last executing test programs: 18.18650238s ago: executing program 0 (id=68): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x202, 0x4}}}}}}, 0x0) 18.123222943s ago: executing program 0 (id=71): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 17.9579s ago: executing program 0 (id=77): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r0, 0xee00, 0xee01) fchown(r0, 0x0, 0x0) 17.781862609s ago: executing program 0 (id=81): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000080)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@grpid}]}, 0x1, 0x513, &(0x7f00000017c0)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x1a0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1042, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x107000, 0x0) read$msr(r0, &(0x7f0000001700)=""/129, 0xbecbd144) 17.683986584s ago: executing program 0 (id=83): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 17.477668194s ago: executing program 0 (id=87): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffff9, 0x4) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) 17.457669964s ago: executing program 32 (id=87): r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffff9, 0x4) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) 16.05628846s ago: executing program 4 (id=118): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$eJzs3W2IHHcdB/Df7N6mebiaNLZqa2xOQ20gdPdyuYREfGGJD7UmtaL4IhTCkdvuhezdnrkN9LaCLb4pCiL4RgShYl9YEQ3kTaXU9kWLbxSU+kClxoAKIhStFERQV2YfrmszaYr3MHjz+cDc/ec/c/v/7y3fndmd/8wEUFgT6Y8kYjwiLkXEzv7sf68w0f/VOXRxLp2S6HY//Zekt97soYtzw1WHf7cj/TEWsTUidh9PYl/l6naXljvnZprN+vnBfK09v1hbWu7cdXZ+plFv1BcOH50+NnVk+uj02j3XyZ9uv+WPd9x35Ynn//7Pb/76yPfT/o4Plo0+j7UyEROD/0klbhqpH0si7l3rxnJS7r/UccdIXTKWY4d4y7rd3d9LX7+3R8S+Xv53Rjn6L95LTz/wt53xy3vy7iOwfrpD2Ytf7QKbVqm3D5yUqhHRL5dK1Wp/H/7m2F5qtpbaBx5sXViY7e8r74pK6cGzzfrk4LPCrqgk6fzBXvn1+ak3zB+K6O0DP1be1puvnmk1Zzf6zQ7oGY+4fOlzZ7bseEP+/1Tu5x/YvNL8/+KFp55Ny6+V8+4NsJHS/H/3tflPhPxD4cg/FJf8Q3HJPxSX/ENxyT8Ul/xDcck/FJf8Q3HJPxTXMP/3nzwZ95882e0Mzn9faDXOnptbPDY1WZ2/cKZ6pnV+sdpotRq9M3bmr/+4zVZr8eBUXHio1q4vtWtLy53T860LC+3TvfP6T9czLgUA5ODUla333rT3uZeSiHjkA9t6U2rLYLmswubW7SaR9znIQD589Ificqk2KC6f8YHkOsu3XmtBc+37AmyMUt4dAHJz562O/0FR+f4fisv3/1Bc9vEB3/9D8fj+H4pr/Br3/7px5N5dkxHxtoj4Sblyw/BeX8D/r/GIy5e//dnayn24FRQUFFYKeb9DAevt9dDn3RMgL7OHLs4Np41q85nGRrUEZHnl7v4goDT3ncHUXzK2cmygsk7jhF5+LGIifvjbx/fPldMpBu9D69AUkOGRRyPiXVnb/6R3bGDXYL3d/dXi5oi4JSLeERHvXGXbX/9Umv8X6qN18g8b563m/9aIuD0ibouId0fEnoh4zyrb/vmlNP+/2jZaJ/9QDJ9/Pu8eAHn5+FN59wDIyyljDKCwvvNw3j0A8vL0D/LuAZCXr7yYdw+g2J67OyIms47/lXrH+4cqg+sC3jC4FsC2iNgeETsG5xDeODhHcOfIMcPrOf3JiIm4/UejdY7/wcYZjv/rXDX+r7Qy/q8cEXtX0cYzHxz/clb9zJ40/088PBz/l05p+8OxgMD6euXRiNsy85+sjPlNIs1pxHv/xzYmvnDlyaz6F+9LH7fyM/mHfHS/FfH+yM7/UFqqtecXa0vLnbt69/Fu1BcOH50+NnVk+uh0rXeJkNrwQiEZTvz11QNZ9S9Ppfn/xmH5h3yk2//t18j/6P7/+1bRxvGvfelUVv3479P873n2zfNf+vOW5DO9+eF9CR6aabfPH4zYkpy4un5qFR2FTW6YkWGG0vzv35f9+X/34G/S7f/xiPhwur8QEf+KiH9HxEci4qMR8bGIuOdN2vzqnY0rWfW/ezLN/+PnbP8hH2n+Z6+z/U9//2MVbRzY/+MvZtV/aG+a/+pv/nDigbF0kn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtbe03Dk302zWz69jIe/nCAAAAAAAAEXxnwAAAP//xOQ08g==") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x67) write$tcp_mem(r0, &(0x7f0000000000)={0x1, 0x20, 0x7, 0x20, 0x9}, 0x48) 15.84351393s ago: executing program 4 (id=123): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00', 0x0, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0}}}}, 0x0) 15.775499704s ago: executing program 4 (id=127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 15.732281506s ago: executing program 4 (id=129): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b40)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x5, 0x5505, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) 15.292582217s ago: executing program 4 (id=137): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x4004550c, 0x0) 14.820636539s ago: executing program 4 (id=140): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f0000000240)={[{@oldalloc}, {@nojournal_checksum}, {@jqfmt_vfsv0}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000440)="$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") ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000280)={{0xff039010, 0x109003fd}, {0xfd039010, 0x109003ff}, 0x1, 0x4}) 14.759008842s ago: executing program 33 (id=140): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f0000000240)={[{@oldalloc}, {@nojournal_checksum}, {@jqfmt_vfsv0}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTZv91nUwhvoghT04mUu31h8ThM1H0eFA32doszKaLqNJx1oH2x7ciy8yBBEH4h/gu4/Df8C/YqCDIaPogy+Vm96sWdO0aRfX1Pv5wN3Oyb3puSfnfk++N/eGBJBbo+k/hYhXI+KbJOJw27rhyFaOrmy39OTmZLoksbz82Z9JJNljre2T7P+DWeWViPj1q4iThc526wuLM+VqtTKX1ccas9fG6guLp67Mlqcr05Wr4xMTZ9+ZGH//vXf71tc3L/79/acPPjr79fGl735+dOReEufjULauvR/P4XZ7ZTRGs9ekGOfXbHimD40NkqSHbfa8gP1ga4ayOC9GOgccjqEs6oH/v1sRsQzkVCL+IadaeUDr3L5P58G7xuMPV06AOvs/vPLZSOxrnhsdWEqeOTNKz3dH+tB+2sYvf9y/ly6xyecQt/rQHkDL7TsRcXp4uHP+S7L5b/tONz883tjaNvL2/gM76UGa/7y1Xv5TeJr/xDr5z8F1Ync7No//wqM+NNNVmv99sG7++3TqGhnKai81c75icvlKtXI6Il6OiBNR3JvWN7qec3bp4XK3de35X7qk7bdywWw/Hg3vffY5U+VG+Xn63O7xnYjXVvPfJDrm/33NXHft+Kevx8Ue2zhWuf96t3Wb979d/zPg5Z8i3lh3/FevaCUbX58cax4PY62jotNfd4/91q39rfW//9LxP7Bx/0eS9uu19a238eO+fyrd1m33+N+TfN4st64p3ig3GnNnIvYkn3Q+Pr763Fa9tX3a/xPHN57/1jv+90fEFz32/+7Ru103HYTxn9rS+G+98PDjL3/o1n5v4/92s3Qie6SX+a/XHXye1w4AAAAAAAAGTSEiDkVSKD0tFwql0sr9HUfjQKFaqzdOXq7NX52K5ndlR6JYaF3pPrx6P8SFQ9n9sK37I8bX1Cci4khEfDu0v1kvTdaqUzvdeQAAAAAAAAAAAAAAAAAAABgQB7t8/z/1+9BO7x3wn/OT35Bfm8Z/P37pCRhI3v8hv8Q/5Jf4h/wS/5Bf4h/yS/xDfol/yC/xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAH118cKFdFleenJzMq1PXV+Yn6ldPzVVqc+UZucnS5O1uWul6VptulopTdZmN/t71Vrt2pnxmL8x1qjUG2P1hcVLs7X5q41LV2bL05VLleIL6RUAAAAAAAAAAAAAAAAAAADsLvWFxZlytVqZU+haOBcDsRvbLiSbjfK5Z4+JrTUxvPMd3B2F4mDsRq+FnZqRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDTvwEAAP//9TowLQ==") ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000280)={{0xff039010, 0x109003fd}, {0xfd039010, 0x109003ff}, 0x1, 0x4}) 1.411175463s ago: executing program 6 (id=437): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) 1.318233488s ago: executing program 6 (id=440): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x12}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@mblk_io_submit}, {@stripe}, {@inlinecrypt}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 1.187709964s ago: executing program 1 (id=445): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRESOCT=r1], 0x24}, 0x1, 0x0, 0x0, 0x24040005}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000600)=0x1, &(0x7f0000000640)=0x4) syz_read_part_table(0x5f2, &(0x7f0000000000)="$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") 1.141924066s ago: executing program 6 (id=447): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26d}, {&(0x7f0000000780)="b0fef28adda62f55a0000000000000001abe0a88f674cacbad16b072c3cd975c9884ae3f95e35b6301084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb2894622", 0x6d}], 0x2}, 0x8000) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r0) 1.05444766s ago: executing program 1 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd08, &(0x7f0000000000)) 979.357614ms ago: executing program 6 (id=450): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") chdir(&(0x7f0000004340)='./file0\x00') truncate(&(0x7f0000000040)='./file0\x00', 0x0) 910.388047ms ago: executing program 6 (id=455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "de00", 0x1c, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x18, 0x1001, 0x0, 0x4, {[@window={0x3, 0x3, 0x10}, @mss={0x2, 0x4, 0x3}]}}}}}}}}, 0x0) 560.300334ms ago: executing program 2 (id=465): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) 518.749185ms ago: executing program 2 (id=466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'caif0\x00', 0x6132}) pipe2(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xc54c295c) 475.391698ms ago: executing program 5 (id=470): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, 0x1}) 447.939269ms ago: executing program 3 (id=471): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe1d, &(0x7f0000000b80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e7", "75ae7b", 0xf9, "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"}}}}}, 0x0) 438.387919ms ago: executing program 3 (id=472): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 427.63246ms ago: executing program 3 (id=473): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) 424.75862ms ago: executing program 5 (id=474): mknod$loop(0x0, 0x6000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x8, 0x0) r1 = io_uring_setup(0x1ed7, &(0x7f00000007c0)={0x0, 0xee5a, 0x400, 0x0, 0x14b}) dup3(r0, r1, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000440)={0x0, 0x0, 0x6a45359f}) 415.397391ms ago: executing program 2 (id=475): r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0xa63f, 0x400, 0x201, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000180009000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 402.216391ms ago: executing program 3 (id=476): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x114, &(0x7f0000000500)={[{@nobarrier}, {@errors_remount}, {@noblock_validity}, {@lazytime}, {@jqfmt_vfsv0}, {@nolazytime}, {@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x3, 0x46f, &(0x7f0000000080)="$eJzs3M1vFOUfAPDvTFugvPzaH+ILL2oVjcSXlhZUDh7UaOJBExMveKxtIUihhtZECNFqDB4NiXfj0cS/wJNejHoy8ap3Q0IMF9HTmtmZYXeH3VLKtlvZzyeZ9nlmnu3zfPeZZ/eZeRgC6Ftj2Y8kYmdE/BYRI3m2tcBY/uv6tYszf1+7OJNErfbWn0m93F/XLs6URcvX7SgyAxGRfprE/jb1Lp6/cHp6fn7uXJGfWDrz3sTi+QvPnDozfXLu5NzZqWPHjh6ZfP65qWe7Euf/s7bu+3DhwN7X3r78xszxy+/89E1Sxl+J444N13+OrVTk8Vqta9VtBrua0slgDxvCbcnGaNZdQ/XxPxID0ei8kXj1k542DlhXtULLzsYEYLkG3MWS6HULgN4ov+iz699y29gZSG9dfSm/AMrivl5s+ZHBSCO/MBqqXN9201hEHF/+58tsi27fhwAAaOO7bP7zdLv5Xxr3NZX7X7E2NFqspeyOiHsiYk9E3BtRL3t/RDxwm/VXF0lunv+kV9YU2Cpl878XirWt1vlfWhYZHShyu+qZoeTEqfm5w8V7ciiGtmb5yRXq+P6VXz/vdKx5/pdtWf3lXLBox5XBra2vmZ1emr6TmJtd/Thi32C7+JMbKwFJROyNiH1rrOPUk18f6HSsGn8tWekvvdia7cI6U+2riCfy/l+OSvylpFifHN+e5yvrkxPbYn7u8ER5Vtzs518uvdmp/lv3//rK+n972/P/RvyjSfN67eLt13Hp9886XtOMr+n8b+zYUvz+YHpp6dxkxJbk9bzRzfunGq8t82X5LP5DB/P4hyvjf3c03on9EZGdxA9GxEMR8XDRd49ExKMRcbBTgMsRP7782LudDm+G/p+t9P9oa5FK/zcSW6K6p31i4PQP37b+xUZydZ9/R+upQ8We1Xz+raZdazubAQAA4L8njYidkaTjN9JpOj6e/xv+PbE9nV9YXHrqxML7Z2fzZwRGYygt73Tl94Pz+6GTxWV9mZ+q5I8U942/GBiu58dnFuZnex089LkdHcZ/5o+BXrcOWHee14L+ZfxD/zL+oX8Z/9C/2oz/4V60A9h47b7/P2okayMb2RhgQ1XGv2U/6COu/6F/rWr8p+vfDmDjNY//FZ+/B+4mi8Nx64fkJTZzYlvZlRtbe6SbIPZuJZJ1HgU7ex1gc6L8vz9XLtzjDyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu+TcAAP//mu7jYQ==") r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 393.233302ms ago: executing program 2 (id=477): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@nobarrier}, {@dioread_lock}, {@dioread_nolock}, {@resgid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183242, 0x15) fallocate(r0, 0x10, 0x37ec, 0x683) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x20) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 327.650705ms ago: executing program 5 (id=478): unshare(0x6020400) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) dup3(r0, r1, 0x0) pread64(r1, &(0x7f0000000280)=""/42, 0x2a, 0x8b9) 289.335396ms ago: executing program 5 (id=479): mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x82, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 261.499118ms ago: executing program 3 (id=480): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f00000000c0)=ANY=[], 0x1, 0x14fe, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x1, 0x8000, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) 257.915818ms ago: executing program 5 (id=481): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000b80)={[{@grpid}, {@nobh}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x4) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 195.321941ms ago: executing program 2 (id=482): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0xe9e, 0x40, 0x571, 0x8000, 0x9, "ff000d00009a468e0cd912098d00"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xe1}]}) 167.567512ms ago: executing program 1 (id=483): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lseek(r0, 0x2004, 0x0) 67.272637ms ago: executing program 1 (id=484): mkdir(&(0x7f0000000080)='myproc\x00', 0x180) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006bc0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000001dc0)="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", 0x2000, &(0x7f0000008e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 56.229307ms ago: executing program 6 (id=485): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000011040)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast1, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0xff00) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 44.850678ms ago: executing program 3 (id=486): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x3b}]}) 28.317089ms ago: executing program 5 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x40400) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) 24.142759ms ago: executing program 2 (id=488): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000001700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 21.830269ms ago: executing program 1 (id=489): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x3, 0x1, 0x2, 0x3, 0x3, 0x6b, 0xb2, 0x38, 0x1bb, 0x4, 0x5ee8, 0x20, 0x1, 0x2, 0x9ff, 0x7}, [{0x60000000, 0x592d, 0x72, 0x2, 0x1, 0x6, 0x7, 0x5}], "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"}, 0x401) 0s ago: executing program 1 (id=490): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.33' (ED25519) to the list of known hosts. [ 22.345868][ T28] audit: type=1400 audit(1789534316.066:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.346949][ T279] cgroup: Unknown subsys name 'net' [ 22.368742][ T28] audit: type=1400 audit(1789534316.066:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.396004][ T28] audit: type=1400 audit(1789534316.096:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.396184][ T279] cgroup: Unknown subsys name 'devices' [ 22.513988][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.519594][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.621688][ T28] audit: type=1400 audit(1789534316.336:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.644872][ T28] audit: type=1400 audit(1789534316.336:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.669607][ T28] audit: type=1400 audit(1789534316.336:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.715307][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.724235][ T28] audit: type=1400 audit(1789534316.446:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.735001][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.749740][ T28] audit: type=1400 audit(1789534316.446:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.783916][ T28] audit: type=1400 audit(1789534316.456:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.809876][ T28] audit: type=1400 audit(1789534316.456:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.926943][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.934059][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.941378][ T287] device bridge_slave_0 entered promiscuous mode [ 23.950118][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.957195][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.964640][ T287] device bridge_slave_1 entered promiscuous mode [ 23.977149][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.984243][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.991665][ T288] device bridge_slave_0 entered promiscuous mode [ 24.001811][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.008875][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.016270][ T288] device bridge_slave_1 entered promiscuous mode [ 24.047237][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.054336][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.061652][ T290] device bridge_slave_0 entered promiscuous mode [ 24.077007][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.084164][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.091936][ T290] device bridge_slave_1 entered promiscuous mode [ 24.146512][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.153601][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.161026][ T291] device bridge_slave_0 entered promiscuous mode [ 24.170889][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.178171][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.185578][ T291] device bridge_slave_1 entered promiscuous mode [ 24.192541][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.199568][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.207090][ T289] device bridge_slave_0 entered promiscuous mode [ 24.215494][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.222558][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.229979][ T289] device bridge_slave_1 entered promiscuous mode [ 24.385302][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.392397][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.399764][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.406816][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.418464][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.425524][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.432801][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.439817][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.448272][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.455338][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.462628][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.469640][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.481988][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.489055][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.496352][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.503476][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.537071][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.544158][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.551438][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.558512][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.589680][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.597665][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.605205][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.612945][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.620127][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.627602][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.634789][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.642010][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.649360][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.656557][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.664483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.671901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.704868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.713879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.722187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.731065][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.738110][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.746189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.754420][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.761430][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.768831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.776814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.784941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.792391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.800511][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.807545][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.815052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.823283][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.830376][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.837812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.846071][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.853111][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.860515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.868820][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.875844][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.895123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.903359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.911278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.919567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.927764][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.935559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.943287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.951523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.959832][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.966868][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.986805][ T288] device veth0_vlan entered promiscuous mode [ 24.994649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.002925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.010856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.020063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.028566][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.035627][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.043039][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.051100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.059225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.067605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.076057][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.083100][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.090479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.099000][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.107412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.115415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.123690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.132108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.140569][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.147632][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.156117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.163628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.178027][ T290] device veth0_vlan entered promiscuous mode [ 25.194214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.202842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.210800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.219339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.227984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.236145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.244394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.252747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.260663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.268922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.277034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.285318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.293443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.300895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.319865][ T289] device veth0_vlan entered promiscuous mode [ 25.331135][ T288] device veth1_macvtap entered promiscuous mode [ 25.340205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.349110][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.357992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.365616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.373243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.381292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.389628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.397487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.406185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.417409][ T290] device veth1_macvtap entered promiscuous mode [ 25.426407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.434711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.443639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.457215][ T287] device veth0_vlan entered promiscuous mode [ 25.465885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.474593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.483216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.491452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.500106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.508246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.516467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.524308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.536717][ T289] device veth1_macvtap entered promiscuous mode [ 25.549845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.558218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.566773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.575589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.584125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.595954][ T291] device veth0_vlan entered promiscuous mode [ 25.607737][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.616368][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.624633][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.632177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.646403][ T287] device veth1_macvtap entered promiscuous mode [ 25.646425][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 25.658004][ T291] device veth1_macvtap entered promiscuous mode [ 25.671677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.683917][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.692070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.700502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.709062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.717047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.725532][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.756424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.765809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.777522][ T314] loop2: detected capacity change from 0 to 512 [ 25.785807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.794674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.803866][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.812165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.812897][ T314] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.3: iget: bad i_size value: 38620345925642 [ 25.821283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.841342][ T314] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.3: couldn't read orphan inode 15 (err -117) [ 25.853364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.861750][ T314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.863103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.885729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.898003][ T312] tipc: Started in network mode [ 25.904243][ T312] tipc: Node identity 7f000001, cluster identity 4711 [ 25.911109][ T312] tipc: New replicast peer: 127.0.0.2 [ 25.920485][ T314] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3: bg 0: block 5: invalid block bitmap [ 25.921547][ T312] tipc: Enabled bearer , priority 10 [ 25.939234][ T314] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 25.953894][ T314] EXT4-fs (loop2): This should not happen!! Data will be lost [ 25.953894][ T314] [ 25.965282][ T314] EXT4-fs (loop2): Total free blocks count 0 [ 25.971624][ T314] EXT4-fs (loop2): Free/Dirty block details [ 25.987684][ T314] EXT4-fs (loop2): free_blocks=0 [ 26.012770][ T314] EXT4-fs (loop2): dirty_blocks=1 [ 26.033020][ T314] EXT4-fs (loop2): Block reservation details [ 26.039080][ T314] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 26.059081][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 26.098185][ T314] syz.2.3 (314) used greatest stack depth: 21504 bytes left [ 26.138757][ T290] EXT4-fs (loop2): unmounting filesystem. [ 26.220976][ T324] loop1: detected capacity change from 0 to 40427 [ 26.259457][ T324] F2FS-fs (loop1): fault_injection options not supported [ 26.291224][ T324] F2FS-fs (loop1): fault_type options not supported [ 26.309770][ T324] F2FS-fs (loop1): invalid crc value [ 26.321969][ T350] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.325784][ T352] loop2: detected capacity change from 0 to 512 [ 26.349212][ T324] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.362636][ T352] EXT4-fs: Ignoring removed mblk_io_submit option [ 26.399762][ T352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.417133][ T324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.445543][ T352] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.503344][ T352] EXT4-fs (loop2): unmounting filesystem. [ 26.533452][ T287] syz-executor: attempt to access beyond end of device [ 26.533452][ T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.552218][ T363] loop2: detected capacity change from 0 to 128 [ 26.585450][ T363] FAT-fs (loop2): Directory bread(block 32) failed [ 26.592013][ T363] FAT-fs (loop2): Directory bread(block 33) failed [ 26.612717][ T363] FAT-fs (loop2): Directory bread(block 34) failed [ 26.619442][ T363] FAT-fs (loop2): Directory bread(block 35) failed [ 26.631270][ T363] FAT-fs (loop2): Directory bread(block 36) failed [ 26.638792][ T363] FAT-fs (loop2): Directory bread(block 37) failed [ 26.645683][ T363] FAT-fs (loop2): Directory bread(block 38) failed [ 26.658446][ T363] FAT-fs (loop2): Directory bread(block 39) failed [ 26.665489][ T363] FAT-fs (loop2): Directory bread(block 40) failed [ 26.672176][ T363] FAT-fs (loop2): Directory bread(block 41) failed [ 26.744419][ T373] loop4: detected capacity change from 0 to 512 [ 26.792214][ T373] EXT4-fs (loop4): 1 truncate cleaned up [ 26.812422][ T363] syz.2.19: attempt to access beyond end of device [ 26.812422][ T363] loop2: rw=524288, sector=4108, nr_sectors = 4 limit=128 [ 26.826595][ T373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 26.835824][ T363] syz.2.19: attempt to access beyond end of device [ 26.835824][ T363] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 26.849340][ T363] syz.2.19: attempt to access beyond end of device [ 26.849340][ T363] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 26.862805][ T363] syz.2.19: attempt to access beyond end of device [ 26.862805][ T363] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 26.870363][ T373] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.23: bg 0: block 465: padding at end of block bitmap is not set [ 26.878515][ T377] process 'syz.0.24' launched './file0' with NULL argv: empty string added [ 26.890822][ T363] syz.2.19: attempt to access beyond end of device [ 26.890822][ T363] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 26.899908][ T377] Invalid argument reading file caps for ./file0 [ 26.941628][ T373] EXT4-fs (loop4): Remounting filesystem read-only [ 26.951263][ T373] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 26.960883][ T373] EXT4-fs (loop4): Remounting filesystem read-only [ 26.968946][ T373] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.23: invalid indirect mapped block 234881024 (level 0) [ 26.970525][ T382] loop0: detected capacity change from 0 to 256 [ 26.990270][ T373] EXT4-fs (loop4): Remounting filesystem read-only [ 27.002269][ T382] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.020659][ T382] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 27.032342][ T39] tipc: Node number set to 2130706433 [ 27.041020][ T382] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 27.069308][ T291] EXT4-fs (loop4): unmounting filesystem. [ 27.206937][ T10] tipc: Subscription rejected, illegal request [ 27.283796][ T390] loop4: detected capacity change from 0 to 40427 [ 27.302332][ T390] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 27.310101][ T390] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 27.333650][ T390] F2FS-fs (loop4): invalid crc value [ 27.373113][ T390] F2FS-fs (loop4): Found nat_bits in checkpoint [ 27.414904][ T390] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 27.422129][ T390] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 27.443718][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 27.443738][ T28] audit: type=1400 audit(1789534321.166:165): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 27.485097][ T28] audit: type=1400 audit(1789534321.186:166): avc: denied { setattr } for pid=389 comm="syz.4.29" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.507381][ T28] audit: type=1400 audit(1789534321.226:167): avc: denied { read write } for pid=407 comm="syz.2.35" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.524916][ T58] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.530935][ T28] audit: type=1400 audit(1789534321.226:168): avc: denied { open } for pid=407 comm="syz.2.35" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 27.556630][ T58] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 27.570564][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.648393][ T28] audit: type=1400 audit(1789534321.366:169): avc: denied { block_suspend } for pid=411 comm="syz.4.36" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.706562][ T418] device sit0 entered promiscuous mode [ 27.713363][ T418] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 27.720955][ T418] netlink: 1 bytes leftover after parsing attributes in process `syz.4.39'. [ 27.735621][ T418] syz.4.39 (418) used greatest stack depth: 21056 bytes left [ 27.745636][ T28] audit: type=1400 audit(1789534321.466:170): avc: denied { watch } for pid=420 comm="syz.4.40" path="/17/file0" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.753471][ T39] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 27.778105][ T39] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 27.787923][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 27.798889][ T39] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 27.808005][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.817130][ T401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.824354][ T401] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 27.832126][ T39] pl2303 1-1:1.0: pl2303 converter detected [ 27.846133][ T39] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 27.867691][ T28] audit: type=1400 audit(1789534321.586:171): avc: denied { read } for pid=426 comm="syz.1.43" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.890975][ T28] audit: type=1400 audit(1789534321.586:172): avc: denied { open } for pid=426 comm="syz.1.43" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.917780][ T28] audit: type=1400 audit(1789534321.586:173): avc: denied { map } for pid=426 comm="syz.1.43" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 27.941733][ T28] audit: type=1400 audit(1789534321.586:174): avc: denied { create } for pid=426 comm="syz.1.43" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.982357][ T308] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.008739][ T429] loop4: detected capacity change from 0 to 40427 [ 28.019753][ T429] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 28.027749][ T429] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.045100][ T429] F2FS-fs (loop4): invalid crc value [ 28.074756][ T429] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.104487][ T429] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.111605][ T429] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.122332][ T331] Bluetooth: hci0: command 0x1003 tx timeout [ 28.122433][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 28.155943][ T438] loop3: detected capacity change from 0 to 512 [ 28.163501][ T308] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 28.171721][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.174638][ T438] EXT4-fs: Ignoring removed nobh option [ 28.183966][ T401] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 28.196801][ T291] syz-executor: attempt to access beyond end of device [ 28.196801][ T291] loop4: rw=2051, sector=77824, nr_sectors = 8 limit=40427 [ 28.196865][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.220834][ T401] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 28.221253][ T291] F2FS-fs (loop4): Issue discard(9728, 9728, 1) failed, ret: -5 [ 28.227876][ T308] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.227911][ T308] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.240642][ T401] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 28.249202][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.274102][ T438] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 28.274463][ T308] usb 3-1: config 0 descriptor?? [ 28.288554][ T401] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 28.292503][ T438] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.297995][ T401] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 28.379032][ T438] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.46: corrupted inode contents [ 28.391185][ T438] EXT4-fs error (device loop3): ext4_dirty_inode:6158: inode #2: comm syz.3.46: mark_inode_dirty error [ 28.403230][ T438] EXT4-fs error (device loop3): ext4_do_update_inode:5281: inode #2: comm syz.3.46: corrupted inode contents [ 28.415318][ T438] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.46: mark_inode_dirty error [ 28.440553][ T288] EXT4-fs (loop3): unmounting filesystem. [ 28.632564][ T400] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 28.650035][ T400] pl2303 ttyUSB0: error sending break = -32 [ 28.660050][ T419] usb 1-1: USB disconnect, device number 2 [ 28.670109][ T419] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 28.689489][ T451] loop3: detected capacity change from 0 to 40427 [ 28.699509][ T308] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 28.700431][ T419] pl2303 1-1:1.0: device disconnected [ 28.718058][ T308] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 28.725947][ T451] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 28.729365][ T308] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 28.742340][ T451] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 28.754002][ T451] F2FS-fs (loop3): invalid crc value [ 28.770309][ T451] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 28.828397][ T451] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 28.835501][ T451] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.873565][ T452] f2fs_ckpt-7:3: attempt to access beyond end of device [ 28.873565][ T452] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 28.889060][ T451] ======================================================= [ 28.889060][ T451] WARNING: The mand mount option has been deprecated and [ 28.889060][ T451] and is ignored by this kernel. Remove the mand [ 28.889060][ T451] option from the mount to silence this warning. [ 28.889060][ T451] ======================================================= [ 28.933444][ T458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 28.952416][ T458] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.999536][ T287] EXT4-fs (loop1): unmounting filesystem. [ 29.084123][ T39] usb 3-1: USB disconnect, device number 2 [ 29.192969][ T464] F2FS-fs (loop1): invalid crc value [ 29.207191][ T464] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.259922][ T464] F2FS-fs (loop1): Start checkpoint disabled! [ 29.271318][ T464] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 29.284402][ T464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 29.307849][ T476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.321253][ T476] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.344234][ T476] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only [ 29.355520][ T464] syz.1.54: attempt to access beyond end of device [ 29.355520][ T464] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 29.369508][ T464] syz.1.54: attempt to access beyond end of device [ 29.369508][ T464] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 29.387863][ T479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.395882][ T291] EXT4-fs (loop4): unmounting filesystem. [ 29.397386][ T479] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.440885][ T479] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.58: lblock 0 mapped to illegal pblock 0 (length 6) [ 29.454394][ T479] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.58: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 29.477239][ T479] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.491895][ T479] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.58: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 29.517393][ T479] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.58: lblock 0 mapped to illegal pblock 0 (length 1) [ 29.539906][ T479] EXT4-fs error (device loop0): ext4_ext_remove_space:2945: inode #15: comm syz.0.58: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 29.576899][ T289] EXT4-fs (loop0): unmounting filesystem. [ 29.636694][ T497] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x0f9fe0e0, utbl_chksum : 0xe619d30d) [ 29.697601][ T507] exfat: Deprecated parameter 'utf8' [ 29.704658][ T507] exfat: Deprecated parameter 'namecase' [ 29.714200][ T507] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 29.913579][ T522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.925502][ T522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.940813][ T522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.959947][ T522] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.973333][ T522] EXT4-fs (loop2): 1 truncate cleaned up [ 29.978985][ T522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.992229][ T524] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.004846][ T524] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.024223][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.069089][ T289] EXT4-fs (loop0): unmounting filesystem. [ 30.134235][ T534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.143455][ T534] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.166335][ T289] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 30.188230][ T289] EXT4-fs error (device loop0): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 30.189574][ T531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.214665][ T531] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.236331][ T544] EXT4-fs: Ignoring removed oldalloc option [ 30.242333][ T544] EXT4-fs: Ignoring removed bh option [ 30.263267][ T544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 30.271912][ T544] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.288497][ T289] EXT4-fs (loop0): unmounting filesystem. [ 30.295106][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.302495][ T544] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.85: bg 0: block 112: padding at end of block bitmap is not set [ 30.318530][ T544] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 30.331361][ T544] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.331361][ T544] [ 30.341104][ T544] EXT4-fs (loop3): Total free blocks count 0 [ 30.351173][ T544] EXT4-fs (loop3): Free/Dirty block details [ 30.358690][ T544] EXT4-fs (loop3): free_blocks=0 [ 30.373073][ T544] EXT4-fs (loop3): dirty_blocks=80 [ 30.380393][ T544] EXT4-fs (loop3): Block reservation details [ 30.386513][ T544] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 30.425519][ T288] EXT4-fs (loop3): unmounting filesystem. [ 30.576360][ T552] mmap: syz.2.86 (552) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.601468][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.610413][ T555] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.619356][ T555] device bridge_slave_0 entered promiscuous mode [ 30.630637][ T555] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.660627][ T555] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.688587][ T555] device bridge_slave_1 entered promiscuous mode [ 30.716447][ T549] syz.2.86 (549) used greatest stack depth: 20744 bytes left [ 30.786341][ T572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.871780][ T588] set_capacity_and_notify: 16 callbacks suppressed [ 30.871795][ T588] loop4: detected capacity change from 0 to 16 [ 30.884833][ T572] EXT4-fs error (device loop1): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.1.94: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 30.889824][ T555] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.911812][ T555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.919118][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.926168][ T555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.944034][ T10] device bridge_slave_1 left promiscuous mode [ 30.944378][ T588] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.950191][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.965743][ T572] EXT4-fs error (device loop1): ext4_get_first_dir_block:3605: inode #12: comm syz.1.94: directory missing '..' [ 30.999251][ T10] device bridge_slave_0 left promiscuous mode [ 31.005875][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.019277][ T10] device veth1_macvtap left promiscuous mode [ 31.025403][ T10] device veth0_vlan left promiscuous mode [ 31.032612][ T287] EXT4-fs (loop1): unmounting filesystem. [ 31.145096][ T604] loop2: detected capacity change from 0 to 256 [ 31.161874][ T604] exfat: Deprecated parameter 'namecase' [ 31.168921][ T604] exfat: Deprecated parameter 'namecase' [ 31.182783][ T604] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 31.213911][ T595] loop4: detected capacity change from 0 to 40427 [ 31.214768][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.223340][ T595] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 31.235524][ T595] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 31.247936][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.249160][ T595] F2FS-fs (loop4): invalid crc value [ 31.276639][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.295836][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.302843][ T595] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 31.322928][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.334705][ T595] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 31.341857][ T595] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.342992][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.356358][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.393901][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.404771][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.422723][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.429836][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.479298][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.488597][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.498335][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.507109][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.522509][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.531182][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.570756][ T619] loop2: detected capacity change from 0 to 1024 [ 31.578612][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.589762][ T621] loop4: detected capacity change from 0 to 128 [ 31.598260][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.608023][ T555] device veth0_vlan entered promiscuous mode [ 31.619141][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.624588][ T619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 31.629924][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.651783][ T290] EXT4-fs (loop2): unmounting filesystem. [ 31.666699][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.675523][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.684473][ T626] loop4: detected capacity change from 0 to 128 [ 31.702605][ T555] device veth1_macvtap entered promiscuous mode [ 31.724012][ T626] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.733062][ T626] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.744865][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.756394][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.765185][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.781280][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.789794][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.798560][ T291] EXT4-fs (loop4): unmounting filesystem. [ 31.807154][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.814913][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.824811][ T617] device bridge_slave_0 entered promiscuous mode [ 31.836228][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.843534][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.854277][ T636] loop4: detected capacity change from 0 to 512 [ 31.861187][ T617] device bridge_slave_1 entered promiscuous mode [ 31.861871][ T636] EXT4-fs: Ignoring removed oldalloc option [ 31.875260][ T10] tipc: Disabling bearer [ 31.882113][ T10] tipc: Left network mode [ 31.919580][ T636] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.923281][ T644] loop1: detected capacity change from 0 to 256 [ 31.944077][ T645] loop5: detected capacity change from 0 to 16 [ 31.956163][ T645] erofs: (device loop5): mounted with root inode @ nid 36. [ 31.960920][ T644] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 31.978086][ T46] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 31.994679][ T645] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 32.027679][ T291] EXT4-fs (loop4): unmounting filesystem. [ 32.095915][ T656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 32.125334][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.132417][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.139708][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.146876][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.180209][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.188524][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.196196][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.219989][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.229448][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.236523][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.247521][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.256463][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.263534][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.275361][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.284740][ T663] loop4: detected capacity change from 0 to 40427 [ 32.296728][ T663] F2FS-fs (loop4): fault_injection options not supported [ 32.304237][ T663] F2FS-fs (loop4): fault_type options not supported [ 32.311380][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.312784][ T663] F2FS-fs (loop4): invalid crc value [ 32.319581][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.327505][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.340963][ T663] F2FS-fs (loop4): Found nat_bits in checkpoint [ 32.354801][ T617] device veth0_vlan entered promiscuous mode [ 32.367411][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.375582][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.407968][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.426465][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.439238][ T617] device veth1_macvtap entered promiscuous mode [ 32.444741][ T663] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 32.447541][ T679] binder: 678:679 ioctl c0306201 0 returned -14 [ 32.470277][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.488725][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.512381][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 32.513623][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.519408][ T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.537155][ T19] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 32.550026][ T28] kauditd_printk_skb: 87 callbacks suppressed [ 32.550040][ T28] audit: type=1400 audit(1789534326.256:262): avc: denied { mounton } for pid=662 comm="syz.4.129" path="/40/file0/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.555500][ T291] bio_check_eod: 9 callbacks suppressed [ 32.555513][ T291] syz-executor: attempt to access beyond end of device [ 32.555513][ T291] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 32.566513][ T28] audit: type=1400 audit(1789534326.256:263): avc: denied { remove_name } for pid=662 comm="syz.4.129" name="#3" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.590391][ T291] syz-executor: attempt to access beyond end of device [ 32.590391][ T291] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 32.609021][ T683] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 32.620970][ T28] audit: type=1400 audit(1789534326.256:264): avc: denied { rename } for pid=662 comm="syz.4.129" name="#3" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.644434][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.681426][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.691662][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.706710][ T605] kworker/u4:5: attempt to access beyond end of device [ 32.706710][ T605] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 32.708225][ T683] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.738855][ T19] usb 3-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 32.748134][ T28] audit: type=1400 audit(1789534326.256:265): avc: denied { unlink } for pid=662 comm="syz.4.129" name="#3" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.770129][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.779214][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.787735][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.799888][ T10] device bridge_slave_1 left promiscuous mode [ 32.806191][ T19] usb 3-1: config 0 descriptor?? [ 32.812202][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.820622][ T10] device bridge_slave_0 left promiscuous mode [ 32.826999][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.835431][ T10] device veth1_macvtap left promiscuous mode [ 32.841781][ T10] device veth0_vlan left promiscuous mode [ 32.847883][ T691] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.136: bg 0: block 345: padding at end of block bitmap is not set [ 32.899332][ T28] audit: type=1400 audit(1789534326.616:266): avc: denied { ioctl } for pid=693 comm="syz.5.139" path="socket:[18153]" dev="sockfs" ino=18153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.899921][ T691] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117 [ 32.975586][ T691] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.975586][ T691] [ 32.985454][ T315] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 32.998110][ T315] EXT4-fs (loop1): This should not happen!! Data will be lost [ 32.998110][ T315] [ 33.014925][ T315] EXT4-fs (loop1): Total free blocks count 0 [ 33.023329][ T315] EXT4-fs (loop1): Free/Dirty block details [ 33.042557][ T315] EXT4-fs (loop1): free_blocks=0 [ 33.047628][ T315] EXT4-fs (loop1): dirty_blocks=1408 [ 33.057707][ T315] EXT4-fs (loop1): Block reservation details [ 33.103992][ T28] audit: type=1400 audit(1789534326.826:267): avc: denied { set_context_mgr } for pid=697 comm="syz.5.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.203904][ T707] Illegal XDP return value 3116846657 on prog (id 17) dev syz_tun, expect packet loss! [ 33.218526][ T19] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0B05:18C6.0003/input/input5 [ 33.231274][ T703] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 33.265196][ T28] audit: type=1400 audit(1789534326.986:268): avc: denied { map } for pid=712 comm="syz.1.146" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.295274][ T555] EXT4-fs (loop5): unmounting filesystem. [ 33.295360][ T28] audit: type=1400 audit(1789534327.006:269): avc: denied { write } for pid=712 comm="syz.1.146" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.338839][ T711] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.346008][ T711] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.353657][ T711] device bridge_slave_0 entered promiscuous mode [ 33.364466][ T28] audit: type=1400 audit(1789534327.086:270): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.365103][ T19] hid-generic 0003:0B05:18C6.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.2-1/input0 [ 33.400363][ T711] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.401833][ T28] audit: type=1400 audit(1789534327.086:271): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=710 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.419821][ T711] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.439596][ T711] device bridge_slave_1 entered promiscuous mode [ 33.456713][ T19] usb 3-1: USB disconnect, device number 3 [ 33.518046][ T727] fido_id[727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 33.564390][ T737] netlink: 48 bytes leftover after parsing attributes in process `syz.3.156'. [ 33.584893][ T735] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.603520][ T737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 33.619445][ T735] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.632792][ T737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 33.707528][ T746] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 33.731586][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.742837][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.766074][ T746] EXT4-fs (loop1): orphan cleanup on readonly fs [ 33.773085][ T746] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.159: Block bitmap for bg 0 marked uninitialized [ 33.786749][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.795460][ T746] EXT4-fs (loop1): Remounting filesystem read-only [ 33.803355][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.811470][ T746] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.820589][ T605] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.827699][ T605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.835754][ T746] EXT4-fs (loop1): Remounting filesystem read-only [ 33.842511][ T746] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.159: Block bitmap for bg 0 marked uninitialized [ 33.855954][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.864431][ T746] EXT4-fs (loop1): Remounting filesystem read-only [ 33.868909][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.871314][ T748] F2FS-fs (loop3): fault_injection options not supported [ 33.879404][ T605] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.886797][ T746] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.893147][ T605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.893417][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.914785][ T746] EXT4-fs (loop1): Remounting filesystem read-only [ 33.924102][ T748] F2FS-fs (loop3): fault_type options not supported [ 33.924999][ T746] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.159: Block bitmap for bg 0 marked uninitialized [ 33.931175][ T748] F2FS-fs (loop3): invalid crc value [ 33.944974][ T746] EXT4-fs (loop1): Remounting filesystem read-only [ 33.953685][ T748] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.956498][ T746] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 33.973002][ T746] EXT4-fs (loop1): Remounting filesystem read-only [ 33.978499][ T711] device veth0_vlan entered promiscuous mode [ 33.979663][ T746] EXT4-fs (loop1): 1 orphan inode deleted [ 33.995735][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.003907][ T746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.012717][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.032907][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.040189][ T748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.048849][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.057665][ T287] EXT4-fs (loop1): unmounting filesystem. [ 34.061897][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.082649][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.090424][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.111961][ T711] device veth1_macvtap entered promiscuous mode [ 34.119213][ T755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'. [ 34.137204][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.155369][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.173602][ T10] device bridge_slave_1 left promiscuous mode [ 34.179876][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.187776][ T10] device bridge_slave_0 left promiscuous mode [ 34.194377][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.203377][ T10] device veth1_macvtap left promiscuous mode [ 34.210604][ T10] device veth0_vlan left promiscuous mode [ 34.301119][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.308665][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.316142][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.325236][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.332978][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.340433][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.348096][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.355589][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.363318][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.370806][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.378638][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.386484][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.394040][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.401432][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.402326][ T692] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.409124][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.423878][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.431273][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.438877][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.446666][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.472353][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.479777][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.487439][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.495004][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.502582][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.510044][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.517725][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.522467][ T767] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 34.525336][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.539816][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.542895][ T767] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 34.547741][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.555930][ T767] F2FS-fs (loop6): invalid crc value [ 34.571054][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.584395][ T767] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 34.585651][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.607763][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.615481][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.615657][ T767] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 34.623077][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.630076][ T692] usb 2-1: Using ep0 maxpacket: 16 [ 34.637716][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.650148][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.650346][ T767] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 34.657778][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.666263][ T692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.683579][ T692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.688071][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.696510][ T692] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 34.712979][ T692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.718614][ T24] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.721883][ T692] usb 2-1: config 0 descriptor?? [ 34.729419][ T24] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [þk] on syz1 [ 34.743005][ T711] syz-executor: attempt to access beyond end of device [ 34.743005][ T711] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.816792][ T777] fido_id[777]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 34.856612][ T782] input: syz0 as /devices/virtual/input/input6 [ 34.986767][ T795] support for the xor transformation has been removed. [ 35.137409][ T692] thrustmaster 0003:044F:B654.0005: unknown main item tag 0x0 [ 35.145977][ T692] input: HID 044f:b654 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:044F:B654.0005/input/input7 [ 35.158597][ T692] thrustmaster 0003:044F:B654.0005: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b654] on usb-dummy_hcd.1-1/input0 [ 35.181295][ T692] thrustmaster 0003:044F:B654.0005: force feedback for ThrustMaster devices by Zinx Verituse [ 35.402421][ T692] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.582337][ T692] usb 3-1: Using ep0 maxpacket: 16 [ 35.588588][ T692] usb 3-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 35.599137][ T692] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.608753][ T692] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 35.617846][ T692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.625871][ T692] usb 3-1: SerialNumber: syz [ 35.632345][ T692] usb 3-1: 0:2 : does not exist [ 35.868261][ T6] usb 2-1: USB disconnect, device number 2 [ 35.989905][ T841] set_capacity_and_notify: 9 callbacks suppressed [ 35.989916][ T841] loop3: detected capacity change from 0 to 256 [ 36.022404][ T843] loop3: detected capacity change from 0 to 256 [ 36.035234][ T843] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 36.049255][ T692] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 36.063871][ T692] usb 3-1: 5:0: failed to get current value for ch 3 (-22) [ 36.078462][ T692] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 36.089095][ T692] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 36.099311][ T692] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 36.122531][ T692] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 36.130664][ T851] loop3: detected capacity change from 0 to 512 [ 36.136147][ T692] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 36.153697][ T692] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5) [ 36.162997][ T851] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 36.164424][ T692] usb 3-1: USB disconnect, device number 4 [ 36.183752][ T851] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.221536][ T851] EXT4-fs (loop3): shut down requested (2) [ 36.250949][ T617] EXT4-fs (loop3): unmounting filesystem. [ 36.377458][ T876] loop5: detected capacity change from 0 to 256 [ 36.393938][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.419307][ T878] Zero length message leads to an empty skb [ 36.479591][ T882] xt_hashlimit: max too large, truncated to 1048576 [ 36.496375][ T884] loop1: detected capacity change from 0 to 128 [ 36.508815][ T884] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.519003][ T886] [ 36.532449][ T884] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.816687][ T894] loop5: detected capacity change from 0 to 40427 [ 36.833714][ T894] F2FS-fs (loop5): invalid crc value [ 36.876981][ T894] F2FS-fs (loop5): Found nat_bits in checkpoint [ 36.971172][ T894] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 37.035970][ T872] loop3: detected capacity change from 0 to 131072 [ 37.064832][ T872] F2FS-fs (loop3): invalid crc value [ 37.119031][ T872] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.164048][ T947] loop1: detected capacity change from 0 to 256 [ 37.219901][ T872] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 37.658939][ T978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.255'. [ 37.748857][ T949] loop5: detected capacity change from 0 to 131072 [ 37.767336][ T949] F2FS-fs (loop5): Test dummy encryption mode enabled [ 37.776227][ T949] F2FS-fs (loop5): invalid crc value [ 37.782667][ T949] F2FS-fs (loop5): Found nat_bits in checkpoint [ 37.815778][ T949] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 37.854532][ T949] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 38.109049][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 38.109063][ T28] audit: type=1400 audit(1789534331.826:321): avc: denied { append } for pid=1005 comm="syz.5.261" name="uprobe_events" dev="tracefs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.201941][ T1014] loop1: detected capacity change from 0 to 512 [ 38.257060][ T1014] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 38.269370][ T1014] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.286786][ T1018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.318413][ T1018] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.334182][ T1018] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 38.359164][ T1018] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.360868][ T287] EXT4-fs (loop1): unmounting filesystem. [ 38.392187][ T28] audit: type=1400 audit(1789534332.106:322): avc: denied { write } for pid=1031 comm="syz.5.275" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 38.393723][ T1018] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 38.427915][ T1036] EXT4-fs: Ignoring removed oldalloc option [ 38.432960][ T1033] device-mapper: ioctl: unable to find target [ 38.441510][ T28] audit: type=1400 audit(1789534332.156:323): avc: denied { map } for pid=1030 comm="syz.6.274" path="socket:[20029]" dev="sockfs" ino=20029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 38.447155][ T1036] EXT4-fs: Ignoring removed oldalloc option [ 38.482666][ T1036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.509667][ T28] audit: type=1400 audit(1789534332.226:324): avc: denied { setattr } for pid=1017 comm="syz.2.269" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.584267][ T1044] capability: warning: `syz.3.280' uses deprecated v2 capabilities in a way that may be insecure [ 38.599778][ T1036] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 38.608620][ T290] EXT4-fs (loop2): unmounting filesystem. [ 38.699220][ T1051] serio: Serial port ptm0 [ 38.743864][ T1055] exfat: Deprecated parameter 'utf8' [ 38.774857][ T1055] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xad31b01c, utbl_chksum : 0xe619d30d) [ 38.790587][ T28] audit: type=1400 audit(1789534332.506:325): avc: denied { map } for pid=1034 comm="syz.1.273" path="/45/file1/rdma.current" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.824797][ T1055] netlink: 20 bytes leftover after parsing attributes in process `syz.6.282'. [ 38.837366][ T287] EXT4-fs (loop1): unmounting filesystem. [ 38.851355][ T1064] netlink: 83 bytes leftover after parsing attributes in process `syz.3.286'. [ 38.930555][ T1069] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 38.954225][ T555] EXT4-fs (loop5): unmounting filesystem. [ 39.052347][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.099716][ T28] audit: type=1400 audit(1789534332.816:326): avc: denied { mounton } for pid=1093 comm="syz.6.297" path="/38/file0" dev="incremental-fs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.104340][ T1094] incfs: iterate_incfs_dir / -22 [ 39.158434][ T1094] incfs: iterate_incfs_dir / -22 [ 39.169671][ T1080] F2FS-fs (loop1): invalid crc value [ 39.169899][ T1099] erofs: (device loop3): z_erofs_load_lz4_config: invalid lz4 cfgs, size=6 [ 39.190876][ T1080] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.233542][ T1080] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.251789][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.270296][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.281930][ T287] syz-executor: attempt to access beyond end of device [ 39.281930][ T287] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 39.284774][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.313806][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.323126][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.352610][ T39] usb 3-1: config 0 descriptor?? [ 39.362458][ T692] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.393908][ T1112] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.411021][ T287] EXT4-fs (loop1): unmounting filesystem. [ 39.426193][ T28] audit: type=1400 audit(1789534333.146:327): avc: denied { append } for pid=1116 comm="syz.1.304" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.492398][ T6] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 39.533584][ T28] audit: type=1400 audit(1789534333.256:328): avc: denied { create } for pid=1121 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.542344][ T692] usb 6-1: Using ep0 maxpacket: 16 [ 39.559267][ T692] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.562927][ T28] audit: type=1400 audit(1789534333.276:329): avc: denied { connect } for pid=1121 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.574547][ T692] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.593071][ T28] audit: type=1400 audit(1789534333.276:330): avc: denied { shutdown } for pid=1121 comm="syz.3.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.602247][ T692] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.626655][ T692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.638817][ T692] usb 6-1: Product: syz [ 39.640129][ T1126] Invalid argument reading file caps for ./file0 [ 39.643572][ T692] usb 6-1: Manufacturer: syz [ 39.654413][ T692] usb 6-1: SerialNumber: syz [ 39.673414][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 39.684526][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.697518][ T6] usb 7-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 39.711203][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.722117][ T1132] binder: 1131:1132 ioctl c0306201 2000000004c0 returned -22 [ 39.731029][ T6] usb 7-1: config 0 descriptor?? [ 39.799013][ T39] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 39.807882][ T39] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 39.816804][ T39] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 39.869920][ T692] usb 6-1: 0:2 : does not exist [ 39.877114][ T692] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 39.890632][ T692] usb 6-1: USB disconnect, device number 2 [ 40.082960][ T308] usb 3-1: USB disconnect, device number 5 [ 40.139760][ T6] hid-led 0003:1294:1320.0007: unknown main item tag 0xd [ 40.147098][ T6] hid-led 0003:1294:1320.0007: unknown main item tag 0xe [ 40.154819][ T6] hid-led 0003:1294:1320.0007: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.6-1/input0 [ 40.166839][ T6] hid-led 0003:1294:1320.0007: Riso Kagaku Webmail Notifier initialized [ 40.350398][ T39] usb 7-1: USB disconnect, device number 2 [ 40.360641][ T24] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 40.370255][ T419] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 40.378658][ T419] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 40.391613][ T1148] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 40.404392][ T1148] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.317: EA inode hash validation failed [ 40.417790][ T1148] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.317: corrupted inode contents [ 40.429990][ T1148] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 40.439061][ T1148] EXT4-fs error (device loop1): ext4_do_update_inode:5281: inode #15: comm syz.1.317: corrupted inode contents [ 40.451220][ T1148] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.317: mark_inode_dirty error [ 40.462681][ T1148] EXT4-fs error (device loop1): ext4_free_inode:355: comm syz.1.317: bit already cleared for inode 11 [ 40.474133][ T1148] EXT4-fs (loop1): 1 orphan inode deleted [ 40.479869][ T1148] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.496528][ T1148] EXT4-fs (loop1): shut down requested (2) [ 40.506519][ T287] EXT4-fs (loop1): unmounting filesystem. [ 40.543727][ T1155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.552868][ T1155] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.574320][ T287] EXT4-fs (loop1): unmounting filesystem. [ 40.647917][ T1170] netlink: 220 bytes leftover after parsing attributes in process `syz.2.326'. [ 40.793626][ T1185] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.803345][ T1185] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.824063][ T290] EXT4-fs (loop2): unmounting filesystem. [ 40.848988][ T1181] F2FS-fs (loop3): invalid crc value [ 40.855490][ T1181] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.931745][ T1181] F2FS-fs (loop3): Start checkpoint disabled! [ 40.953754][ T1181] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 40.962442][ T39] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.970377][ T1181] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 41.037156][ T1181] syz.3.331: attempt to access beyond end of device [ 41.037156][ T1181] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 41.074589][ T1181] syz.3.331: attempt to access beyond end of device [ 41.074589][ T1181] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 41.093136][ T1202] netlink: 'syz.6.339': attribute type 4 has an invalid length. [ 41.141631][ T10] kworker/u4:1: attempt to access beyond end of device [ 41.141631][ T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 41.142222][ T1198] set_capacity_and_notify: 14 callbacks suppressed [ 41.142243][ T1198] loop2: detected capacity change from 0 to 40427 [ 41.182242][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.194217][ T1198] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 41.212452][ T39] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.225301][ T1198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.244190][ T1198] F2FS-fs (loop2): invalid crc value [ 41.250594][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.272339][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.283283][ T1198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.301256][ T39] usb 2-1: Product: syz [ 41.320904][ T39] usb 2-1: Manufacturer: syz [ 41.342357][ T39] usb 2-1: SerialNumber: syz [ 41.377936][ T1198] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 41.387745][ T1198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.393408][ T1221] loop6: detected capacity change from 0 to 8192 [ 41.479706][ T1221] loop6: p1 < > p2 < > p3 p4 < > [ 41.494981][ T1221] loop6: partition table partially beyond EOD, truncated [ 41.502155][ T1221] loop6: p1 start 67108864 is beyond EOD, truncated [ 41.513498][ T1217] loop3: detected capacity change from 0 to 40427 [ 41.523990][ T1221] loop6: p3 start 100859904 is beyond EOD, truncated [ 41.531071][ T1217] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 41.541436][ T1217] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.573403][ T1217] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 41.639820][ T1217] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.660416][ T1228] loop2: detected capacity change from 0 to 512 [ 41.673912][ T1228] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.695796][ T1228] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.348: bg 0: block 393: padding at end of block bitmap is not set [ 41.714471][ T1217] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.721623][ T1217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.742077][ T1228] EXT4-fs (loop2): Remounting filesystem read-only [ 41.768784][ T1228] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 41.788118][ T1228] EXT4-fs (loop2): Remounting filesystem read-only [ 41.832405][ T1228] EXT4-fs (loop2): 2 truncates cleaned up [ 41.838196][ T1228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.866368][ T617] syz-executor: attempt to access beyond end of device [ 41.866368][ T617] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 41.904160][ T290] EXT4-fs (loop2): unmounting filesystem. [ 41.914351][ T1243] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 41.974090][ T1249] netlink: 104 bytes leftover after parsing attributes in process `syz.6.358'. [ 42.013177][ T1255] loop6: detected capacity change from 0 to 256 [ 42.033452][ T1255] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 42.063666][ T1255] syz.6.360: attempt to access beyond end of device [ 42.063666][ T1255] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 42.079091][ T1255] syz.6.360: attempt to access beyond end of device [ 42.079091][ T1255] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 42.093512][ T1255] syz.6.360: attempt to access beyond end of device [ 42.093512][ T1255] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 42.107736][ T1255] syz.6.360: attempt to access beyond end of device [ 42.107736][ T1255] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 42.121752][ T308] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.129610][ T1255] syz.6.360: attempt to access beyond end of device [ 42.129610][ T1255] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 42.144177][ T1258] exFAT-fs (loop6): hint_cluster is invalid (1) [ 42.150868][ T1258] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.153833][ T1257] loop3: detected capacity change from 0 to 40427 [ 42.159929][ T1258] exFAT-fs (loop6): Filesystem has been set read-only [ 42.171019][ T1257] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 42.172985][ T1258] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 9, err : -5) [ 42.182558][ T1257] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 42.190252][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.202324][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 42.207752][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 0, err : -5) [ 42.225350][ T1258] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.229309][ T1257] F2FS-fs (loop3): Image doesn't support compression [ 42.234305][ T1258] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 8, err : -5) [ 42.246563][ T1257] F2FS-fs (loop3): Image doesn't support compression [ 42.251088][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.258307][ T1257] F2FS-fs (loop3): invalid crc value [ 42.266503][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 0, err : -5) [ 42.272255][ T1257] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 42.301844][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.311026][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 1, err : -5) [ 42.314496][ T1257] F2FS-fs (loop3): Start checkpoint disabled! [ 42.321442][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.327606][ T1257] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 42.336206][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 2, err : -5) [ 42.343824][ T1257] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 42.353561][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.360191][ T1257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 42.369221][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 3, err : -5) [ 42.386837][ T308] usb 6-1: config 1 has an invalid interface number: 93 but max is 0 [ 42.395180][ T39] cdc_ncm 2-1:1.0: bind() failure [ 42.395434][ T308] usb 6-1: config 1 has no interface number 0 [ 42.402324][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 42.407739][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.411752][ T39] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 42.420424][ T308] usb 6-1: config 1 interface 93 has no altsetting 0 [ 42.433058][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.433619][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 4, err : -5) [ 42.454374][ T308] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=6b.02 [ 42.459560][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.463651][ T308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.464027][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.474463][ T39] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 42.482405][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 5, err : -5) [ 42.497349][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 42.507825][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.518621][ T39] usb 2-1: USB disconnect, device number 3 [ 42.527645][ T1255] exFAT-fs (loop6): error, failed to bmap (inode : ffff8881330644f0 iblock : 6, err : -5) [ 42.533356][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.541722][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.561146][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.571230][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.580672][ T24] usb 3-1: config 0 descriptor?? [ 42.592819][ T24] hub 3-1:0.0: USB hub found [ 42.597592][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.622330][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.631160][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.642609][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.651446][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.663353][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.670090][ T1261] loop3: detected capacity change from 0 to 1024 [ 42.672155][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.687332][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.694173][ T1261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 42.696416][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.705223][ T1261] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.715309][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.732614][ T308] usb 6-1: string descriptor 0 read error: -71 [ 42.737723][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.739084][ T308] gl620a: probe of 6-1:1.93 failed with error -22 [ 42.747883][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.763022][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.771749][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.780802][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.789801][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.791697][ T1245] loop2: detected capacity change from 0 to 16 [ 42.799065][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.808795][ T308] usb 6-1: USB disconnect, device number 3 [ 42.816419][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.828199][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.837042][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.846186][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.855233][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.864251][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.874203][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.880097][ T1245] erofs: (device loop2): mounted with root inode @ nid 36. [ 42.892337][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.914937][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.924104][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.933015][ T24] hub 3-1:0.0: 20 ports detected [ 42.938235][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.947338][ T24] hub 3-1:0.0: insufficient power available to use all downstream ports [ 42.956306][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 42.962961][ T617] EXT4-fs (loop3): unmounting filesystem. [ 42.965256][ T1255] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 43.004800][ T1267] Bluetooth: ISO socket layer initialized [ 43.065518][ T1276] loop3: detected capacity change from 0 to 4096 [ 43.102122][ T1276] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.120037][ T617] EXT4-fs (loop3): unmounting filesystem. [ 43.141566][ T1287] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 43.147286][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 43.147312][ T28] audit: type=1400 audit(1789534336.866:340): avc: denied { create } for pid=1286 comm="syz.3.373" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 43.158094][ T1289] loop1: detected capacity change from 0 to 512 [ 43.236054][ T1291] overlayfs: failed to resolve './file2': -2 [ 43.340583][ T28] audit: type=1400 audit(1789534336.956:341): avc: denied { associate } for pid=1286 comm="syz.3.373" name="file2" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 43.352584][ T24] usb 3-1: USB disconnect, device number 6 [ 43.446622][ T1297] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.456227][ T28] audit: type=1400 audit(1789534337.176:342): avc: denied { rmdir } for pid=617 comm="syz-executor" name="file2" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 43.470076][ T1297] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.571792][ T1297] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.377: bg 0: block 248: padding at end of block bitmap is not set [ 43.586557][ T1297] Quota error (device loop5): write_blk: dquota write failed [ 43.594014][ T1297] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 43.604448][ T1297] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.377: Failed to acquire dquot type 1 [ 43.616257][ T1297] EXT4-fs (loop5): 1 truncate cleaned up [ 43.621893][ T1297] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 43.644109][ T1297] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 43.654415][ T1297] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 43.664549][ T1297] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.377: Failed to acquire dquot type 1 [ 43.681741][ T555] EXT4-fs (loop5): unmounting filesystem. [ 43.687823][ T10] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 43.697566][ T10] EXT4-fs error (device loop5): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 43.722359][ T692] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.749023][ T28] audit: type=1400 audit(1789534337.466:343): avc: denied { write } for pid=1308 comm="syz.5.382" name="icmp6" dev="proc" ino=4026533005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 43.819042][ T1311] input: syz1 as /devices/virtual/input/input9 [ 43.903633][ T692] usb 2-1: config 6 interface 0 has no altsetting 0 [ 43.909585][ T1319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 43.911813][ T692] usb 2-1: New USB device found, idVendor=e582, idProduct=416b, bcdDevice=d4.3f [ 43.928683][ T692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.937052][ T692] usb 2-1: Product: syz [ 43.941333][ T692] usb 2-1: Manufacturer: syz [ 43.946143][ T692] usb 2-1: SerialNumber: syz [ 43.968498][ T28] audit: type=1400 audit(1789534337.686:344): avc: denied { read } for pid=1318 comm="syz.5.387" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 43.995533][ T555] EXT4-fs (loop5): unmounting filesystem. [ 44.028733][ T1327] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.037904][ T1327] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.062139][ T1329] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 44.070347][ T1329] System zones: 1-12 [ 44.075378][ T1329] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.390: missing EA_INODE flag [ 44.076752][ T290] EXT4-fs (loop2): unmounting filesystem. [ 44.087511][ T1329] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.390: error while reading EA inode 12 err=-117 [ 44.105276][ T1329] EXT4-fs (loop5): 1 orphan inode deleted [ 44.111115][ T1329] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 44.158087][ T555] EXT4-fs (loop5): unmounting filesystem. [ 44.202787][ T1338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.233010][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 44.258502][ T1338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 44.280229][ T1338] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.309023][ T1338] EXT4-fs (loop5): shut down requested (1) [ 44.324469][ T555] EXT4-fs (loop5): unmounting filesystem. [ 44.378253][ T692] usb-storage 2-1:6.0: USB Mass Storage device detected [ 44.434281][ T6] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 44.451787][ T692] usb 2-1: USB disconnect, device number 4 [ 44.464988][ T6] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 44.474292][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.510695][ T1363] EXT4-fs: Ignoring removed nobh option [ 44.523525][ T1354] F2FS-fs (loop3): invalid crc value [ 44.532505][ T1363] EXT4-fs (loop5): 1 truncate cleaned up [ 44.533782][ T1354] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.538198][ T1363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 44.584711][ T1354] F2FS-fs (loop3): Start checkpoint disabled! [ 44.591376][ T1354] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 44.598991][ T1354] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 44.602993][ T555] EXT4-fs (loop5): unmounting filesystem. [ 44.685151][ T43] bio_check_eod: 1 callbacks suppressed [ 44.685190][ T43] kworker/u4:2: attempt to access beyond end of device [ 44.685190][ T43] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 44.784957][ T624] Bluetooth: hci0: Frame reassembly failed (-84) [ 44.878894][ T1374] F2FS-fs (loop5): invalid crc value [ 44.890536][ T1374] F2FS-fs (loop5): Found nat_bits in checkpoint [ 44.908544][ T6] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 44.946512][ T1374] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 45.139907][ T555] syz-executor: attempt to access beyond end of device [ 45.139907][ T555] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.140526][ T6] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:046D:C222.0008/input/input10 [ 45.273536][ T1386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.285994][ T1386] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.413: Directory hole found for htree leaf block 0 [ 45.306996][ T290] EXT4-fs (loop2): unmounting filesystem. [ 45.340019][ T1400] netlink: 24 bytes leftover after parsing attributes in process `syz.5.418'. [ 45.350068][ T1400] netlink: 67 bytes leftover after parsing attributes in process `syz.5.418'. [ 45.365591][ T6] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 45.376745][ T6] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 45.387360][ T6] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 45.396002][ T6] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 45.404853][ T6] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 45.413623][ T6] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71 [ 45.424861][ T6] usb 7-1: USB disconnect, device number 3 [ 45.449615][ T1398] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 45.458091][ T1398] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 45.480705][ T1398] F2FS-fs (loop2): invalid crc value [ 45.490360][ T1403] fido_id[1403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 45.532452][ T1398] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.579994][ T1398] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.592457][ T1398] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.726284][ T1416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.744901][ T290] EXT4-fs (loop2): unmounting filesystem. [ 46.097236][ T1431] F2FS-fs (loop6): invalid crc value [ 46.101242][ T1438] EXT4-fs: Ignoring removed orlov option [ 46.112662][ T1438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.124868][ T1438] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.430: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 46.143091][ T1438] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.430: couldn't read orphan inode 16 (err -117) [ 46.155619][ T1431] F2FS-fs (loop6): Found nat_bits in checkpoint [ 46.178675][ T1438] EXT4-fs (loop1): 1 orphan inode deleted [ 46.184474][ T1438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 46.202615][ T1431] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 46.231704][ T1438] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 46.263421][ T711] syz-executor: attempt to access beyond end of device [ 46.263421][ T711] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 46.287531][ T287] EXT4-fs (loop1): unmounting filesystem. [ 46.350655][ T1453] set_capacity_and_notify: 15 callbacks suppressed [ 46.350673][ T1453] loop6: detected capacity change from 0 to 128 [ 46.382772][ T1453] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.410555][ T1453] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.567377][ T1467] loop6: detected capacity change from 0 to 4096 [ 46.589288][ T1467] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.596105][ T1467] EXT4-fs: Ignoring removed orlov option [ 46.612818][ T1467] EXT4-fs (loop6): Test dummy encryption mode enabled [ 46.622170][ T1467] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 46.650360][ T1467] fscrypt: AES-256-XTS using blk-crypto-fallback [ 46.676367][ T1480] loop1: detected capacity change from 0 to 2048 [ 46.722712][ T711] EXT4-fs (loop6): unmounting filesystem. [ 46.729549][ T1480] loop1: unable to read partition table [ 46.735507][ T1480] loop1: partition table beyond EOD, truncated [ 46.741724][ T1480] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 46.748080][ T1484] loop5: detected capacity change from 0 to 512 [ 46.788205][ T103] loop1: unable to read partition table [ 46.795462][ T1484] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 46.802463][ T103] loop1: partition table beyond EOD, truncated [ 46.804422][ T1484] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.448: invalid indirect mapped block 256 (level 1) [ 46.826051][ T1484] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.448: invalid indirect mapped block 2683928664 (level 1) [ 46.841055][ T1484] EXT4-fs (loop5): 1 truncate cleaned up [ 46.846839][ T331] Bluetooth: hci0: command 0x1003 tx timeout [ 46.849805][ T1484] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 46.862055][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 46.868812][ T1372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 46.889114][ T1493] loop6: detected capacity change from 0 to 256 [ 46.900445][ T1493] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 46.922124][ T555] EXT4-fs (loop5): unmounting filesystem. [ 46.953677][ T1497] xt_hashlimit: size too large, truncated to 1048576 [ 46.955798][ T1501] loop2: detected capacity change from 0 to 1024 [ 46.983089][ T1501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.994700][ T1505] netlink: 104 bytes leftover after parsing attributes in process `syz.5.453'. [ 47.013503][ T1501] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.082069][ T1501] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.454: Freeing blocks not in datazone - block = 0, count = 16 [ 47.126765][ T43] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:2: bg 0: block 112: padding at end of block bitmap is not set [ 47.145746][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.164184][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.164184][ T43] [ 47.174009][ T43] EXT4-fs (loop2): Total free blocks count 0 [ 47.180060][ T43] EXT4-fs (loop2): Free/Dirty block details [ 47.186114][ T43] EXT4-fs (loop2): free_blocks=16 [ 47.191201][ T43] EXT4-fs (loop2): dirty_blocks=16 [ 47.196637][ T43] EXT4-fs (loop2): Block reservation details [ 47.203331][ T43] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 47.209990][ T290] EXT4-fs (loop2): unmounting filesystem. [ 47.254421][ T1523] netlink: 'syz.2.462': attribute type 4 has an invalid length. [ 47.268043][ T1523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 47.280183][ T1525] loop5: detected capacity change from 0 to 512 [ 47.292740][ T1527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 47.293270][ T1525] EXT4-fs warning (device loop5): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 47.453016][ T1552] loop3: detected capacity change from 0 to 512 [ 47.459638][ T1552] EXT4-fs: Ignoring removed i_version option [ 47.466522][ T1552] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.475953][ T1554] loop2: detected capacity change from 0 to 1024 [ 47.477841][ T1552] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.476: invalid indirect mapped block 32768 (level 2) [ 47.489774][ T1554] EXT4-fs: Ignoring removed bh option [ 47.497101][ T1552] EXT4-fs (loop3): Remounting filesystem read-only [ 47.508751][ T1554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.515180][ T1552] EXT4-fs (loop3): 1 orphan inode deleted [ 47.526607][ T1552] EXT4-fs (loop3): 1 truncate cleaned up [ 47.532684][ T1552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 47.539903][ T1554] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.563280][ T1552] EXT4-fs (loop3): shut down requested (1) [ 47.587792][ T617] EXT4-fs (loop3): unmounting filesystem. [ 47.619947][ T1565] loop3: detected capacity change from 0 to 256 [ 47.635504][ T1565] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.635997][ T1563] EXT4-fs: Ignoring removed nobh option [ 47.650420][ T1565] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 47.653568][ T1563] EXT4-fs: Ignoring removed bh option [ 47.674709][ T290] EXT4-fs (loop2): unmounting filesystem. [ 47.699062][ T1563] EXT4-fs (loop5): Test dummy encryption mode enabled [ 47.704546][ T1565] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 47.718906][ T1563] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 47.826989][ T555] EXT4-fs (loop5): unmounting filesystem. [ 47.843694][ T1582] [ 47.867790][ T624] Bluetooth: hci0: Frame reassembly failed (-84) [ 47.882324][ C1] ================================================================== [ 47.890515][ C1] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 47.897578][ C1] Write of size 8 at addr ffff88810fb34a00 by task syz.5.487/1585 [ 47.905372][ C1] [ 47.907681][ C1] CPU: 1 PID: 1585 Comm: syz.5.487 Not tainted syzkaller #0 [ 47.914947][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 47.925010][ C1] Call Trace: [ 47.928283][ C1] [ 47.931122][ C1] __dump_stack+0x21/0x24 [ 47.935446][ C1] dump_stack_lvl+0x110/0x170 [ 47.940113][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 47.945129][ C1] ? __cfi__printk+0x8/0x8 [ 47.949536][ C1] ? enqueue_timer+0xae/0x480 [ 47.954213][ C1] print_address_description+0x71/0x200 [ 47.959765][ C1] print_report+0x4a/0x60 [ 47.964174][ C1] kasan_report+0x122/0x150 [ 47.968669][ C1] ? enqueue_timer+0xae/0x480 [ 47.973343][ C1] __asan_report_store8_noabort+0x17/0x20 [ 47.979062][ C1] enqueue_timer+0xae/0x480 [ 47.983557][ C1] ? detach_if_pending+0xf5/0x300 [ 47.988569][ C1] __mod_timer+0x859/0xc00 [ 47.992975][ C1] mod_timer+0x1f/0x30 [ 47.997042][ C1] can_stat_update+0xb1c/0xbb0 [ 48.001795][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 48.007069][ C1] call_timer_fn+0x46/0x2a0 [ 48.011561][ C1] ? __cfi_can_stat_update+0x10/0x10 [ 48.016854][ C1] __run_timers+0x646/0x9b0 [ 48.021350][ C1] ? calc_index+0x200/0x200 [ 48.025915][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 48.031127][ C1] run_timer_softirq+0x6a/0xf0 [ 48.035892][ C1] handle_softirqs+0x1d7/0x600 [ 48.040655][ C1] __irq_exit_rcu+0x52/0xf0 [ 48.045161][ C1] irq_exit_rcu+0x9/0x10 [ 48.049399][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 48.055126][ C1] [ 48.058046][ C1] [ 48.060964][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 48.066938][ C1] RIP: 0010:update_stack_state+0x1d9/0x490 [ 48.072735][ C1] Code: 4d 8b 7c 24 10 48 8b 45 c8 42 0f b6 04 28 84 c0 0f 85 85 00 00 00 45 8b 2c 24 45 85 ed 0f 95 c0 48 8b 55 c0 4c 39 f2 0f 93 c1 <20> c1 4c 39 fa 0f 92 c0 20 c8 3c 01 75 14 48 8b 4d 80 4c 39 f1 0f [ 48.092329][ C1] RSP: 0000:ffffc9000676f1a8 EFLAGS: 00000206 [ 48.098385][ C1] RAX: 0000000000000001 RBX: ffffc9000676f2d0 RCX: 1ffff92000cede01 [ 48.106342][ C1] RDX: ffffc9000676f7e8 RSI: 1ffff92000cede5a RDI: ffffc9000676f320 [ 48.114297][ C1] RBP: ffffc9000676f258 R08: ffffc9000676f390 R09: ffffc9000676f388 [ 48.122253][ C1] R10: 0000000000000007 R11: fffff52000cede65 R12: ffffc9000676f2c8 [ 48.130218][ C1] R13: 0000000000000001 R14: ffffc90006768000 R15: ffffc90006770000 [ 48.138184][ C1] unwind_next_frame+0x39e/0x660 [ 48.143113][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 48.149265][ C1] arch_stack_walk+0x124/0x150 [ 48.154021][ C1] ? kvm_put_kvm+0x81a/0x13f0 [ 48.158851][ C1] stack_trace_save+0xa6/0xf0 [ 48.163514][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 48.168873][ C1] ? __stack_depot_save+0x36/0x490 [ 48.173972][ C1] ? memset+0x35/0x40 [ 48.177937][ C1] kasan_set_track+0x4b/0x70 [ 48.182511][ C1] ? kasan_set_track+0x4b/0x70 [ 48.187261][ C1] ? kasan_save_free_info+0x2b/0x40 [ 48.192447][ C1] ? ____kasan_slab_free+0x132/0x180 [ 48.197718][ C1] ? __kasan_slab_free+0x11/0x20 [ 48.202645][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 48.208171][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 48.213183][ C1] ? kfree+0x6f/0xf0 [ 48.217148][ C1] ? kvm_put_kvm+0x81a/0x13f0 [ 48.221824][ C1] ? debug_smp_processor_id+0x17/0x20 [ 48.227186][ C1] ? kasan_quarantine_put+0x34/0x190 [ 48.232453][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 48.237463][ C1] kasan_save_free_info+0x2b/0x40 [ 48.242474][ C1] ____kasan_slab_free+0x132/0x180 [ 48.247574][ C1] __kasan_slab_free+0x11/0x20 [ 48.252328][ C1] slab_free_freelist_hook+0xc2/0x190 [ 48.257686][ C1] ? kvm_put_kvm+0x81a/0x13f0 [ 48.262366][ C1] __kmem_cache_free+0xb7/0x1b0 [ 48.267207][ C1] kfree+0x6f/0xf0 [ 48.270909][ C1] kvm_put_kvm+0x81a/0x13f0 [ 48.275403][ C1] kvm_vm_release+0x46/0x50 [ 48.280011][ C1] ? __cfi_kvm_vm_release+0x10/0x10 [ 48.285208][ C1] __fput+0x1fd/0x8f0 [ 48.289185][ C1] ____fput+0x15/0x20 [ 48.293152][ C1] task_work_run+0x1e1/0x250 [ 48.297731][ C1] ? __cfi_task_work_run+0x10/0x10 [ 48.302871][ C1] ? __kasan_check_write+0x14/0x20 [ 48.307973][ C1] do_exit+0xb03/0x2970 [ 48.312119][ C1] ? __cfi_do_exit+0x10/0x10 [ 48.316707][ C1] ? plist_check_list+0x255/0x270 [ 48.321711][ C1] ? _raw_spin_lock+0x94/0xf0 [ 48.326376][ C1] ? __kasan_check_write+0x14/0x20 [ 48.331471][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 48.336482][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 48.342017][ C1] do_group_exit+0x21b/0x2e0 [ 48.346599][ C1] ? __kasan_check_write+0x14/0x20 [ 48.351794][ C1] ? recalc_sigpending+0x168/0x1c0 [ 48.356921][ C1] get_signal+0x167c/0x1700 [ 48.361421][ C1] ? __cfi_get_signal+0x10/0x10 [ 48.366348][ C1] arch_do_signal_or_restart+0xd1/0x11c0 [ 48.371966][ C1] ? do_futex+0x2e2/0x430 [ 48.376281][ C1] ? __cfi_do_futex+0x10/0x10 [ 