last executing test programs: 54.67136489s ago: executing program 1 (id=318): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) flistxattr(r2, 0x0, 0x0) 54.637475491s ago: executing program 1 (id=320): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) 54.602590291s ago: executing program 1 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) fstat(0xffffffffffffffff, 0x0) 54.572318481s ago: executing program 1 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 54.559706062s ago: executing program 1 (id=324): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 54.461329263s ago: executing program 1 (id=325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 54.461237393s ago: executing program 32 (id=325): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0xb0, 0x4) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 47.011887196s ago: executing program 2 (id=507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 46.933633857s ago: executing program 2 (id=510): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xda, 0xa1, 0x8c, 0x40, 0x6189, 0x182d, 0x173, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0xca, 0xea, 0x76}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) 44.612482863s ago: executing program 2 (id=557): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x14}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 44.522998534s ago: executing program 2 (id=561): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@errors_remount}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}]}, 0x23, 0x42f, &(0x7f0000000940)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0xff}, {}, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 44.11216166s ago: executing program 2 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000f40)='kfree\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) flistxattr(r2, 0x0, 0x0) 43.550155819s ago: executing program 5 (id=585): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfffffffffffffff2, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) 43.51237348s ago: executing program 5 (id=576): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) fdatasync(r0) 43.43715732s ago: executing program 2 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009a39c0f788bd05086c959135f1b9dbbeca24544c20f298c375e25092a503d47764f3f369fc17bdba6f5f08bf08e8e59966c4dd73bdfb45c987a92d28eaf6eb5287f2e3797a8a477a6ee2ef3a8c0921c22aa9a036d97242cf84375008d5c000afdc42359d5fb7301480b564f06db9a77c572b92f7df2b0786945123bfe6276ea3edcb234703033668692beef781509d9a38b168b982fef1f06bab9a856c6c0b59acfcf9bc6428732a1a8f25544625a08db9f4307b6fa5e2360cd7fac178fcbdfbd0060863912ca1798f86b73f86411c2192dec860a942f4"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 43.402483191s ago: executing program 33 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009a39c0f788bd05086c959135f1b9dbbeca24544c20f298c375e25092a503d47764f3f369fc17bdba6f5f08bf08e8e59966c4dd73bdfb45c987a92d28eaf6eb5287f2e3797a8a477a6ee2ef3a8c0921c22aa9a036d97242cf84375008d5c000afdc42359d5fb7301480b564f06db9a77c572b92f7df2b0786945123bfe6276ea3edcb234703033668692beef781509d9a38b168b982fef1f06bab9a856c6c0b59acfcf9bc6428732a1a8f25544625a08db9f4307b6fa5e2360cd7fac178fcbdfbd0060863912ca1798f86b73f86411c2192dec860a942f4"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 43.396314581s ago: executing program 5 (id=579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) 43.341900032s ago: executing program 5 (id=580): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@errors_remount}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}]}, 0x23, 0x42f, &(0x7f0000000940)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0xff}, {}, 0x161, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.915668229s ago: executing program 5 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x2, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000009c0)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@abort, 0x0}, {@noauto_da_alloc}, {@noload}, {@minixdf}, {@mblk_io_submit}, {@lazytime}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@norecovery}, {@nouser_xattr}, {@journal_checksum}, {@sysvgroups}], [{@audit}, {@fowner_gt={'fowner>', 0xee00}}], 0x2c}, 0x6, 0x4fc, &(0x7f0000001a40)="$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") 41.943467833s ago: executing program 5 (id=584): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000100)={0x3, 0x100, 0x897a}) 41.844300635s ago: executing program 34 (id=584): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000100)={0x3, 0x100, 0x897a}) 35.928810094s ago: executing program 3 (id=781): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x3, "a0125545"}, @main=@item_4={0x3, 0x0, 0xb, "5b18cc10"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 35.888942595s ago: executing program 4 (id=783): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xda, 0xa1, 0x8c, 0x40, 0x6189, 0x182d, 0x173, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0xca, 0xea, 0x76}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) 33.939999105s ago: executing program 3 (id=808): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d303030303030303030303030303030303132363600006c6c6f635f6d08006e6f61636c2c686561702c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c006c27715578049a57a70544af8735aac0ef19142df79cebff54cc2c2975122bd1a6c9ddce762d"], 0x1, 0x5505, &(0x7f0000002480)="$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") getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x1000008, 0x4) 33.556984641s ago: executing program 4 (id=809): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) 33.507081791s ago: executing program 4 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 33.478463252s ago: executing program 4 (id=811): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x121081e, &(0x7f0000000240)={[{@grpquota}, {@nolazytime}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 33.439991432s ago: executing program 3 (id=813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x480, 0x0, 0x0, 0x0, 0x0, 0x0) 33.329711274s ago: executing program 4 (id=816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 32.98331567s ago: executing program 3 (id=827): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x121081e, &(0x7f0000000240)={[{@grpquota}, {@nolazytime}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 32.679676454s ago: executing program 3 (id=835): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x74) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.3561058s ago: executing program 4 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x560c, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 24.328731361s ago: executing program 35 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x560c, 0x0) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 23.317065076s ago: executing program 3 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 23.262056977s ago: executing program 36 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 985.365796ms ago: executing program 6 (id=1682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x6000000, 0x4}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20) 921.740846ms ago: executing program 6 (id=1688): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000009c0)={{'\x00', 0x3}, {0x4}, 0x103, 0x0, 0x0, 0x0, &(0x7f0000000480)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000004c0)="b85d2562d1", 0x5, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000005"], 0x1aa}) 813.614328ms ago: executing program 9 (id=1692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 755.175959ms ago: executing program 9 (id=1694): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 726.374789ms ago: executing program 6 (id=1696): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@nodelalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000b80)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) lgetxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) 665.45968ms ago: executing program 0 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) capget(&(0x7f0000000680)={0x20071026}, 0x0) 662.27299ms ago: executing program 9 (id=1699): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x40800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 641.54459ms ago: executing program 7 (id=1700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) 617.605611ms ago: executing program 9 (id=1701): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1c0d0) 596.768961ms ago: executing program 0 (id=1703): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) lstat(&(0x7f0000000580)='./control\x00', &(0x7f0000000740)) 592.617561ms ago: executing program 7 (id=1704): mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) 576.429111ms ago: executing program 9 (id=1705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) ustat(0x5, &(0x7f0000000400)) 549.975941ms ago: executing program 0 (id=1707): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'rdma'}]}, 0x6) 525.999132ms ago: executing program 9 (id=1708): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 519.815992ms ago: executing program 0 (id=1710): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf25170000000e0001006e657464647673696d0000000f0002006e657464657673696d300000080003000100000008000b00ff0f0000060016"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x0) 496.741512ms ago: executing program 7 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 495.620132ms ago: executing program 0 (id=1712): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 437.335904ms ago: executing program 0 (id=1713): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f000004c000/0x4000)=nil, 0x4000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x22, &(0x7f0000937fed), &(0x7f0000000000)=0x2) 392.946494ms ago: executing program 7 (id=1714): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x21, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000380), &(0x7f0000000040)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/22, 0x16}], 0x1}}], 0x2, 0x40, 0x0) 392.667874ms ago: executing program 7 (id=1715): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x3000000c}) 314.485105ms ago: executing program 7 (id=1717): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 246.379106ms ago: executing program 8 (id=1718): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 219.489697ms ago: executing program 6 (id=1719): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1, 0xfffffffe}, 0x1c}}, 0x0) 194.216687ms ago: executing program 8 (id=1720): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x110a, 0x1}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) 151.270698ms ago: executing program 8 (id=1721): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f142", 0xfee3}], 0x2}, 0x0) 104.948749ms ago: executing program 8 (id=1722): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd", 0x5) 103.758539ms ago: executing program 6 (id=1723): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1}, 0x0) 94.243548ms ago: executing program 8 (id=1724): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000040)='THAWED\x00', 0x7) 70.549469ms ago: executing program 6 (id=1725): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) truncate(&(0x7f0000000100)='./file1\x00', 0xc88) 0s ago: executing program 8 (id=1726): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 50.918160][ T1626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.919571][ T1741] device veth0_vlan entered promiscuous mode [ 50.925785][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.936260][ T1741] device veth1_macvtap entered promiscuous mode [ 50.941137][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.079042][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.119131][ T1847] netlink: 44 bytes leftover after parsing attributes in process `syz.3.639'. [ 51.174724][ T1854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.640'. [ 51.187923][ T1855] loop7: detected capacity change from 0 to 1024 [ 51.224561][ T1861] raw_sendmsg: syz.0.645 forgot to set AF_INET. Fix it! [ 51.244867][ T1855] EXT4-fs (loop7): Ignoring removed orlov option [ 51.251098][ T1855] EXT4-fs (loop7): error: journal path ./file0 is not a block device [ 51.417047][ T1879] loop3: detected capacity change from 0 to 2048 [ 51.473561][ T1879] Alternate GPT is invalid, using primary GPT. [ 51.500100][ T1879] loop3: p2 p3 p7 [ 51.521624][ T1894] loop4: detected capacity change from 0 to 512 [ 51.553997][ T1894] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.661: inode #1: comm syz.4.661: iget: illegal inode # [ 51.566930][ T1894] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.661: error while reading EA inode 1 err=-117 [ 51.579358][ T1894] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.661: inode #1: comm syz.4.661: iget: illegal inode # [ 51.595713][ T1826] udevd[1826]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 51.606597][ T324] udevd[324]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 51.608823][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 51.635653][ T1894] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.661: error while reading EA inode 1 err=-117 [ 51.696060][ T1892] loop7: detected capacity change from 0 to 40427 [ 51.712570][ T1894] EXT4-fs (loop4): 1 orphan inode deleted [ 51.723075][ T1892] F2FS-fs (loop7): invalid crc value [ 51.750673][ T1894] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 51.769342][ T1892] F2FS-fs (loop7): Found nat_bits in checkpoint [ 51.827061][ T1892] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 51.936835][ T1912] attempt to access beyond end of device [ 51.936835][ T1912] loop7: rw=2049, want=45104, limit=40427 [ 52.032788][ T1380] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.134261][ T20] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 52.154452][ T1932] loop3: detected capacity change from 0 to 2048 [ 52.174455][ T1932] GPT:first_usable_lbas don't match. [ 