last executing test programs: 2.37369761s ago: executing program 1 (id=343): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21881e, &(0x7f0000000300)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x514, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) capget(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, 0x0) 2.308468781s ago: executing program 3 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x18) 2.287068651s ago: executing program 1 (id=346): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, '['}, @global=@item_4={0x3, 0x1, 0x4, "2054409c"}]}}, 0x0}, 0x0) 2.237647082s ago: executing program 3 (id=347): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) stat(&(0x7f0000004b00)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x8, 0x2000000, 0x238d117e6f1c1b5b, 0x401, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) 1.940835208s ago: executing program 2 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 1.915198388s ago: executing program 2 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1.894198048s ago: executing program 2 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x3ae4c21, &(0x7f0000000440)={[{@verity_require}]}) 1.873783598s ago: executing program 2 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r0, 0x406, r0) syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES32=r0], 0x0) 1.382612837s ago: executing program 3 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) timer_create(0x1, 0x0, &(0x7f0000000340)=0x0) timer_getoverrun(r2) 1.336192108s ago: executing program 3 (id=356): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004039bd16850000002d00000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.220840819s ago: executing program 3 (id=357): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64=0x0], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c64) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 878.423275ms ago: executing program 0 (id=358): socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 838.767746ms ago: executing program 0 (id=359): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x700, 0x12) 790.691006ms ago: executing program 0 (id=360): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e1e, 0xffffffff, @local, 0x80000004}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 726.687887ms ago: executing program 0 (id=362): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 567.97215ms ago: executing program 0 (id=367): listen(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x14) 544.041451ms ago: executing program 2 (id=368): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_validatetrans(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 529.253111ms ago: executing program 1 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380100001"], 0x44}}, 0x0) 459.517832ms ago: executing program 1 (id=370): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) shutdown(r0, 0x1) write$tun(r1, 0x0, 0x46) 446.804503ms ago: executing program 4 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x1000422) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 398.827723ms ago: executing program 1 (id=372): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 393.300443ms ago: executing program 4 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 355.648064ms ago: executing program 4 (id=374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='sys_enter\x00', r2}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 352.773894ms ago: executing program 1 (id=375): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000200)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000240)={0x3, 0x3ff, 0x0, 0x0}) 317.763974ms ago: executing program 3 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 243.396476ms ago: executing program 0 (id=377): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x6e23}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone3(&(0x7f0000000240)={0x20400, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x1}, 0x58) madvise(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x8) 194.103067ms ago: executing program 4 (id=378): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x8, @remote, 0x7}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x17a426ef}, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 109.523538ms ago: executing program 4 (id=379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}], 0x1, 0x0) 83.868049ms ago: executing program 4 (id=380): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x2000, {0x0, 0x0, 0x0, r2, 0x20520, 0x57888}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 0s ago: executing program 2 (id=381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 23.775770][ T28] audit: type=1400 audit(1743821443.425:66): avc: denied { mounton } for pid=284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.777066][ T284] cgroup: Unknown subsys name 'net' [ 23.798727][ T28] audit: type=1400 audit(1743821443.425:67): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.825977][ T28] audit: type=1400 audit(1743821443.455:68): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.826407][ T284] cgroup: Unknown subsys name 'devices' [ 23.966556][ T284] cgroup: Unknown subsys name 'hugetlb' [ 23.972140][ T284] cgroup: Unknown subsys name 'rlimit' [ 24.078162][ T28] audit: type=1400 audit(1743821443.725:69): avc: denied { setattr } for pid=284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.101824][ T28] audit: type=1400 audit(1743821443.725:70): avc: denied { mounton } for pid=284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.128260][ T28] audit: type=1400 audit(1743821443.725:71): avc: denied { mount } for pid=284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.132175][ T287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.166598][ T28] audit: type=1400 audit(1743821443.815:72): avc: denied { relabelto } for pid=287 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.195335][ T28] audit: type=1400 audit(1743821443.815:73): avc: denied { write } for pid=287 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.207432][ T284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.221412][ T28] audit: type=1400 audit(1743821443.855:74): avc: denied { read } for pid=284 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.256600][ T28] audit: type=1400 audit(1743821443.855:75): avc: denied { open } for pid=284 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.908246][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.915337][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.923564][ T294] device bridge_slave_0 entered promiscuous mode [ 24.932385][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.939452][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.946917][ T294] device bridge_slave_1 entered promiscuous mode [ 24.953395][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.960380][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.967900][ T293] device bridge_slave_0 entered promiscuous mode [ 24.976506][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.983365][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.991064][ T293] device bridge_slave_1 entered promiscuous mode [ 25.067750][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.076738][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.084683][ T297] device bridge_slave_0 entered promiscuous mode [ 25.103666][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.111365][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.119336][ T297] device bridge_slave_1 entered promiscuous mode [ 25.161844][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.168765][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.176080][ T296] device bridge_slave_0 entered promiscuous mode [ 25.186105][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.192966][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.200361][ T295] device bridge_slave_0 entered