last executing test programs: 43.786237084s ago: executing program 2 (id=383): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001680)={0x3, 0x0, &(0x7f0000000500)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) 43.710818095s ago: executing program 2 (id=384): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_default\x00') 43.706408006s ago: executing program 2 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 43.671708877s ago: executing program 2 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 43.649094377s ago: executing program 2 (id=389): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27) 43.506692329s ago: executing program 2 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x7, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 43.453578539s ago: executing program 32 (id=392): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x7, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 3.89004119s ago: executing program 3 (id=1824): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000005c0)='[\x00', &(0x7f0000000600)='./file1\x00', 0xffffffffffffff9c) 3.849028571s ago: executing program 3 (id=1826): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x140020, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 3.122900492s ago: executing program 1 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.122560822s ago: executing program 1 (id=1839): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 2.981553804s ago: executing program 3 (id=1844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e0fff0004fcff", 0x58}], 0x1) 2.895792656s ago: executing program 3 (id=1846): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.757154717s ago: executing program 3 (id=1848): sched_setscheduler(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='~\x00\x00\n', @ANYRES16=0x0, @ANYBLOB="0000f33bdc97a8d29ebcae76e05f43000000", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000800a500000000000400a6804000a6800a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000800a50001"], 0x7c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) 2.626854009s ago: executing program 3 (id=1851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) close_range(r1, 0xffffffffffffffff, 0x0) 2.55635055s ago: executing program 33 (id=1851): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) close_range(r1, 0xffffffffffffffff, 0x0) 1.27427055s ago: executing program 1 (id=1863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000037c0)='/', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="e9ccc0119b", 0x5}, {0x0}], 0x2}}], 0x2, 0x4044891) 1.026648594s ago: executing program 5 (id=1869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) userfaultfd(0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.002610745s ago: executing program 5 (id=1870): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 944.238775ms ago: executing program 5 (id=1872): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r3, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) 935.046066ms ago: executing program 6 (id=1874): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="1100000042000106"], 0x18}], 0x1}, 0x0) 917.206076ms ago: executing program 5 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b5000040"]) 894.538196ms ago: executing program 6 (id=1876): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x5, 0xc) 878.461947ms ago: executing program 6 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 816.719157ms ago: executing program 5 (id=1881): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 770.549608ms ago: executing program 6 (id=1884): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xa0, &(0x7f0000000140)={[{@verity_off}], [], 0x2c}) 702.141669ms ago: executing program 0 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000040)) 701.79013ms ago: executing program 0 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0xc001000, 0x0, 0x0, 0x0, 0x0, 0x0) 701.51797ms ago: executing program 6 (id=1888): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x53b}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 611.30637ms ago: executing program 0 (id=1890): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000300), 0x4) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 538.765841ms ago: executing program 0 (id=1891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x8]}, 0x8) 538.405932ms ago: executing program 4 (id=1892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) 538.207521ms ago: executing program 0 (id=1893): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_read_part_table(0x5e9, &(0x7f0000000600)="$eJzs2zFo1FccB/DfxRwHSnFxclIHKcVFcfQoKnenohBOsxQpBhQRbzpBOOlBig56FMUbxG4uVrjFpFMuN2RKSCBzCBlSAhmytCRLIEuv3PUV2pSUXkkKwufDwY/3/r//+753vPUffNKG4pdut5uJiG4u4tCAb4+2CsWrJ0Yulm9FZOJ2RHz9/ec/9J5kUkdv1Z5Tabyaxu/fHe682LqSba3c3D59Z7Yx9MeS4/1fHPnQHt2H43HAPubnjj59Vi29rOUfLJfq68+XFm9MbBbK7euN5uS17OW7qW8+1eFUH0UtnsTDGIvh+DbuRXWP9b8bMP9ta+1s9nipNXX/wk6x82rmXL9r0Hv97/Xy+xc2Inr5j0++/qpZv3Tmx2NvztemF8obKbqS2/3m2IHtCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/y4bc0efPquWXtbyD5ZL9fXnS4s3JjYL5fb1RnPyWvby3dQ3n+pwqo+iFk/iYYxFJSpxL6p7Jnz250Fu99OP+b/mv22tnf31eKk1df/CTrHzauZc6hvZp/P+Q363l//45Osvm/VLZ3LH3pyvTS+UNw793lf5286j/+8BAAAAAAAAAAAAAAAAAADAfigUr54YuVi+FZGJ2xHxxc/fDPXmu+l790zqO5Xqapp//+5w58XWlWxr5eb26TuzjZ/S/HhkYjwijnxoj/7vh2FgvwUAAP//vTSRCQ==") 534.606742ms ago: executing program 4 (id=1894): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 515.708852ms ago: executing program 4 (id=1895): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 446.715413ms ago: executing program 4 (id=1896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x2}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) 420.795174ms ago: executing program 1 (id=1897): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 404.146494ms ago: executing program 4 (id=1898): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 369.597065ms ago: executing program 4 (id=1899): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r2}, 0x10) 242.390607ms ago: executing program 1 (id=1900): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@loopback, 0x0, 0xd5, 0x4e20, 0x0, 0x2}, {}, {}, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x6c}, 0x2, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 138.357958ms ago: executing program 6 (id=1901): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) 137.628758ms ago: executing program 1 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x40000, 0x0, 0x0, 0x0) 112.733459ms ago: executing program 0 (id=1902): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x0, r1}) dup2(r1, r0) 0s ago: executing program 5 (id=1903): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) kernel console output (not intermixed with test programs): 6.357078][ T28] audit: type=1400 audit(1743710439.590:293): avc: denied { getopt } for pid=1337 comm="syz.5.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.393313][ T1340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.436'. [ 36.419735][ T1345] netlink: 165 bytes leftover after parsing attributes in process `syz.3.437'. [ 36.510086][ T797] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.548633][ T6] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.592425][ T28] audit: type=1400 audit(1743710439.830:294): avc: denied { mount } for pid=1367 comm="syz.5.449" name="/" dev="overlay" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.626717][ T28] audit: type=1400 audit(1743710439.860:295): avc: denied { unmount } for pid=1252 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.676469][ T1376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 36.710363][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 36.718563][ T797] usb 5-1: config 1 has an invalid interface number: 112 but max is 0 [ 36.721081][ T1378] syz.5.463 uses obsolete (PF_INET,SOCK_PACKET) [ 36.727213][ T797] usb 5-1: config 1 has an invalid interface number: 216 but max is 0 [ 36.741238][ T797] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 36.750452][ T797] usb 5-1: config 1 has no interface number 0 [ 36.756514][ T797] usb 5-1: config 1 has no interface number 1 [ 36.762981][ T6] usb 1-1: USB disconnect, device number 2 [ 36.769144][ T797] usb 5-1: config 1 interface 112 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 36.782212][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.792085][ T797] usb 5-1: config 1 interface 112 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 36.801955][ T6] ftdi_sio 1-1:0.0: device disconnected [ 36.818979][ T28] audit: type=1400 audit(1743710440.050:296): avc: denied { bind } for pid=1381 comm="syz.3.455" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.826244][ T797] usb 5-1: config 1 interface 112 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 36.846890][ T28] audit: type=1400 audit(1743710440.080:297): avc: denied { name_bind } for pid=1381 comm="syz.3.455" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 36.869171][ T797] usb 5-1: too many endpoints for config 1 interface 216 altsetting 57: 229, using maximum allowed: 30 [ 36.879700][ T28] audit: type=1400 audit(1743710440.080:298): avc: denied { node_bind } for pid=1381 comm="syz.3.455" saddr=ff02::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 36.884944][ T797] usb 5-1: config 1 interface 216 altsetting 57 endpoint 0x8 has an invalid bInterval 70, changing to 10 [ 36.936979][ T797] usb 5-1: config 1 interface 216 altsetting 57 has a duplicate endpoint with address 0xF, skipping [ 36.950898][ T1389] Driver unsupported XDP return value 0 on prog (id 180) dev N/A, expect packet loss! [ 36.962502][ T797] usb 5-1: config 1 interface 216 altsetting 57 has an invalid endpoint with address 0x80, skipping [ 36.973384][ T797] usb 5-1: config 1 interface 216 altsetting 57 has 4 endpoint descriptors, different from the interface descriptor's value: 229 [ 36.986555][ T797] usb 5-1: config 1 interface 112 has no altsetting 0 [ 36.993147][ T797] usb 5-1: config 1 interface 216 has no altsetting 0 [ 37.009879][ T797] usb 5-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=c8.8f [ 37.025658][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.033760][ T797] usb 5-1: Product: syz [ 37.037827][ T797] usb 5-1: Manufacturer: syz [ 37.042920][ T797] usb 5-1: SerialNumber: syz [ 37.256344][ T797] usb 5-1: USB disconnect, device number 2 [ 37.292670][ T28] audit: type=1400 audit(1743710440.530:299): avc: denied { create } for pid=1406 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.325702][ T28] audit: type=1400 audit(1743710440.530:300): avc: denied { connect } for pid=1406 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.341346][ T1410] SELinux: ebitmap: truncated map [ 37.351154][ T1410] SELinux: failed to load policy [ 37.365407][ T28] audit: type=1400 audit(1743710440.530:301): avc: denied { listen } for pid=1406 comm="syz.3.