52.180141][ T1932] GPT:34 != 290 [ 52.184204][ T1932] GPT: Use GNU Parted to correct GPT errors. [ 52.190456][ T1932] loop3: p1 p2 p3 [ 52.313853][ T1938] loop7: detected capacity change from 0 to 40427 [ 52.345399][ T328] udevd[328]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 52.361580][ T1938] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 52.385621][ T1938] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 52.395685][ T1938] F2FS-fs (loop7): invalid crc value [ 52.402511][ T1938] F2FS-fs (loop7): Found nat_bits in checkpoint [ 52.423144][ T1380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.439346][ T1380] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.460127][ T1380] usb 1-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 52.483718][ T1380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.501788][ T1380] usb 1-1: config 0 descriptor?? [ 52.510231][ T1938] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 52.520056][ T1938] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 52.589406][ T1640] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 52.603182][ T1640] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 52.959882][ T1955] loop3: detected capacity change from 0 to 40427 [ 52.994914][ T1380] hid-generic 0003:258A:0036.0005: unknown main item tag 0x0 [ 53.012520][ T1380] hid-generic 0003:258A:0036.0005: unknown main item tag 0x0 [ 53.032834][ T1380] hid-generic 0003:258A:0036.0005: unknown main item tag 0x0 [ 53.040074][ T1380] hid-generic 0003:258A:0036.0005: unknown main item tag 0x0 [ 53.055921][ T1955] F2FS-fs (loop3): invalid crc value [ 53.061535][ T1380] hid-generic 0003:258A:0036.0005: unknown main item tag 0x0 [ 53.073807][ T1955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.091572][ T1380] hid-generic 0003:258A:0036.0005: unknown main item tag 0x0 [ 53.109726][ T1380] hid-generic 0003:258A:0036.0005: unknown main item tag 0x0 [ 53.131835][ T1380] hid-generic 0003:258A:0036.0005: hidraw0: USB HID v0.00 Device [HID 258a:0036] on usb-dummy_hcd.0-1/input0 [ 53.152953][ T1955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.198487][ T20] usb 1-1: USB disconnect, device number 3 [ 53.373820][ T30] kauditd_printk_skb: 205 callbacks suppressed [ 53.373837][ T30] audit: type=1326 audit(1743759739.977:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ffdaf169 code=0x7ffc0000 [ 53.443110][ T30] audit: type=1326 audit(1743759739.977:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ffdaf169 code=0x7ffc0000 [ 53.466742][ T1975] attempt to access beyond end of device [ 53.466742][ T1975] loop3: rw=2049, want=45104, limit=40427 [ 53.488605][ T1991] loop4: detected capacity change from 0 to 128 [ 53.495239][ T30] audit: type=1326 audit(1743759740.007:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f75ffdaf169 code=0x7ffc0000 [ 53.518387][ T30] audit: type=1326 audit(1743759740.007:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ffdaf169 code=0x7ffc0000 [ 53.562860][ T30] audit: type=1326 audit(1743759740.007:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.7.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75ffdaf169 code=0x7ffc0000 [ 53.600762][ T1996] loop7: detected capacity change from 0 to 512 [ 53.614198][ T1991] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 53.622425][ T30] audit: type=1400 audit(1743759740.067:998): avc: denied { map } for pid=1988 comm="syz.7.697" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 53.648810][ T1991] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 53.764411][ T1996] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nolazytime,minixdf,,errors=continue. Quota mode: writeback. [ 53.804717][ T1996] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.914828][ T30] audit: type=1400 audit(1743759740.517:999): avc: denied { read } for pid=1995 comm="syz.7.700" name="usbmon7" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.938077][ T30] audit: type=1400 audit(1743759740.527:1000): avc: denied { open } for pid=1995 comm="syz.7.700" path="/dev/usbmon7" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.962927][ T30] audit: type=1400 audit(1743759740.527:1001): avc: denied { ioctl } for pid=1995 comm="syz.7.700" path="/dev/usbmon7" dev="devtmpfs" ino=172 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.004143][ T30] audit: type=1326 audit(1743759740.607:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2014 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff053e30169 code=0x7ffc0000 [ 54.105168][ T2029] loop4: detected capacity change from 0 to 16 [ 54.162650][ T2031] loop7: detected capacity change from 0 to 512 [ 54.169494][ T2029] erofs: (device loop4): erofs_read_inode: unsupported i_format 264 of nid 36 [ 54.186086][ T2031] EXT4-fs (loop7): Test dummy encryption mode enabled [ 54.194492][ T2031] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 54.211401][ T2031] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.713: bad orphan inode 131083 [ 54.222557][ T2031] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 54.327595][ T2027] loop6: detected capacity change from 0 to 40427 [ 54.383263][ T2027] F2FS-fs (loop6): fault_injection options not supported [ 54.407933][ T2027] F2FS-fs (loop6): invalid crc value [ 54.444751][ T2027] F2FS-fs (loop6): Found nat_bits in checkpoint [ 54.528102][ T2027] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 54.529001][ T2070] SELinux: Context system_u:object_r:policy_config_t:s0 is not valid (left unmapped). [ 54.578023][ T2073] loop4: detected capacity change from 0 to 128 [ 54.681760][ T2086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 54.801797][ T2102] loop7: detected capacity change from 0 to 1024 [ 54.856080][ T2102] EXT4-fs (loop7): Ignoring removed orlov option [ 54.868973][ T2102] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 54.892543][ T2102] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 54.923616][ T1707] attempt to access beyond end of device [ 54.923616][ T1707] loop6: rw=2049, want=45104, limit=40427 [ 55.028329][ T2126] loop4: detected capacity change from 0 to 512 [ 55.032275][ T2128] loop7: detected capacity change from 0 to 128 [ 55.054297][ T2128] EXT4-fs (loop7): Ignoring removed nobh option [ 55.064543][ T2126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 55.072638][ T2126] System zones: 1-12 [ 55.076977][ T2126] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.077657][ T2128] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 55.083399][ T2126] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 393240: comm syz.4.756: invalid block [ 55.108160][ T2128] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.118461][ T2126] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.756: couldn't read orphan inode 11 (err -117) [ 55.136333][ T2126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none. [ 55.151050][ T2126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 55.207510][ T2132] loop4: detected capacity change from 0 to 256 [ 55.243305][ T2136] SELinux: Context : is not valid (left unmapped). [ 55.274164][ T2132] FAT-fs (loop4): Directory bread(block 64) failed [ 55.280525][ T2132] FAT-fs (loop4): Directory bread(block 65) failed [ 55.287369][ T2132] FAT-fs (loop4): Directory bread(block 66) failed [ 55.293919][ T2132] FAT-fs (loop4): Directory bread(block 67) failed [ 55.300348][ T2132] FAT-fs (loop4): Directory bread(block 68) failed [ 55.307032][ T2132] FAT-fs (loop4): Directory bread(block 69) failed [ 55.313902][ T2132] FAT-fs (loop4): Directory bread(block 70) failed [ 55.320306][ T2132] FAT-fs (loop4): Directory bread(block 71) failed [ 55.327039][ T2132] FAT-fs (loop4): Directory bread(block 72) failed [ 55.333900][ T2132] FAT-fs (loop4): Directory bread(block 73) failed [ 55.369824][ T2132] attempt to access beyond end of device [ 55.369824][ T2132] loop4: rw=2049, want=1360, limit=256 [ 55.382700][ T2132] attempt to access beyond end of device [ 55.382700][ T2132] loop4: rw=0, want=1352, limit=256 [ 55.523481][ T6] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.590109][ T2164] loop0: detected capacity change from 0 to 256 [ 55.654441][ T2164] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.668159][ T2172] netlink: 44 bytes leftover after parsing attributes in process `syz.4.775'. [ 55.676781][ T2153] loop6: detected capacity change from 0 to 40427 [ 55.686532][ T2164] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 55.688252][ T2172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.775'. [ 55.697695][ T2164] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 55.712240][ T2153] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 55.734638][ T2153] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 55.755947][ T2153] F2FS-fs (loop6): invalid crc value [ 55.757129][ T2164] exFAT-fs (loop0): hint_cluster is invalid (17) [ 55.784566][ T2153] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 55.816210][ T2153] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 55.864568][ T2153] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 55.871610][ T2153] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 55.912916][ T6] usb 8-1: config index 0 descriptor too short (expected 8228, got 36) [ 55.921035][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.941987][ T6] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.951888][ T6] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.965027][ T6] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.01 [ 55.974887][ T6] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.995921][ T6] usb 8-1: config 0 descriptor?? [ 56.152895][ T20] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 56.160270][ T1380] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.474136][ T6] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0 [ 56.481238][ T6] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0 [ 56.488206][ T6] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0 [ 56.495441][ T6] hid-rmi 0003:1532:011D.0006: unknown main item tag 0x0 [ 56.505636][ T6] hid-rmi 0003:1532:011D.0006: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.7-1/input0 [ 56.533163][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.544176][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.554103][ T1380] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 56.562235][ T1380] usb 5-1: config 0 has no interface number 0 [ 56.568481][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.581323][ T20] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.590320][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.611716][ T20] usb 4-1: config 0 descriptor?? [ 56.659379][ T2204] netlink: 20 bytes leftover after parsing attributes in process `syz.0.787'. [ 56.685049][ T6] usb 8-1: USB disconnect, device number 2 [ 56.742917][ T1380] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 56.751857][ T1380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.759745][ T1380] usb 5-1: Product: syz [ 56.763710][ T1380] usb 5-1: Manufacturer: syz [ 56.768096][ T1380] usb 5-1: SerialNumber: syz [ 56.773294][ T1380] usb 5-1: config 0 descriptor?? [ 56.992838][ T296] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 56.994298][ T2214] mmap: syz.6.791 (2214) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 57.073942][ T20] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 57.083965][ T20] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 57.274200][ T2227] loop6: detected capacity change from 0 to 512 [ 57.277938][ T20] usb 4-1: USB disconnect, device number 5 [ 57.318857][ T2239] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 57.320715][ T2227] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 57.349138][ T2227] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 57.359174][ T2227] EXT4-fs (loop6): orphan cleanup on readonly fs [ 57.366582][ T2227] EXT4-fs warning (device loop6): ext4_enable_quotas:6423: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 57.381775][ T2227] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 57.388709][ T2227] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #13: comm syz.6.796: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 57.388945][ T2227] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.796: couldn't read orphan inode 13 (err -117) [ 57.406622][ T296] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.419081][ T2227] EXT4-fs (loop6): mounted filesystem without journal. Opts: noquota,noblock_validity,jqfmt=vfsv0,grpquota,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 57.428193][ T296] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.643227][ T296] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.643263][ T296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.643285][ T296] usb 1-1: Product: syz [ 57.643300][ T296] usb 1-1: Manufacturer: syz [ 57.643315][ T296] usb 1-1: SerialNumber: syz [ 57.664445][ T1380] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 57.684370][ T1380] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 57.684438][ T1380] asix: probe of 5-1:0.239 failed with error -71 [ 57.688621][ T1380] usb 5-1: USB disconnect, device number 2 [ 57.862818][ T315] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.962991][ T296] usb 1-1: 0:2 : does not exist [ 57.969604][ T296] usb 1-1: USB disconnect, device number 4 [ 57.982098][ T2253] loop3: detected capacity change from 0 to 40427 [ 58.008557][ T2253] F2FS-fs (loop3): fault_injection options not supported [ 58.010183][ T2253] F2FS-fs (loop3): invalid crc value [ 58.023452][ T2253] F2FS-fs (loop3): Found nat_bits in checkpoint [ 58.062819][ T2253] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.102845][ T315] usb 7-1: Using ep0 maxpacket: 16 [ 58.163364][ T1826] udevd[1826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.278067][ T2265] loop4: detected capacity change from 0 to 512 [ 58.308399][ T291] attempt to access beyond end of device [ 58.308399][ T291] loop3: rw=2049, want=45104, limit=40427 [ 58.330786][ T2265] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nolazytime,minixdf,,errors=continue. Quota mode: writeback. [ 58.344751][ T2265] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.365822][ T2273] loop7: detected capacity change from 0 to 512 [ 58.382978][ T315] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 58.391952][ T315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.414474][ T315] usb 7-1: Product: syz [ 58.433146][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.459576][ T315] usb 7-1: Manufacturer: syz [ 58.469007][ T315] usb 7-1: SerialNumber: syz [ 58.480586][ T2273] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.815: bad orphan inode 134217728 [ 58.498892][ T315] usb 7-1: config 0 descriptor?? [ 58.504277][ T2273] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 58.515778][ T2273] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.553707][ T315] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 58.562028][ T315] usb 7-1: Detected FT232H [ 58.585259][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.604834][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 58.635000][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.707038][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.747930][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 58.763012][ T315] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 58.776122][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.806577][ T2303] loop3: detected capacity change from 0 to 512 [ 58.830929][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.856242][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 58.872670][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 58.894447][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 58.894464][ T30] audit: type=1400 audit(1743759745.497:1084): avc: denied { unlink } for pid=2312 comm="syz.0.832" name="#9" dev="tmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 58.900955][ T2303] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nolazytime,minixdf,,errors=continue. Quota mode: writeback. [ 58.954267][ T2303] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.977183][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.000852][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.012494][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.014165][ T2319] netlink: 'syz.0.834': attribute type 3 has an invalid length. [ 59.046866][ T2319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 59.064469][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.067461][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.112004][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.120415][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.147332][ T2322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.836'. [ 59.163121][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.174609][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.174906][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.213370][ T30] audit: type=1400 audit(1743759745.817:1085): avc: denied { read } for pid=2323 comm="syz.0.837" name="rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.236996][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.237019][ T30] audit: type=1400 audit(1743759745.817:1086): avc: denied { open } for pid=2323 comm="syz.0.837" path="/dev/rtc0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.252281][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.297222][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.309752][ T30] audit: type=1400 audit(1743759745.837:1087): avc: denied { ioctl } for pid=2323 comm="syz.0.837" path="/dev/rtc0" dev="devtmpfs" ino=255 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 59.338065][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.343338][ T315] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 59.359914][ T30] audit: type=1400 audit(1743759745.917:1088): avc: denied { ioctl } for pid=2325 comm="syz.0.838" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23927 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.382220][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.446124][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.465828][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.468049][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.478349][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.512376][ T2330] device bridge1 entered promiscuous mode [ 59.525816][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.540611][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.560902][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.561094][ T315] usb 7-1: USB disconnect, device number 2 [ 59.583943][ T315] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 59.590587][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.615865][ T315] ftdi_sio 7-1:0.0: device disconnected [ 59.654602][ T30] audit: type=1400 audit(1743759746.257:1089): avc: denied { audit_write } for pid=2331 comm="syz.0.841" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.693681][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.725057][ T30] audit: type=1107 audit(1743759746.257:1090): pid=2331 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='_cp' [ 59.747243][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.833313][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.848700][ T2342] loop7: detected capacity change from 0 to 128 [ 59.910208][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 59.992880][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 60.056036][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 60.137605][ T2358] loop7: detected capacity change from 0 to 1024 [ 60.147365][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 60.180162][ T30] audit: type=1404 audit(1743759746.777:1091): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 60.208593][ T30] audit: type=1400 audit(1743759746.777:1092): avc: denied { read write } for pid=2345 comm="syz.0.849" name="loop0" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 60.262824][ T30] audit: type=1404 audit(1743759746.797:1093): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 60.293390][ T2358] EXT4-fs (loop7): error: could not find journal device path: error -2 [ 60.333525][ T2363] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 60.543942][ T2376] loop0: detected capacity change from 0 to 256 [ 60.664238][ T2376] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.681999][ T2376] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 60.705019][ T2376] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 61.162794][ T1380] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 61.199943][ T2410] loop7: detected capacity change from 0 to 2048 [ 61.223497][ T2410] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 61.265491][ T2410] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a814e028, mo2=0002] [ 61.273667][ T2410] System zones: 0-7 [ 61.277844][ T2410] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,grpquota,errors=remount-ro,debug,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,nouid32,resuid=0x0000000000000000,usrjquota=,. Quota mode: writeback. [ 61.310035][ T2410] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.877: bg 0: block 234: padding at end of block bitmap is not set [ 61.342820][ T2410] EXT4-fs (loop7): Remounting filesystem read-only [ 61.437996][ T2414] loop7: detected capacity change from 0 to 128 [ 61.542965][ T1380] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.553130][ T1380] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.712922][ T1380] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.727299][ T1380] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.743035][ T1380] usb 7-1: Product: syz [ 61.753265][ T1380] usb 7-1: Manufacturer: syz [ 61.763254][ T1380] usb 7-1: SerialNumber: syz [ 61.926976][ T2434] loop7: detected capacity change from 0 to 256 [ 61.944265][ T2436] syz.0.888[2436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.944347][ T2436] syz.0.888[2436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.981153][ T2434] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 62.064384][ T2434] exFAT-fs (loop7): hint_cluster is invalid (17) [ 62.082896][ T1380] usb 7-1: 0:2 : does not exist [ 62.093380][ T1380] usb 7-1: USB disconnect, device number 3 [ 62.123778][ T1826] udevd[1826]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 62.328278][ T2460] loop0: detected capacity change from 0 to 1024 [ 62.349918][ T2462] device vlan2 entered promiscuous mode [ 62.387215][ T2460] EXT4-fs (loop0): Ignoring removed oldalloc option [ 62.402934][ T2460] EXT4-fs (loop0): Ignoring removed orlov option [ 62.451454][ T2460] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000080,grpjquota=,oldalloc,errors=remount-ro,orlov,usrquota,stripe=0x0000000000000622,. Quota mode: writeback. [ 62.699476][ T2483] loop6: detected capacity change from 0 to 128 [ 62.841937][ T2492] loop7: detected capacity change from 0 to 512 [ 62.950465][ T2492] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 62.971267][ T2502] tipc: Started in network mode [ 62.976047][ T2502] tipc: Node identity ac14140f, cluster identity 4711 [ 62.982663][ T2492] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.003881][ T2502] tipc: Enabling of bearer rejected, failed to enable media [ 63.318358][ T2521] syz.6.925[2521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.318443][ T2521] syz.6.925[2521] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.092774][ C0] sched: RT throttling activated [ 65.097219][ T291] EXT4-fs error: 153 callbacks suppressed [ 65.097240][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.126806][ T294] EXT4-fs error: 181 callbacks suppressed [ 65.126831][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.093131][ T291] EXT4-fs warning: 71 callbacks suppressed [ 66.093152][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.110487][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.134944][ T294] EXT4-fs warning: 85 callbacks suppressed [ 66.134963][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.191737][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.223063][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.273608][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.302178][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.326710][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.346993][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 66.347029][ T30] audit: type=1326 audit(1743759752.947:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.376581][ T30] audit: type=1326 audit(1743759752.977:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.402987][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.420775][ T2542] loop6: detected capacity change from 0 to 256 [ 66.423104][ T30] audit: type=1326 audit(1743759753.017:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.450598][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.477166][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.509728][ T30] audit: type=1326 audit(1743759753.017:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.510529][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.533426][ T30] audit: type=1326 audit(1743759753.017:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.577281][ T30] audit: type=1326 audit(1743759753.017:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.580088][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.604975][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.633052][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.633596][ T30] audit: type=1326 audit(1743759753.017:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.654388][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.677278][ T30] audit: type=1326 audit(1743759753.017:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.700785][ T2542] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 66.750188][ T2551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2551 comm=syz.0.937 [ 66.769885][ T2553] loop7: detected capacity change from 0 to 512 [ 66.776075][ T30] audit: type=1326 audit(1743759753.017:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.790549][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.799634][ T2551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2551 comm=syz.0.937 [ 66.819518][ T30] audit: type=1326 audit(1743759753.017:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2537 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900bb71169 code=0x7ffc0000 [ 66.860930][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.882908][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.893148][ T2553] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 66.931517][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.954966][ T294] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.962032][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 66.986511][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 66.986679][ T2542] exFAT-fs (loop6): hint_cluster is invalid (17) [ 67.008286][ T2553] EXT4-fs error (device loop7): mb_free_blocks:1865: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 67.027986][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.032883][ T2553] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #11: comm syz.7.938: corrupted inode contents [ 67.039707][ T294] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /193/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.073091][ T2553] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #11: comm syz.7.938: mark_inode_dirty error [ 67.097963][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.117634][ T2553] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.938: invalid indirect mapped block 1 (level 1) [ 67.139179][ T2553] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #11: comm syz.7.938: corrupted