promiscuous mode [ 25.210123][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.217111][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.225323][ T295] device bridge_slave_1 entered promiscuous mode [ 25.235878][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.242750][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.250427][ T296] device bridge_slave_1 entered promiscuous mode [ 25.397322][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.404335][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.411535][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.418432][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.458044][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.464937][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.472021][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.478833][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.524330][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.531198][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.538348][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.545845][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.571033][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.578049][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.585450][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.592296][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.605153][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.612021][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.619149][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.625920][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.637237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.644878][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.652395][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.660175][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.667811][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.675533][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.682775][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.690506][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.698147][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.705590][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.716006][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.735540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.744471][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.751495][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.777334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.785591][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.792550][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.816062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.824758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.841253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.858614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.866875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.875903][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.882866][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.890325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.899095][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.906321][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.916392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.923718][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.946068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.954550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.962755][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.969626][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.977193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.984605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.991861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.000169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.008330][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.015201][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.022394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.030976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.039154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.047173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.055116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.062996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.076112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.084722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.095583][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.103054][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.111974][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.120931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.129014][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.136011][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.143201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.151700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.160094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.168079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.181346][ T293] device veth0_vlan entered promiscuous mode [ 26.198803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.207317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.215672][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.224236][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.232095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.241597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.250658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.259162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.267912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.276090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.283972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.292608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.301468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.310413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.319247][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.326277][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.340715][ T293] device veth1_macvtap entered promiscuous mode [ 26.350643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.359180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.368019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.390099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.398865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.407351][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.416287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.425079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.440446][ T296] device veth0_vlan entered promiscuous mode [ 26.450006][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.458527][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.467020][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.475461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.482994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.502078][ T293] request_module fs-gadgetfs succeeded, but still no fs? [ 26.507217][ T294] device veth0_vlan entered promiscuous mode [ 26.522094][ T295] device veth0_vlan entered promiscuous mode [ 26.529796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.542596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.550704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.558897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.567516][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.575820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.583611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.591787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.599256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.606916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.614455][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.622051][ T296] device veth1_macvtap entered promiscuous