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.719052][ T1434] loop0: detected capacity change from 0 to 40427 [ 37.746326][ T1434] F2FS-fs (loop0): invalid crc value [ 37.753046][ T1434] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.801006][ T1434] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.842026][ T1459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.489'. [ 37.866772][ T291] syz-executor: attempt to access beyond end of device [ 37.866772][ T291] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.925929][ T1467] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 37.956140][ T1467] FAT-fs (loop9): unable to read boot sector [ 38.030546][ T1476] SELinux: policydb version 0 does not match my version range 15-33 [ 38.044341][ T1476] SELinux: failed to load policy [ 38.209900][ T1474] loop4: detected capacity change from 0 to 40427 [ 38.217042][ T1474] F2FS-fs (loop4): fault_injection options not supported [ 38.225134][ T1474] F2FS-fs (loop4): invalid crc value [ 38.231778][ T1474] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.267255][ T1474] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.298534][ T293] syz-executor: attempt to access beyond end of device [ 38.298534][ T293] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.446978][ T1502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 38.638327][ T1518] netlink: 96 bytes leftover after parsing attributes in process `syz.3.515'. [ 38.705617][ T1528] device lo entered promiscuous mode [ 38.711134][ T1528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 38.987933][ T1561] loop5: detected capacity change from 0 to 2048 [ 39.010931][ T1566] binder: 1565:1566 ioctl c018620c 200000000140 returned -1 [ 39.016487][ T1571] netlink: 'syz.4.539': attribute type 15 has an invalid length. [ 39.106356][ T1561] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 39.156512][ T1591] loop3: detected capacity change from 0 to 512 [ 39.177407][ T1591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.204277][ T1591] EXT4-fs (loop3): 1 truncate cleaned up [ 39.213499][ T1591] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 39.250659][ T1602] loop1: detected capacity change from 0 to 512 [ 39.262086][ T292] EXT4-fs (loop3): unmounting filesystem. [ 39.297987][ T1602] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #3: comm syz.1.551: corrupted inode contents [ 39.315893][ T1602] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #3: comm syz.1.551: mark_inode_dirty error [ 39.344264][ T1602] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #3: comm syz.1.551: corrupted inode contents [ 39.355979][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.357341][ T1602] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.551: mark_inode_dirty error [ 39.391313][ T1602] EXT4-fs error (device loop1): ext4_acquire_dquot:6782: comm syz.1.551: Failed to acquire dquot type 0 [ 39.403558][ T1602] EXT4-fs (loop1): 1 orphan inode deleted [ 39.413551][ T1602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.420555][ T43] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:2: Failed to release dquot type 1 [ 39.425542][ T1602] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.462397][ T1602] syz.1.551 (1602) used greatest stack depth: 20200 bytes left [ 39.494352][ T289] EXT4-fs (loop1): unmounting filesystem. [ 39.508346][ T331] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:5: Failed to release dquot type 1 [ 39.551657][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 39.569374][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24697, setting to 1024 [ 39.593040][ T19] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 39.612263][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.633474][ T19] usb 5-1: config 0 descriptor?? [ 39.810150][ T311] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.958833][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 39.993688][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 40.007026][ T311] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 40.030361][ T311] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 40.032708][ T1650] device ip6gretap0 entered promiscuous mode [ 40.045219][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.047055][ T19] hid-generic 0003:05AC:4262.0002: unknown main item tag 0x6 [ 40.053160][ T40] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 40.068009][ T311] usb 2-1: Product: syz [ 40.071054][ T19] hid-generic 0003:05AC:4262.0002: hidraw0: USB HID v0.00 Device [HID 05ac:4262] on usb-dummy_hcd.4-1/input0 [ 40.072043][ T311] usb 2-1: Manufacturer: syz [ 40.090293][ T311] usb 2-1: SerialNumber: syz [ 40.102807][ T311] usb 2-1: config 0 descriptor?? [ 40.109291][ T311] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 40.117734][ T311] usb 2-1: Detected FT232R [ 40.180202][ T797] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.253354][ T19] usb 5-1: USB disconnect, device number 3 [ 40.291258][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 40.302258][ T40] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.315365][ T311] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 40.322132][ T40] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 40.331509][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.340938][ T40] usb 1-1: config 0 descriptor?? [ 40.346155][ T1635] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 40.370175][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 40.376346][ T797] usb 4-1: config 1 has an invalid interface number: 112 but max is 0 [ 40.385939][ T797] usb 4-1: config 1 has an invalid interface number: 216 but max is 0 [ 40.394053][ T797] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 40.402934][ T797] usb 4-1: config 1 has no interface number 0 [ 40.408870][ T797] usb 4-1: config 1 has no interface number 1 [ 40.414807][ T797] usb 4-1: config 1 interface 112 altsetting 4 has an invalid endpoint with address 0x0, skipping [ 40.425214][ T797] usb 4-1: config 1 interface 112 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 40.437372][ T797] usb 4-1: config 1 interface 112 altsetting 4 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 40.450615][ T797] usb 4-1: too many endpoints for config 1 interface 216 altsetting 57: 229, using maximum allowed: 30 [ 40.456923][ T1668] loop5: detected capacity change from 0 to 2048 [ 40.461859][ T797] usb 4-1: config 1 interface 216 altsetting 57 endpoint 0x8 has an invalid bInterval 70, changing to 10 [ 40.479364][ T797] usb 4-1: config 1 interface 216 altsetting 57 has a duplicate endpoint with address 0xF, skipping [ 40.490757][ T797] usb 4-1: config 1 interface 216 altsetting 57 has an invalid endpoint with address 0x80, skipping [ 40.501637][ T797] usb 4-1: config 1 interface 216 altsetting 57 has 4 endpoint descriptors, different from the interface descriptor's value: 229 [ 40.502279][ T1668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 40.515266][ T797] usb 4-1: config 1 interface 112 has no altsetting 0 [ 40.523526][ T1668] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.530111][ T797] usb 4-1: config 1 interface 216 has no altsetting 0 [ 40.556047][ T311] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 40.564421][ T797] usb 4-1: New USB device found, idVendor=2639, idProduct=0013, bcdDevice=c8.8f [ 40.575183][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.583155][ T797] usb 4-1: Product: syz [ 40.587210][ T797] usb 4-1: Manufacturer: syz [ 40.591732][ T797] usb 4-1: SerialNumber: syz [ 40.592316][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 40.706057][ T1678] loop5: detected capacity change from 0 to 512 [ 40.713100][ T1678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.732077][ T1678] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 40.741049][ T1678] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.761904][ T40] logitech 0003:046D:CA03.0003: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.0-1/input0 [ 40.763659][ T19] usb 2-1: USB disconnect, device number 4 [ 40.773580][ T40] logitech 0003:046D:CA03.0003: no inputs found [ 40.804483][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 40.808430][ T797] usb 4-1: USB disconnect, device number 3 [ 40.819794][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 40.845786][ T19] ftdi_sio 2-1:0.0: device disconnected [ 40.879638][ T1686] loop4: detected capacity change from 0 to 1024 [ 40.900374][ T1686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.924723][ T1686] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.940656][ T1686] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.953396][ T1686] EXT4-fs (loop4): This should not happen!! Data will be lost [ 40.953396][ T1686] [ 40.960609][ T662] usb 1-1: USB disconnect, device number 3 [ 40.963623][ T1686] EXT4-fs (loop4): Total free blocks count 0 [ 40.974774][ T1686] EXT4-fs (loop4): Free/Dirty block details [ 40.980671][ T1686] EXT4-fs (loop4): free_blocks=68451041280 [ 40.986458][ T1686] EXT4-fs (loop4): dirty_blocks=16 [ 40.991905][ T1686] EXT4-fs (loop4): Block reservation details [ 40.998059][ T1686] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 41.016693][ T293] EXT4-fs (loop4): unmounting filesystem. [ 41.036827][ T1702] loop4: detected capacity change from 0 to 256 [ 41.046534][ T1702] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 41.168419][ T797] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 41.176107][ T797] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 41.185379][ T797] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.217368][ T1724] loop4: detected capacity change from 0 to 1024 [ 41.224504][ T1724] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.235805][ T1724] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 41.245610][ T1724] EXT4-fs (loop4): group descriptors corrupted! [ 41.305642][ T1727] loop1: detected capacity change from 0 to 256 [ 41.314680][ T1727] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 41.375858][ T1729] SELinux: ebitmap: truncated map [ 41.388394][ T1729] SELinux: failed to load policy [ 41.396498][ T1733] loop3: detected capacity change from 0 to 2048 [ 41.431088][ T1733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 41.439811][ T1733] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.467423][ T292] EXT4-fs (loop3): unmounting filesystem. [ 41.552543][ T1757] loop0: detected capacity change from 0 to 1024 [ 41.581233][ T1757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.611166][ T1757] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.630225][ T1757] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.648008][ T1763] loop1: detected capacity change from 0 to 1024 [ 41.654352][ T1757] EXT4-fs (loop0): This should not happen!! Data will be lost [ 41.654352][ T1757] [ 41.664928][ T1763] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.680549][ T1763] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 41.687592][ T1757] EXT4-fs (loop0): Total free blocks count 0 [ 41.690778][ T1763] EXT4-fs (loop1): group descriptors corrupted! [ 41.702698][ T1757] EXT4-fs (loop0): Free/Dirty block details [ 41.708424][ T1757] EXT4-fs (loop0): free_blocks=68451041280 [ 41.714459][ T1757] EXT4-fs (loop0): dirty_blocks=16 [ 41.719405][ T1757] EXT4-fs (loop0): Block reservation details [ 41.725539][ T1757] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 41.732386][ T1755] loop3: detected capacity change from 0 to 40427 [ 41.739169][ T1755] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 41.747359][ T1755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 41.756527][ T291] EXT4-fs (loop0): unmounting filesystem. [ 41.763067][ T1755] F2FS-fs (loop3): invalid crc value [ 41.782573][ T1755] F2FS-fs (loop3): Found nat_bits in checkpoint [ 41.799351][ T1768] SELinux: ebitmap: truncated map [ 41.806302][ T1768] SELinux: failed to load policy [ 41.838671][ T1755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 41.847560][ T1755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 41.880031][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 41.897034][ T28] audit: type=1400 audit(1743710445.110:338): avc: denied { setattr } for pid=1754 comm="syz.3.617" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.977316][ T1784] device ip6gretap0 entered promiscuous mode [ 42.048417][ T1790] loop0: detected capacity change from 0 to 512 [ 42.112447][ T1798] loop5: detected capacity change from 0 to 128 [ 42.131541][ T1790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.158001][ T1790] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.161021][ T1807] loop1: detected capacity change from 0 to 256 [ 42.187009][ T1807] process 'syz.1.638' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 42.189950][ T291] EXT4-fs (loop0): unmounting filesystem. [ 42.352494][ T662] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 42.364407][ T662] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 42.371067][ T1821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 