inode contents [ 67.140859][ T294] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.153399][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.179174][ T2553] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 67.181359][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /171/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 67.203872][ T2567] loop0: detected capacity change from 0 to 256 [ 67.215301][ T2553] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #11: comm syz.7.938: corrupted inode contents [ 67.235864][ T2553] EXT4-fs error (device loop7): ext4_truncate:4303: inode #11: comm syz.7.938: mark_inode_dirty error [ 67.253997][ T2567] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 67.257359][ T2553] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 67.298040][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.309741][ T2553] EXT4-fs (loop7): 1 truncate cleaned up [ 67.315395][ T2553] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.332626][ T2567] exFAT-fs (loop0): hint_cluster is invalid (17) [ 67.372639][ T2553] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 67.372724][ T2567] exFAT-fs (loop0): error, broken FAT chain. [ 67.383798][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.413435][ T2567] exFAT-fs (loop0): Filesystem has been set read-only [ 67.420226][ T2567] exFAT-fs (loop0): error, failed to bmap (inode : ffff8881283280d0 iblock : 8, err : -5) [ 67.445475][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.538303][ T2577] netem: change failed [ 67.543407][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.614963][ T291] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 67.673917][ T2578] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.684023][ T2571] loop6: detected capacity change from 0 to 40427 [ 67.694906][ T2578] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.702232][ T2578] device bridge_slave_0 entered promiscuous mode [ 67.710375][ T2571] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 67.717476][ T2571] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 67.729474][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.742843][ T2578] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.750958][ T2571] F2FS-fs (loop6): invalid crc value [ 67.757024][ T2578] device bridge_slave_1 entered promiscuous mode [ 67.803829][ T2571] F2FS-fs (loop6): Found nat_bits in checkpoint [ 67.881608][ T2571] F2FS-fs (loop6): Start checkpoint disabled! [ 67.897741][ T2571] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 67.907475][ T2571] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 67.976754][ T2578] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.983850][ T2578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.990935][ T2578] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.997832][ T2578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.066762][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.081610][ T1630] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.095965][ T313] attempt to access beyond end of device [ 68.095965][ T313] loop6: rw=2049, want=41024, limit=40427 [ 68.107181][ T1630] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.149271][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.171696][ T1630] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.178742][ T1630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.202933][ T1630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.219944][ T1630] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.227307][ T1630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.260099][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.296592][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.311686][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.346407][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.353305][ T2600] loop7: detected capacity change from 0 to 256 [ 68.366192][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.376140][ T291] syz-executor (291) used greatest stack depth: 20096 bytes left [ 68.409145][ T2602] loop6: detected capacity change from 0 to 256 [ 68.413518][ T2578] device veth0_vlan entered promiscuous mode [ 68.424127][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.455075][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.493436][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.505323][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.516332][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.532397][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.560699][ T2578] device veth1_macvtap entered promiscuous mode [ 68.572557][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.580834][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.606029][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.627340][ T2612] loop6: detected capacity change from 0 to 512 [ 68.645991][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.670304][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.722161][ T2612] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 68.742670][ T1640] device bridge_slave_1 left promiscuous mode [ 68.755595][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.762959][ T2612] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.777715][ T2612] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #2: comm syz.6.963: corrupted inode contents [ 68.786010][ T1640] device bridge_slave_0 left promiscuous mode [ 68.795383][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.802338][ T2612] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.963: mark_inode_dirty error [ 68.814738][ T2612] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #2: comm syz.6.963: corrupted inode contents [ 68.832339][ T2612] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.963: mark_inode_dirty error [ 68.987715][ T2651] loop7: detected capacity change from 0 to 512 [ 69.061086][ T2651] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.979: casefold flag without casefold feature [ 69.084320][ T2651] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.979: couldn't read orphan inode 15 (err -117) [ 69.102101][ T2651] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.141272][ T2681] loop6: detected capacity change from 0 to 128 [ 69.154376][ T2681] EXT4-fs (loop6): Ignoring removed nobh option [ 69.193658][ T2614] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.200663][ T2614] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.209888][ T2614] device bridge_slave_0 entered promiscuous mode [ 69.217790][ T2614] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.224733][ T2614] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.233517][ T2614] device bridge_slave_1 entered promiscuous mode [ 69.234422][ T2681] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,abort,,errors=continue. Quota mode: none. [ 69.260385][ T2681] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.406224][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.414203][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.432521][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.441228][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.449654][ T1641] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.456545][ T1641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.464582][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.474160][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.482263][ T1641] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.489168][ T1641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.506826][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.519430][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.527695][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.544011][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.556141][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.564185][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.571612][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.580009][ T2614] device veth0_vlan entered promiscuous mode [ 69.592204][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.601475][ T2614] device veth1_macvtap entered promiscuous mode [ 69.612597][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.622885][ T1641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.673679][ T2707] loop9: detected capacity change from 0 to 256 [ 69.804480][ T2211] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 69.846848][ T2713] loop9: detected capacity change from 0 to 256 [ 69.884098][ T1640] device vlan2 left promiscuous mode [ 69.889471][ T1640] bridge0: port 3(vlan2) entered disabled state [ 69.896269][ T1640] device bridge_slave_1 left promiscuous mode [ 69.896490][ T2713] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66cd20, utbl_chksum : 0xe619d30d) [ 69.902363][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.914947][ T2713] exFAT-fs (loop9): failed to load alloc-bitmap [ 69.927232][ T1640] device bridge_slave_0 left promiscuous mode [ 69.927315][ T2713] exFAT-fs (loop9): failed to recognize exfat type [ 69.933724][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.193076][ T2211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.220704][ T2211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.231444][ T2211] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 70.240757][ T2211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.250097][ T2211] usb 1-1: config 0 descriptor?? [ 70.367701][ T2746] syz.9.1020[2746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.367782][ T2746] syz.9.1020[2746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.400606][ T2752] input: syz0 as /devices/virtual/input/input11 [ 70.453280][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.502953][ T499] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 70.702801][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 70.708350][ T2774] xt_hashlimit: size too large, truncated to 1048576 [ 70.823353][ T39] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.834971][ T39] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 70.846742][ T2786] Invalid ELF header magic: != ELF [ 70.872926][ T499] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.891861][ T499] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.903930][ T499] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 70.914211][ T499] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.934051][ T2211] hid-led 0003:1D34:000A.0008: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 70.947003][ T2211] hid-led 0003:1D34:000A.0008: Dream Cheeky Webmail Notifier initialized [ 71.002916][ T39] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.012015][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.020095][ T39] usb 8-1: Product: syz [ 71.024605][ T39] usb 8-1: Manufacturer: syz [ 71.029018][ T39] usb 8-1: SerialNumber: syz [ 71.045148][ T2794] kvm [2793]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x0 [ 71.082928][ T499] usb 9-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 71.091892][ T499] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.100031][ T499] usb 9-1: Product: syz [ 71.104065][ T499] usb 9-1: Manufacturer: syz [ 71.108441][ T499] usb 9-1: SerialNumber: syz [ 71.140297][ T315] usb 1-1: USB disconnect, device number 5 [ 71.352923][ T39] usb 8-1: 0:2 : does not exist [ 71.354101][ T2742] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 71.359740][ T39] usb 8-1: USB disconnect, device number 3 [ 71.576865][ T1826] udevd[1826]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.660316][ T2820] loop0: detected capacity change from 0 to 512 [ 71.735980][ T2820] EXT4-fs (loop0): 1 truncate cleaned up [ 71.741555][ T2820] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 72.013353][ T2742] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 72.044383][ T315] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 72.046572][ T2837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 72.098855][ T2843] syz.7.1063[2843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.098955][ T2843] syz.7.1063[2843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.115289][ T2845] loop0: detected capacity change from 0 to 128 [ 72.242106][ T2852] loop0: detected capacity change from 0 to 512 [ 72.253085][ T499] cdc_ncm 9-1:1.0: bind() failure [ 72.272880][ T499] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 72.282935][ T315] usb 10-1: Using ep0 maxpacket: 16 [ 72.292905][ T499] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 72.313211][ T2852] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1066: inode #1: comm syz.0.1066: iget: illegal inode # [ 72.322044][ T499] usb 9-1: USB disconnect, device number 2 [ 72.332060][ T2852] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1066: error while reading EA inode 1 err=-117 [ 72.350659][ T2852] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1066: inode #1: comm syz.0.1066: iget: illegal inode # [ 72.363924][ T2852] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1066: error while reading EA inode 1 err=-117 [ 72.376845][ T2852] EXT4-fs (loop0): 1 orphan inode deleted [ 72.382464][ T2852] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 72.422932][ T315] usb 10-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 72.442534][ T315] usb 10-1: config 0 interface 0 has no altsetting 0 [ 72.452642][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 72.452659][ T30] audit: type=1400 audit(1743759759.047:1340): avc: denied { unlink } for pid=2860 comm="syz.6.1071" name="#b" dev="tmpfs" ino=597 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 72.481384][ T315] usb 10-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 72.490553][ T315] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.512197][ T2863] loop0: detected capacity change from 0 to 1024 [ 72.521053][ T30] audit: type=1326 audit(1743759759.117:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.522434][ T315] usb 10-1: config 0 descriptor?? [ 72.550344][ T30] audit: type=1326 audit(1743759759.147:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.574316][ T30] audit: type=1326 audit(1743759759.147:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.597830][ T30] audit: type=1326 audit(1743759759.147:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.621309][ T30] audit: type=1326 audit(1743759759.147:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.634388][ T2863] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc,barrier=0x0000000000000002,minixdf,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 72.645239][ T30] audit: type=1326 audit(1743759759.157:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.691827][ T30] audit: type=1326 audit(1743759759.177:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.706602][ T2863] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2746: inode #12: comm syz.0.1070: corrupted in-inode xattr [ 72.715309][ T30] audit: type=1326 audit(1743759759.177:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2864 comm="syz.6.