mode [ 26.635999][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.644448][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.652333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.661410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.683311][ T295] device veth1_macvtap entered promiscuous mode [ 26.705845][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.718275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.727054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.760881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.774902][ T328] syz.1.9[328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.775012][ T328] syz.1.9[328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.777057][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.806962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.815580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.824752][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.833264][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.843165][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.851843][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.860535][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.870033][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.884773][ T294] device veth1_macvtap entered promiscuous mode [ 26.901033][ T297] device veth0_vlan entered promiscuous mode [ 26.910797][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.919492][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.929036][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.937041][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.971205][ T297] device veth1_macvtap entered promiscuous mode [ 26.993547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.009350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.026609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.041293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.045581][ T338] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 27.050598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.068360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.077970][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.121415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.133054][ T347] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.151002][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.169349][ T350] binder: 349:350 ioctl c0306201 200000000640 returned -22 [ 27.178419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.193929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.283077][ T360] tipc: Enabling of bearer rejected, media not registered [ 27.288832][ T365] loop0: detected capacity change from 0 to 512 [ 27.311838][ T367] loop1: detected capacity change from 0 to 1024 [ 27.329336][ T365] ======================================================= [ 27.329336][ T365] WARNING: The mand mount option has been deprecated and [ 27.329336][ T365] and is ignored by this kernel. Remove the mand [ 27.329336][ T365] option from the mount to silence this warning. [ 27.329336][ T365] ======================================================= [ 27.377260][ T370] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 27.390447][ T367] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 27.431725][ T365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.506234][ T365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 27.506928][ T387] loop4: detected capacity change from 0 to 512 [ 27.530724][ T365] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.554945][ T387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.578155][ T387] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.599320][ T365] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 27.617515][ T397] device veth0 entered promiscuous mode [ 27.623861][ T397] device macsec1 entered promiscuous mode [ 27.631087][ T365] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 27.643683][ T365] EXT4-fs (loop0): This should not happen!! Data will be lost [ 27.643683][ T365] [ 27.644647][ T397] device veth0 left promiscuous mode [ 27.653829][ T365] EXT4-fs (loop0): Total free blocks count 0 [ 27.659643][ T297] EXT4-fs (loop4): unmounting filesystem. [ 27.664440][ T365] EXT4-fs (loop0): Free/Dirty block details [ 27.675896][ T365] EXT4-fs (loop0): free_blocks=39626 [ 27.681582][ T365] EXT4-fs (loop0): dirty_blocks=16 [ 27.687419][ T365] EXT4-fs (loop0): Block reservation details [ 27.693309][ T365] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 27.725757][ T365] syz.0.1 (365) used greatest stack depth: 22016 bytes left [ 27.743796][ T394] syz.3.32 (394) used greatest stack depth: 21128 bytes left [ 27.755010][ T294] EXT4-fs (loop0): unmounting filesystem. [ 27.794819][ T408] incfs: Options parsing error. -22 [ 27.833656][ T408] incfs: mount failed -22 [ 28.014264][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.204243][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 28.210662][ T6] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 28.235049][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.250995][ T6] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 28.272564][ T6] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 28.285413][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 28.312008][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.333402][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.341496][ T6] usb 2-1: SerialNumber: syz [ 28.357266][ T399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 28.375456][ T6] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 28.386397][ T6] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 28.425419][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.460428][ T470] loop0: detected capacity change from 0 to 128 [ 28.470154][ T470] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 28.507248][ T316] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 28.554444][ T476] loop0: detected capacity change from 0 to 2048 [ 28.583939][ T24] usb 2-1: USB disconnect, device number 2 [ 28.594649][ T476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.603559][ T476] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.625796][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.637000][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.638000][ T294] EXT4-fs (loop0): unmounting filesystem. [ 28.647167][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 28.665365][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 28.674823][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.697580][ T39] usb 3-1: config 0 descriptor?? [ 28.814867][ T503] loop0: detected capacity change from 0 to 2048 [ 28.828015][ T503] EXT4-fs: Ignoring removed mblk_io_submit option [ 28.834252][ T505] loop4: detected capacity change from 0 to 256 [ 28.847220][ T505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 28.851219][ T503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.868796][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 28.868815][ T28] audit: type=1400 audit(1743821448.505:159): avc: denied { write } for pid=504 comm="syz.4.80" name="file0" dev="loop4" ino=1048603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.877289][ T505] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344) [ 28.877289][ T505] [ 28.899297][ T305] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.921534][ T28] audit: type=1400 audit(1743821448.525:160): avc: denied { add_name } for pid=504 comm="syz.4.80" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.942449][ T28] audit: type=1400 audit(1743821448.525:161): avc: denied { associate } for pid=504 comm="syz.4.80" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.946481][ T503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 28.966629][ T28] audit: type=1400 audit(1743821448.525:162): avc: denied { write } for pid=504 comm="syz.4.80" name="file0" dev="loop4" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 