ 52.156004][ T1479] loop9: detected capacity change from 0 to 512 [ 52.160233][ T307] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 52.174245][ T19] usb 9-1: USB disconnect, device number 4 [ 52.221665][ T307] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 52.231418][ T1479] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 52.246839][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.261247][ T1479] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.269688][ T307] usb 7-1: config 0 descriptor?? [ 52.298800][ T1015] EXT4-fs (loop9): unmounting filesystem. [ 52.461929][ T1491] loop5: detected capacity change from 0 to 512 [ 52.472635][ T1491] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.499548][ T1491] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 52.509521][ T1491] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.559473][ T39] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 52.620313][ T601] EXT4-fs (loop5): unmounting filesystem. [ 52.680964][ T307] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 52.691803][ T307] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 52.751033][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.774013][ T1516] device vlan0 entered promiscuous mode [ 52.787790][ T1516] device eth0 entered promiscuous mode [ 52.790969][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.804112][ T39] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 52.814369][ T39] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.843569][ T1520] loop9: detected capacity change from 0 to 512 [ 52.851262][ T1520] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 52.861332][ T39] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 52.870621][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.887823][ T39] usb 8-1: Product: syz [ 52.889563][ T1508] loop5: detected capacity change from 0 to 40427 [ 52.900694][ T1520] EXT4-fs (loop9): 1 truncate cleaned up [ 52.906493][ T1520] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 52.911124][ T1508] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 52.919441][ T39] usb 8-1: Manufacturer: syz [ 52.923802][ T1508] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 52.937344][ T39] usb 8-1: SerialNumber: syz [ 52.953123][ T39] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 52.965058][ T1508] F2FS-fs (loop5): invalid crc value [ 52.968444][ T39] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 53.000747][ T39] usbserial_generic 8-1:1.0: generic converter detected [ 53.021940][ T39] usb 8-1: generic converter now attached to ttyUSB0 [ 53.030323][ T1508] F2FS-fs (loop5): Found nat_bits in checkpoint [ 53.066927][ T1508] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 53.070351][ T974] usb 7-1: USB disconnect, device number 4 [ 53.074186][ T1508] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 53.168648][ T1525] loop8: detected capacity change from 0 to 40427 [ 53.188790][ T1508] syz.5.407: attempt to access beyond end of device [ 53.188790][ T1508] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 53.192913][ T309] usb 8-1: USB disconnect, device number 6 [ 53.214832][ T1525] F2FS-fs (loop8): invalid crc value [ 53.221834][ T309] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 53.240352][ T1525] F2FS-fs (loop8): Found nat_bits in checkpoint [ 53.259697][ T309] usbserial_generic 8-1:1.0: device disconnected [ 53.299067][ T1525] F2FS-fs (loop8): Start checkpoint disabled! [ 53.306114][ T1525] F2FS-fs (loop8): f2fs_disable_checkpoint() finish, err:0 [ 53.314551][ T1525] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 53.426597][ T893] kworker/u4:7: attempt to access beyond end of device [ 53.426597][ T893] loop8: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 53.535428][ T6] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.553037][ T6] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.764616][ T1552] loop7: detected capacity change from 0 to 256 [ 53.797827][ T1554] loop6: detected capacity change from 0 to 128 [ 53.862991][ T1554] incfs: ino conflict with backing FS 1 [ 53.877208][ T1559] loop4: detected capacity change from 0 to 7 [ 53.960323][ T1015] EXT4-fs (loop9): unmounting filesystem. [ 54.247404][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 54.247421][ T28] audit: type=1400 audit(1789038433.500:366): avc: denied { watch } for pid=1583 comm="syz.7.439" path="/50/file0" dev="overlay" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.317992][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.325254][ T1582] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.332902][ T1582] device bridge_slave_0 entered promiscuous mode [ 54.342978][ T1582] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.350264][ T1582] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.357607][ T1582] device bridge_slave_1 entered promiscuous mode [ 54.387869][ T1581] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.404991][ T1581] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.418117][ T1581] device bridge_slave_0 entered promiscuous mode [ 54.430809][ T1581] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.437970][ T1581] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.446318][ T1581] device bridge_slave_1 entered promiscuous mode [ 54.469490][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 54.554948][ T1582] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.562162][ T1582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.569463][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.576511][ T1582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.584262][ T974] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 54.620363][ T893] device bridge_slave_1 left promiscuous mode [ 54.626655][ T893] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.634349][ T893] device bridge_slave_0 left promiscuous mode [ 54.640940][ T893] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.649448][ T893] device veth1_macvtap left promiscuous mode [ 54.659872][ T893] device veth0_vlan left promiscuous mode [ 54.690705][ T39] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.710861][ T39] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.729466][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.737774][ T39] usb 9-1: Product: syz [ 54.742317][ T39] usb 9-1: Manufacturer: syz [ 54.746946][ T39] usb 9-1: SerialNumber: syz [ 54.771485][ T1581] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.780671][ T1581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.788613][ T1581] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.795749][ T1581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.804610][ T974] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 54.822103][ T974] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 54.843535][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.852802][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.861107][ T974] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 54.861475][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.870256][ T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.886971][ T974] usb 8-1: Product: syz [ 54.891199][ T974] usb 8-1: Manufacturer: syz [ 54.895828][ T974] usb 8-1: SerialNumber: syz [ 54.895902][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.906503][ T1591] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 54.914815][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.914831][ T1591] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 54.916938][ T974] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 54.940588][ T974] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 54.951885][ T974] usbserial_generic 8-1:1.0: generic converter detected [ 54.967943][ T974] usb 8-1: generic converter now attached to ttyUSB0 [ 54.982838][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.991368][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.007273][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.018183][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.043971][ T1582] device veth0_vlan entered promiscuous mode [ 55.054290][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.059534][ T28] audit: type=1400 audit(1789038434.310:367): avc: denied { associate } for pid=1612 comm="syz.5.447" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.063809][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.090003][ T28] audit: type=1400 audit(1789038434.310:368): avc: denied { append } for pid=1612 comm="syz.5.447" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.115144][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.130194][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.139026][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.146125][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.147433][ T496] usb 8-1: USB disconnect, device number 7 [ 55.153725][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.164776][ T496] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 55.168585][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.176785][ T496] usbserial_generic 8-1:1.0: device disconnected [ 55.182260][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.207122][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.215253][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.223414][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.231874][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.246232][ T1582] device veth1_macvtap entered promiscuous mode [ 55.259621][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.267895][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.276333][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.284349][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.293431][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.305280][ T1581] device veth0_vlan entered promiscuous mode [ 55.311963][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.320080][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.328293][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.336226][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.345625][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.354706][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.367636][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.376159][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.393616][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.410215][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.420334][ T1581] device veth1_macvtap entered promiscuous mode [ 55.437724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.446376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.451529][ T1617] loop2: detected capacity change from 0 to 128 [ 55.456268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.487121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.490760][ T1617] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.497689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.505867][ T1617] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.560913][ T1621] loop4: detected capacity change from 0 to 128 [ 55.601209][ T1621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 55.608367][ T1617] syz.2.448 (pid 1617) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 55.611033][ T1621] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.700827][ T1631] syz.4.451: attempt to access beyond end of device [ 55.700827][ T1631] loop4: rw=2049, sector=145, nr_sectors = 79 limit=128 [ 55.769799][ T39] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 55.776585][ T39] cdc_ncm 9-1:1.0: dwNtbInMaxSize=19 is too small. Using 2048 [ 55.786015][ T39] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 55.881287][ T893] device bridge_slave_1 left promiscuous mode [ 55.888038][ T893] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.895998][ T893] device bridge_slave_0 left promiscuous mode [ 55.902534][ T893] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.912118][ T893] device veth1_macvtap left promiscuous mode [ 55.919979][ T893] device veth0_vlan left promiscuous mode [ 55.977211][ T39] cdc_ncm 9-1:1.0: setting tx_max = 16384 [ 55.990207][ T1642] F2FS-fs (loop2): invalid crc value [ 56.005387][ T1642] F2FS-fs (loop2): Found nat_bits in checkpoint [ 56.034865][ T1642] F2FS-fs (loop2): Start checkpoint disabled! [ 56.041898][ T1642] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 56.049935][ T1642] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 56.071371][ T39] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 56.093381][ T39] usb 9-1: USB disconnect, device number 5 [ 56.099837][ T39] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 56.115005][ T1642] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 56.168084][ T1431] kworker/u4:8: attempt to access beyond end of device [ 56.168084][ T1431] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 56.183439][ T1431] kworker/u4:8: attempt to access beyond end of device [ 56.183439][ T1431] loop2: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 56.250313][ T496] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.442099][ T496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.453352][ T496] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.466395][ T496] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.486294][ T496] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.497173][ T496] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.522940][ T496] usb 5-1: config 0 descriptor?? [ 56.532643][ T1660] netlink: 'syz.8.463': attribute type 13 has an invalid length. [ 56.541966][ T1660] netlink: 'syz.8.463': attribute type 17 has an invalid length. [ 56.592378][ T1660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 56.663344][ T28] audit: type=1400 audit(1789038435.920:369): avc: denied { read } for pid=1666 comm="syz.5.466" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.692054][ T28] audit: type=1400 audit(1789038435.920:370): avc: denied { open } for pid=1666 comm="syz.5.466" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.720338][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 56.731134][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.735879][ T28] audit: type=1400 audit(1789038435.940:371): avc: denied { ioctl } for pid=1666 comm="syz.5.466" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.768593][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 56.786256][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.798574][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.809021][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.818071][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.827602][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.836286][ T1670] pimreg1: tun_chr_ioctl cmd 1074025677 [ 56.843047][ T1670] pimreg1: Linktype set failed because interface is up [ 56.858601][ T1675] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.880530][ T1675] xt_hashlimit: size too large, truncated to 1048576 [ 56.934915][ T496] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 56.944741][ T496] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 56.958596][ T28] audit: type=1400 audit(1789038436.210:372): avc: denied { create } for pid=1679 comm="syz.8.