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 72.750512][ T30] audit: type=1400 audit(1743759759.297:1349): avc: denied { link } for pid=2862 comm="syz.0.1070" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.802426][ T2870] loop8: detected capacity change from 0 to 512 [ 72.825987][ T2874] loop6: detected capacity change from 0 to 2048 [ 72.840913][ T2870] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: writeback. [ 72.853065][ T2870] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.893631][ T2870] EXT4-fs error (device loop8): ext4_acquire_dquot:6188: comm syz.8.1073: Failed to acquire dquot type 1 [ 72.951751][ T2884] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 73.013987][ T315] zydacron 0003:13EC:0006.0009: item fetching failed at offset 1/3 [ 73.021946][ T315] zydacron 0003:13EC:0006.0009: parse failed [ 73.045400][ T315] zydacron: probe of 0003:13EC:0006.0009 failed with error -22 [ 73.112796][ T2211] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 73.234218][ T499] usb 10-1: USB disconnect, device number 2 [ 73.333672][ T2937] loop6: detected capacity change from 0 to 16 [ 73.359996][ T2937] erofs: (device loop6): mounted with root inode @ nid 36. [ 73.373852][ T2211] usb 1-1: Using ep0 maxpacket: 16 [ 73.401764][ T2944] loop7: detected capacity change from 0 to 1024 [ 73.448678][ T2944] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.463430][ T2944] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 73.478689][ T2944] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 73.491354][ T2944] EXT4-fs (loop7): This should not happen!! Data will be lost [ 73.491354][ T2944] [ 73.501087][ T2211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.511211][ T2944] EXT4-fs (loop7): Total free blocks count 0 [ 73.517101][ T2211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.526108][ T2944] EXT4-fs (loop7): Free/Dirty block details [ 73.531844][ T2944] EXT4-fs (loop7): free_blocks=68451041280 [ 73.548477][ T2944] EXT4-fs (loop7): dirty_blocks=32 [ 73.566668][ T2944] EXT4-fs (loop7): Block reservation details [ 73.572528][ T2944] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 73.602601][ T1630] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.619722][ T1630] EXT4-fs (loop7): This should not happen!! Data will be lost [ 73.619722][ T1630] [ 73.702976][ T2211] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.721213][ T2211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.739331][ T2211] usb 1-1: Product: syz [ 73.743408][ T2211] usb 1-1: Manufacturer: syz [ 73.752784][ T2211] usb 1-1: SerialNumber: syz [ 73.780229][ T2981] loop6: detected capacity change from 0 to 1024 [ 73.793603][ T2982] input: syz0 as /devices/virtual/input/input12 [ 73.903307][ T2981] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.984394][ T2981] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 74.044754][ T3003] xt_hashlimit: max too large, truncated to 1048576 [ 74.051422][ T3001] loop8: detected capacity change from 0 to 1024 [ 74.082935][ T2211] usb 1-1: 0:2 : does not exist [ 74.083150][ T2981] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 74.100681][ T2981] EXT4-fs (loop6): This should not happen!! Data will be lost [ 74.100681][ T2981] [ 74.101126][ T2211] usb 1-1: USB disconnect, device number 6 [ 74.126491][ T2981] EXT4-fs (loop6): Total free blocks count 0 [ 74.142042][ T2981] EXT4-fs (loop6): Free/Dirty block details [ 74.143003][ T39] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 74.153641][ T2981] EXT4-fs (loop6): free_blocks=68451041280 [ 74.166676][ T3001] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc,barrier=0x0000000000000002,minixdf,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 74.168463][ T2981] EXT4-fs (loop6): dirty_blocks=32 [ 74.206157][ T3001] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2746: inode #12: comm syz.8.1131: corrupted in-inode xattr [ 74.218881][ T2981] EXT4-fs (loop6): Block reservation details [ 74.225435][ T2981] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 74.260606][ T1640] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.282934][ T1640] EXT4-fs (loop6): This should not happen!! Data will be lost [ 74.282934][ T1640] [ 74.363252][ T1826] udevd[1826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.522892][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.541478][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.561202][ T39] usb 8-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 74.570747][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.583103][ T39] usb 8-1: config 0 descriptor?? [ 74.703001][ T296] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 75.065187][ T39] wacom 0003:056A:00EF.000A: hidraw0: USB HID v0.00 Device [HID 056a:00ef] on usb-dummy_hcd.7-1/input0 [ 75.093123][ T296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.103909][ T296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.113588][ T296] usb 7-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 75.122463][ T296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.130951][ T296] usb 7-1: config 0 descriptor?? [ 75.259319][ T3028] netlink: 1021 bytes leftover after parsing attributes in process `syz.9.1150'. [ 75.275033][ T1380] usb 8-1: USB disconnect, device number 4 [ 75.390082][ T3045] loop9: detected capacity change from 0 to 256 [ 75.424836][ T3045] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 75.501421][ T3055] loop9: detected capacity change from 0 to 256 [ 75.533546][ T3059] incfs: Options parsing error. -22 [ 75.538717][ T3059] incfs: mount failed -22 [ 75.565363][ T3055] exFAT-fs (loop9): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 75.623984][ T296] hid-generic 0003:258A:0036.000B: unknown main item tag 0x0 [ 75.631451][ T296] hid-generic 0003:258A:0036.000B: unknown main item tag 0x0 [ 75.638730][ T296] hid-generic 0003:258A:0036.000B: unknown main item tag 0x0 [ 75.645999][ T296] hid-generic 0003:258A:0036.000B: unknown main item tag 0x0 [ 75.653375][ T296] hid-generic 0003:258A:0036.000B: unknown main item tag 0x0 [ 75.660590][ T296] hid-generic 0003:258A:0036.000B: unknown main item tag 0x0 [ 75.667836][ T296] hid-generic 0003:258A:0036.000B: unknown main item tag 0x0 [ 75.675602][ T296] hid-generic 0003:258A:0036.000B: hidraw0: USB HID v0.00 Device [HID 258a:0036] on usb-dummy_hcd.6-1/input0 [ 75.817577][ T3065] device wireguard0 entered promiscuous mode [ 75.828849][ T296] usb 7-1: USB disconnect, device number 4 [ 76.322809][ T20] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 76.368755][ T3105] loop0: detected capacity change from 0 to 512 [ 76.463373][ T3105] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.477961][ T3105] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1185: corrupted in-inode xattr [ 76.490003][ T3105] EXT4-fs (loop0): Remounting filesystem read-only [ 76.496658][ T3105] EXT4-fs (loop0): 1 truncate cleaned up [ 76.502215][ T3105] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,errors=remount-ro,nogrpid,data_err=ignore,debug_want_extra_isize=0x0000000000000068,noload,journal_ioprio=0x0000000000000005,. Quota mode: none. [ 76.544059][ T3112] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 76.558962][ T3112] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 76.593973][ T3117] loop0: detected capacity change from 0 to 1024 [ 76.649089][ T3126] xt_hashlimit: max too large, truncated to 1048576 [ 76.656825][ T3117] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.698506][ T3117] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 76.722930][ T20] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 76.741448][ T20] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.751993][ T3117] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 76.761121][ T20] usb 10-1: New USB device found, idVendor=056a, idProduct=00ef, bcdDevice= 0.00 [ 76.765558][ T3117] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.765558][ T3117] [ 76.781215][ T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.791788][ T20] usb 10-1: config 0 descriptor?? [ 76.796814][ T3117] EXT4-fs (loop0): Total free blocks count 0 [ 76.802681][ T3117] EXT4-fs (loop0): Free/Dirty block details [ 76.808425][ T3117] EXT4-fs (loop0): free_blocks=68451041280 [ 76.814192][ T3117] EXT4-fs (loop0): dirty_blocks=32 [ 76.819218][ T3117] EXT4-fs (loop0): Block reservation details [ 76.825139][ T3117] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 76.848114][ T3134] loop8: detected capacity change from 0 to 512 [ 76.856658][ T1630] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 76.869129][ T1630] EXT4-fs (loop0): This should not happen!! Data will be lost [ 76.869129][ T1630] [ 76.917437][ T3134] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.1188: casefold flag without casefold feature [ 76.930308][ T3134] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1188: couldn't read orphan inode 15 (err -117) [ 76.967975][ T3134] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.032830][ T39] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 77.043930][ T3149] loop0: detected capacity change from 0 to 512 [ 77.082957][ T3149] EXT4-fs (loop0): Ignoring removed orlov option [ 77.095056][ T3149] EXT4-fs (loop0): Ignoring removed bh option [ 77.107146][ T3149] EXT4-fs (loop0): 1 truncate cleaned up [ 77.112728][ T3149] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,orlov,nodioread_nolock,bh,lazytime,. Quota mode: none. [ 77.144535][ T3158] loop8: detected capacity change from 0 to 512 [ 77.203382][ T3158] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.214380][ T3158] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.232613][ T3158] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.255259][ T20] wacom 0003:056A:00EF.000C: hidraw0: USB HID v0.00 Device [HID 056a:00ef] on usb-dummy_hcd.9-1/input0 [ 77.280315][ T3158] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 77.292801][ T3158] EXT4-fs (loop8): This should not happen!! Data will be lost [ 77.292801][ T3158] [ 77.302269][ T3158] EXT4-fs (loop8): Total free blocks count 0 [ 77.308260][ T3158] EXT4-fs (loop8): Free/Dirty block details [ 77.314060][ T3158] EXT4-fs (loop8): free_blocks=65280 [ 77.319270][ T3158] EXT4-fs (loop8): dirty_blocks=31 [ 77.324702][ T3158] EXT4-fs (loop8): Block reservation details [ 77.330667][ T3158] EXT4-fs (loop8): i_reserved_data_blocks=31 [ 77.392915][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.421123][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.436864][ T39] usb 8-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00 [ 77.436896][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.446505][ T39] usb 8-1: config 0 descriptor?? [ 77.464026][ T3188] binfmt_misc: register: failed to install interpreter file . [ 77.471770][ T2211] usb 10-1: USB disconnect, device number 3 [ 77.534072][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 77.534112][ T30] audit: type=1400 audit(1743759764.137:1420): avc: denied { unmount } for pid=3196 comm="syz.6.1215" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.623615][ T30] audit: type=1326 audit(1743759764.227:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.647399][ T30] audit: type=1326 audit(1743759764.227:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.670965][ T30] audit: type=1326 audit(1743759764.227:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.700734][ T30] audit: type=1326 audit(1743759764.227:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.724632][ T30] audit: type=1326 audit(1743759764.227:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.748903][ T30] audit: type=1326 audit(1743759764.227:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.772774][ T30] audit: type=1326 audit(1743759764.227:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.772819][ T20] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 77.802824][ T30] audit: type=1326 audit(1743759764.227:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3202 comm="syz.6.