28.999624][ T505] exFAT-fs (loop4): Filesystem has been set read-only [ 29.000458][ T28] audit: type=1400 audit(1743821448.525:163): avc: denied { open } for pid=504 comm="syz.4.80" path="/22/file0/file0/file0" dev="loop4" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.031239][ T28] audit: type=1400 audit(1743821448.655:164): avc: denied { read } for pid=504 comm="syz.4.80" name="file0" dev="loop4" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.061589][ T28] audit: type=1400 audit(1743821448.705:165): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.089718][ T294] EXT4-fs (loop0): unmounting filesystem. [ 29.122282][ T39] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 29.130036][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 29.135195][ T28] audit: type=1400 audit(1743821448.785:166): avc: denied { create } for pid=515 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.163483][ T305] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 29.180894][ T39] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 29.200851][ T305] usb 4-1: config 0 has no interface number 0 [ 29.212897][ T28] audit: type=1400 audit(1743821448.805:167): avc: denied { write } for pid=515 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.234012][ T305] usb 4-1: config 0 interface 230 has no altsetting 0 [ 29.243371][ T28] audit: type=1400 audit(1743821448.855:168): avc: denied { mounton } for pid=517 comm="syz.1.84" path="/12/file0" dev="tmpfs" ino=80 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.245706][ T523] loop0: detected capacity change from 0 to 1024 [ 29.275840][ T305] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 29.294337][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.302400][ T305] usb 4-1: Product: syz [ 29.312485][ T305] usb 4-1: Manufacturer: syz [ 29.317116][ T305] usb 4-1: SerialNumber: syz [ 29.331797][ T305] usb 4-1: config 0 descriptor?? [ 29.332073][ T523] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.346056][ T305] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 29.368515][ T305] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 29.391859][ T294] EXT4-fs (loop0): unmounting filesystem. [ 29.405770][ T487] usb 3-1: USB disconnect, device number 2 [ 29.429953][ T538] loop4: detected capacity change from 0 to 512 [ 29.439615][ T538] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 29.494834][ T354] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 29.804702][ T554] loop4: detected capacity change from 0 to 40427 [ 29.815394][ T554] F2FS-fs (loop4): invalid crc value [ 29.822789][ T554] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.824284][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 29.866659][ T554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.960423][ T297] syz-executor: attempt to access beyond end of device [ 29.960423][ T297] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.014454][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 30.026686][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.038248][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.055459][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 30.066593][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.079978][ T19] usb 1-1: Product: syz [ 30.085257][ T19] usb 1-1: Manufacturer: syz [ 30.092197][ T19] usb 1-1: SerialNumber: syz [ 30.196698][ T580] loop1: detected capacity change from 0 to 512 [ 30.204665][ T580] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 30.216289][ T580] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 30.229540][ T584] loop2: detected capacity change from 0 to 128 [ 30.230257][ T580] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 30.241755][ T584] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.249984][ T580] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 30.265687][ T580] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 30.266217][ T584] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.273585][ T580] EXT4-fs (loop1): failed to initialize system zone (-117) [ 30.293440][ T580] EXT4-fs (loop1): mount failed [ 30.314716][ T452] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 30.325214][ T19] usb 1-1: 0:2 : does not exist [ 30.339397][ T19] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 30.372265][ T19] usb 1-1: USB disconnect, device number 2 [ 30.379667][ T589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=589 comm=syz.2.112 [ 30.491452][ T599] loop1: detected capacity change from 0 to 256 [ 30.500768][ T599] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 30.506322][ T597] Non-string source [ 30.604390][ T604] binder: 603:604 ioctl c0306201 2000000001c0 returned -14 [ 30.784333][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.878208][ T10] tipc: Subscription rejected, illegal request [ 30.965687][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.980690][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.992641][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.006157][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.016433][ T19] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.024431][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.034431][ T6] usb 2-1: config 0 descriptor?? [ 31.204209][ T223] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 31.214237][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 31.220418][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.230604][ T19] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.241619][ T19] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 31.250568][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.258379][ T19] usb 3-1: Product: syz [ 31.262298][ T19] usb 3-1: Manufacturer: syz [ 31.266766][ T19] usb 3-1: SerialNumber: syz [ 31.384761][ T223] usb 1-1: Using ep0 maxpacket: 32 [ 31.390911][ T223] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 31.398898][ T223] usb 1-1: config 0 has no interface number 0 [ 31.406072][ T223] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.77 [ 31.415058][ T223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.422795][ T223] usb 1-1: Product: syz [ 31.427255][ T223] usb 1-1: Manufacturer: syz [ 31.432500][ T223] usb 1-1: SerialNumber: syz [ 31.439506][ T223] usb 1-1: config 0 descriptor?? [ 31.446102][ T6] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 31.455028][ T223] smsc95xx v2.0.0 [ 31.459104][ T6] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 31.468729][ T6] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 31.655772][ T599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.665267][ T599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.675074][ T305] ums-usbat: probe of 4-1:0.230 failed with error -5 [ 31.675122][ T6] usb 2-1: USB disconnect, device number 3 [ 31.683835][ T305] usb 4-1: USB disconnect, device number 2 [ 31.690553][ T19] usb 3-1: 0:2 : does not exist [ 31.858230][ T223] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 31.869363][ T223] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 32.044253][ T305] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.081863][ T223] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 32.094384][ T223] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 32.107702][ T223] usb 1-1: USB disconnect, device number 3 [ 32.225307][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.236993][ T305] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 32.246227][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.255199][ T305] usb 4-1: config 0 descriptor?? [ 32.280863][ T653] overlayfs: missing 'lowerdir' [ 32.306583][ T19] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 32.322579][ T19] usb 3-1: USB disconnect, device number 3 [ 32.529644][ T674] netlink: 'syz.1.151': attribute type 7 has an invalid length. [ 32.535110][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.538357][ T674] netlink: 'syz.1.151': attribute