48.380943][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 48.387098][ C1] ? __se_sys_futex+0x136/0x310 [ 48.391940][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 48.397127][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 48.402576][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 48.408025][ C1] do_syscall_64+0x58/0xa0 [ 48.412431][ C1] ? clear_bhb_loop+0x30/0x80 [ 48.417095][ C1] ? clear_bhb_loop+0x30/0x80 [ 48.421755][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.427641][ C1] RIP: 0033:0x7fef66b9e159 [ 48.432055][ C1] Code: Unable to access opcode bytes at 0x7fef66b9e12f. [ 48.439049][ C1] RSP: 002b:00007fef679a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 48.447442][ C1] RAX: fffffffffffffe00 RBX: 00007fef66e25fa8 RCX: 00007fef66b9e159 [ 48.455430][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef66e25fa8 [ 48.463401][ C1] RBP: 00007fef66e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 48.471367][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 48.479333][ C1] R13: 00007fef66e26038 R14: 00007fff10adffd0 R15: 00007fff10ae00b8 [ 48.487297][ C1] [ 48.490301][ C1] [ 48.492607][ C1] Allocated by task 1372: [ 48.496912][ C1] kasan_set_track+0x4b/0x70 [ 48.501490][ C1] kasan_save_alloc_info+0x1f/0x30 [ 48.506581][ C1] __kasan_kmalloc+0x95/0xb0 [ 48.511155][ C1] __kmalloc+0xb4/0x1e0 [ 48.515303][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 48.520318][ C1] hci_uart_tty_ioctl+0x3c4/0xa70 [ 48.525327][ C1] tty_ioctl+0x8ef/0xc60 [ 48.529567][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 48.534335][ C1] __x64_sys_ioctl+0x7b/0x90 [ 48.539071][ C1] x64_sys_call+0x58b/0x9a0 [ 48.543582][ C1] do_syscall_64+0x4c/0xa0 [ 48.547996][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.553963][ C1] [ 48.556274][ C1] Freed by task 1372: [ 48.560408][ C1] kasan_set_track+0x4b/0x70 [ 48.565084][ C1] kasan_save_free_info+0x2b/0x40 [ 48.570099][ C1] ____kasan_slab_free+0x132/0x180 [ 48.575198][ C1] __kasan_slab_free+0x11/0x20 [ 48.579961][ C1] slab_free_freelist_hook+0xc2/0x190 [ 48.585334][ C1] __kmem_cache_free+0xb7/0x1b0 [ 48.590183][ C1] kfree+0x6f/0xf0 [ 48.593901][ C1] hci_release_dev+0x12a3/0x13b0 [ 48.599004][ C1] bt_host_release+0x82/0x90 [ 48.603579][ C1] device_release+0xa4/0x1d0 [ 48.608162][ C1] kobject_put+0x19d/0x280 [ 48.612561][ C1] put_device+0x1f/0x30 [ 48.616698][ C1] hci_dev_cmd+0x279/0x740 [ 48.621104][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 48.625762][ C1] sock_do_ioctl+0x114/0x330 [ 48.630335][ C1] sock_ioctl+0x475/0x700 [ 48.634736][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 48.639397][ C1] __x64_sys_ioctl+0x7b/0x90 [ 48.643978][ C1] x64_sys_call+0x58b/0x9a0 [ 48.648488][ C1] do_syscall_64+0x4c/0xa0 [ 48.652905][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.658800][ C1] [ 48.661110][ C1] Last potentially related work creation: [ 48.666803][ C1] kasan_save_stack+0x3a/0x60 [ 48.671466][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 48.676856][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.682832][ C1] insert_work+0x51/0x300 [ 48.687160][ C1] __queue_work+0x9d0/0xd50 [ 48.691656][ C1] queue_work_on+0xde/0x150 [ 48.696150][ C1] __hci_cmd_sync_sk+0xaa8/0xd80 [ 48.701082][ C1] hci_cmd_sync_status+0x53/0x120 [ 48.706101][ C1] hci_dev_cmd+0x357/0x740 [ 48.710538][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 48.715200][ C1] sock_do_ioctl+0x114/0x330 [ 48.719776][ C1] sock_ioctl+0x475/0x700 [ 48.724088][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 48.728749][ C1] __x64_sys_ioctl+0x7b/0x90 [ 48.733324][ C1] x64_sys_call+0x58b/0x9a0 [ 48.737820][ C1] do_syscall_64+0x4c/0xa0 [ 48.742236][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.748301][ C1] [ 48.750624][ C1] Second to last potentially related work creation: [ 48.757196][ C1] kasan_save_stack+0x3a/0x60 [ 48.761880][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 48.767236][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 48.773031][ C1] insert_work+0x51/0x300 [ 48.777351][ C1] __queue_work+0x9d0/0xd50 [ 48.781841][ C1] queue_work_on+0xde/0x150 [ 48.786329][ C1] hci_cmd_timeout+0x191/0x200 [ 48.791083][ C1] process_one_work+0x717/0xc30 [ 48.795924][ C1] worker_thread+0xa4d/0x11d0 [ 48.800611][ C1] kthread+0x281/0x320 [ 48.804674][ C1] ret_from_fork+0x1f/0x30 [ 48.809091][ C1] [ 48.811428][ C1] The buggy address belongs to the object at ffff88810fb34000 [ 48.811428][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 48.825463][ C1] The buggy address is located 2560 bytes inside of [ 48.825463][ C1] 8192-byte region [ffff88810fb34000, ffff88810fb36000) [ 48.838896][ C1] [ 48.841205][ C1] The buggy address belongs to the physical page: [ 48.847595][ C1] page:ffffea00043ecc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10fb30 [ 48.857816][ C1] head:ffffea00043ecc00 order:3 compound_mapcount:0 compound_pincount:0 [ 48.866121][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 48.872194][ C1] raw: 4000000000010200 ffffea00043ece00 dead000000000006 ffff888100043500 [ 48.880847][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 48.889409][ C1] page dumped because: kasan: bad access detected [ 48.896245][ C1] page_owner tracks the page as allocated [ 48.901940][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 291, tgid 291 (syz-executor), ts 24041524974, free_ts 24032717356 [ 48.923106][ C1] post_alloc_hook+0x1f5/0x210 [ 48.927868][ C1] prep_new_page+0x1c/0x110 [ 48.932359][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 48.937896][ C1] __alloc_pages+0x1fa/0x610 [ 48.942478][ C1] alloc_slab_page+0x6e/0xf0 [ 48.947061][ C1] new_slab+0x98/0x3e0 [ 48.951113][ C1] ___slab_alloc+0x70f/0xb70 [ 48.955690][ C1] __slab_alloc+0x5e/0xa0 [ 48.960018][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 48.965478][ C1] __kmalloc_node+0xa2/0x1e0 [ 48.970051][ C1] kvmalloc_node+0x28a/0x460 [ 48.974624][ C1] pfifo_fast_init+0x3a9/0x7a0 [ 48.979373][ C1] qdisc_create_dflt+0x150/0x3a0 [ 48.984305][ C1] dev_activate+0x30e/0x1110 [ 48.988914][ C1] __dev_open+0x40d/0x520 [ 48.993321][ C1] __dev_change_flags+0x1f2/0x6b0 [ 48.998339][ C1] page last free stack trace: [ 49.003344][ C1] free_unref_page_prepare+0x81b/0x820 [ 49.008791][ C1] free_unref_page+0x93/0x530 [ 49.013452][ C1] __free_pages+0x67/0x100 [ 49.017861][ C1] __free_slab+0xc7/0x1a0 [ 49.022197][ C1] __unfreeze_partials+0x15a/0x190 [ 49.027383][ C1] put_cpu_partial+0xa9/0x100 [ 49.032049][ C1] __slab_free+0x1c4/0x280 [ 49.036497][ C1] ___cache_free+0xbf/0xd0 [ 49.040899][ C1] qlist_free_all+0xc6/0x140 [ 49.045486][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 49.050926][ C1] __kasan_slab_alloc+0x24/0x80 [ 49.055773][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 49.060872][ C1] __kmem_cache_alloc_node+0x194/0x2d0 [ 49.066315][ C1] kmalloc_trace+0x29/0xb0 [ 49.070711][ C1] ref_tracker_alloc+0x16b/0x4a0 [ 49.075635][ C1] netdev_queue_update_kobjects+0x181/0x470 [ 49.081512][ C1] [ 49.083819][ C1] Memory state around the buggy address: [ 49.089427][ C1] ffff88810fb34900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.097477][ C1] ffff88810fb34980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.105536][ C1] >ffff88810fb34a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.113575][ C1] ^ [ 49.117632][ C1] ffff88810fb34a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.125674][ C1] ffff88810fb34b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.133713][ C1] ================================================================== [ 49.141749][ C1] Disabling lock debugging due to kernel taint [ 49.148833][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 49.160558][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 49.168959][ C1] CPU: 1 PID: 1585 Comm: syz.5.487 Tainted: G B syzkaller #0 [ 49.177703][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 49.187743][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 49.193282][ C1] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 1d bc b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 b8 b7 b9 03 [ 49.212876][ C1] RSP: 0000:ffffc900001b0c78 EFLAGS: 00010046 [ 49.218928][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888114ced100 [ 49.226885][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 49.234851][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 49.242807][ C1] R10: dffffc0000000000 R11: ffffed1021f66939 R12: ffff88810fb349c8 [ 49.250773][ C1] R13: ffff88811ec72c00 R14: 0000000000000000 R15: 000000007fffffff [ 49.258727][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.267639][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.274208][ C1] CR2: 0000001b3371dff8 CR3: 000000000700f000 CR4: 00000000003526a0 [ 49.282167][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.290122][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.298078][ C1] Call Trace: [ 49.301384][ C1] [ 49.304216][ C1] delayed_work_timer_fn+0x61/0x80 [ 49.309321][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 49.315113][ C1] call_timer_fn+0x46/0x2a0 [ 49.319603][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 49.325401][ C1] __run_timers+0x672/0x9b0 [ 49.329910][ C1] ? calc_index+0x200/0x200 [ 49.334404][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 49.339593][ C1] run_timer_softirq+0x6a/0xf0 [ 49.344346][ C1] handle_softirqs+0x1d7/0x600 [ 49.349099][ C1] __irq_exit_rcu+0x52/0xf0 [ 49.353585][ C1] irq_exit_rcu+0x9/0x10 [ 49.357810][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 49.363514][ C1] [ 49.366430][ C1] [ 49.369345][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 49.375310][ C1] RIP: 0010:update_stack_state+0x1d9/0x490 [ 49.381102][ C1] Code: 4d 8b 7c 24 10 48 8b 45 c8 42 0f b6 04 28 84 c0 0f 85 85 00 00 00 45 8b 2c 24 45 85 ed 0f 95 c0 48 8b 55 c0 4c 39 f2 0f 93 c1 <20> c1 4c 39 fa 0f 92 c0 20 c8 3c 01 75 14 48 8b 4d 80 4c 39 f1 0f [ 49.400780][ C1] RSP: 0000:ffffc9000676f1a8 EFLAGS: 00000206 [ 49.406830][ C1] RAX: 0000000000000001 RBX: ffffc9000676f2d0 RCX: 1ffff92000cede01 [ 49.414794][ C1] RDX: ffffc9000676f7e8 RSI: 1ffff92000cede5a RDI: ffffc9000676f320 [ 49.422760][ C1] RBP: ffffc9000676f258 R08: ffffc9000676f390 R09: ffffc9000676f388 [ 49.430737][ C1] R10: 0000000000000007 R11: fffff52000cede65 R12: ffffc9000676f2c8 [ 49.438713][ C1] R13: 0000000000000001 R14: ffffc90006768000 R15: ffffc90006770000 [ 49.446687][ C1] unwind_next_frame+0x39e/0x660 [ 49.451625][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 49.457783][ C1] arch_stack_walk+0x124/0x150 [ 49.462541][ C1] ? kvm_put_kvm+0x81a/0x13f0 [ 49.467211][ C1] stack_trace_save+0xa6/0xf0 [ 49.471878][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 49.477242][ C1] ? __stack_depot_save+0x36/0x490 [ 49.482349][ C1] ? memset+0x35/0x40 [ 49.486318][ C1] kasan_set_track+0x4b/0x70 [ 49.490892][ C1] ? kasan_set_track+0x4b/0x70 [ 49.495641][ C1] ? kasan_save_free_info+0x2b/0x40 [ 49.500823][ C1] ? ____kasan_slab_free+0x132/0x180 [ 49.506094][ C1] ? __kasan_slab_free+0x11/0x20 [ 49.511019][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 49.516547][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 49.521561][ C1] ? kfree+0x6f/0xf0 [ 49.525439][ C1] ? kvm_put_kvm+0x81a/0x13f0 [ 49.530115][ C1] ? debug_smp_processor_id+0x17/0x20 [ 49.535781][ C1] ? kasan_quarantine_put+0x34/0x190 [ 49.541050][ C1] ? __kmem_cache_free+0xb7/0x1b0 [ 49.546067][ C1] kasan_save_free_info+0x2b/0x40 [ 49.551074][ C1] ____kasan_slab_free+0x132/0x180 [ 49.556178][ C1] __kasan_slab_free+0x11/0x20 [ 49.560930][ C1] slab_free_freelist_hook+0xc2/0x190 [ 49.566285][ C1] ? kvm_put_kvm+0x81a/0x13f0 [ 49.570951][ C1] __kmem_cache_free+0xb7/0x1b0 [ 49.575877][ C1] kfree+0x6f/0xf0 [ 49.579587][ C1] kvm_put_kvm+0x81a/0x13f0 [ 49.584080][ C1] kvm_vm_release+0x46/0x50 [ 49.588572][ C1] ? __cfi_kvm_vm_release+0x10/0x10 [ 49.593767][ C1] __fput+0x1fd/0x8f0 [ 49.597828][ C1] ____fput+0x15/0x20 [ 49.601794][ C1] task_work_run+0x1e1/0x250 [ 49.606382][ C1] ? __cfi_task_work_run+0x10/0x10 [ 49.611505][ C1] ? __kasan_check_write+0x14/0x20 [ 49.616611][ C1] do_exit+0xb03/0x2970 [ 49.620856][ C1] ? __cfi_do_exit+0x10/0x10 [ 49.625536][ C1] ? plist_check_list+0x255/0x270 [ 49.630550][ C1] ? _raw_spin_lock+0x94/0xf0 [ 49.635228][ C1] ? __kasan_check_write+0x14/0x20 [ 49.640322][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 49.645338][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 49.650881][ C1] do_group_exit+0x21b/0x2e0 [ 49.655468][ C1] ? __kasan_check_write+0x14/0x20 [ 49.660570][ C1] ? recalc_sigpending+0x168/0x1c0 [ 49.665671][ C1] get_signal+0x167c/0x1700 [ 49.672341][ C1] ? __cfi_get_signal+0x10/0x10 [ 49.677447][ C1] arch_do_signal_or_restart+0xd1/0x11c0 [ 49.683065][ C1] ? do_futex+0x2e2/0x430 [ 49.687381][ C1] ? __cfi_do_futex+0x10/0x10 [ 49.692042][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 49.698192][ C1] ? __se_sys_futex+0x136/0x310 [ 49.703029][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 49.708215][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 49.713661][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 49.719107][ C1] do_syscall_64+0x58/0xa0 [ 49.723523][ C1] ? clear_bhb_loop+0x30/0x80 [ 49.728202][ C1] ? clear_bhb_loop+0x30/0x80 [ 49.732885][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.738785][ C1] RIP: 0033:0x7fef66b9e159 [ 49.743189][ C1] Code: Unable to access opcode bytes at 0x7fef66b9e12f. [ 49.750192][ C1] RSP: 002b:00007fef679a60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 49.758597][ C1] RAX: fffffffffffffe00 RBX: 00007fef66e25fa8 RCX: 00007fef66b9e159 [ 49.766560][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef66e25fa8 [ 49.774525][ C1] RBP: 00007fef66e25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 49.782570][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.790610][ C1] R13: 00007fef66e26038 R14: 00007fff10adffd0 R15: 00007fff10ae00b8 [ 49.798574][ C1] [ 49.801576][ C1] Modules linked in: [ 49.805467][ C1] ---[ end trace 0000000000000000 ]--- [ 49.810907][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 49.816188][ C1] Code: b4 00 00 00 e8 ff 53 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 1d bc b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 10 df 6e 00 49 8b 3e e8 b8 b7 b9 03 [ 49.835787][ C1] RSP: 0000:ffffc900001b0c78 EFLAGS: 00010046 [ 49.841841][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888114ced100 [ 49.849885][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 49.857845][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 49.865807][ C1] R10: dffffc0000000000 R11: ffffed1021f66939 R12: ffff88810fb349c8 [ 49.873778][ C1] R13: ffff88811ec72c00 R14: 0000000000000000 R15: 000000007fffffff [ 49.881742][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.890662][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.897234][ C1] CR2: 0000001b3371dff8 CR3: 000000000700f000 CR4: 00000000003526a0 [ 49.905198][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.913168][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.921143][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 49.928569][ C1] Kernel Offset: disabled [ 49.932880][ C1] Rebooting in 86400 seconds..