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67c5513169 code=0x7ffc0000 [ 77.826954][ T3209] loop6: detected capacity change from 0 to 8192 [ 77.827040][ T30] audit: type=1400 audit(1743759764.327:1429): avc: denied { bind } for pid=3206 comm="syz.6.1220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.907189][ T3209] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 77.916134][ T3209] FAT-fs (loop6): Filesystem has been set read-only [ 77.922512][ T3209] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 77.930609][ T3209] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 2068) [ 77.953817][ T39] hid-generic 0003:258A:0036.000D: unknown main item tag 0x0 [ 77.961196][ T39] hid-generic 0003:258A:0036.000D: unknown main item tag 0x0 [ 77.968390][ T39] hid-generic 0003:258A:0036.000D: unknown main item tag 0x0 [ 77.975624][ T39] hid-generic 0003:258A:0036.000D: unknown main item tag 0x0 [ 77.989300][ T39] hid-generic 0003:258A:0036.000D: unknown main item tag 0x0 [ 77.996613][ T39] hid-generic 0003:258A:0036.000D: unknown main item tag 0x0 [ 78.003781][ T39] hid-generic 0003:258A:0036.000D: unknown main item tag 0x0 [ 78.016943][ T39] hid-generic 0003:258A:0036.000D: hidraw0: USB HID v0.00 Device [HID 258a:0036] on usb-dummy_hcd.7-1/input0 [ 78.053951][ T3213] loop9: detected capacity change from 0 to 256 [ 78.157466][ T39] usb 8-1: USB disconnect, device number 5 [ 78.191977][ T3227] loop6: detected capacity change from 0 to 512 [ 78.198277][ T20] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.209122][ T20] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.220156][ T3227] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 78.235908][ T3227] EXT4-fs (loop6): 1 truncate cleaned up [ 78.241447][ T3227] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,usrjquota=,nobarrier,quota,,errors=continue. Quota mode: writeback. [ 78.279783][ T3233] device wireguard0 entered promiscuous mode [ 78.312942][ T20] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 78.321889][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 78.329709][ T20] usb 1-1: SerialNumber: syz [ 78.363361][ T3239] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 78.412886][ T2211] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 78.440068][ T3249] loop6: detected capacity change from 0 to 128 [ 78.613733][ T20] usb 1-1: 0:2 : does not exist [ 78.622379][ T20] usb 1-1: USB disconnect, device number 7 [ 78.672846][ T2211] usb 9-1: Using ep0 maxpacket: 16 [ 78.802885][ T2211] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.813112][ T2211] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.833364][ T1826] udevd[1826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.992920][ T2211] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.001928][ T2211] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.009889][ T2211] usb 9-1: Product: syz [ 79.014228][ T2211] usb 9-1: Manufacturer: syz [ 79.016669][ T3286] input: syz0 as /devices/virtual/input/input19 [ 79.018723][ T2211] usb 9-1: SerialNumber: syz [ 79.083824][ T3292] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 79.095374][ T3292] FAT-fs (loop13): unable to read boot sector [ 79.102979][ T39] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 79.215454][ T3308] loop6: detected capacity change from 0 to 512 [ 79.315807][ T3308] EXT4-fs (loop6): Ignoring removed orlov option [ 79.324033][ T3308] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1264: casefold flag without casefold feature [ 79.341855][ T3308] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1264: couldn't read orphan inode 15 (err -117) [ 79.353620][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 79.358896][ T2211] usb 9-1: 0:2 : does not exist [ 79.371048][ T3308] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 79.391114][ T2211] usb 9-1: USB disconnect, device number 3 [ 79.425815][ T3319] loop9: detected capacity change from 0 to 512 [ 79.500025][ T3319] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000008,minixdf,,errors=continue. Quota mode: writeback. [ 79.516210][ T3319] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.626590][ T3344] loop0: detected capacity change from 0 to 512 [ 79.652929][ T39] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 79.658618][ T3344] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.1278: corrupted inode contents [ 79.661856][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.674411][ T3344] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #16: comm syz.0.1278: mark_inode_dirty error [ 79.681915][ T39] usb 8-1: Product: syz [ 79.693957][ T3344] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.1278: corrupted inode contents [ 79.697079][ T39] usb 8-1: Manufacturer: syz [ 79.709396][ T3344] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.1278: mark_inode_dirty error [ 79.713629][ T39] usb 8-1: SerialNumber: syz [ 79.724970][ T3344] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.1278: corrupted inode contents [ 79.734258][ T39] usb 8-1: config 0 descriptor?? [ 79.740733][ T3344] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 79.753867][ T3344] EXT4-fs error (device loop0): ext4_do_update_inode:5205: inode #16: comm syz.0.1278: corrupted inode contents [ 79.765954][ T3344] EXT4-fs error (device loop0): ext4_truncate:4303: inode #16: comm syz.0.1278: mark_inode_dirty error [ 79.776925][ T296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 79.777425][ T3344] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 79.793541][ T3344] EXT4-fs (loop0): 1 truncate cleaned up [ 79.793723][ T39] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 79.799129][ T3344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.808111][ T39] usb 8-1: Detected FT232H [ 79.817659][ T3344] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.942437][ T3354] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1283'. [ 79.963701][ T3356] loop0: detected capacity change from 0 to 256 [ 79.983403][ T3356] exfat: Deprecated parameter 'utf8' [ 79.988638][ T3356] exfat: Deprecated parameter 'utf8' [ 79.993939][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 80.035911][ T3356] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 80.172882][ T296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.183928][ T296] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.193522][ T296] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 80.202337][ T296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.214101][ T296] usb 7-1: config 0 descriptor?? [ 80.473810][ T39] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 80.494242][ T60] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 80.566666][ T3381] tmpfs: Unknown parameter 'usrquota·' [ 80.628580][ T3389] loop9: detected capacity change from 0 to 512 [ 80.695635][ T39] usb 8-1: USB disconnect, device number 6 [ 80.702444][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 80.711910][ T39] ftdi_sio 8-1:0.0: device disconnected [ 80.717877][ T3389] EXT4-fs (loop9): Ignoring removed orlov option [ 80.725652][ T3389] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1300: casefold flag without casefold feature [ 80.738679][ T3389] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1300: couldn't read orphan inode 15 (err -117) [ 80.750524][ T3389] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 80.853169][ T60] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.923408][ T296] hid-led 0003:1D34:000A.000E: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.6-1/input0 [ 80.935593][ T296] hid-led 0003:1D34:000A.000E: Dream Cheeky Webmail Notifier initialized [ 81.023061][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a9, bcdDevice= 0.40 [ 81.036267][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.044515][ T60] usb 1-1: Product: syz [ 81.048511][ T60] usb 1-1: Manufacturer: syz [ 81.053311][ T60] usb 1-1: SerialNumber: syz [ 81.070324][ T3400] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1304'. [ 81.128323][ T39] usb 7-1: USB disconnect, device number 5 [ 81.240682][ T3413] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.247783][ T3413] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.263287][ T296] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 81.314767][ T60] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A9 [ 81.491861][ T3442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3442 comm=syz.9.1324 [ 81.504913][ T3442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3442 comm=syz.9.1324 [ 81.505739][ T3444] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1325'. [ 81.552829][ T296] usb 9-1: Using ep0 maxpacket: 16 [ 81.578615][ T3452] loop9: detected capacity change from 0 to 512 [ 81.618945][ T3452] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.630073][ T3452] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.659803][ T3452] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 81.676347][ T3452] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 81.681782][ T3462] loop7: detected capacity change from 0 to 512 [ 81.688705][ T3452] EXT4-fs (loop9): This should not happen!! Data will be lost [ 81.688705][ T3452] [ 81.704514][ T296] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 81.706784][ T3452] EXT4-fs (loop9): Total free blocks count 0 [ 81.723509][ T3452] EXT4-fs (loop9): Free/Dirty block details [ 81.723705][ T296] usb 9-1: config 0 interface 0 has no altsetting 0 [ 81.729501][ T3452] EXT4-fs (loop9): free_blocks=65280 [ 81.740951][ T3452] EXT4-fs (loop9): dirty_blocks=31 [ 81.746237][ T3452] EXT4-fs (loop9): Block reservation details [ 81.747421][ T296] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 81.752040][ T3452] EXT4-fs (loop9): i_reserved_data_blocks=31 [ 81.777444][ T296] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.792409][ T296] usb 9-1: config 0 descriptor?? [ 81.834944][ T3462] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 81.849244][ T3462] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 81.858362][ T3480] xt_hashlimit: size too large, truncated to 1048576 [ 81.869523][ T3462] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.1332: corrupted in-inode xattr [ 81.889035][ T3462] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1332: couldn't read orphan inode 15 (err -117) [ 81.908614][ T3462] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,jqfmt=vfsv1,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,usrjquota=,,errors=continue. Quota mode: none. [ 82.061231][ T3492] loop7: detected capacity change from 0 to 512 [ 82.070872][ T3490] loop9: detected capacity change from 0 to 8192 [ 82.163439][ T3492] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.201086][ T3492] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 82.218703][ T3492] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.1344: corrupted inode contents [ 82.237499][ T3492] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.1344: mark_inode_dirty error [ 82.253334][ T3492] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.1344: corrupted inode contents [ 82.266123][ T296] zydacron 0003:13EC:0006.000F: item fetching failed at offset 1/3 [ 82.281320][ T296] zydacron 0003:13EC:0006.000F: parse failed [ 82.300245][ T296] zydacron: probe of 0003:13EC:0006.000F failed with error -22 [ 82.334032][ T3518] loop7: detected capacity change from 0 to 128 [ 82.382516][ T3518] FAT-fs (loop7): Directory bread(block 32) failed [ 82.389175][ T3518] FAT-fs (loop7): Directory bread(block 33) failed [ 82.395917][ T3518] FAT-fs (loop7): Directory bread(block 34) failed [ 82.402527][ T3518] FAT-fs (loop7): Directory bread(block 35) failed [ 82.409396][ T3518] FAT-fs (loop7): Directory bread(block 36) failed [ 82.416359][ T3518] FAT-fs (loop7): Directory bread(block 37) failed [ 82.425177][ T3518] FAT-fs (loop7): Directory bread(block 38) failed [ 82.431532][ T3518] FAT-fs (loop7): Directory bread(block 39) failed [ 82.438226][ T3518] FAT-fs (loop7): Directory bread(block 40) failed [ 82.447137][ T3518] FAT-fs (loop7): Directory bread(block 41) failed [ 82.476616][ T60] usb 9-1: USB disconnect, device number 4 [ 82.740817][ T3541] loop6: detected capacity change from 0 to 512 [ 82.832835][ T39] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 82.884586][ T3541] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 82.896605][ T3541] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.910713][ T3541] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #2: comm syz.6.1366: corrupted inode contents [ 82.922656][ T3541] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.1366: mark_inode_dirty error [ 82.934391][ T3541] EXT4-fs error (device loop6): ext4_do_update_inode:5205: inode #2: comm syz.6.1366: corrupted inode contents [ 82.990216][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 82.990234][ T30] audit: type=1400 audit(1743759769.587:1548): avc: denied { ioctl } for pid=3544 comm="syz.8.1368" path="socket:[28584]" dev="sockfs" ino=28584 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.065987][ T30] audit: type=1326 audit(1743759769.667:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.092594][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 83.102453][ T30] audit: type=1326 audit(1743759769.667:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.128259][ T30] audit: type=1326 audit(1743759769.667:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.199859][ T30] audit: type=1326 audit(1743759769.667:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.226609][ T30] audit: type=1326 audit(1743759769.667:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.253046][ T39] usb 8-1: config 0 interface 0 has no altsetting 0 [ 83.262567][ T30] audit: type=1326 audit(1743759769.667:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.264309][ T39] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 83.286866][ T30] audit: type=1326 audit(1743759769.687:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.325542][ T30] audit: type=1326 audit(1743759769.697:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.372822][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.390914][ T39] usb 8-1: config 0 descriptor?? [ 83.398352][ T30] audit: type=1326 audit(1743759769.697:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.8.