42.372856][ T662] hid-generic 0000:0003:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.425595][ T1830] binder: 1829:1830 ioctl c0306201 200000000140 returned -14 [ 42.478712][ T1833] loop4: detected capacity change from 0 to 512 [ 42.485204][ T1833] EXT4-fs: Ignoring removed orlov option [ 42.492200][ T1833] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.494026][ T1835] loop5: detected capacity change from 0 to 256 [ 42.500643][ T1833] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 3: comm syz.4.650: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.521921][ T1833] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.650: error -117 reading directory block [ 42.534426][ T1833] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 42.542826][ T1833] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.556885][ T28] audit: type=1400 audit(1743710445.790:339): avc: denied { remount } for pid=1832 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.590821][ T293] EXT4-fs (loop4): unmounting filesystem. [ 42.618527][ T1846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.655'. [ 42.627614][ T1846] Zero length message leads to an empty skb [ 42.664801][ T1852] device ip6gretap0 entered promiscuous mode [ 42.708582][ T1858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 42.716475][ T1857] loop0: detected capacity change from 0 to 512 [ 42.739622][ T1857] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.775667][ T291] EXT4-fs (loop0): unmounting filesystem. [ 42.869224][ T1870] loop0: detected capacity change from 0 to 512 [ 42.890227][ T1870] EXT4-fs: Ignoring removed orlov option [ 42.904820][ T1850] loop5: detected capacity change from 0 to 40427 [ 42.905102][ T1870] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.927577][ T1870] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 3: comm syz.0.666: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.943294][ T1850] F2FS-fs (loop5): fault_injection options not supported [ 42.950442][ T1870] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.666: error -117 reading directory block [ 42.963566][ T1850] F2FS-fs (loop5): invalid crc value [ 42.968950][ T1870] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 42.977093][ T1870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.990482][ T1850] F2FS-fs (loop5): Found nat_bits in checkpoint [ 43.000718][ T291] EXT4-fs (loop0): unmounting filesystem. [ 43.115059][ T1850] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 43.123596][ T1886] loop3: detected capacity change from 0 to 512 [ 43.141182][ T1886] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 43.164398][ T1252] syz-executor: attempt to access beyond end of device [ 43.164398][ T1252] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.181594][ T292] EXT4-fs (loop3): unmounting filesystem. [ 43.235326][ T1893] loop1: detected capacity change from 0 to 512 [ 43.250769][ T28] audit: type=1400 audit(1743710446.490:340): avc: denied { mounton } for pid=1891 comm="syz.1.677" path="/114/file0" dev="tmpfs" ino=612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 43.250845][ T1893] EXT4-fs: Ignoring removed oldalloc option [ 43.347347][ T1893] EXT4-fs: Ignoring removed i_version option [ 43.370655][ T1893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.416551][ T1893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.426250][ T1893] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.437181][ T1893] EXT4-fs (loop1): unmounting filesystem. [ 43.485198][ T1923] loop4: detected capacity change from 0 to 256 [ 43.533567][ T1923] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 43.686216][ T1950] loop4: detected capacity change from 0 to 512 [ 43.710865][ T1950] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.738312][ T1958] loop3: detected capacity change from 0 to 128 [ 43.742737][ T1950] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 43.761623][ T1950] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.785991][ T1950] EXT4-fs (loop4): shut down requested (1) [ 43.802946][ T28] audit: type=1400 audit(1743710447.040:341): avc: denied { map } for pid=1962 comm="syz.3.705" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.811207][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 43.841414][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 43.850352][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 43.859131][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 43.868175][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 43.877357][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 43.886214][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 43.895071][ T28] audit: type=1400 audit(1743710447.130:342): avc: denied { remove_name } for pid=1949 comm="syz.4.701" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.917743][ T1950] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 43.926645][ T28] audit: type=1400 audit(1743710447.160:343): avc: denied { rename } for pid=1949 comm="syz.4.701" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.948949][ T28] audit: type=1400 audit(1743710447.170:344): avc: denied { unlink } for pid=1949 comm="syz.4.701" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.979336][ T293] EXT4-fs (loop4): unmounting filesystem. [ 44.051645][ T1983] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 44.051695][ T1981] loop0: detected capacity change from 0 to 1024 [ 44.070413][ T1981] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.104010][ T1981] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.714: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 44.122591][ T1981] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.714: couldn't read orphan inode 11 (err -117) [ 44.134537][ T1981] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.147623][ T1981] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.714: Invalid block bitmap block 0 in block_group 0 [ 44.161327][ T1981] Quota error (device loop0): write_blk: dquota write failed [ 44.168694][ T1981] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 44.184098][ T1981] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.714: Failed to acquire dquot type 0 [ 44.196686][ T1981] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.714: Invalid inode bitmap blk 137438953472 in block_group 0 [ 44.217386][ T331] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm kworker/u4:5: Invalid inode table block 8589934593 in block_group 0 [ 44.242888][ T291] EXT4-fs (loop0): unmounting filesystem. [ 44.298238][ T28] audit: type=1400 audit(1743710447.530:345): avc: denied { map } for pid=1996 comm="syz.4.723" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 44.360162][ T797] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.456615][ T2019] raw_sendmsg: syz.4.733 forgot to set AF_INET. Fix it! [ 44.499898][ T2027] loop0: detected capacity change from 0 to 128 [ 44.533584][ T2031] loop5: detected capacity change from 0 to 512 [ 44.549905][ T2027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.549944][ T2031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 44.574836][ T2027] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.575736][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 44.611450][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 44.620656][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24697, setting to 1024 [ 44.621989][ T2031] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 44.632414][ T291] EXT4-fs (loop0): unmounting filesystem. [ 44.647345][ T2031] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.668916][ T2031] EXT4-fs (loop5): 1 truncate cleaned up [ 44.674546][ T797] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 44.683917][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.691950][ T2031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 44.701705][ T797] usb 2-1: config 0 descriptor?? [ 44.730778][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 44.759657][ T2045] device veth2 entered promiscuous mode [ 44.914332][ T2026] loop3: detected capacity change from 0 to 40427 [ 44.927680][ T2026] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 44.945548][ T2026] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 44.945628][ T2059] loop0: detected capacity change from 0 to 256 [ 44.973466][ T2059] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 44.986139][ T2026] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.113508][ T797] hid-generic 0003:05AC:4262.0006: unknown main item tag 0x6 [ 45.122436][ T797] hid-generic 0003:05AC:4262.0006: hidraw0: USB HID v0.00 Device [HID 05ac:4262] on usb-dummy_hcd.1-1/input0 [ 45.124061][ T2026] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.141466][ T2026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.319762][ T2099] loop4: detected capacity change from 0 to 512 [ 45.341461][ T797] usb 2-1: USB disconnect, device number 5 [ 45.348432][ T2097] SELinux: failed to load policy [ 45.353573][ T2099] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 45.537334][ T2121] loop5: detected capacity change from 0 to 128 [ 45.555492][ T2121] EXT4-fs: Ignoring removed nobh option [ 45.574914][ T2121] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 45.583903][ T2121] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.602063][ T2133] syz.3.783[2133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.602145][ T2133] syz.3.783[2133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.630209][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 45.811897][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 46.000172][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 46.006289][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.021840][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.067927][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.081029][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.104386][ T6] usb 5-1: Product: syz [ 46.120481][ T6] usb 5-1: Manufacturer: syz [ 46.124958][ T6] usb 5-1: SerialNumber: syz [ 46.145824][ T2206] loop0: detected capacity change from 0 to 128 [ 46.147304][ T2208] syz.1.819[2208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.152057][ T2208] syz.1.819[2208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.166677][ T2206] EXT4-fs: Ignoring removed nobh option [ 46.214149][ T2206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.230400][ T2206] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 46.250101][ T797] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 46.267495][ T291] EXT4-fs (loop0): unmounting filesystem. [ 46.300845][ T2213] loop0: detected capacity change from 0 to 512 [ 46.309410][ T2213] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.333750][ T6] usb 5-1: cannot find UAC_HEADER [ 46.341016][ T2213] EXT4-fs (loop0): 1 truncate cleaned up [ 46.347574][ T6] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 46.361898][ T6] usb 5-1: USB disconnect, device number 4 [ 46.363259][ T2213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 46.396729][ T2218] SELinux: failed to load policy [ 46.422946][ T2224] loop5: detected capacity change from 0 to 512 [ 46.432222][ T291] EXT4-fs (loop0): unmounting filesystem. [ 46.433426][ T2224] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 46.446183][ T797] usb 4-1: Using ep0 maxpacket: 16 [ 46.455611][ T797] usb 4-1: unable to get BOS descriptor set [ 46.466222][ T797] usb 4-1: config 0 has no interfaces? [ 46.472570][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 46.478919][ T797] usb 4-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 46.494679][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.502604][ T797] usb 4-1: Product: syz [ 46.506526][ T797] usb 4-1: Manufacturer: syz [ 46.520232][ T797] usb 4-1: SerialNumber: syz [ 46.540900][ T797] usb 4-1: config 0 descriptor?? [ 46.570738][ T1989] udevd[1989]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.752332][ T311] usb 4-1: USB disconnect, device number 4 [ 46.910438][ T797] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 46.939508][ T2272] loop0: detected capacity change from 0 to 256 [ 46.971956][ T2276] loop4: detected capacity change from 0 to 512 [ 46.978226][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 46.978248][ T28] audit: type=1400 audit(1743710460.213:353): avc: denied { remount } for pid=2271 comm="syz.0.845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 47.010091][ T2276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.034187][ T2276] EXT4-fs (loop4): 1 truncate cleaned up [ 47.039684][ T2276] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 47.042562][ T28] audit: type=1400 audit(1743710460.273:354): avc: denied { bind } for pid=2279 comm="syz.1.