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.999518][ T28] audit: type=1400 audit(1789038436.210:373): avc: denied { getopt } for pid=1679 comm="syz.8.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.221581][ T19] usb 5-1: USB disconnect, device number 4 [ 57.248513][ T1700] set_capacity_and_notify: 7 callbacks suppressed [ 57.248535][ T1700] loop5: detected capacity change from 0 to 2048 [ 57.293111][ T1698] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 57.314357][ T1698] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.339989][ T1698] EXT4-fs (loop5): This should not happen!! Data will be lost [ 57.339989][ T1698] [ 57.350408][ T1698] EXT4-fs (loop5): Total free blocks count 0 [ 57.356742][ T1698] EXT4-fs (loop5): Free/Dirty block details [ 57.364937][ T1698] EXT4-fs (loop5): free_blocks=4096 [ 57.370397][ T1698] EXT4-fs (loop5): dirty_blocks=64 [ 57.375685][ T1698] EXT4-fs (loop5): Block reservation details [ 57.397106][ T1698] EXT4-fs (loop5): i_reserved_data_blocks=4 [ 57.404784][ T1700] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 57.426516][ T1700] EXT4-fs (loop5): This should not happen!! Data will be lost [ 57.426516][ T1700] [ 57.449131][ T1708] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 57.486472][ T28] audit: type=1400 audit(1789038436.740:374): avc: denied { setopt } for pid=1711 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.511800][ T28] audit: type=1400 audit(1789038436.750:375): avc: denied { bind } for pid=1711 comm="syz.5.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.564872][ T1719] loop2: detected capacity change from 0 to 128 [ 57.803630][ T1734] loop5: detected capacity change from 0 to 512 [ 57.824990][ T1734] EXT4-fs: Ignoring removed i_version option [ 57.831855][ T1734] EXT4-fs: Ignoring removed oldalloc option [ 57.906918][ T1748] loop5: detected capacity change from 0 to 1024 [ 57.930085][ T1748] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 57.959476][ T1748] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 58.042096][ T1761] syz.5.494[1761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.042235][ T1761] syz.5.494[1761] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.361217][ T1776] program syz.4.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.461487][ T1780] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 58.549522][ T19] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 58.573054][ T1769] loop5: detected capacity change from 0 to 131072 [ 58.585761][ T1769] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24) [ 58.593789][ T1769] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 58.602097][ T1769] F2FS-fs (loop5): Test dummy encryption mode enabled [ 58.610091][ T1769] F2FS-fs (loop5): invalid crc value [ 58.639997][ T1795] netlink: 'syz.2.509': attribute type 11 has an invalid length. [ 58.660440][ T1769] F2FS-fs (loop5): Found nat_bits in checkpoint [ 58.685411][ T1769] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 58.700433][ T1769] F2FS-fs (loop5): Start checkpoint disabled! [ 58.708428][ T1769] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 58.733011][ T1769] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 58.741160][ T1769] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 58.760370][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.773111][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.783137][ T19] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.798439][ T19] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.808189][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.818460][ T19] usb 9-1: config 0 descriptor?? [ 58.929529][ T1804] FAULT_INJECTION: forcing a failure. [ 58.929529][ T1804] name fail_futex, interval 1, probability 0, space 0, times 1 [ 58.942909][ T1804] CPU: 1 PID: 1804 Comm: syz.7.513 Tainted: G W syzkaller #0 [ 58.953187][ T1804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.964335][ T1804] Call Trace: [ 58.967908][ T1804] [ 58.971242][ T1804] __dump_stack+0x21/0x24 [ 58.975820][ T1804] dump_stack_lvl+0x110/0x170 [ 58.981347][ T1804] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.986508][ T1804] ? internal_get_user_pages_fast+0x46b/0x800 [ 58.994458][ T1804] ? get_user_pages_fast_only+0x50/0x50 [ 59.000488][ T1804] dump_stack+0x15/0x24 [ 59.005050][ T1804] should_fail_ex+0x3bf/0x510 [ 59.009765][ T1804] should_fail+0xb/0x10 [ 59.014138][ T1804] should_fail_futex+0x38/0x40 [ 59.019197][ T1804] futex_lock_pi_atomic+0x148/0xcb0 [ 59.026015][ T1804] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 59.031777][ T1804] ? __cfi_get_futex_key+0x10/0x10 [ 59.037278][ T1804] futex_lock_pi+0x21e/0x970 [ 59.041902][ T1804] ? __kasan_check_read+0x11/0x20 [ 59.047296][ T1804] ? __cfi_futex_lock_pi+0x10/0x10 [ 59.052702][ T1804] ? __cfi_futex_wake+0x10/0x10 [ 59.057686][ T1804] ? vfs_write+0xa51/0xd00 [ 59.062125][ T1804] do_futex+0x1de/0x430 [ 59.066307][ T1804] ? __cfi_do_futex+0x10/0x10 [ 59.071181][ T1804] ? __kasan_check_write+0x14/0x20 [ 59.076500][ T1804] ? mutex_unlock+0x8f/0x230 [ 59.081111][ T1804] __se_sys_futex+0x136/0x310 [ 59.085813][ T1804] ? __x64_sys_futex+0x100/0x100 [ 59.090786][ T1804] ? xfd_validate_state+0x70/0x150 [ 59.096102][ T1804] ? __kasan_check_write+0x14/0x20 [ 59.101242][ T1804] __x64_sys_futex+0xe5/0x100 [ 59.105953][ T1804] x64_sys_call+0x7ec/0x9a0 [ 59.110668][ T1804] do_syscall_64+0x4c/0xa0 [ 59.115300][ T1804] ? clear_bhb_loop+0x30/0x80 [ 59.120029][ T1804] ? clear_bhb_loop+0x30/0x80 [ 59.124918][ T1804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.131278][ T1804] RIP: 0033:0x7f4d1c39e159 [ 59.135738][ T1804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.155464][ T1804] RSP: 002b:00007f4d1d189028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 59.163923][ T1804] RAX: ffffffffffffffda RBX: 00007f4d1c625fa0 RCX: 00007f4d1c39e159 [ 59.172037][ T1804] RDX: 00000000fffffffe RSI: 000000000000000d RDI: 0000200000000000 [ 59.180128][ T1804] RBP: 00007f4d1c43503b R08: 0000000000000000 R09: 00000000ffffffff [ 59.188125][ T1804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.196123][ T1804] R13: 00007f4d1c626038 R14: 00007f4d1c625fa0 R15: 00007ffe5c81c458 [ 59.204493][ T1804] [ 59.227444][ T19] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 59.245745][ T19] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 59.269403][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 59.301112][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 59.301129][ T28] audit: type=1400 audit(1789038438.560:380): avc: denied { mount } for pid=1809 comm="syz.5.511" name="/" dev="ramfs" ino=23441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.347028][ T1815] netlink: 64 bytes leftover after parsing attributes in process `syz.5.516'. [ 59.364940][ T1817] process 'syz.7.518' launched './file1' with NULL argv: empty string added [ 59.377154][ T28] audit: type=1400 audit(1789038438.560:381): avc: denied { remount } for pid=1809 comm="syz.5.511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.419471][ T28] audit: type=1400 audit(1789038438.560:382): avc: denied { mounton } for pid=1809 comm="syz.5.511" path="/88/file0" dev="ramfs" ino=23441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 59.469463][ T28] audit: type=1400 audit(1789038438.560:383): avc: denied { unmount } for pid=601 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 59.473113][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 59.508523][ T28] audit: type=1400 audit(1789038438.640:384): avc: denied { execute } for pid=1816 comm="syz.7.518" name="file1" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.510581][ T39] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 59.540816][ T19] usb 9-1: USB disconnect, device number 6 [ 59.542767][ C0] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -19 [ 59.547111][ T39] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 59.568211][ T28] audit: type=1400 audit(1789038438.640:385): avc: denied { execute_no_trans } for pid=1816 comm="syz.7.518" path="/64/file1" dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.569854][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.612140][ T39] usb 3-1: Product: syz [ 59.616761][ T39] usb 3-1: Manufacturer: syz [ 59.621632][ T39] usb 3-1: SerialNumber: syz [ 59.631884][ T1800] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.641058][ T1800] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 59.650993][ T39] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 59.664871][ T39] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 59.676807][ T39] usbserial_generic 3-1:1.0: generic converter detected [ 59.699211][ T39] usb 3-1: generic converter now attached to ttyUSB0 [ 59.717820][ T28] audit: type=1400 audit(1789038438.970:386): avc: denied { write } for pid=1828 comm="syz.7.522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.882468][ T1842] loop4: detected capacity change from 0 to 512 [ 59.888763][ T1611] usb 3-1: USB disconnect, device number 3 [ 59.900700][ T1611] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 59.909031][ T1843] loop5: detected capacity change from 0 to 1024 [ 59.909120][ T1611] usbserial_generic 3-1:1.0: device disconnected [ 59.928579][ T1842] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.945721][ T1843] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 59.957849][ T28] audit: type=1326 audit(1789038439.210:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1846 comm="syz.7.529" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d1c39e159 code=0x0 [ 59.990414][ T1843] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 60.000091][ T1842] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 60.000326][ T1843] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.019426][ T1843] EXT4-fs error (device loop5): ext4_read_inode_bitmap:168: comm syz.5.528: Inode bitmap for bg 0 marked uninitialized [ 60.038649][ T1843] EXT4-fs (loop5): Remounting filesystem read-only [ 60.101053][ T1856] loop8: detected capacity change from 0 to 128 [ 60.123437][ T1856] EXT4-fs (loop8): Test dummy encryption mode enabled [ 60.132292][ T1858] FAULT_INJECTION: forcing a failure. [ 60.132292][ T1858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.147005][ T1858] CPU: 1 PID: 1858 Comm: syz.5.533 Tainted: G W syzkaller #0 [ 60.156340][ T1858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.167124][ T1858] Call Trace: [ 60.168962][ T1856] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.170422][ T1858] [ 60.170432][ T1858] __dump_stack+0x21/0x24 [ 60.170466][ T1858] dump_stack_lvl+0x110/0x170 [ 60.215408][ T1858] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.220482][ T1858] dump_stack+0x15/0x24 [ 60.224701][ T1858] should_fail_ex+0x3bf/0x510 [ 60.224735][ T1858] should_fail+0xb/0x10 [ 60.224753][ T1858] should_fail_usercopy+0x1a/0x20 [ 60.224773][ T1858] set_fd_set+0x2d/0x80 [ 60.224796][ T1858] core_sys_select+0x52f/0x700 [ 60.224834][ T1858] ? __cfi_core_sys_select+0x10/0x10 [ 60.224863][ T1858] ? __cfi_set_user_sigmask+0x10/0x10 [ 60.224892][ T1858] ? mutex_unlock+0x8f/0x230 [ 60.224913][ T1858] __se_sys_pselect6+0x274/0x340 [ 60.224938][ T1858] ? __x64_sys_pselect6+0x100/0x100 [ 60.224962][ T1858] ? xfd_validate_state+0x70/0x150 [ 60.224988][ T1858] ? __kasan_check_write+0x14/0x20 [ 60.225018][ T1858] __x64_sys_pselect6+0xe5/0x100 [ 60.225042][ T1858] x64_sys_call+0x1b0/0x9a0 [ 60.225066][ T1858] do_syscall_64+0x4c/0xa0 [ 60.225092][ T1858] ? clear_bhb_loop+0x30/0x80 [ 60.225113][ T1858] ? clear_bhb_loop+0x30/0x80 [ 60.225134][ T1858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.225153][ T1858] RIP: 0033:0x7f02e8d9e159 [ 60.225171][ T1858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.225187][ T1858] RSP: 002b:00007f02e9ca3028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 60.225210][ T1858] RAX: ffffffffffffffda RBX: 00007f02e9025fa0 RCX: 00007f02e8d9e159 [ 60.225225][ T1858] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000040 [ 60.225239][ T1858] RBP: 00007f02e8e3503b R08: 0000200000000280 R09: 0000000000000000 [ 60.225253][ T1858] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 60.225265][ T1858] R13: 00007f02e9026038 R14: 00007f02e9025fa0 R15: 00007fff1f7fcb28 [ 60.225283][ T1858] [ 60.269413][ T1862] loop5: detected capacity change from 0 to 512 [ 60.475366][ T1862] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.529263][ T1873] loop8: detected capacity change from 0 to 1024 [ 60.558660][ T1873] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 60.561597][ T28] audit: type=1400 audit(1789038439.810:388): avc: denied { ioctl } for pid=1875 comm="syz.4.541" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 60.595270][ T1873] EXT4-fs error (device loop8): ext4_acquire_dquot:6828: comm syz.8.538: Failed to acquire dquot type 0 [ 60.607687][ T1877] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.632730][ T1873] EXT4-fs (loop8): 1 truncate cleaned up [ 60.640444][ T1877] EXT4-fs (loop2): 1 truncate cleaned up [ 60.701171][ T1883] loop4: p1 < > p3 p4 [ 60.708500][ T1883] loop4: p3 start 458752 is beyond EOD, truncated [ 60.715774][ T1883] loop4: p4 size 722688 extends beyond EOD, truncated [ 60.804735][ T343] udevd[343]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 60.819619][ T466] udevd[466]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 60.834585][ T470] udevd[470]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 60.841398][ T343] udevd[343]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 60.906240][ T470] udevd[470]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 60.993913][ T1902] EXT4-fs: Ignoring removed oldalloc option [ 61.037903][ T1902] EXT4-fs (loop5): Test dummy encryption mode enabled [ 61.043385][ T1906] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.079942][ T1902] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 61.120410][ T1902] System zones: 0-5 [ 61.253420][ T1907] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.292697][ T1907] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.317869][ T1907] device bridge_slave_0 entered promiscuous mode [ 61.336602][ T1912] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 61.345050][ T1912] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 61.354688][ T1912] F2FS-fs (loop4): invalid crc value [ 61.361087][ T8] device bridge_slave_1 left promiscuous mode [ 61.367488][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.382204][ T1912] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 61.402211][ T8] device bridge_slave_0 left promiscuous mode [ 61.416493][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.433205][ T8] device veth1_macvtap left promiscuous mode [ 61.443354][ T1912] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 61.448474][ T8] device veth0_vlan left promiscuous mode [ 61.451680][ T1912] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 61.679161][ T1907] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.692248][ T1907] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.724516][ T1907] device bridge_slave_1 entered promiscuous mode [ 61.839906][ T1918] f2fs_ckpt-7:4: attempt to access beyond end of device [ 61.839906][ T1918] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.926344][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.940479][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.976242][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.988695][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.017676][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.025305][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.056155][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.065743][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.089167][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.103971][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.111427][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.133422][ T1907] device veth0_vlan entered promiscuous mode [ 62.145671][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.148002][ T1949] device-mapper: ioctl: Invalid ioctl structure: name , dev 100000000000001 [ 62.155390][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.174176][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.188054][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.197362][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.207667][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.232534][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.247145][ T1907] device veth1_macvtap entered promiscuous mode [ 62.287245][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.297755][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.399534][ T1968] set_capacity_and_notify: 5 callbacks suppressed [ 62.399549][ T1968] loop5: detected capacity change from 0 to 4096 [ 62.558155][ T1983] loop5: detected capacity change from 0 to 16 [ 62.585269][ T1983] erofs: (device loop5): mounted with root inode @ nid 36. [ 62.684553][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 62.695431][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 62.699476][ T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 62.705522][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 62.729072][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 62.738975][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 62.748659][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 62.758040][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 62.776254][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 62.786082][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 62.795492][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 62.805990][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 62.821032][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 62.830639][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 62.840694][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 62.870602][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 62.882979][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 62.899529][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 62.901729][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 62.906647][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.916479][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 62.943993][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 62.957858][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.965059][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 62.981165][ T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 62.993738][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 63.018763][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.037783][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.055474][ T24] usb 9-1: config 0 descriptor?? [ 63.070435][ T24] hub 9-1:0.0: USB hub found [ 63.079555][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 63.098639][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.109496][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 63.126053][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.135705][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 63.145564][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 63.158481][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 63.169944][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 63.181568][ T1983] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 63.199620][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 63.209303][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 63.218779][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 63.228424][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 63.238200][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 63.248366][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 63.257595][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 63.267139][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 63.272160][ T24] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 63.285639][ T1983] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 63.330706][ T1983] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 63.355355][ T1983] syz.5.579: attempt to access beyond end of device [ 63.355355][ T1983] loop5: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 63.370120][ T1983] syz.5.579: attempt to access beyond end of device [ 63.370120][ T1983] loop5: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 63.385757][ T1983] syz.5.579: attempt to access beyond end of device [ 63.385757][ T1983] loop5: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 63.407599][ T1983] syz.5.579: attempt to access beyond end of device [ 63.407599][ T1983] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 63.434436][ T1983] syz.5.579: attempt to access beyond end of device [ 63.434436][ T1983] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 63.453702][ T1983] syz.5.579: attempt to access beyond end of device [ 63.453702][ T1983] loop5: rw=524288, sector=24, nr_sectors = 72 limit=16 [ 63.455273][ T2017] loop7: detected capacity change from 0 to 512 [ 63.470455][ T1983] syz.5.579: attempt to access beyond end of device [ 63.470455][ T1983] loop5: rw=524288, sector=221968, nr_sectors = 8 limit=16 [ 63.492846][ T1983] syz.5.579: attempt to access beyond end of device [ 63.492846][ T1983] loop5: rw=524288, sector=14552337248, nr_sectors = 16 limit=16 [ 63.508496][ T1983] syz.5.579: attempt to access beyond end of device [ 63.508496][ T1983] loop5: rw=524288, sector=14546590680, nr_sectors = 16 limit=16 [ 63.523987][ T24] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 63.575708][ T2017] ext4 filesystem being mounted at /81/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.629423][ T19] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 63.675032][ T2035] loop7: detected capacity change from 0 to 512 [ 63.682296][ T2035] EXT4-fs (loop7): Test dummy encryption mode enabled [ 63.689181][ T2035] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 63.708111][ T2035] EXT4-fs (loop7): 1 truncate cleaned up [ 63.818570][ T2053] loop7: detected capacity change from 0 to 512 [ 63.826445][ T24] usb 9-1: USB disconnect, device number 7 [ 63.838000][ T2053] EXT4-fs (loop7): 1 truncate cleaned up [ 63.848766][ T2053] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.7.609: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 63.850555][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.884266][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.896070][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.909559][ T19] usb 5-1: New USB device found, idVendor=04a0, idProduct=ffff, bcdDevice= 0.00 [ 63.919946][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.925497][ T2053] EXT4-fs (loop7): Remounting filesystem read-only [ 63.930860][ T19] usb 5-1: config 0 descriptor?? [ 64.128825][ T2077] loop7: detected capacity change from 0 to 1024 [ 64.203661][ T2085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.221541][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 64.232395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.243278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 64.252191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.260708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.269473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.278688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.287980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.309444][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 64.309483][ T28] audit: type=1400 audit(1789038443.560:402): avc: denied { attach_queue } for pid=2086 comm="syz.7.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.309765][ T2091] netlink: 'syz.8.623': attribute type 4 has an invalid length. [ 64.348275][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.356223][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.364106][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.375466][ T2089] netlink: 'syz.8.623': attribute type 4 has an invalid length. [ 64.383907][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.393297][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.401689][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.409109][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.420037][ T1611] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 64.422797][ T19] hid-generic 0003:04A0:FFFF.000E: unknown main item tag 0x0 [ 64.447720][ T19] hid-generic 0003:04A0:FFFF.000E: hidraw0: USB HID v0.00 Device [HID 04a0:ffff] on usb-dummy_hcd.4-1/input0 [ 64.505529][ T2102] loop7: detected capacity change from 0 to 512 [ 64.528053][ T2102] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 64.548142][ T2102] EXT4-fs (loop7): 1 truncate cleaned up [ 64.566187][ T19] usb 5-1: USB disconnect, device number 5 [ 64.630131][ T1611] usb 1-1: not running at top speed; connect to a high speed hub [ 64.645648][ T1611] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.663274][ T1611] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 64.674973][ T1611] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 64.692251][ T1611] usb 1-1: Product: syz [ 64.697142][ T1611] usb 1-1: Manufacturer: syz [ 64.710986][ T1611] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 64.912834][ T1611] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 64.926779][ T1611] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 64.941094][ T1611] uvcvideo 1-1:1.1: Failed to initialize the device (-5). [ 64.955760][ T1611] usb 1-1: USB disconnect, device number 4 [ 65.088739][ T2108] loop4: detected capacity change from 0 to 1024 [ 65.108498][ T2108] EXT4-fs: Ignoring removed bh option [ 65.124501][ T2108] EXT4-fs: Ignoring removed bh option [ 65.193901][ T2108] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 65.224923][ T1581] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /34/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 65.280845][ T1581] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /34/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 65.342086][ T2118] loop5: detected capacity change from 0 to 128 [ 65.360161][ T2112] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.374611][ T2112] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.383972][ T2112] device bridge_slave_0 entered promiscuous mode [ 65.394457][ T2112] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.419416][ T2112] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.477493][ T2112] device bridge_slave_1 entered promiscuous mode [ 65.559050][ T1611] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 65.610558][ T1611] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.690856][ T1431] device bridge_slave_1 left promiscuous mode [ 65.697231][ T1431] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.730016][ T1431] device bridge_slave_0 left promiscuous mode [ 65.737026][ T1431] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.746161][ T1431] device veth1_macvtap left promiscuous mode [ 65.752865][ T1431] device veth0_vlan left promiscuous mode [ 65.885360][ T2140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.643'. [ 65.894726][ T2140] netem: unknown loss type 0 [ 65.899445][ T2140] netem: change failed [ 65.956893][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.968161][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.983822][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.992952][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.002140][ T893] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.012266][ T893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.023988][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.033117][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.044048][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.051429][ T893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.070677][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.078822][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.087549][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.091520][ T2114] loop4: detected capacity change from 0 to 131072 [ 66.102519][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.111672][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.126050][ T2114] F2FS-fs (loop4): invalid crc value [ 66.135159][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.148654][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.158486][ T2114] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.187534][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.198307][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.207060][ T2114] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 66.208252][ T2112] device veth0_vlan entered promiscuous mode [ 66.237315][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.245585][ T28] audit: type=1400 audit(1789038445.490:403): avc: denied { setattr } for pid=2113 comm="syz.4.633" name=".pending_reads" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 66.260053][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.286915][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.295447][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.305647][ T2112] device veth1_macvtap entered promiscuous mode [ 66.318435][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.327839][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.337264][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.367015][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.376968][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.520852][ T2164] FAT-fs (loop8): Directory bread(block 64) failed [ 66.527867][ T2164] FAT-fs (loop8): Directory bread(block 65) failed [ 66.552506][ T2164] FAT-fs (loop8): Directory bread(block 66) failed [ 66.560193][ T2164] FAT-fs (loop8): Directory bread(block 67) failed [ 66.567171][ T2164] FAT-fs (loop8): Directory bread(block 68) failed [ 66.574551][ T2164] FAT-fs (loop8): Directory bread(block 69) failed [ 66.581918][ T2164] FAT-fs (loop8): Directory bread(block 70) failed [ 66.590211][ T2164] FAT-fs (loop8): Directory bread(block 71) failed [ 66.597223][ T2164] FAT-fs (loop8): Directory bread(block 72) failed [ 66.604055][ T2164] FAT-fs (loop8): Directory bread(block 73) failed [ 66.634831][ T2164] xt_hashlimit: size too large, truncated to 1048576 [ 66.699415][ T1611] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.813852][ T2186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 66.858271][ T28] audit: type=1400 audit(1789038446.110:404): avc: denied { read } for pid=2191 comm="syz.0.661" name="/" dev="configfs" ino=13966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.882094][ T28] audit: type=1400 audit(1789038446.110:405): avc: denied { open } for pid=2191 comm="syz.0.661" path="/" dev="configfs" ino=13966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.909537][ T1611] usb 2-1: Using ep0 maxpacket: 16 [ 66.916043][ T1611] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.935502][ T1611] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.967468][ T1611] usb 2-1: config 0 interface 0 has no altsetting 0 [ 66.974520][ T1611] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 66.984366][ T1611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.011737][ T1611] usb 2-1: config 0 descriptor?? [ 67.049821][ T28] audit: type=1400 audit(1789038446.310:406): avc: denied { write } for pid=2202 comm="syz.4.666" name="anycast6" dev="proc" ino=4026532699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.197916][ T28] audit: type=1400 audit(1789038446.450:407): avc: denied { mounton } for pid=2211 comm="syz.4.670" path="/46/file0" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.294858][ T2221] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.330510][ T2221] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 67.357224][ T28] audit: type=1400 audit(1789038446.610:408): avc: denied { sqpoll } for pid=2222 comm="syz.5.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 67.373148][ T2221] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 67.425198][ T1611] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0B05:18C6.0010/input/input12 [ 67.434434][ T28] audit: type=1400 audit(1789038446.680:409): avc: denied { rename } for pid=2220 comm="syz.4.674" name="file0" dev="loop4" ino=1048672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.462979][ T28] audit: type=1400 audit(1789038446.680:410): avc: denied { append } for pid=2220 comm="syz.4.674" path="/48/file0/memory.events.local" dev="loop4" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.502112][ T1611] hid-generic 0003:0B05:18C6.0010: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 67.696315][ T19] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 67.708584][ T19] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 67.789432][ T6] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.970663][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.983365][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.995152][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.004269][ T6] usb 6-1: Product: syz [ 68.008832][ T6] usb 6-1: Manufacturer: syz [ 68.014493][ T6] usb 6-1: SerialNumber: syz [ 68.789481][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 68.970594][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.974579][ T28] audit: type=1400 audit(1789038448.230:411): avc: denied { ioctl } for pid=2290 comm="syz.0.700" path="socket:[27423]" dev="sockfs" ino=27423 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.984693][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.022122][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.036499][ T6] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 69.036563][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.045436][ T6] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 69.053391][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.066479][ T6] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 69.075551][ T24] usb 9-1: config 0 descriptor?? [ 69.126685][ T2292] ================================================================== [ 69.135179][ T2292] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 69.143260][ T2292] Write of size 8 at addr ffff88812fcafd90 by task syz.0.700/2292 [ 69.152432][ T2292] [ 69.155570][ T2292] CPU: 0 PID: 2292 Comm: syz.0.700 Tainted: G W syzkaller #0 [ 69.164553][ T2292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.177682][ T2292] Call Trace: [ 69.181157][ T2292] [ 69.184110][ T2292] __dump_stack+0x21/0x24 [ 69.188880][ T2292] dump_stack_lvl+0x110/0x170 [ 69.193965][ T2292] ? __cfi_dump_stack_lvl+0x8/0x8 [ 69.199026][ T2292] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 69.204356][ T2292] print_address_description+0x71/0x200 [ 69.210030][ T2292] print_report+0x4a/0x60 [ 69.214388][ T2292] kasan_report+0x122/0x150 [ 69.218911][ T2292] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 69.224222][ T2292] __asan_report_store8_noabort+0x17/0x20 [ 69.229949][ T2292] rcu_segcblist_enqueue+0x9c/0xb0 [ 69.235153][ T2292] call_rcu+0x554/0xf50 [ 69.239600][ T2292] ? __cfi_call_rcu+0x10/0x10 [ 69.244280][ T2292] ? __kasan_check_write+0x14/0x20 [ 69.249396][ T2292] ? selinux_inode_free_security+0x21f/0x230 [ 69.255756][ T2292] security_inode_free+0xc5/0xe0 [ 69.260982][ T2292] __destroy_inode+0x175/0x500 [ 69.265861][ T2292] evict+0x777/0x8c0 [ 69.270313][ T2292] ? proc_nr_inodes+0x2f0/0x2f0 [ 69.275553][ T2292] ? _raw_spin_lock+0x94/0xf0 [ 69.281396][ T2292] ? __cfi__raw_spin_lock+0x10/0x10 [ 69.287345][ T2292] ? __kasan_check_write+0x14/0x20 [ 69.292829][ T2292] iput+0x633/0x690 [ 69.297667][ T2292] dentry_unlink_inode+0x346/0x3f0 [ 69.302982][ T2292] __dentry_kill+0x46c/0x680 [ 69.307807][ T2292] dentry_kill+0xc0/0x2a0 [ 69.312513][ T2292] dput+0x42/0x80 [ 69.316635][ T2292] __fput+0x5c0/0x8f0 [ 69.320823][ T2292] ____fput+0x15/0x20 [ 69.324836][ T2292] task_work_run+0x1e1/0x250 [ 69.329546][ T2292] ? __cfi_task_work_run+0x10/0x10 [ 69.334801][ T2292] ? free_nsproxy+0x21f/0x270 [ 69.340473][ T2292] do_exit+0xb03/0x2970 [ 69.344675][ T2292] ? __cfi_do_exit+0x10/0x10 [ 69.349542][ T2292] ? xfd_validate_state+0x70/0x150 [ 69.355040][ T2292] ? __kasan_check_write+0x14/0x20 [ 69.360285][ T2292] __x64_sys_exit+0x40/0x40 [ 69.364898][ T2292] x64_sys_call+0x67/0x9a0 [ 69.369497][ T2292] do_syscall_64+0x4c/0xa0 [ 69.374281][ T2292] ? clear_bhb_loop+0x30/0x80 [ 69.379053][ T2292] ? clear_bhb_loop+0x30/0x80 [ 69.384183][ T2292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.390959][ T2292] RIP: 0033:0x7f672a39e159 [ 69.395935][ T2292] Code: Unable to access opcode bytes at 0x7f672a39e12f. [ 69.404025][ T2292] RSP: 002b:00007f672b250ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 69.413263][ T2292] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f672a39e159 [ 69.422244][ T2292] RDX: 00007f672b2519c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 69.432297][ T2292] RBP: 00007f672a43503b R08: 0000000000000000 R09: 0000000000000058 [ 69.440553][ T2292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.449324][ T2292] R13: 00007f672a626038 R14: 00007f672a625fa0 R15: 00007ffd766c71f8 [ 69.458558][ T2292] [ 69.461611][ T2292] [ 69.464003][ T2292] Allocated by task 2291: [ 69.468440][ T2292] kasan_set_track+0x4b/0x70 [ 69.473609][ T2292] kasan_save_alloc_info+0x1f/0x30 [ 69.479502][ T2292] __kasan_kmalloc+0x95/0xb0 [ 69.484598][ T2292] __kmalloc+0xb4/0x1e0 [ 69.489105][ T2292] l2tp_session_create+0x38/0xbd0 [ 69.495279][ T2292] pppol2tp_connect+0xbf5/0x1640 [ 69.500459][ T2292] __sys_connect+0x3da/0x460 [ 69.505857][ T2292] __x64_sys_connect+0x7a/0x90 [ 69.511190][ T2292] x64_sys_call+0x88d/0x9a0 [ 69.516036][ T2292] do_syscall_64+0x4c/0xa0 [ 69.520945][ T2292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.528751][ T2292] [ 69.531131][ T2292] Freed by task 1431: [ 69.535197][ T2292] kasan_set_track+0x4b/0x70 [ 69.539885][ T2292] kasan_save_free_info+0x2b/0x40 [ 69.545278][ T2292] ____kasan_slab_free+0x132/0x180 [ 69.551226][ T2292] __kasan_slab_free+0x11/0x20 [ 69.556214][ T2292] slab_free_freelist_hook+0xc2/0x190 [ 69.561698][ T2292] __kmem_cache_free+0xb7/0x1b0 [ 69.567004][ T2292] kfree+0x6f/0xf0 [ 69.570732][ T2292] l2tp_session_put+0xaf/0x1a0 [ 69.575526][ T2292] l2tp_session_delete+0x3df/0x4d0 [ 69.580826][ T2292] l2tp_tunnel_del_work+0x199/0x410 [ 69.586458][ T2292] process_one_work+0x717/0xc30 [ 69.591558][ T2292] worker_thread+0xa4d/0x11d0 [ 69.596356][ T2292] kthread+0x281/0x320 [ 69.600528][ T2292] ret_from_fork+0x1f/0x30 [ 69.605397][ T2292] [ 69.607760][ T2292] Last potentially related work creation: [ 69.614111][ T2292] kasan_save_stack+0x3a/0x60 [ 69.618997][ T2292] __kasan_record_aux_stack+0xb6/0xc0 [ 69.624929][ T2292] kasan_record_aux_stack_noalloc+0xb/0x10 [ 69.631551][ T2292] call_rcu+0xcf/0xf50 [ 69.635820][ T2292] pppol2tp_release+0x1e3/0x2b0 [ 69.640730][ T2292] sock_close+0xc9/0x220 [ 69.645083][ T2292] __fput+0x1fd/0x8f0 [ 69.649376][ T2292] ____fput+0x15/0x20 [ 69.653472][ T2292] task_work_run+0x1e1/0x250 [ 69.658087][ T2292] do_exit+0xb03/0x2970 [ 69.663126][ T2292] __cfi___ia32_sys_exit+0x0/0x10 [ 69.668182][ T2292] x64_sys_call+0x67/0x9a0 [ 69.672794][ T2292] do_syscall_64+0x4c/0xa0 [ 69.677335][ T2292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 69.683941][ T2292] [ 69.686269][ T2292] Second to last potentially related work creation: [ 69.693458][ T2292] kasan_save_stack+0x3a/0x60 [ 69.698492][ T2292] __kasan_record_aux_stack+0xb6/0xc0 [ 69.704045][ T2292] kasan_record_aux_stack_noalloc+0xb/0x10 [ 69.710651][ T2292] call_rcu+0xcf/0xf50 [ 69.715013][ T2292] pwq_unbound_release_workfn+0x283/0x2c0 [ 69.721295][ T2292] process_one_work+0x717/0xc30 [ 69.726526][ T2292] worker_thread+0xa4d/0x11d0 [ 69.731212][ T2292] kthread+0x281/0x320 [ 69.735460][ T2292] ret_from_fork+0x1f/0x30 [ 69.739977][ T2292] [ 69.742489][ T2292] The buggy address belongs to the object at ffff88812fcafc00 [ 69.742489][ T2292] which belongs to the cache kmalloc-512 of size 512 [ 69.758202][ T2292] The buggy address is located 400 bytes inside of [ 69.758202][ T2292] 512-byte region [ffff88812fcafc00, ffff88812fcafe00) [ 69.771863][ T2292] [ 69.774229][ T2292] The buggy address belongs to the physical page: [ 69.780851][ T2292] page:ffffea0004bf2b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12fcac [ 69.791661][ T2292] head:ffffea0004bf2b00 order:2 compound_mapcount:0 compound_pincount:0 [ 69.800182][ T2292] flags: 0x4000000000010200(slab|head|zone=1) [ 69.806486][ T2292] raw: 4000000000010200 ffffea0004c5d000 dead000000000002 ffff888100042f00 [ 69.815860][ T2292] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 69.825929][ T2292] page dumped because: kasan: bad access detected [ 69.832756][ T2292] page_owner tracks the page as allocated [ 69.838491][ T2292] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 288, tgid 288 (syz-executor), ts 23495618605, free_ts 0 [ 69.859808][ T2292] post_alloc_hook+0x1f5/0x210 [ 69.864620][ T2292] prep_new_page+0x1c/0x110 [ 69.869331][ T2292] get_page_from_freelist+0x2ca9/0x2d20 [ 69.875168][ T2292] __alloc_pages+0x1fa/0x610 [ 69.879857][ T2292] alloc_slab_page+0x6e/0xf0 [ 69.884807][ T2292] new_slab+0x98/0x3e0 [ 69.890851][ T2292] ___slab_alloc+0x70f/0xb70 [ 69.896253][ T2292] __slab_alloc+0x5e/0xa0 [ 69.900662][ T2292] __kmem_cache_alloc_node+0x204/0x2d0 [ 69.907109][ T2292] __kmalloc_node_track_caller+0xa1/0x1e0 [ 69.913615][ T2292] __alloc_skb+0x226/0x4a0 [ 69.919632][ T2292] netlink_ack+0x373/0x1160 [ 69.924270][ T2292] netlink_rcv_skb+0x27e/0x450 [ 69.929762][ T2292] rtnetlink_rcv+0x1c/0x20 [ 69.934568][ T2292] netlink_unicast+0x8c1/0xa60 [ 69.940743][ T2292] netlink_sendmsg+0x8b9/0xbd0 [ 69.946577][ T2292] page_owner free stack trace missing [ 69.953014][ T2292] [ 69.955439][ T2292] Memory state around the buggy address: [ 69.961081][ T2292] ffff88812fcafc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.969241][ T2292] ffff88812fcafd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.977490][ T2292] >ffff88812fcafd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 69.986176][ T2292] ^ [ 69.990784][ T2292] ffff88812fcafe00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.999734][ T2292] ffff88812fcafe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.009981][ T2292] ================================================================== [ 70.018339][ T2292] Disabling lock debugging due to kernel taint [ 70.030513][ T6] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 70.047110][ T6] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 70.061649][ T6] usb 6-1: USB disconnect, device number 6 [ 70.070007][ T6] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 70.232303][ T24] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 70.241147][ T24] plantronics 0003:047F:FFFF.0012: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 78.119982][ T2159] hid-generic 0003:0B05:18C6.0010: timeout initializing reports [ 78.134069][ T6] usb 9-1: USB disconnect, device number 8 [ 78.134169][ T24] usb 2-1: USB disconnect, device number 3