type 8 has an invalid length. [ 32.561381][ T674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.151'. [ 32.650361][ T680] xt_TPROXY: Can be used only with -p tcp or -p udp [ 32.672434][ T305] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 32.688406][ T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input6 [ 32.802413][ T305] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 32.832094][ T696] netlink: 148 bytes leftover after parsing attributes in process `syz.4.162'. [ 32.845595][ T696] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 32.900248][ T641] loop3: detected capacity change from 0 to 512 [ 32.941720][ T641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 32.950991][ T641] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.079883][ T724] loop0: detected capacity change from 0 to 512 [ 33.104285][ T305] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.117956][ T724] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.173: casefold flag without casefold feature [ 33.137798][ T724] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.173: couldn't read orphan inode 15 (err -117) [ 33.168139][ T724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 33.639912][ T294] EXT4-fs (loop0): unmounting filesystem. [ 33.708723][ T6] usb 4-1: USB disconnect, device number 3 [ 33.738139][ T305] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 33.747554][ T745] loop4: detected capacity change from 0 to 128 [ 33.758215][ T745] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 33.766496][ T305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.777339][ T745] FAT-fs (loop4): Filesystem has been set read-only [ 33.783828][ T745] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522) [ 33.820191][ T305] usb 2-1: config 0 has no interface number 0 [ 33.844049][ T305] usb 2-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 33.868614][ T305] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 33.886887][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.896186][ T305] usb 2-1: Product: syz [ 33.900548][ T305] usb 2-1: Manufacturer: syz [ 33.905221][ T305] usb 2-1: SerialNumber: syz [ 33.917190][ T305] usb 2-1: config 0 descriptor?? [ 33.965051][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 33.965067][ T28] audit: type=1400 audit(1743821453.615:195): avc: denied { load_policy } for pid=756 comm="syz.4.189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 33.997490][ T757] SELinux: failed to load policy [ 34.057103][ T767] loop2: detected capacity change from 0 to 128 [ 34.067316][ T767] FAT-fs (loop2): bogus number of reserved sectors [ 34.094412][ T767] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 34.119823][ T28] audit: type=1326 audit(1743821453.765:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.150824][ T305] usb 2-1: MIDIStreaming interface descriptor not found [ 34.167418][ T305] usb 2-1: USB disconnect, device number 4 [ 34.174838][ T767] FAT-fs (loop2): Can't find a valid FAT filesystem [ 34.195768][ T28] audit: type=1326 audit(1743821453.765:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.219417][ T28] audit: type=1326 audit(1743821453.765:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.242896][ T28] audit: type=1326 audit(1743821453.765:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.256963][ T19] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 34.274525][ T28] audit: type=1326 audit(1743821453.765:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.281682][ T295] EXT4-fs (loop3): unmounting filesystem. [ 34.299088][ T28] audit: type=1326 audit(1743821453.765:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.314883][ T767] loop2: detected capacity change from 0 to 2048 [ 34.333142][ T19] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 34.344954][ T28] audit: type=1326 audit(1743821453.795:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.394003][ T28] audit: type=1326 audit(1743821453.805:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.418140][ T767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.444233][ T28] audit: type=1326 audit(1743821453.805:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=770 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f73c298d169 code=0x7ffc0000 [ 34.495203][ T296] EXT4-fs (loop2): unmounting filesystem. [ 34.534764][ T792] loop2: detected capacity change from 0 to 512 [ 34.541590][ T792] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 34.552683][ T792] EXT4-fs (loop2): invalid journal inode [ 34.559266][ T792] EXT4-fs (loop2): can't get journal size [ 34.566928][ T792] EXT4-fs (loop2): 1 truncate cleaned up [ 34.572416][ T792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.592494][ T296] EXT4-fs (loop2): unmounting filesystem. [ 34.694846][ T801] capability: warning: `syz.4.206' uses deprecated v2 capabilities in a way that may be insecure [ 35.271171][ T855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 35.300468][ T857] netlink: 'syz.0.232': attribute type 11 has an invalid length. [ 35.346833][ T859] loop1: detected capacity change from 0 to 512 [ 35.385593][ T859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.425954][ T859] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.441152][ T859] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.233: Failed to acquire dquot type 1 [ 35.453903][ T859] EXT4-fs (loop1): 1 truncate cleaned up [ 35.470225][ T859] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.488235][ T859] netlink: 36 bytes leftover after parsing attributes in process `syz.1.233'. [ 35.501073][ T847] loop3: detected capacity change from 0 to 40427 [ 35.519446][ T847] F2FS-fs (loop3): fault_injection options not supported [ 35.534634][ T847] F2FS-fs (loop3): invalid crc value [ 35.561047][ T847] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.594590][ T293] EXT4-fs (loop1): unmounting filesystem. [ 35.640886][ T847] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.763587][ T887] futex_wake_op: syz.0.244 tries to shift op by -1; fix this program [ 35.855748][ T891] loop4: detected capacity change from 0 to 512 [ 35.862962][ T891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.916474][ T891] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.930077][ T901] loop0: detected capacity change from 0 to 256 [ 35.934395][ T891] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.954667][ T901] exfat: Deprecated parameter 'utf8' [ 35.967286][ T891] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 35.979281][ T901] exfat: Deprecated parameter 'namecase' [ 35.985173][ T901] exfat: Deprecated parameter 'utf8' [ 35.993357][ T901] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 36.012295][ T297] EXT4-fs (loop4): unmounting filesystem. [ 36.055385][ T908] netlink: 'syz.3.253': attribute type 8 has an invalid length. [ 36.301167][ T925] tipc: Started in network mode [ 36.306084][ T925] tipc: Node identity 7f000001, cluster identity 4711 [ 36.312922][ T925] tipc: Enabled bearer , priority 10 [ 36.374321][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.418543][ T487] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 36.565436][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.576664][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.586906][ T19] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 36.595794][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.604964][ T19] usb 5-1: config 0 descriptor?? [ 36.610666][ T487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.621832][ T487] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.631725][ T487] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 36.640855][ T487] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.652429][ T487] usb 1-1: config 0 descriptor?? [ 36.724736][ T955] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 37.013411][ T966] loop1: detected capacity change from 0 to 40427 [ 37.023609][ T19] hid-led 0003:1D34:000A.0005: item fetching failed at offset 0/3 [ 37.031675][ T19] hid-led: probe of 0003:1D34:000A.0005 failed with error -22 [ 37.034834][ T966] F2FS-fs (loop1): invalid crc value [ 37.062779][ T487] hid (null): bogus close delimiter [ 37.069945][ T966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 37.111419][ T966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 37.162052][ T293] syz-executor: attempt to access beyond end of device [ 37.162052][ T293] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.228484][ T19] usb 5-1: USB disconnect, device number 2 [ 37.262871][ T487] usb 1-1: string descriptor 0 read error: -22 [ 37.304281][ T24] tipc: Node number set to 2130706433 [ 37.663873][ T487] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 37.672687][ T487] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 37.680804][ T487] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 37.688800][ T487] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 37.696129][ T487] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 37.704573][ T487] usb 1-1: USB disconnect, device number 4 [ 37.734228][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.843940][ T1017] input: syz0 as /devices/virtual/input/input7 [ 37.886160][ T1021] loop4: detected capacity change from 0 to 2048 [ 37.915329][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.928934][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.939048][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 37.952568][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.961663][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.973595][ T24] usb 2-1: config 0 descriptor?? [ 37.984407][ T1021] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0102] [ 38.000960][ T1021] System zones: 0-7 [ 38.024283][ T1021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.045276][ T1021] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.062113][ T1021] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 38.080061][ T1035] device pim6reg1 entered promiscuous mode [ 38.087369][ T1021] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.087369][ T1021] [ 38.099851][ T1021] EXT4-fs (loop4): Total free blocks count 0 [ 38.106266][ T1036] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.124216][ T1021] EXT4-fs (loop4): Free/Dirty block details [ 38.146952][ T1021] EXT4-fs (loop4): free_blocks=2415919104 [ 38.163474][ T1036] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.163474][ T1036] [ 38.199899][ T1021] EXT4-fs (loop4): dirty_blocks=16 [ 38.219532][ T1036] EXT4-fs (loop4): Total free blocks count 0 [ 38.227817][ T1029] loop3: detected capacity change from 0 to 40427 [ 38.255039][ T1029] F2FS-fs (loop3): fault_type options not supported [ 38.285392][ T1029] F2FS-fs (loop3): invalid crc value [ 38.315324][ T1029] F2FS-fs (loop3): Found nat_bits in checkpoint [ 38.351089][ T1055] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 38.398037][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 38.411577][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 38.419229][ T1029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 38.427713][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 38.428077][ T1062] loop0: detected capacity change from 0 to 512 [ 38.436071][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 38.448831][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 38.456695][ T24] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 38.456809][ T1067] netem: change failed [ 38.464677][ T24] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 38.484472][ T1062] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.500641][ T24] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 38.521870][ T1029] netlink: 'syz.3.307': attribute type 11 has an invalid length. [ 38.529535][ T1062] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.584869][ T1062] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.622739][ T1062] EXT4-fs (loop0): 1 truncate cleaned up [ 38.628435][ T1062] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.636523][ T1072] loop4: detected capacity change from 0 to 256 [ 38.657668][ T1072] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 38.681956][ T1072] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 38.698575][ T305] usb 2-1: USB disconnect, device number 5 [ 38.713775][ T294] EXT4-fs (loop0): unmounting filesystem. [ 38.787717][ T1086] overlayfs: missing 'lowerdir' [ 38.793884][ T1086] overlayfs: failed to set xattr on upper [ 38.799932][ T1086] overlayfs: ...falling back to index=off,metacopy=off. [ 38.806980][ T1086] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 38.862867][ T1092] netlink: 32 bytes leftover after parsing attributes in process `syz.3.334'. [ 38.864234][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.916348][ T1096] loop3: detected capacity change from 0 to 4096 [ 38.927004][ T1096] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.946712][ T1096] EXT4-fs (loop3): unmounting filesystem. [ 38.968025][ T1099] loop3: detected capacity change from 0 to 1024 [ 38.974565][ T1099] EXT4-fs: Ignoring removed nobh option [ 38.979980][ T1099] EXT4-fs: Ignoring removed bh option [ 38.985756][ T1099] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.015989][ T1099] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.337: bad orphan inode 32767 [ 39.026311][ T1099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 39.035219][ T223] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.058255][ T1099] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.337: Allocating blocks 497-513 which overlap fs metadata [ 39.075582][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 39.082232][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 39.085493][ T1098] EXT4-fs (loop3): pa ffff8881169c1690: logic 96, phys. 225, len 18 [ 39.091203][ T24] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x82 has invalid maxpacket 1023 [ 39.097795][ T1098] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 39.108312][ T24] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 32 [ 39.127624][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 39.133702][ T295] EXT4-fs (loop3): unmounting filesystem. [ 39.136740][ T24] usb 3-1: string descriptor 0 read error: -22 [ 39.145867][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.155096][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.169199][ T1069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.177831][ T1069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.214273][ T223] usb 1-1: Using ep0 maxpacket: 16 [ 39.228196][ T223] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 39.240549][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 39.240566][ T28] audit: type=1400 audit(1743821458.885:239): avc: denied { map } for pid=1109 comm="syz.1.341" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.254468][ T223] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.285737][ T28] audit: type=1400 audit(1743821458.915:240): avc: denied { read write } for pid=1109 comm="syz.1.341" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.311296][ T223] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.317941][ T28] audit: type=1400 audit(1743821458.955:241): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.330213][ T223] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 39.352882][ T28] audit: type=1400 audit(1743821458.955:242): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.360863][ T223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.385212][ T223] usb 1-1: Product: syz [ 39.389710][ T223] usb 1-1: Manufacturer: syz [ 39.395646][ T24] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 39.398145][ T223] usb 1-1: SerialNumber: syz [ 39.407792][ T24] usb 3-1: USB disconnect, device number 4 [ 39.414808][ T28] audit: type=1400 audit(1743821458.955:243): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.512863][ T1117] loop1: detected capacity change from 0 to 512 [ 39.528515][ T1117] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.540447][ T1117] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.572642][ T28] audit: type=1400 audit(1743821459.215:244): avc: denied { append } for pid=1116 comm="syz.1.343" path="/71/file0/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.595888][ T28] audit: type=1400 audit(1743821459.215:245): avc: denied { map } for pid=1116 comm="syz.1.343" path="/71/file0/cpu.