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.104925][ T293] EXT4-fs (loop4): unmounting filesystem. [ 47.122629][ T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 47.138955][ T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 47.156674][ T797] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 47.165702][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.174471][ T797] usb 6-1: config 0 descriptor?? [ 47.179600][ T2248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 47.299731][ T2311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.865'. [ 47.435551][ T2328] loop1: detected capacity change from 0 to 2048 [ 47.465167][ T2328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.613770][ T797] logitech 0003:046D:CA03.0007: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0 [ 47.632408][ T797] logitech 0003:046D:CA03.0007: no inputs found [ 47.714113][ T2339] loop4: detected capacity change from 0 to 40427 [ 47.730146][ T2339] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 47.742163][ T2339] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 47.770093][ T2339] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.821004][ T797] usb 6-1: USB disconnect, device number 2 [ 47.862831][ T2364] netlink: 80 bytes leftover after parsing attributes in process `syz.3.884'. [ 47.875005][ T2339] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 47.883317][ T2339] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 48.021108][ T2377] loop0: detected capacity change from 0 to 512 [ 48.062045][ T2377] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.890: invalid indirect mapped block 2185560079 (level 0) [ 48.076972][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.087956][ T2377] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.890: invalid indirect mapped block 2683928664 (level 1) [ 48.110252][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.122605][ T2377] EXT4-fs (loop0): 1 truncate cleaned up [ 48.129310][ T2377] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 48.154714][ T2377] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm syz.0.890: Invalid inode table block 0 in block_group 0 [ 48.168920][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.175441][ T2377] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 48.177225][ T2385] loop4: detected capacity change from 0 to 512 [ 48.197030][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.213588][ T2377] EXT4-fs error (device loop0): ext4_splice_branch:479: inode #18: comm syz.0.890: mark_inode_dirty error [ 48.226052][ T2385] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 48.234666][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.244193][ T2377] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.890: bg 0: block 49: invalid block bitmap [ 48.256713][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.263138][ T2377] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 48.273025][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.280320][ T2377] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm syz.0.890: Invalid inode table block 0 in block_group 0 [ 48.295160][ T293] EXT4-fs (loop4): unmounting filesystem. [ 48.311444][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.317868][ T2377] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5887: Corrupt filesystem [ 48.334924][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.353757][ T2377] EXT4-fs error (device loop0): ext4_truncate:4313: inode #18: comm syz.0.890: mark_inode_dirty error [ 48.385876][ T2377] EXT4-fs (loop0): Remounting filesystem read-only [ 48.409175][ T28] audit: type=1400 audit(1743710461.643:355): avc: denied { read } for pid=2395 comm="syz.5.898" path="socket:[25326]" dev="sockfs" ino=25326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.438697][ T43] EXT4-fs error (device loop0): __ext4_get_inode_loc:4508: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 48.460269][ T43] EXT4-fs (loop0): Remounting filesystem read-only [ 48.490159][ T662] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 48.507556][ T2401] loop5: detected capacity change from 0 to 512 [ 48.522229][ T289] EXT4-fs (loop1): unmounting filesystem. [ 48.528452][ T2401] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.539898][ T2401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 48.548175][ T2401] System zones: 1-12 [ 48.561474][ T2401] EXT4-fs (loop5): 1 truncate cleaned up [ 48.567144][ T2401] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 48.585890][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 48.681173][ T662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 48.701322][ T662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24697, setting to 1024 [ 48.732431][ T662] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 48.752101][ T662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.771561][ T662] usb 4-1: config 0 descriptor?? [ 48.789246][ T2416] loop5: detected capacity change from 0 to 256 [ 48.817075][ T2416] exfat: Deprecated parameter 'namecase' [ 48.833922][ T2399] loop0: detected capacity change from 0 to 40427 [ 48.850409][ T2399] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 48.860997][ T2416] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 48.880108][ T2399] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 48.917344][ T28] audit: type=1400 audit(1743710462.153:356): avc: denied { rename } for pid=2415 comm="syz.5.905" name="file0" dev="loop5" ino=1048641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.951130][ T2399] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.080408][ T2399] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 49.095694][ T2399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.183684][ T662] hid-generic 0003:05AC:4262.0008: unknown main item tag 0x6 [ 49.209012][ T662] hid-generic 0003:05AC:4262.0008: hidraw0: USB HID v0.00 Device [HID 05ac:4262] on usb-dummy_hcd.3-1/input0 [ 49.379757][ T2431] loop5: detected capacity change from 0 to 256 [ 49.391445][ T2394] loop4: detected capacity change from 0 to 131072 [ 49.395682][ T19] usb 4-1: USB disconnect, device number 5 [ 49.418187][ T2394] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 49.428864][ T2431] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 49.451134][ T2431] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 49.460101][ T2394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 49.482824][ T2394] F2FS-fs (loop4): invalid crc value [ 49.515839][ T2394] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.605482][ T28] audit: type=1400 audit(1743710462.843:357): avc: denied { write } for pid=2442 comm="syz.5.914" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.617241][ T2394] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 49.636183][ T2394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 49.713600][ T2394] F2FS-fs (loop4): sanity_check_inode: inode (ino=8, mode=43690) should not have inline_dentry, run fsck to fix [ 50.116548][ T28] audit: type=1400 audit(1743710463.353:358): avc: denied { read append } for pid=2472 comm="syz.0.927" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.162436][ T2477] loop1: detected capacity change from 0 to 2048 [ 50.168897][ T2473] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 50.184238][ T28] audit: type=1400 audit(1743710463.353:359): avc: denied { read write } for pid=289 comm="syz-executor" name="loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.208509][ T28] audit: type=1400 audit(1743710463.353:360): avc: denied { open } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.245273][ T28] audit: type=1400 audit(1743710463.353:361): avc: denied { ioctl } for pid=289 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.270796][ T28] audit: type=1400 audit(1743710463.373:362): avc: denied { create } for pid=2474 comm="syz.1.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.282323][ T2477] Alternate GPT is invalid, using primary GPT. [ 50.300588][ T2477] loop1: p1 p2 p3 [ 50.449308][ T2485] loop4: detected capacity change from 0 to 40427 [ 50.460549][ T2485] F2FS-fs (loop4): heap/no_heap options were deprecated [ 50.468380][ T2485] F2FS-fs (loop4): invalid crc value [ 50.475146][ T2485] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.520166][ T2485] F2FS-fs (loop4): Start checkpoint disabled! [ 50.526855][ T2485] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 50.572070][ T8] kworker/u4:0: attempt to access beyond end of device [ 50.572070][ T8] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 50.676589][ T2502] netlink: 'syz.5.949': attribute type 4 has an invalid length. [ 50.995656][ T2534] loop4: detected capacity change from 0 to 2048 [ 51.006882][ T2536] loop0: detected capacity change from 0 to 1024 [ 51.014230][ T2536] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 51.024439][ T2536] EXT4-fs (loop0): can't mount with commit=3, fs mounted w/o journal [ 51.051430][ T2534] Alternate GPT is invalid, using primary GPT. [ 51.059907][ T2534] loop4: p1 p2 p3 [ 51.275763][ T2558] loop4: detected capacity change from 0 to 4096 [ 51.282769][ T2558] EXT4-fs: Ignoring removed orlov option [ 51.305576][ T2558] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.338803][ T2558] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 51.381615][ T2575] loop5: detected capacity change from 0 to 128 [ 51.399927][ T2577] loop4: detected capacity change from 0 to 512 [ 51.460194][ T2577] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.570308][ T2599] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 51.608792][ T2607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.986'. [ 51.774442][ T2622] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 51.785243][ T2622] FAT-fs (loop11): unable to read boot sector [ 51.951575][ T2647] binder: 2645:2647 ioctl c0306201 2000000003c0 returned -22 [ 52.061380][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 52.061398][ T28] audit: type=1400 audit(1743710465.303:451): avc: denied { read } for pid=2663 comm="syz.3.1012" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.121453][ T28] audit: type=1400 audit(1743710465.303:452): avc: denied { open } for pid=2663 comm="syz.3.1012" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 52.167424][ T2677] loop4: detected capacity change from 0 to 1024 [ 52.180121][ T662] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 52.180672][ T2677] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.207071][ T2681] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 52.240515][ T2687] loop0: detected capacity change from 0 to 128 [ 52.321079][ T28] audit: type=1400 audit(1743710465.563:453): avc: denied { ioctl } for pid=2693 comm="syz.0.1023" path="socket:[26170]" dev="sockfs" ino=26170 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.389941][ T28] audit: type=1400 audit(1743710465.603:454): avc: denied { execute } for pid=2697 comm="syz.4.1026" name="file1" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.391615][ T662] usb 2-1: Using ep0 maxpacket: 16 [ 52.414032][ T28] audit: type=1400 audit(1743710465.603:455): avc: denied { execute_no_trans } for pid=2697 