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05ab072169 code=0x7ffc0000 [ 83.423457][ T315] usb 1-1: USB disconnect, device number 8 [ 83.429998][ T315] usblp0: removed [ 83.465441][ T3584] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1384'. [ 83.526236][ T3590] loop6: detected capacity change from 0 to 256 [ 83.548966][ T3590] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4ca973fa, utbl_chksum : 0xe619d30d) [ 83.709745][ T3616] loop6: detected capacity change from 0 to 1024 [ 83.719349][ T3618] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 83.774519][ T3616] EXT4-fs (loop6): Ignoring removed bh option [ 83.790013][ T3616] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.837641][ T3616] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,dioread_lock,nouid32,max_dir_size_kb=0x000000000000090e,errors=continue,resuid=0x0000000000000000,sysvgroups,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 83.889493][ T39] hid (null): unknown global tag 0xd [ 83.901900][ T39] hid (null): unknown global tag 0xe [ 83.905923][ T3644] device vlan2 entered promiscuous mode [ 83.954458][ T3652] loop6: detected capacity change from 0 to 512 [ 84.009763][ T3654] loop8: detected capacity change from 0 to 8192 [ 84.019436][ T3652] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1415: invalid indirect mapped block 256 (level 2) [ 84.037048][ T3652] EXT4-fs (loop6): 2 truncates cleaned up [ 84.042624][ T3652] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.059593][ T3652] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1415: bg 0: block 5: invalid block bitmap [ 84.073103][ T3654] loop8: p1 < > p2 < p5 > p3 p4 < > [ 84.079635][ T3652] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3355443200 > max in inode 15 [ 84.083025][ T3654] loop8: p3 size 132352 extends beyond EOD, truncated [ 84.096740][ T3652] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3355443201 > max in inode 15 [ 84.117555][ T3654] loop8: p5 size 132352 extends beyond EOD, truncated [ 84.120596][ T20] usb 8-1: USB disconnect, device number 7 [ 84.202827][ T296] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 84.304195][ T3682] SELinux: policydb version 0 does not match my version range 15-33 [ 84.314648][ T3682] SELinux: failed to load policy [ 84.356643][ T328] udevd[328]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 84.368756][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 84.368756][ T1826] udevd[1826]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 84.374526][ T324] udevd[324]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 84.395045][ T325] udevd[325]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 84.497600][ T3702] netlink: 'syz.9.1438': attribute type 13 has an invalid length. [ 84.512189][ T3702] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 84.521786][ T3702] device gretap1 entered promiscuous mode [ 84.562875][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.577966][ T296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.592334][ T296] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 84.601263][ T296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.610008][ T296] usb 1-1: config 0 descriptor?? [ 84.656602][ T3716] loop7: detected capacity change from 0 to 256 [ 84.751076][ T3730] loop7: detected capacity change from 0 to 512 [ 84.772863][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 84.798970][ T3738] loop6: detected capacity change from 0 to 256 [ 84.824053][ T3730] EXT4-fs (loop7): 1 truncate cleaned up [ 84.829588][ T3730] EXT4-fs (loop7): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,nodiscard,errors=continue,noquota,,errors=continue. Quota mode: none. [ 84.992284][ T3741] loop9: detected capacity change from 0 to 40427 [ 85.001128][ T3750] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3750 comm=syz.6.1461 [ 85.014190][ T3741] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 85.021877][ T3750] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3750 comm=syz.6.1461 [ 85.032170][ T3741] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 85.069709][ T3741] F2FS-fs (loop9): Found nat_bits in checkpoint [ 85.077253][ T296] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0 [ 85.091532][ T296] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 85.107413][ T3759] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 85.118911][ T296] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 85.132644][ T3741] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 85.133876][ T296] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 85.152908][ T39] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.164487][ T39] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.173667][ T1380] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 85.185730][ T3741] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 85.192608][ T3741] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 85.209607][ T3766] loop7: detected capacity change from 0 to 512 [ 85.226226][ T296] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected [ 85.243349][ T296] hid-steam 0003:28DE:1142.0011: No HID_FEATURE_REPORT submitted - nothing to read [ 85.246852][ T3741] attempt to access beyond end of device [ 85.246852][ T3741] loop9: rw=2049, want=45104, limit=40427 [ 85.263834][ T39] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.273035][ T39] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.278890][ T296] usb 1-1: USB disconnect, device number 9 [ 85.282336][ T39] usb 9-1: SerialNumber: syz [ 85.295634][ T296] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected [ 85.296065][ T3766] EXT4-fs error (device loop7): ext4_acquire_dquot:6188: comm syz.7.1467: Failed to acquire dquot type 1 [ 85.329252][ T3766] EXT4-fs (loop7): 1 truncate cleaned up [ 85.336421][ T3741] attempt to access beyond end of device [ 85.336421][ T3741] loop9: rw=0, want=45104, limit=40427 [ 85.353371][ T3766] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 85.365923][ T3772] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 85.375505][ T3766] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.375688][ T3741] attempt to access beyond end of device [ 85.375688][ T3741] loop9: rw=2049, want=40968, limit=40427 [ 85.392531][ T3772] SELinux: failed to load policy [ 85.593851][ T39] usb 9-1: 0:2 : does not exist [ 85.608251][ T39] usb 9-1: USB disconnect, device number 5 [ 85.627989][ T1826] udevd[1826]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.663305][ T296] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node! [ 85.755714][ T3810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3810 comm=syz.6.1486 [ 85.807446][ T3818] device pim6reg1 entered promiscuous mode [ 85.824733][ T3820] loop0: detected capacity change from 0 to 512 [ 85.868679][ T3820] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 85.884356][ T3820] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.100456][ T3857] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 86.116967][ T3857] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 86.219318][ T3877] syz.0.1517[3877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.219402][ T3877] syz.0.1517[3877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.242847][ T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 86.245689][ T3877] loop0: detected capacity change from 0 to 512 [ 86.326256][ T3888] tipc: Started in network mode [ 86.331159][ T3888] tipc: Node identity ac14140f, cluster identity 4711 [ 86.338990][ T3888] tipc: New replicast peer: 255.255.255.83 [ 86.345936][ T3877] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.373069][ T3888] tipc: Enabled bearer , priority 10 [ 86.384800][ T3877] EXT4-fs (loop0): 1 truncate cleaned up [ 86.392846][ T3877] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 86.613315][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.631362][ T60] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 86.650200][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.668374][ T60] usb 7-1: config 0 descriptor?? [ 86.725994][ T3930] loop9: detected capacity change from 0 to 512 [ 86.786973][ T3941] loop8: detected capacity change from 0 to 512 [ 86.795665][ T3930] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 86.808355][ T3930] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.839278][ T3941] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 86.886605][ T3941] EXT4-fs (loop8): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 86.957790][ T3963] loop8: detected capacity change from 0 to 256 [ 86.977397][ T3963] FAT-fs (loop8): Directory bread(block 64) failed [ 86.984215][ T3963] FAT-fs (loop8): Directory bread(block 65) failed [ 86.991207][ T3963] FAT-fs (loop8): Directory bread(block 66) failed [ 86.997943][ T3963] FAT-fs (loop8): Directory bread(block 67) failed [ 87.004752][ T3963] FAT-fs (loop8): Directory bread(block 68) failed [ 87.011195][ T3963] FAT-fs (loop8): Directory bread(block 69) failed [ 87.019338][ T3963] FAT-fs (loop8): Directory bread(block 70) failed [ 87.028024][ T3963] FAT-fs (loop8): Directory bread(block 71) failed [ 87.035449][ T3963] FAT-fs (loop8): Directory bread(block 72) failed [ 87.042153][ T3963] FAT-fs (loop8): Directory bread(block 73) failed [ 87.134346][ T60] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 87.153719][ T60] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0013/input/input20 [ 87.182852][ T26] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 87.211341][ T3989] loop9: detected capacity change from 0 to 512 [ 87.235049][ T60] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 87.247920][ T3989] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 87.281000][ T3989] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,stripe=0x0000000000000002,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 87.300424][ T3989] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.353839][ T3999] input: syz1 as /devices/virtual/input/input21 [ 87.372856][ T60] tipc: Node number set to 2886997007 [ 87.423393][ T4008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4008 comm=syz.8.1574 [ 87.423546][ T4006] netlink: 'syz.9.1573': attribute type 6 has an invalid length. [ 87.572923][ T26] usb 8-1: config 0 has an invalid interface number: 20 but max is 0 [ 87.580844][ T26] usb 8-1: config 0 has no interface number 0 [ 87.595003][ T26] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 87.693093][ T4037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4037 comm=syz.9.1587 [ 87.772952][ T26] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 87.782066][ T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.791038][ T26] usb 8-1: Product: syz [ 87.795604][ T26] usb 8-1: Manufacturer: syz [ 87.800171][ T26] usb 8-1: SerialNumber: syz [ 87.814330][ T4045] loop8: detected capacity change from 0 to 2048 [ 87.819098][ T26] usb 8-1: config 0 descriptor?? [ 87.852891][ T3956] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 87.864619][ T4045] loop8: p1 < > p3 [ 87.868892][ T4045] loop8: p3 size 134217728 extends beyond EOD, truncated [ 87.884757][ T26] usb-storage 8-1:0.20: USB Mass Storage device detected [ 87.907345][ T26] usb-storage 8-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 87.910153][ T4052] loop0: detected capacity change from 0 to 8192 [ 87.923027][ T4058] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.942921][ T4052] loop0: p1 < > p2 < p5 > p3 p4 < > [ 87.951017][ T4052] loop0: p3 size 132352 extends beyond EOD, truncated [ 87.962638][ T4052] loop0: p5 size 132352 extends beyond EOD, truncated [ 88.000085][ T324] udevd[324]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 88.011382][ T328] udevd[328]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 88.036423][ T30] kauditd_printk_skb: 165 callbacks suppressed [ 88.036441][ T30] audit: type=1326 audit(1743759774.631:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.053993][ T328] udevd[328]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 88.076917][ T324] udevd[324]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 88.095858][ T30] audit: type=1326 audit(1743759774.671:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.126640][ T26] scsi host1: usb-storage 8-1:0.20 [ 88.137336][ T30] audit: type=1326 audit(1743759774.671:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.137440][ T30] audit: type=1326 audit(1743759774.681:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.137535][ T30] audit: type=1326 audit(1743759774.681:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.137634][ T30] audit: type=1326 audit(1743759774.681:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.137774][ T30] audit: type=1326 audit(1743759774.681:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.137864][ T30] audit: type=1326 audit(1743759774.681:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.137954][ T30] audit: type=1326 audit(1743759774.681:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.138046][ T30] audit: type=1326 audit(1743759774.681:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4065 comm="syz.9.