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 39.596975][ T293] EXT4-fs (loop1): unmounting filesystem. [ 39.842302][ T223] usb 1-1: 0:2 : does not exist [ 39.843992][ T1132] loop4: detected capacity change from 0 to 40427 [ 39.853895][ T1132] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 39.861773][ T1132] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 39.873544][ T1132] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.918145][ T1132] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 39.925979][ T305] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 39.933849][ T1132] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.015681][ T28] audit: type=1400 audit(1743821459.665:246): avc: denied { append } for pid=1144 comm="syz.2.353" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.083974][ T297] syz-executor: attempt to access beyond end of device [ 40.083974][ T297] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 40.125519][ T305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.135579][ T305] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 40.144819][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.154978][ T305] usb 2-1: config 0 descriptor?? [ 40.304316][ T487] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.464240][ T223] usb 1-1: USB disconnect, device number 5 [ 40.472836][ T639] udevd[639]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.494387][ T487] usb 3-1: Using ep0 maxpacket: 16 [ 40.505855][ T487] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.519096][ T487] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.529980][ T487] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 40.545534][ T487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.553828][ T487] usb 3-1: Product: syz [ 40.558797][ T487] usb 3-1: Manufacturer: syz [ 40.563541][ T487] usb 3-1: SerialNumber: syz [ 40.569663][ T305] lg-g15 0003:046D:C222.0008: unbalanced collection at end of report description [ 40.587951][ T305] lg-g15: probe of 0003:046D:C222.0008 failed with error -22 [ 40.772596][ T223] usb 2-1: USB disconnect, device number 6 [ 40.776770][ T1157] loop3: detected capacity change from 0 to 40427 [ 40.786993][ T487] usb 3-1: 0:2 : does not exist [ 40.792806][ T1157] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 40.801459][ T1157] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 40.812973][ T487] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 40.827222][ T1157] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.836494][ T487] usb 3-1: USB disconnect, device number 5 [ 40.873251][ T1157] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 40.880794][ T1157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 40.914804][ T1157] syz.3.357: attempt to access beyond end of device [ 40.914804][ T1157] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.008918][ T28] audit: type=1400 audit(1743821460.655:247): avc: denied { create } for pid=1162 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.044709][ T639] udevd[639]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.061359][ T1165] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 41.094363][ T1157] syz.3.357: attempt to access beyond end of device [ 41.094363][ T1157] loop3: rw=2049, sector=77824, nr_sectors = 3296 limit=40427 [ 41.115304][ T28] audit: type=1400 audit(1743821460.765:248): avc: denied { read } for pid=1167 comm="syz.0.360" lport=8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.131130][ T1157] syz.3.357: attempt to access beyond end of device [ 41.131130][ T1157] loop3: rw=2049, sector=81120, nr_sectors = 800 limit=40427 [ 41.180213][ T1157] syz.3.357: attempt to access beyond end of device [ 41.180213][ T1157] loop3: rw=2049, sector=49152, nr_sectors = 3560 limit=40427 [ 41.202651][ T1157] syz.3.357: attempt to access beyond end of device [ 41.202651][ T1157] loop3: rw=2049, sector=52712, nr_sectors = 536 limit=40427 [ 41.231066][ T1157] syz.3.357: attempt to access beyond end of device [ 41.231066][ T1157] loop3: rw=2049, sector=57344, nr_sectors = 2776 limit=40427 [ 41.232509][ T1180] loop4: detected capacity change from 0 to 512 [ 41.253733][ T1157] syz.3.357: attempt to access beyond end of device [ 41.253733][ T1157] loop3: rw=2049, sector=60120, nr_sectors = 2528 limit=40427 [ 41.274519][ T1157] syz.3.357: attempt to access beyond end of device [ 41.274519][ T1157] loop3: rw=2049, sector=62648, nr_sectors = 2112 limit=40427 [ 41.336151][ T1180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.345312][ T1180] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.428809][ T297] EXT4-fs (loop4): unmounting filesystem. [ 41.524482][ T293] ------------[ cut here ]------------ [ 41.529786][ T293] WARNING: CPU: 0 PID: 293 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 41.537642][ T293] Modules linked in: [ 41.541359][ T293] CPU: 0 PID: 293 Comm: syz-executor Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 41.551202][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.561199][ T293] RIP: 0010:drop_nlink+0xc1/0x110 [ 41.566183][ T293] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 41.586003][ T293] RSP: 0018:ffffc9000daffbf0 EFLAGS: 00010293 [ 41.591907][ T293] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff88810fe89440 [ 41.599846][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.607730][ T293] RBP: ffffc9000daffc18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 41.615492][ T293] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 41.623267][ T293] R13: 1ffff11025f274d3 R14: ffff88812f93a650 R15: ffff88812f93a698 [ 41.631663][ T293] FS: 0000555586e88500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 41.640767][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.647230][ T293] CR2: 0000555586eab4e8 CR3: 000000012e1a9000 CR4: 00000000003506b0 [ 41.655054][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.662810][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.670646][ T293] Call Trace: [ 41.673745][ T293] [ 41.676555][ T293] ? show_regs+0x58/0x60 [ 41.680616][ T293] ? __warn+0x160/0x3d0 [ 41.684631][ T293] ? drop_nlink+0xc1/0x110 [ 41.688841][ T293] ? report_bug+0x4d5/0x7d0 [ 41.693216][ T293] ? drop_nlink+0xc1/0x110 [ 41.697499][ T293] ? handle_bug+0x41/0x70 [ 41.701597][ T293] ? exc_invalid_op+0x1b/0x50 [ 41.706142][ T293] ? asm_exc_invalid_op+0x1b/0x20 [ 41.710986][ T293] ? drop_nlink+0x44/0x110 [ 41.715276][ T293] ? drop_nlink+0xc1/0x110 [ 41.719477][ T293] ? drop_nlink+0xc1/0x110 [ 41.723728][ T293] shmem_rmdir+0x59/0x90 [ 41.727845][ T293] vfs_rmdir+0x398/0x500 [ 41.731890][ T293] incfs_kill_sb+0x113/0x230 [ 41.736359][ T293] deactivate_locked_super+0xad/0x110 [ 41.741523][ T293] deactivate_super+0xbe/0xf0 [ 41.746090][ T293] cleanup_mnt+0x485/0x510 [ 41.750284][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 41.755361][ T293] __cleanup_mnt+0x19/0x20 [ 41.759583][ T293] task_work_run+0x24d/0x2e0 [ 41.764012][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 41.769000][ T293] ? __x64_sys_umount+0x122/0x170 [ 41.773816][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 41.778894][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 41.784183][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 41.789532][ T293] do_syscall_64+0x47/0xb0 [ 41.793777][ T293] ? clear_bhb_loop+0x55/0xb0 [ 41.798333][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.804100][ T293] RIP: 0033:0x7ff6fb18e497 [ 41.808361][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 