comm="syz.4.1026" path="/229/file1" dev="tmpfs" ino=1207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 52.444938][ T662] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.463557][ T2702] device dummy0 entered promiscuous mode [ 52.474499][ T28] audit: type=1400 audit(1743710465.653:456): avc: denied { mount } for pid=2700 comm="syz.0.1027" name="/" dev="configfs" ino=14331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 52.499313][ T662] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.504184][ T28] audit: type=1400 audit(1743710465.653:457): avc: denied { search } for pid=2700 comm="syz.0.1027" name="/" dev="configfs" ino=14331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.527572][ T662] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 52.536242][ T28] audit: type=1400 audit(1743710465.653:458): avc: denied { setattr } for pid=2700 comm="syz.0.1027" name="/" dev="configfs" ino=14331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 52.563419][ T28] audit: type=1400 audit(1743710465.763:459): avc: denied { create } for pid=2707 comm="syz.3.1031" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.586345][ T662] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.588558][ T28] audit: type=1400 audit(1743710465.803:460): avc: denied { ioctl } for pid=2707 comm="syz.3.1031" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26192 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 52.608437][ T662] usb 2-1: Product: syz [ 52.662170][ T662] usb 2-1: Manufacturer: syz [ 52.672803][ T662] usb 2-1: SerialNumber: syz [ 52.885317][ T2737] loop3: detected capacity change from 0 to 1024 [ 52.900584][ T2739] loop4: detected capacity change from 0 to 1024 [ 52.908581][ T662] usb 2-1: 0:2 : does not exist [ 52.920168][ T2739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.920318][ T662] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 52.940269][ T2737] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.966941][ T662] usb 2-1: USB disconnect, device number 6 [ 52.968129][ T2739] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.020546][ T2739] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 53.042167][ T2748] tipc: Started in network mode [ 53.046961][ T2748] tipc: Node identity 7, cluster identity 4711 [ 53.048081][ T2739] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 3 with error 28 [ 53.053019][ T2748] tipc: Node number set to 7 [ 53.069555][ T2748] tipc: Cannot configure node identity twice [ 53.080150][ T2739] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.080150][ T2739] [ 53.089940][ T2739] EXT4-fs (loop4): Total free blocks count 0 [ 53.096017][ T2739] EXT4-fs (loop4): Free/Dirty block details [ 53.102294][ T2739] EXT4-fs (loop4): free_blocks=4293918720 [ 53.107923][ T2739] EXT4-fs (loop4): dirty_blocks=0 [ 53.114733][ T2739] EXT4-fs (loop4): Block reservation details [ 53.120651][ T2739] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 53.181709][ T1989] udevd[1989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.420418][ T2790] loop3: detected capacity change from 0 to 256 [ 53.439504][ T2790] FAT-fs (loop3): Directory bread(block 64) failed [ 53.448357][ T2790] FAT-fs (loop3): Directory bread(block 65) failed [ 53.452620][ T2792] loop1: detected capacity change from 0 to 256 [ 53.455921][ T2790] FAT-fs (loop3): Directory bread(block 66) failed [ 53.467344][ T2790] FAT-fs (loop3): Directory bread(block 67) failed [ 53.478032][ T2790] FAT-fs (loop3): Directory bread(block 68) failed [ 53.486215][ T2790] FAT-fs (loop3): Directory bread(block 69) failed [ 53.492951][ T2790] FAT-fs (loop3): Directory bread(block 70) failed [ 53.499400][ T2790] FAT-fs (loop3): Directory bread(block 71) failed [ 53.520517][ T2790] FAT-fs (loop3): Directory bread(block 72) failed [ 53.529306][ T2790] FAT-fs (loop3): Directory bread(block 73) failed [ 53.734718][ T2824] loop3: detected capacity change from 0 to 128 [ 53.753737][ T2822] loop0: detected capacity change from 0 to 4096 [ 53.790119][ T2822] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.1079: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 53.831237][ T2834] loop5: detected capacity change from 0 to 256 [ 53.842040][ T2834] FAT-fs (loop5): Unrecognized mount option "uni_xlatY=0" or missing value [ 53.863034][ T2822] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.1079: directory missing '..' [ 53.875344][ T2839] syz.1.1088 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 53.994090][ T2857] netlink: 'syz.0.1097': attribute type 16 has an invalid length. [ 54.025660][ T2857] netlink: 'syz.0.1097': attribute type 3 has an invalid length. [ 54.034948][ T2857] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 54.043582][ T2857] netlink: 'syz.0.1097': attribute type 1 has an invalid length. [ 54.077057][ T2857] netlink: 'syz.0.1097': attribute type 2 has an invalid length. [ 54.087782][ T2857] netlink: 64006 bytes leftover after parsing attributes in process `syz.0.1097'. [ 54.097400][ T2867] binder: 2866:2867 ioctl 4018620d 0 returned -22 [ 54.288574][ T2901] loop0: detected capacity change from 0 to 256 [ 54.297174][ T2901] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 54.336097][ T2909] loop0: detected capacity change from 0 to 256 [ 54.340227][ T19] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 54.355743][ T2909] FAT-fs (loop0): Directory bread(block 64) failed [ 54.363646][ T2909] FAT-fs (loop0): Directory bread(block 65) failed [ 54.381078][ T2909] FAT-fs (loop0): Directory bread(block 66) failed [ 54.387786][ T2909] FAT-fs (loop0): Directory bread(block 67) failed [ 54.400470][ T2916] netlink: 'syz.4.1125': attribute type 11 has an invalid length. [ 54.410355][ T2909] FAT-fs (loop0): Directory bread(block 68) failed [ 54.424866][ T2909] FAT-fs (loop0): Directory bread(block 69) failed [ 54.431609][ T2909] FAT-fs (loop0): Directory bread(block 70) failed [ 54.438172][ T2909] FAT-fs (loop0): Directory bread(block 71) failed [ 54.450184][ T2909] FAT-fs (loop0): Directory bread(block 72) failed [ 54.460994][ T2909] FAT-fs (loop0): Directory bread(block 73) failed [ 54.505848][ T2929] loop3: detected capacity change from 0 to 1024 [ 54.508734][ T2931] loop4: detected capacity change from 0 to 256 [ 54.519111][ T2928] Non-string source [ 54.530274][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 54.560824][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 54.571335][ T2937] netlink: 'syz.5.1134': attribute type 13 has an invalid length. [ 54.593479][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.623351][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.633902][ T2942] loop3: detected capacity change from 0 to 2048 [ 54.651629][ T19] usb 2-1: string descriptor 0 read error: -22 [ 54.657682][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 54.666724][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.679885][ T19] usb 2-1: cannot find UAC_HEADER [ 54.687710][ T2942] Alternate GPT is invalid, using primary GPT. [ 54.694538][ T2942] loop3: p1 p2 p3 [ 54.721841][ T2950] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1139'. [ 54.731416][ T19] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 54.787588][ T1989] udevd[1989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.808582][ T318] udevd[318]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 54.808639][ T320] udevd[320]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.829605][ T491] udevd[491]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 54.882725][ T6] usb 2-1: USB disconnect, device number 7 [ 55.171552][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.178679][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.186002][ T2986] device bridge_slave_0 entered promiscuous mode [ 55.195040][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.202023][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.209326][ T2986] device bridge_slave_1 entered promiscuous mode [ 55.266908][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.273800][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.280892][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.287672][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.313562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.321202][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.328519][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.337732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.346602][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.353502][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.363821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.372003][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.378842][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.393203][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.421140][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.436127][ T2986] device veth0_vlan entered promiscuous mode [ 55.447127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.455679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.458035][ T2996] loop5: detected capacity change from 0 to 256 [ 55.463962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.477158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.487121][ T2996] exfat: Deprecated parameter 'utf8' [ 55.495021][ T2996] exfat: Deprecated parameter 'namecase' [ 55.503900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.504285][ T2996] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 55.523396][ T2986] device veth1_macvtap entered promiscuous mode [ 55.543669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.559689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.627822][ T324] device bridge_slave_1 left promiscuous mode [ 55.635110][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.644596][ T324] device bridge_slave_0 left promiscuous mode [ 55.657400][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.685391][ T324] device dummy0 left promiscuous mode [ 55.690811][ T324] device veth1_macvtap left promiscuous mode [ 55.696776][ T324] device veth0_vlan left promiscuous mode [ 55.778333][ T3022] loop5: detected capacity change from 0 to 1024 [ 55.806286][ T3022] EXT4-fs warning (device loop5): empty_inline_dir:1866: bad inline directory (dir #12) - no `..' [ 55.843206][ T3026] loop5: detected capacity change from 0 to 512 [ 55.864106][ T3026] EXT4-fs: Ignoring removed oldalloc option [ 55.869914][ T3026] EXT4-fs: Ignoring removed orlov option [ 55.880118][ T19] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 55.892468][ T3026] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.051274][ T3046] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1181'. [ 56.070283][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 56.082735][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.103897][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.139568][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.163631][ T3068] incfs: Options parsing error. -22 [ 56.168800][ T3068] incfs: mount failed -22 [ 56.173073][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.182739][ T19] usb 2-1: Product: syz [ 56.187065][ T19] usb 2-1: Manufacturer: syz [ 56.195295][ T3072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1193'. [ 56.204369][ T19] usb 2-1: SerialNumber: syz [ 56.257815][ T3078] loop5: detected capacity change from 0 to 128 [ 56.280803][ T3078] EXT4-fs: Ignoring removed nobh option [ 56.312525][ T3078] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.414456][ T3103] incfs: Options parsing error. -22 [ 56.419601][ T3103] incfs: mount failed -22 [ 56.422509][ T19] usb 2-1: 0:2 : does not exist [ 56.439084][ T19] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 56.459232][ T19] usb 2-1: USB disconnect, device number 8 [ 56.638116][ T3129] loop0: detected capacity change from 0 to 2048 [ 56.640171][ T662] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.674766][ T3129] Alternate GPT is invalid, using primary GPT. [ 