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8f3df169 code=0x7ffc0000 [ 88.171632][ T4075] binfmt_misc: register: failed to install interpreter file ./file0 [ 88.326485][ T26] usb 8-1: USB disconnect, device number 8 [ 88.469275][ T4092] loop8: detected capacity change from 0 to 512 [ 88.540779][ T4092] EXT4-fs (loop8): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 88.552829][ T4092] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.565999][ T4092] EXT4-fs error (device loop8): ext4_do_update_inode:5205: inode #2: comm syz.8.1610: corrupted inode contents [ 88.578029][ T4092] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.1610: mark_inode_dirty error [ 88.589575][ T4092] EXT4-fs error (device loop8): ext4_do_update_inode:5205: inode #2: comm syz.8.1610: corrupted inode contents [ 88.654346][ T4098] overlayfs: workdir and upperdir must reside under the same mount [ 88.963412][ T1380] usb 7-1: USB disconnect, device number 6 [ 89.027481][ T4111] loop6: detected capacity change from 0 to 8192 [ 89.043844][ T4111] loop6: p1 < > p2 < p5 > p3 p4 < > [ 89.055535][ T4111] loop6: p3 size 132352 extends beyond EOD, truncated [ 89.064182][ T4111] loop6: p5 size 132352 extends beyond EOD, truncated [ 89.306872][ T26] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 89.315516][ T4142] incfs: Error accessing: ./file0. [ 89.320523][ T4142] incfs: mount failed -20 [ 89.419205][ T4162] netlink: 'syz.8.1639': attribute type 34 has an invalid length. [ 89.501410][ T4170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1644'. [ 89.511744][ T4170] device bridge_slave_1 left promiscuous mode [ 89.517933][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.525819][ T4170] device bridge_slave_0 left promiscuous mode [ 89.531881][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.548451][ T4174] syz.0.1645[4174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.548543][ T4174] syz.0.1645[4174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.576627][ T26] usb 8-1: Using ep0 maxpacket: 16 [ 89.722412][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.735407][ T26] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.745365][ T26] usb 8-1: config 0 interface 0 has no altsetting 0 [ 89.752213][ T26] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 89.761634][ T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.784948][ T26] usb 8-1: config 0 descriptor?? [ 89.827898][ T4217] loop8: detected capacity change from 0 to 512 [ 89.931745][ T4217] EXT4-fs (loop8): mounted filesystem without journal. Opts: noauto_da_alloc,grpjquota=,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 89.947246][ T4217] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.256373][ T26] hid (null): unknown global tag 0xe [ 90.453759][ T26] usb 8-1: USB disconnect, device number 9 [ 90.623594][ T4238] loop9: detected capacity change from 0 to 8192 [ 90.667576][ T4246] loop8: detected capacity change from 0 to 16 [ 90.678032][ T4238] loop9: p1 < > p2 < p5 > p3 p4 < > [ 90.679927][ T4248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1677'. [ 90.684610][ T4238] loop9: p3 size 132352 extends beyond EOD, truncated [ 90.699674][ T4238] loop9: p5 size 132352 extends beyond EOD, truncated [ 90.716012][ T4246] erofs: (device loop8): mounted with root inode @ nid 36. [ 90.839538][ T4270] loop6: detected capacity change from 0 to 2048 [ 90.856285][ T1826] udevd[1826]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 90.875270][ T3675] udevd[3675]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 90.884596][ T1826] udevd[1826]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 90.915797][ T4270] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.953316][ T325] udevd[325]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 90.964612][ T1825] udevd[1825]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 90.973037][ T324] udevd[324]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 90.981922][ T316] udevd[316]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 90.998949][ T1826] udevd[1826]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 91.067941][ T4290] loop6: detected capacity change from 0 to 1024 [ 91.141358][ T4290] EXT4-fs (loop6): Ignoring removed nobh option [ 91.147734][ T4290] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.255994][ T4322] xt_bpf: check failed: parse error [ 91.258285][ T4290] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,data_err=abort,barrier=0x0000000000000008,dioread_lock,jqfmt=vfsv0,noquota,data_err=ignore,grpquota,nobh,user_xattr,grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 91.285266][ T293] ------------[ cut here ]------------ [ 91.290669][ T293] WARNING: CPU: 0 PID: 293 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 91.298502][ T293] Modules linked in: [ 91.306336][ T293] CPU: 0 PID: 293 Comm: syz-executor Tainted: G W 5.15.178-syzkaller-00034-g5e1b899f19c3 #0 [ 91.317776][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.327853][ T293] RIP: 0010:drop_nlink+0xc1/0x110 [ 91.341694][ T293] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d7 f5 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9f 88 ae ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 91.362635][ T293] RSP: 0018:ffffc9000074fc88 EFLAGS: 00010293 [ 91.368672][ T293] RAX: ffffffff81c1e411 RBX: 0000000000000000 RCX: ffff88810aa6e2c0 [ 91.377110][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.385033][ T293] RBP: ffffc9000074fcb0 R08: ffffffff81c1e394 R09: 0000000000000003 [ 91.393271][ T293] R10: fffff520000e9f80 R11: dffffc0000000001 R12: dffffc0000000000 [ 91.401564][ T293] R13: 1ffff11024f19987 R14: ffff8881278ccbf0 R15: ffff8881278ccc38 [ 91.409685][ T293] FS: 000055559206a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 91.418733][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.425587][ T293] CR2: 0000001b2fc19ff8 CR3: 000000012549f000 CR4: 00000000003506b0 [ 91.433603][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.442205][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.451583][ T293] Call Trace: [ 91.454983][ T293] [ 91.457749][ T293] ? show_regs+0x58/0x60 [ 91.461888][ T293] ? __warn+0x160/0x2f0 [ 91.465899][ T293] ? drop_nlink+0xc1/0x110 [ 91.470562][ T293] ? report_bug+0x3d9/0x5b0 [ 91.475239][ T293] ? drop_nlink+0xc1/0x110 [ 91.479576][ T293] ? handle_bug+0x41/0x70 [ 91.483776][ T293] ? exc_invalid_op+0x1b/0x50 [ 91.488283][ T293] ? asm_exc_invalid_op+0x1b/0x20 [ 91.493538][ T293] ? drop_nlink+0x44/0x110 [ 91.498114][ T293] ? drop_nlink+0xc1/0x110 [ 91.502426][ T293] ? drop_nlink+0xc1/0x110 [ 91.506675][ T293] ? drop_nlink+0xc1/0x110 [ 91.510988][ T293] shmem_rmdir+0x59/0x90 [ 91.516416][ T293] vfs_rmdir+0x324/0x470 [ 91.521119][ T26] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 91.530873][ T293] incfs_kill_sb+0x113/0x230 [ 91.535649][ T293] deactivate_locked_super+0xad/0x110 [ 91.541262][ T293] deactivate_super+0xbe/0xf0 [ 91.548122][ T293] cleanup_mnt+0x45c/0x510 [ 91.552488][ T293] __cleanup_mnt+0x19/0x20 [ 91.556774][ T293] task_work_run+0x129/0x190 [ 91.561937][ T293] exit_to_user_mode_loop+0xc4/0xe0 [ 91.566976][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 91.577656][ T293] syscall_exit_to_user_mode+0x26/0x160 [ 91.596547][ T293] do_syscall_64+0x47/0xb0 [ 91.600923][ T293] ? clear_bhb_loop+0x35/0x90 [ 91.605675][ T293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.611531][ T293] RIP: 0033:0x7f900bb72497 [ 91.615839][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 91.636599][ T293] RSP: 002b:00007fff3ae8d7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.644960][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f900bb72497 [ 91.652800][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3ae8d870 [ 91.664918][ T293] RBP: 00007fff3ae8d870 R08: 0000000000000000 R09: 0000000000000000 [ 91.673380][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3ae8e900 [ 91.681432][ T293] R13: 00007f900bbf208c R14: 0000000000016495 R15: 00007fff3ae8e940 [ 91.689289][ T293] [ 91.695179][ T293] ---[ end trace dba7cb644fb6ab4c ]--- [ 91.700915][ T293] ================================================================== [ 91.702644][ T4351] loop6: detected capacity change from 0 to 256 [ 91.708798][ T293] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 91.720950][ T293] Write of size 4 at addr 0000000000000170 by task syz-executor/293 [ 91.728770][ T293] [ 91.730945][ T293] CPU: 1 PID: 293 Comm: syz-executor Tainted: G W 5.15.178-syzkaller-00034-g5e1b899f19c3 #0 [ 91.742224][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.752118][ T293] Call Trace: [ 91.755242][ T293] [ 91.758024][ T293] dump_stack_lvl+0x151/0x1c0 [ 91.762535][ T293] ? io_uring_drop_tctx_refs+0x190/0x190 [ 91.768016][ T293] ? _raw_spin_lock+0xa4/0x1b0 [ 91.772606][ T293] ? _raw_spin_trylock_bh+0x190/0x190 [ 91.777815][ T293] kasan_report+0x16f/0x1c0 [ 91.782155][ T293] ? ihold+0x20/0x60 [ 91.785975][ T293] ? ihold+0x20/0x60 [ 91.789709][ T293] kasan_check_range+0x293/0x2a0 [ 91.794471][ T293] __kasan_check_write+0x14/0x20 [ 91.799247][ T293] ihold+0x20/0x60 [ 91.802805][ T293] vfs_rmdir+0x201/0x470 [ 91.806917][ T293] incfs_kill_sb+0x113/0x230 [ 91.811746][ T293] deactivate_locked_super+0xad/0x110 [ 91.816953][ T293] deactivate_super+0xbe/0xf0 [ 91.821467][ T293] cleanup_mnt+0x45c/0x510 [ 91.825718][ T293] __cleanup_mnt+0x19/0x20 [ 91.829970][ T293] task_work_run+0x129/0x190 [ 91.834396][ T293] exit_to_user_mode_loop+0xc4/0xe0 [ 91.839433][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 91.844726][ T293] syscall_exit_to_user_mode+0x26/0x160 [ 91.850105][ T293] do_syscall_64+0x47/0xb0 [ 91.854358][ T293] ? clear_bhb_loop+0x35/0x90 [ 91.858888][ T293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.864600][ T293] RIP: 0033:0x7f900bb72497 [ 91.868858][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 91.888384][ T293] RSP: 002b:00007fff3ae8d7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.896631][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f900bb72497 [ 91.904438][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3ae8d870 [ 91.912686][ T293] RBP: 00007fff3ae8d870 R08: 0000000000000000 R09: 0000000000000000 [ 91.920494][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3ae8e900 [ 91.928305][ T293] R13: 00007f900bbf208c R14: 0000000000016495 R15: 00007fff3ae8e940 [ 91.936122][ T293] [ 91.938995][ T293] ================================================================== [ 91.946886][ T293] Disabling lock debugging due to kernel taint [ 91.953523][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 91.961154][ T293] #PF: supervisor write access in kernel mode [ 91.967160][ T293] #PF: error_code(0x0002) - not-present page [ 91.972972][ T293] PGD 128532067 P4D 128532067 PUD 0 [ 91.978092][ T293] Oops: 0002 [#1] PREEMPT SMP KASAN [ 91.983126][ T293] CPU: 0 PID: 293 Comm: syz-executor Tainted: G B W 5.15.178-syzkaller-00034-g5e1b899f19c3 #0 [ 91.994533][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 92.004433][ T293] RIP: 0010:ihold+0x25/0x60 [ 92.008762][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 80 ae ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 c0 ed f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 84 ae [ 92.028203][ T293] RSP: 0018:ffffc9000074fcc8 EFLAGS: 00010246 [ 92.034112][ T293] RAX: ffff88810aa6e200 RBX: 0000000000000001 RCX: ffff88810aa6e2c0 [ 92.041914][ T293] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 00000000ffffffff [ 92.049740][ T293] RBP: ffffc9000074fcd8 R08: ffffffff8141a9ab R09: 0000000000000003 [ 92.057537][ T293] R10: fffffbfff0e9aa4c R11: dffffc0000000001 R12: dffffc0000000000 [ 92.065362][ T293] R13: ffff88810c850660 R14: 0000000000000000 R15: 1ffff1102190a0d2 [ 92.073161][ T293] FS: 000055559206a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 92.081927][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.088348][ T293] CR2: 0000000000000170 CR3: 000000012549f000 CR4: 00000000003506b0 [ 92.096166][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.103977][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.111797][ T293] Call Trace: [ 92.114913][ T293] [ 92.117693][ T293] ? __die_body+0x62/0xb0 [ 92.121886][ T293] ? __die+0x7e/0x90 [ 92.125584][ T293] ? page_fault_oops+0x7f9/0xa90 [ 92.130357][ T293] ? _raw_spin_unlock+0x4d/0x70 [ 92.135051][ T293] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 92.140423][ T293] ? __schedule+0xcd4/0x1590 [ 92.144864][ T293] ? exc_page_fault+0x510/0x7f0 [ 92.149543][ T293] ? asm_exc_page_fault+0x27/0x30 [ 92.154401][ T293] ? check_panic_on_warn+0x5b/0xb0 [ 92.159346][ T293] ? ihold+0x25/0x60 [ 92.163083][ T293] ? ihold+0x20/0x60 [ 92.166809][ T293] vfs_rmdir+0x201/0x470 [ 92.170889][ T293] incfs_kill_sb+0x113/0x230 [ 92.175439][ T293] deactivate_locked_super+0xad/0x110 [ 92.180634][ T293] deactivate_super+0xbe/0xf0 [ 92.185160][ T293] cleanup_mnt+0x45c/0x510 [ 92.189399][ T293] __cleanup_mnt+0x19/0x20 [ 92.193652][ T293] task_work_run+0x129/0x190 [ 92.198080][ T293] exit_to_user_mode_loop+0xc4/0xe0 [ 92.203114][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 92.208406][ T293] syscall_exit_to_user_mode+0x26/0x160 [ 92.213794][ T293] do_syscall_64+0x47/0xb0 [ 92.218057][ T293] ? clear_bhb_loop+0x35/0x90 [ 92.222553][ T293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.228287][ T293] RIP: 0033:0x7f900bb72497 [ 92.232541][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 92.251977][ T293] RSP: 002b:00007fff3ae8d7b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.260239][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f900bb72497 [ 92.268031][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3ae8d870 [ 92.275844][ T293] RBP: 00007fff3ae8d870 R08: 0000000000000000 R09: 0000000000000000 [ 92.283654][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3ae8e900 [ 92.291465][ T293] R13: 00007f900bbf208c R14: 0000000000016495 R15: 00007fff3ae8e940 [ 92.299281][ T293] [ 92.302141][ T293] Modules linked in: [ 92.305889][ T293] CR2: 0000000000000170 [ 92.309877][ T293] ---[ end trace dba7cb644fb6ab4d ]--- [ 92.315162][ T293] RIP: 0010:ihold+0x25/0x60 [ 92.319505][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 b1 80 ae ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 c0 ed f0 ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 34 84 ae [ 92.338945][ T293] RSP: 0018:ffffc9000074fcc8 EFLAGS: 00010246 [ 92.344841][ T293] RAX: ffff88810aa6e200 RBX: 0000000000000001 RCX: ffff88810aa6e2c0 [ 92.350401][ T26] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.352653][ T293] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 00000000ffffffff [ 92.352671][ T293] RBP: ffffc9000074fcd8 R08: ffffffff8141a9ab R09: 0000000000000003 [ 92.352687][ T293] R10: fffffbfff0e9aa4c R11: dffffc0000000001 R12: dffffc0000000000 [ 92.362941][ T26] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.370565][ T293] R13: ffff88810c850660 R14: 0000000000000000 R15: 1ffff1102190a0d2 [ 92.370588][ T293] FS: 000055559206a500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 92.370606][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.370621][ T293] CR2: 0000000000000170 CR3: 000000012549f000 CR4: 00000000003506b0 [ 92.425763][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.433575][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.441397][ T293] Kernel panic - not syncing: Fatal exception [ 92.447593][ T293] Kernel Offset: disabled [ 92.451760][ T293] Rebooting in 86400 seconds..