41.828297][ T293] RSP: 002b:00007ffe307ad968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 41.836506][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6fb18e497 [ 41.844351][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe307ada20 [ 41.852104][ T293] RBP: 00007ffe307ada20 R08: 0000000000000000 R09: 0000000000000000 [ 41.859953][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe307aeab0 [ 41.867764][ T293] R13: 00007ff6fb20e08c R14: 000000000000a214 R15: 00007ffe307aeaf0 [ 41.875577][ T293] [ 41.878410][ T293] ---[ end trace 0000000000000000 ]--- [ 41.883967][ T293] ================================================================== [ 41.891859][ T293] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 41.897940][ T293] Write of size 4 at addr 0000000000000170 by task syz-executor/293 [ 41.905743][ T293] [ 41.907922][ T293] CPU: 1 PID: 293 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 41.919114][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 41.929005][ T293] Call Trace: [ 41.932123][ T293] [ 41.934903][ T293] dump_stack_lvl+0x151/0x1b7 [ 41.939416][ T293] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 41.944710][ T293] ? _printk+0xd1/0x111 [ 41.948701][ T293] print_report+0xe1/0x4e0 [ 41.952958][ T293] ? __virt_addr_valid+0x59/0x2f0 [ 41.957817][ T293] ? kasan_addr_to_slab+0xd/0x80 [ 41.962587][ T293] ? ihold+0x20/0x60 [ 41.966320][ T293] kasan_report+0x13c/0x170 [ 41.970661][ T293] ? ihold+0x20/0x60 [ 41.974393][ T293] kasan_check_range+0x294/0x2a0 [ 41.979164][ T293] __kasan_check_write+0x14/0x20 [ 41.983935][ T293] ihold+0x20/0x60 [ 41.987492][ T293] vfs_rmdir+0x268/0x500 [ 41.991572][ T293] incfs_kill_sb+0x113/0x230 [ 41.996028][ T293] deactivate_locked_super+0xad/0x110 [ 42.001214][ T293] deactivate_super+0xbe/0xf0 [ 42.005733][ T293] cleanup_mnt+0x485/0x510 [ 42.009972][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 42.015008][ T293] __cleanup_mnt+0x19/0x20 [ 42.019263][ T293] task_work_run+0x24d/0x2e0 [ 42.023690][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 42.028552][ T293] ? __x64_sys_umount+0x122/0x170 [ 42.033410][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 42.038449][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 42.043737][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 42.049115][ T293] do_syscall_64+0x47/0xb0 [ 42.053372][ T293] ? clear_bhb_loop+0x55/0xb0 [ 42.057882][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.063614][ T293] RIP: 0033:0x7ff6fb18e497 [ 42.067868][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 42.087395][ T293] RSP: 002b:00007ffe307ad968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.095729][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6fb18e497 [ 42.103807][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe307ada20 [ 42.111810][ T293] RBP: 00007ffe307ada20 R08: 0000000000000000 R09: 0000000000000000 [ 42.120060][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe307aeab0 [ 42.128764][ T293] R13: 00007ff6fb20e08c R14: 000000000000a214 R15: 00007ffe307aeaf0 [ 42.137241][ T293] [ 42.140075][ T293] ================================================================== [ 42.162397][ T293] Disabling lock debugging due to kernel taint [ 42.175410][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 42.183063][ T293] #PF: supervisor write access in kernel mode [ 42.188958][ T293] #PF: error_code(0x0002) - not-present page [ 42.194776][ T293] PGD 1318b4067 P4D 1318b4067 PUD 0 [ 42.199902][ T293] Oops: 0002 [#1] PREEMPT SMP KASAN [ 42.204929][ T293] CPU: 1 PID: 293 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 42.216147][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.226023][ T293] RIP: 0010:ihold+0x25/0x60 [ 42.230355][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 42.249800][ T293] RSP: 0018:ffffc9000daffc30 EFLAGS: 00010246 [ 42.255705][ T293] RAX: ffff88810fe89400 RBX: 0000000000000001 RCX: ffff88810fe89440 [ 42.263603][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.271418][ T293] RBP: ffffc9000daffc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 42.279220][ T293] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110269d26b2 [ 42.287030][ T293] R13: ffff88810c733990 R14: 0000000000000000 R15: 1ffff110218e6738 [ 42.294846][ T293] FS: 0000555586e88500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.303608][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.310030][ T293] CR2: 0000000000000170 CR3: 000000012e1a9000 CR4: 00000000003506a0 [ 42.317845][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.325663][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.333465][ T293] Call Trace: [ 42.336587][ T293] [ 42.339456][ T293] ? __die_body+0x62/0xb0 [ 42.343619][ T293] ? __die+0x7e/0x90 [ 42.347349][ T293] ? page_fault_oops+0x7f9/0xa90 [ 42.352124][ T293] ? vprintk_default+0x26/0x30 [ 42.356724][ T293] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 42.362106][ T293] ? add_taint+0x44/0xe0 [ 42.366183][ T293] ? panic+0x667/0x667 [ 42.370098][ T293] ? preempt_schedule_thunk+0x16/0x18 [ 42.375305][ T293] ? exc_page_fault+0x529/0x6d0 [ 42.379984][ T293] ? asm_exc_page_fault+0x27/0x30 [ 42.384844][ T293] ? add_taint+0x93/0xe0 [ 42.388934][ T293] ? ihold+0x25/0x60 [ 42.392657][ T293] vfs_rmdir+0x268/0x500 [ 42.396737][ T293] incfs_kill_sb+0x113/0x230 [ 42.401179][ T293] deactivate_locked_super+0xad/0x110 [ 42.406372][ T293] deactivate_super+0xbe/0xf0 [ 42.410882][ T293] cleanup_mnt+0x485/0x510 [ 42.415138][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 42.420169][ T293] __cleanup_mnt+0x19/0x20 [ 42.424425][ T293] task_work_run+0x24d/0x2e0 [ 42.428852][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 42.433708][ T293] ? __x64_sys_umount+0x122/0x170 [ 42.438570][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 42.443607][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 42.448902][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 42.454284][ T293] do_syscall_64+0x47/0xb0 [ 42.458531][ T293] ? clear_bhb_loop+0x55/0xb0 [ 42.463041][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.468860][ T293] RIP: 0033:0x7ff6fb18e497 [ 42.473115][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 42.492647][ T293] RSP: 002b:00007ffe307ad968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 42.500883][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff6fb18e497 [ 42.508699][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe307ada20 [ 42.516508][ T293] RBP: 00007ffe307ada20 R08: 0000000000000000 R09: 0000000000000000 [ 42.524320][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe307aeab0 [ 42.532133][ T293] R13: 00007ff6fb20e08c R14: 000000000000a214 R15: 00007ffe307aeaf0 [ 42.539951][ T293] [ 42.542804][ T293] Modules linked in: [ 42.546557][ T293] CR2: 0000000000000170 [ 42.550543][ T293] ---[ end trace 0000000000000000 ]--- [ 42.555997][ T293] RIP: 0010:ihold+0x25/0x60 [ 42.560334][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 42.579873][ T293] RSP: 0018:ffffc9000daffc30 EFLAGS: 00010246 [ 42.585765][ T293] RAX: ffff88810fe89400 RBX: 0000000000000001 RCX: ffff88810fe89440 [ 42.593576][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.601393][ T293] RBP: ffffc9000daffc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 42.609217][ T293] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110269d26b2 [ 42.617013][ T293] R13: ffff88810c733990 R14: 0000000000000000 R15: 1ffff110218e6738 [ 42.624822][ T293] FS: 0000555586e88500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 42.633592][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.640022][ T293] CR2: 0000000000000170 CR3: 000000012e1a9000 CR4: 00000000003506a0 [ 42.647826][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.655632][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.663446][ T293] Kernel panic - not syncing: Fatal exception [ 42.669595][ T293] Kernel Offset: disabled [ 42.673843][ T293] Rebooting in 86400 seconds..