56.681006][ T3129] loop0: p2 p3 p7 [ 56.701260][ T1989] udevd[1989]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.752011][ T320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.775711][ T320] udevd[320]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 56.775751][ T1989] udevd[1989]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 56.796684][ T491] udevd[491]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 56.860115][ T662] usb 5-1: Using ep0 maxpacket: 16 [ 56.866256][ T662] usb 5-1: unable to get BOS descriptor set [ 56.872853][ T662] usb 5-1: config 0 has no interfaces? [ 56.879776][ T662] usb 5-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 56.888745][ T662] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.896641][ T662] usb 5-1: Product: syz [ 56.900637][ T662] usb 5-1: Manufacturer: syz [ 56.905017][ T662] usb 5-1: SerialNumber: syz [ 56.910190][ T662] usb 5-1: config 0 descriptor?? [ 57.158914][ T1642] usb 5-1: USB disconnect, device number 5 [ 57.262903][ T3137] loop5: detected capacity change from 0 to 4096 [ 57.273519][ T3147] loop0: detected capacity change from 0 to 512 [ 57.288616][ T3147] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 57.347516][ T3147] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1226: casefold flag without casefold feature [ 57.381610][ T3147] EXT4-fs (loop0): Remounting filesystem read-only [ 57.388044][ T3147] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1226: couldn't read orphan inode 15 (err -117) [ 57.402511][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 57.402530][ T28] audit: type=1400 audit(1743710470.643:509): avc: denied { append } for pid=3155 comm="syz.3.1232" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 57.434638][ T3147] EXT4-fs (loop0): Remounting filesystem read-only [ 57.443960][ T3147] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #2: comm syz.0.1226: invalid size [ 57.454931][ T3147] EXT4-fs (loop0): Remounting filesystem read-only [ 57.566396][ T28] audit: type=1400 audit(1743710470.803:510): avc: denied { accept } for pid=3175 comm="syz.5.1239" laddr=::ffff:255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 57.639854][ T28] audit: type=1400 audit(1743710470.873:511): avc: denied { create } for pid=3187 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.697700][ T28] audit: type=1400 audit(1743710470.903:512): avc: denied { write } for pid=3187 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.747707][ T28] audit: type=1400 audit(1743710470.963:513): avc: denied { view } for pid=3193 comm="syz.4.1247" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 57.786795][ T3197] loop3: detected capacity change from 0 to 512 [ 57.797190][ T3200] loop4: detected capacity change from 0 to 256 [ 57.824022][ T3197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.882507][ T3197] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.093965][ T3192] loop1: detected capacity change from 0 to 40427 [ 58.115888][ T3192] F2FS-fs (loop1): invalid crc value [ 58.140161][ T3222] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.163551][ T3222] FAT-fs (loop7): unable to read boot sector [ 58.172968][ T3192] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.287186][ T3192] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.345109][ T28] audit: type=1400 audit(1743710471.583:514): avc: denied { create } for pid=3191 comm="syz.1.1248" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 58.429554][ T289] syz-executor: attempt to access beyond end of device [ 58.429554][ T289] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.562198][ T28] audit: type=1400 audit(1743710471.803:515): avc: denied { bind } for pid=3249 comm="syz.3.1271" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.611492][ T28] audit: type=1400 audit(1743710471.803:516): avc: denied { name_bind } for pid=3249 comm="syz.3.1271" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 58.638094][ T3254] loop3: detected capacity change from 0 to 512 [ 58.673110][ T28] audit: type=1400 audit(1743710471.803:517): avc: denied { node_bind } for pid=3249 comm="syz.3.1271" saddr=ff01::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 58.699253][ T3257] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 58.715596][ T3254] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.747532][ T3254] EXT4-fs (loop3): 1 truncate cleaned up [ 60.100048][ C0] sched: RT throttling activated [ 60.121672][ T3267] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 61.118866][ T28] audit: type=1400 audit(1743710474.353:518): avc: denied { create } for pid=3271 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 61.197368][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.204531][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.340541][ T3300] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1292'. [ 61.471886][ T3278] loop1: detected capacity change from 0 to 40427 [ 61.484518][ T3278] F2FS-fs (loop1): fault_injection options not supported [ 61.500139][ T3278] F2FS-fs (loop1): fault_type options not supported [ 61.509781][ T3278] F2FS-fs (loop1): Image doesn't support compression [ 61.527927][ T3278] F2FS-fs (loop1): Image doesn't support compression [ 61.535286][ T3278] F2FS-fs (loop1): invalid crc value [ 61.550128][ T662] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.576003][ T3278] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.618235][ T3296] loop5: detected capacity change from 0 to 40427 [ 61.635409][ T3296] F2FS-fs (loop5): fault_injection options not supported [ 61.645445][ T3314] loop0: detected capacity change from 0 to 512 [ 61.665772][ T3296] F2FS-fs (loop5): invalid crc value [ 61.669699][ T3314] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.680463][ T3314] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.688481][ T3278] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 61.691187][ T3296] F2FS-fs (loop5): Found nat_bits in checkpoint [ 61.696117][ T3314] EXT4-fs (loop0): Test dummy encryption mode enabled [ 61.728973][ T3314] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.741135][ T662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.762178][ T289] syz-executor: attempt to access beyond end of device [ 61.762178][ T289] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.767361][ T662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.790213][ T3314] EXT4-fs (loop0): 1 truncate cleaned up [ 61.807631][ T3314] fscrypt: AES-256-XTS using blk-crypto-fallback [ 61.818127][ T3296] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 61.838336][ T662] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 61.847448][ T662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.859995][ T662] usb 5-1: config 0 descriptor?? [ 61.964901][ T1252] syz-executor: attempt to access beyond end of device [ 61.964901][ T1252] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.277374][ T662] hid-steam 0003:28DE:1142.0009: item fetching failed at offset 3/5 [ 62.290486][ T662] hid-steam 0003:28DE:1142.0009: steam_probe:parse of hid interface failed [ 62.291488][ T3368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1319'. [ 62.302755][ T662] hid-steam: probe of 0003:28DE:1142.0009 failed with error -22 [ 62.420110][ T1642] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 64.119811][ T3392] loop3: detected capacity change from 0 to 256 [ 64.121567][ T662] usb 5-1: USB disconnect, device number 6 [ 65.130806][ T1642] usb 6-1: device descriptor read/all, error -71 [ 65.190560][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 65.190577][ T28] audit: type=1400 audit(1743710478.433:526): avc: denied { create } for pid=3400 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.241300][ T28] audit: type=1400 audit(1743710478.443:527): avc: denied { connect } for pid=3400 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.263106][ T28] audit: type=1400 audit(1743710478.443:528): avc: denied { getopt } for pid=3400 comm="syz.1.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.307994][ T28] audit: type=1400 audit(1743710478.543:529): avc: denied { mounton } for pid=3413 comm="syz.1.1340" path="/193/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 65.399735][ T28] audit: type=1326 audit(1743710478.633:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d78d169 code=0x7ffc0000 [ 65.443564][ T28] audit: type=1326 audit(1743710478.643:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d8d78d169 code=0x7ffc0000 [ 65.473160][ T28] audit: type=1326 audit(1743710478.643:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d78d169 code=0x7ffc0000 [ 65.501483][ T28] audit: type=1326 audit(1743710478.643:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3d8d78d169 code=0x7ffc0000 [ 65.531145][ T28] audit: type=1326 audit(1743710478.643:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d8d78d169 code=0x7ffc0000 [ 65.554571][ T28] audit: type=1326 audit(1743710478.643:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3422 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3d8d78d169 code=0x7ffc0000 [ 65.605629][ T3438] loop1: detected capacity change from 0 to 1024 [ 65.634531][ T3443] loop4: detected capacity change from 0 to 512 [ 65.639823][ T3438] EXT4-fs mount: 30 callbacks suppressed [ 65.639847][ T3438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.650271][ T3443] EXT4-fs: Ignoring removed oldalloc option [ 65.670250][ T3443] EXT4-fs: Ignoring removed orlov option [ 65.673796][ T3438] EXT4-fs warning (device loop1): empty_inline_dir:1866: bad inline directory (dir #12) - no `..' [ 65.702404][ T289] EXT4-fs (loop1): unmounting filesystem. [ 65.709848][ T3443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.728224][ T3447] loop1: detected capacity change from 0 to 128 [ 65.734703][ T3443] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.756778][ T3447] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.785007][ T3447] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.786575][ T293] EXT4-fs (loop4): unmounting filesystem. [ 65.813254][ T289] EXT4-fs (loop1): unmounting filesystem. [ 65.852556][ T3455] loop1: detected capacity change from 0 to 1024 [ 65.888775][ T3463] loop0: detected capacity change from 0 to 256 [ 65.892055][ T3455] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.900416][ T3463] exfat: Deprecated parameter 'namecase' [ 65.916717][ T3463] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x6dfb6af6, utbl_chksum : 0xe619d30d) [ 65.929628][ T289] EXT4-fs (loop1): unmounting filesystem. [ 65.986621][ T3471] netlink: 'syz.4.1362': attribute type 16 has an invalid length. [ 66.008551][ T3471] netlink: 'syz.4.1362': attribute type 3 has an invalid length. [ 66.016772][ T3471] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 66.024937][ T3471] netlink: 'syz.4.1362': attribute type 1 has an invalid length. [ 66.033252][ T3471] netlink: 'syz.4.1362': attribute type 2 has an invalid length. [ 66.046184][ T3471] netlink: 64006 bytes leftover after parsing attributes in process `syz.4.1362'. [ 66.080910][ T3481] cgroup2: Unknown parameter 'pids_localevents' [ 66.123356][ T3487] loop1: detected capacity change from 0 to 128 [ 66.143045][ T3487] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.171580][ T3487] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.182182][ T3487] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 66.184513][ T3501] loop3: detected capacity change from 0 to 128 [ 66.199027][ T3501] EXT4-fs: Ignoring removed i_version option [ 66.214805][ T3501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 66.228223][ T3487] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 66.233669][ T3501] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.269200][ T3506] incfs: Options parsing error. -22 [ 66.284244][ T3501] EXT4-fs warning (device loop3): verify_group_input:169: Last group not full [ 66.293678][ T3506] incfs: mount failed -22 [ 66.319378][ T2986] EXT4-fs (loop3): unmounting filesystem. [ 66.325923][ T289] EXT4-fs (loop1): unmounting filesystem. [ 66.407955][ T3531] device dummy0 entered promiscuous mode [ 66.433801][ T3537] loop1: detected capacity change from 0 to 256 [ 66.446797][ T3537] FAT-fs (loop1): Directory bread(block 64) failed [ 66.456971][ T3537] FAT-fs (loop1): Directory bread(block 65) failed [ 66.464348][ T3537] FAT-fs (loop1): Directory bread(block 66) failed [ 66.470927][ T3537] FAT-fs (loop1): Directory bread(block 67) failed [ 66.477528][ T3537] FAT-fs (loop1): Directory bread(block 68) failed [ 66.484420][ T3537] FAT-fs (loop1): Directory bread(block 69) failed [ 66.496881][ T3537] FAT-fs (loop1): Directory bread(block 70) failed [ 66.503735][ T3537] FAT-fs (loop1): Directory bread(block 71) failed [ 66.510566][ T3537] FAT-fs (loop1): Directory bread(block 72) failed [ 66.517022][ T3537] FAT-fs (loop1): Directory bread(block 73) failed [ 66.545483][ T3547] tmpfs: Unknown parameter 'nolazyt[ime' [ 66.580077][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 66.600853][ T3555] loop1: detected capacity change from 0 to 2048 [ 66.643895][ T3555] Alternate GPT is invalid, using primary GPT. [ 66.650132][ T3555] loop1: p2 p3 p7 [ 66.721714][ T3577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1406'. [ 66.746312][ T3579] loop1: detected capacity change from 0 to 256 [ 66.755746][ T3579] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.771820][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 66.780802][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.792757][ T19] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.805319][ T19] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.820087][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.829911][ T19] usb 5-1: Product: syz [ 66.835362][ T19] usb 5-1: Manufacturer: syz [ 66.839908][ T19] usb 5-1: SerialNumber: syz [ 66.944934][ T3600] loop0: detected capacity change from 0 to 256 [ 66.949339][ T3602] loop5: detected capacity change from 0 to 512 [ 66.960892][ T3602] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 66.969072][ T3602] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 66.977178][ T3602] System zones: 0-2, 18-18, 34-35 [ 66.982950][ T3602] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 66.994528][ T3606] loop0: detected capacity change from 0 to 1024 [ 67.003621][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 67.026837][ T3606] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.051612][ T19] usb 5-1: 0:2 : does not exist [ 67.059280][ T291] EXT4-fs (loop0): unmounting filesystem. [ 67.061409][ T19] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 67.093708][ T19] usb 5-1: USB disconnect, device number 7 [ 67.102820][ T3618] loop5: detected capacity change from 0 to 4096 [ 67.111501][ T3618] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 67.123174][ T3618] fs-verity: sha256 using implementation "sha256-avx2" [ 67.131584][ T3618] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file! [ 67.153706][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 67.212962][ T3634] loop0: detected capacity change from 0 to 16 [ 67.219722][ T3634] erofs: (device loop0): mounted with root inode @ nid 36. [ 67.243572][ T3636] loop1: detected capacity change from 0 to 2048 [ 67.489726][ T3669] overlayfs: missing 'lowerdir' [ 67.532783][ T3678] loop5: detected capacity change from 0 to 256 [ 67.577456][ T3684] loop4: detected capacity change from 0 to 128 [ 67.772472][ T3714] netem: incorrect ge model size [ 67.778306][ T3712] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 67.790135][ T3714] netem: change failed [ 67.798039][ T3712] SELinux: failed to load policy [ 67.863395][ T3688] loop1: detected capacity change from 0 to 40427 [ 67.870985][ T3688] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 67.890177][ T3688] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 67.934029][ T3688] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.948995][ T3745] syz.0.1486[3745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.949078][ T3745] syz.0.1486[3745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.970755][ T3745] SELinux: failed to load policy [ 68.003593][ T3749] loop0: detected capacity change from 0 to 512 [ 68.009973][ T3688] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 68.010362][ T3749] EXT4-fs: Ignoring removed mblk_io_submit option [ 68.023175][ T3688] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.025683][ T3749] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1488: invalid block [ 68.055917][ T3749] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1488: invalid indirect mapped block 10 (level 1) [ 68.069379][ T3749] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1488: invalid indirect mapped block 8 (level 1) [ 68.073389][ T3688] syz.1.1461: attempt to access beyond end of device [ 68.073389][ T3688] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 68.083089][ T3749] EXT4-fs (loop0): 1 truncate cleaned up [ 68.101832][ T3749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.119332][ T3757] loop5: detected capacity change from 0 to 512 [ 68.135332][ T291] EXT4-fs (loop0): unmounting filesystem. [ 68.142727][ T3757] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2759: inode #12: comm syz.5.1490: corrupted xattr block 142 [ 68.155515][ T3757] EXT4-fs (loop5): Remounting filesystem read-only [ 68.163239][ T3757] EXT4-fs (loop5): 1 truncate cleaned up [ 68.168890][ T3757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 68.196858][ T3763] bridge0: port 2(bridge_slave_1) entered learning state [ 68.206150][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.233196][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 68.285171][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1496'. [ 68.301640][ T295] kernel write not supported for file /input/event0 (pid: 295 comm: kworker/0:2) [ 68.305102][ T3769] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1496'. [ 68.326835][ T3775] loop0: detected capacity change from 0 to 512 [ 68.333902][ T3775] EXT4-fs: Ignoring removed i_version option [ 68.342361][ T3779] loop1: detected capacity change from 0 to 128 [ 68.348940][ T3775] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.367122][ T3775] EXT4-fs (loop0): 1 truncate cleaned up [ 68.372742][ T3775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.389678][ T331] kworker/u4:5: attempt to access beyond end of device [ 68.389678][ T331] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 68.405147][ T291] EXT4-fs (loop0): unmounting filesystem. [ 68.448941][ T3792] loop5: detected capacity change from 0 to 512 [ 68.457544][ T3792] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.459273][ T3794] loop0: detected capacity change from 0 to 512 [ 68.473770][ T3794] EXT4-fs: Ignoring removed oldalloc option [ 68.479985][ T3794] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.494041][ T3792] EXT4-fs warning (device loop5): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.494512][ T3794] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.515386][ T3794] EXT4-fs error (device loop0): ext4_acquire_dquot:6782: comm syz.0.1507: Failed to acquire dquot type 1 [ 68.544359][ T3794] EXT4-fs (loop0): 1 truncate cleaned up [ 68.551296][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 68.551808][ T3794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.589875][ T3811] loop5: detected capacity change from 0 to 512 [ 68.596494][ T3811] EXT4-fs: Ignoring removed nobh option [ 68.596528][ T3809] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.620919][ T3811] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 68.665655][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 68.760361][ T3844] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1528'. [ 68.788735][ T3846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1530'. [ 68.799722][ T3848] loop5: detected capacity change from 0 to 256 [ 68.813053][ T3848] exfat: Deprecated parameter 'namecase' [ 68.818667][ T3848] exfat: Deprecated parameter 'utf8' [ 68.836755][ T3848] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 68.848826][ T295] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.859733][ T3858] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 69.023301][ T3889] loop1: detected capacity change from 0 to 512 [ 69.031258][ T295] usb 1-1: config 1 has an invalid descriptor of length 86, skipping remainder of the config [ 69.042495][ T3889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.051119][ T295] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.061841][ T295] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.071170][ T3889] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1549: bg 0: block 264: padding at end of block bitmap is not set [ 69.085423][ T295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.093323][ T295] usb 1-1: SerialNumber: syz [ 69.098012][ T3889] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 69.108256][ T3889] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 69.129200][ T289] EXT4-fs (loop1): unmounting filesystem. [ 69.303221][ T295] usb 1-1: 0:2 : does not exist [ 69.311730][ T295] usb 1-1: USB disconnect, device number 4 [ 69.524287][ T3953] loop4: detected capacity change from 0 to 512 [ 69.552285][ T3953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.561436][ T3953] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.575077][ T3953] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 69.589777][ T3953] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 69.602251][ T3953] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.602251][ T3953] [ 69.612149][ T3953] EXT4-fs (loop4): Total free blocks count 0 [ 69.618099][ T3953] EXT4-fs (loop4): Free/Dirty block details [ 69.623920][ T3953] EXT4-fs (loop4): free_blocks=65280 [ 69.629800][ T3953] EXT4-fs (loop4): dirty_blocks=31 [ 69.634298][ T3962] netlink: 'syz.3.1579': attribute type 8 has an invalid length. [ 69.634850][ T3953] EXT4-fs (loop4): Block reservation details [ 69.642438][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1579'. [ 69.648206][ T3953] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 69.674374][ T293] EXT4-fs (loop4): unmounting filesystem. [ 69.775873][ T3971] input: syz1 as /devices/virtual/input/input7 [ 69.802461][ T3964] loop3: detected capacity change from 0 to 40427 [ 69.809454][ T3964] F2FS-fs (loop3): fault_injection options not supported [ 69.817070][ T3964] F2FS-fs (loop3): invalid crc value [ 69.822763][ T291] EXT4-fs (loop0): unmounting filesystem. [ 69.835265][ T3964] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.903126][ T3964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.960263][ T3976] f2fs_ckpt-7:3: attempt to access beyond end of device [ 69.960263][ T3976] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.110205][ T4025] tap0: tun_chr_ioctl cmd 1074025677 [ 70.115601][ T4025] tap0: linktype set to 0 [ 70.153267][ T4035] loop3: detected capacity change from 0 to 128 [ 70.160184][ T4035] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 70.171953][ T4035] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 70.200750][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 70.200767][ T28] audit: type=1400 audit(1743710483.443:676): avc: denied { relabelfrom } for pid=4042 comm="syz.0.1616" name="" dev="pipefs" ino=32495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 70.233233][ T28] audit: type=1400 audit(1743710483.473:677): avc: denied { setopt } for pid=4044 comm="syz.3.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.256611][ T4047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1617'. [ 70.336745][ T28] audit: type=1400 audit(1743710483.573:678): avc: denied { bind } for pid=4061 comm="syz.3.1624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.357065][ T28] audit: type=1400 audit(1743710483.573:679): avc: denied { name_bind } for pid=4061 comm="syz.3.1624" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 70.387695][ T28] audit: type=1400 audit(1743710483.573:680): avc: denied { node_bind } for pid=4061 comm="syz.3.1624" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 70.431569][ T4070] loop1: detected capacity change from 0 to 256 [ 70.445336][ T28] audit: type=1400 audit(1743710483.573:681): avc: denied { connect } for pid=4061 comm="syz.3.1624" lport=512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.474080][ T4070] FAT-fs (loop1): Directory bread(block 64) failed [ 70.481071][ T4070] FAT-fs (loop1): Directory bread(block 65) failed [ 70.491265][ T28] audit: type=1400 audit(1743710483.703:682): avc: denied { name_bind } for pid=4071 comm="syz.3.1629" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.512918][ T4070] FAT-fs (loop1): Directory bread(block 66) failed [ 70.521856][ T4070] FAT-fs (loop1): Directory bread(block 67) failed [ 70.528286][ T4070] FAT-fs (loop1): Directory bread(block 68) failed [ 70.535150][ T28] audit: type=1400 audit(1743710483.703:683): avc: denied { node_bind } for pid=4071 comm="syz.3.1629" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.556314][ T4070] FAT-fs (loop1): Directory bread(block 69) failed [ 70.562920][ T4070] FAT-fs (loop1): Directory bread(block 70) failed [ 70.569342][ T4070] FAT-fs (loop1): Directory bread(block 71) failed [ 70.575702][ T4070] FAT-fs (loop1): Directory bread(block 72) failed [ 70.582131][ T4070] FAT-fs (loop1): Directory bread(block 73) failed [ 70.626760][ T4085] syz.3.1635[4085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.626848][ T4085] syz.3.1635[4085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.643084][ T4068] loop5: detected capacity change from 0 to 40427 [ 70.661259][ T4068] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 70.668430][ T4068] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 70.677024][ T4068] F2FS-fs (loop5): Unrecognized mount option "noinline_attr" or missing value [ 70.715505][ T28] audit: type=1400 audit(1743710483.953:684): avc: denied { remount } for pid=4092 comm="syz.3.1638" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.755016][ T28] audit: type=1400 audit(1743710483.993:685): avc: denied { mounton } for pid=4096 comm="syz.3.1640" path="/79/file1" dev="tmpfs" ino=427 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 70.777708][ T4097] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 70.974180][ T4099] loop3: detected capacity change from 0 to 40427 [ 70.981280][ T4099] F2FS-fs (loop3): fault_injection options not supported [ 70.988973][ T4099] F2FS-fs (loop3): invalid crc value [ 70.995452][ T4099] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.014763][ T4113] kvm [4112]: vcpu2, guest rIP: 0xfff0 Hyper-V unhandled rdmsr: 0x4000007f [ 71.040493][ T4099] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.071230][ T2986] syz-executor: attempt to access beyond end of device [ 71.071230][ T2986] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.140615][ T4130] xt_bpf: check failed: parse error [ 71.206032][ T19] kernel write not supported for file /zero (pid: 19 comm: kworker/0:1) [ 71.268157][ T4145] loop4: detected capacity change from 0 to 8192 [ 71.385511][ T4162] netlink: 'syz.3.1667': attribute type 2 has an invalid length. [ 71.405272][ T4162] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 71.446294][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'. [ 71.495003][ T295] kernel write not supported for file /checkreqprot (pid: 295 comm: kworker/0:2) [ 71.565278][ T4183] loop3: detected capacity change from 0 to 2048 [ 71.648102][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 71.652804][ T4202] loop3: detected capacity change from 0 to 512 [ 71.664756][ T4202] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.682335][ T4202] EXT4-fs (loop3): 1 truncate cleaned up [ 71.700122][ T4202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 71.733710][ T2986] EXT4-fs (loop3): unmounting filesystem. [ 71.746939][ T4211] loop1: detected capacity change from 0 to 256 [ 71.777592][ T4211] FAT-fs (loop1): Directory bread(block 64) failed [ 71.783303][ T4216] netlink: 'syz.0.1693': attribute type 19 has an invalid length. [ 71.793417][ T4211] FAT-fs (loop1): Directory bread(block 65) failed [ 71.799850][ T4211] FAT-fs (loop1): Directory bread(block 66) failed [ 71.805939][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 71.817165][ T4211] FAT-fs (loop1): Directory bread(block 67) failed [ 71.824482][ T4211] FAT-fs (loop1): Directory bread(block 68) failed [ 71.833867][ T4211] FAT-fs (loop1): Directory bread(block 69) failed [ 71.842629][ T4211] FAT-fs (loop1): Directory bread(block 70) failed [ 71.849012][ T4211] FAT-fs (loop1): Directory bread(block 71) failed [ 71.855584][ T4211] FAT-fs (loop1): Directory bread(block 72) failed [ 71.857405][ T4222] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1695'. [ 71.862062][ T4211] FAT-fs (loop1): Directory bread(block 73) failed [ 71.872401][ T4222] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 71.972101][ T4238] syz.1.1703[4238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.972185][ T4238] syz.1.1703[4238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.985814][ T4238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1703'. [ 72.008869][ T4238] device vlan2 entered promiscuous mode [ 72.110298][ T4246] tipc: Started in network mode [ 72.115012][ T4246] tipc: Node identity ac14140f, cluster identity 4711 [ 72.140115][ T4246] tipc: New replicast peer: 255.255.255.255 [ 72.140383][ T4248] loop0: detected capacity change from 0 to 512 [ 72.156321][ T4246] tipc: Enabled bearer , priority 10 [ 72.171050][ T4248] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.178855][ T4248] EXT4-fs (loop0): 1 orphan inode deleted [ 72.197938][ T4248] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.207285][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 72.224860][ T4255] SELinux: failed to load policy [ 72.259853][ T4241] loop3: detected capacity change from 0 to 40427 [ 72.270160][ T4241] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.277893][ T4241] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.313961][ T4241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.417645][ T4241] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.424958][ T4241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.749236][ T4331] loop0: detected capacity change from 0 to 1024 [ 72.759309][ T4329] loop1: detected capacity change from 0 to 4096 [ 72.776130][ T4329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.789620][ T4329] fs-verity (loop1, inode 16): fs-verity keyring is empty, rejecting signed file! [ 72.808159][ T4331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.817953][ T289] EXT4-fs (loop1): unmounting filesystem. [ 72.846715][ T4321] loop5: detected capacity change from 0 to 40427 [ 72.853847][ T4321] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 72.854109][ T291] EXT4-fs (loop0): unmounting filesystem. [ 72.861450][ T4321] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 72.862506][ T4342] cgroup2: Unknown parameter 'pids_localevents' [ 72.870476][ T4321] F2FS-fs (loop5): Found nat_bits in checkpoint [ 72.942439][ T4321] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 72.949464][ T4321] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 73.006598][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 73.190606][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 73.200950][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.214561][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 73.219549][ T4388] loop1: detected capacity change from 0 to 512 [ 73.224508][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.241198][ T4388] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.1763: bad orphan inode 134217728 [ 73.241240][ T4390] device macsec0 entered promiscuous mode [ 73.252285][ T4388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.259410][ T311] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.266547][ T4388] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.283547][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.285055][ T19] tipc: Node number set to 2886997007 [ 73.293756][ T311] usb 4-1: Product: syz [ 73.302255][ T311] usb 4-1: Manufacturer: syz [ 73.308280][ T311] usb 4-1: SerialNumber: syz [ 73.311791][ T4388] EXT4-fs error (device loop1): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.1.1763: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 73.332961][ T4388] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #12: comm syz.1.1763: directory missing '.' [ 73.354863][ T289] EXT4-fs (loop1): unmounting filesystem. [ 73.411791][ T4406] syz.0.1771[4406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.411880][ T4406] syz.0.1771[4406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.441211][ T4406] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 73.463144][ T4406] FAT-fs (loop1): unable to read boot sector [ 73.491603][ T4420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1778'. [ 73.498793][ T4422] loop1: detected capacity change from 0 to 512 [ 73.507388][ T4422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.522173][ T4422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.531307][ T4422] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.543807][ T4422] EXT4-fs (loop1): shut down requested (1) [ 73.550010][ T4422] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 73.559378][ T4422] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 73.568361][ T4422] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 73.568712][ T311] usb 4-1: 0:2 : does not exist [ 73.577692][ T4422] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=14 [ 73.584582][ T311] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 73.599156][ T289] EXT4-fs (loop1): unmounting filesystem. [ 73.611632][ T311] usb 4-1: USB disconnect, device number 6 [ 73.754386][ T4460] loop4: detected capacity change from 0 to 16 [ 73.761195][ T4460] erofs: (device loop4): mounted with root inode @ nid 36. [ 73.768913][ T4460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 73.777889][ T4460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 73.786969][ T4460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 73.796015][ T4460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 73.805020][ T4460] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=86 [ 73.825177][ T4462] bridge0: port 2(bridge_slave_1) entered learning state [ 73.832923][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.853200][ T4464] loop4: detected capacity change from 0 to 128 [ 73.930225][ T797] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 74.025194][ T4473] loop5: detected capacity change from 0 to 256 [ 74.062129][ T1642] hid (null): global environment stack underflow [ 74.068638][ T1642] hid (null): report_id 0 is invalid [ 74.074577][ T1642] hid-generic FFFB:DEE9:10000.000A: global environment stack underflow [ 74.082772][ T1642] hid-generic FFFB:DEE9:10000.000A: item 0 0 1 11 parsing failed [ 74.090670][ T1642] hid-generic: probe of FFFB:DEE9:10000.000A failed with error -22 [ 74.100484][ T4480] input: syz0 as /devices/virtual/input/input9 [ 74.122744][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.133624][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.142682][ T4486] loop5: detected capacity change from 0 to 512 [ 74.143566][ T797] usb 2-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 74.150928][ T4486] EXT4-fs (loop5): Test dummy encryption mode enabled [ 74.158367][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.164964][ T4486] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 74.175172][ T797] usb 2-1: config 0 descriptor?? [ 74.193404][ T4486] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1817: bad orphan inode 131083 [ 74.203907][ T4486] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 74.224354][ T4490] loop3: detected capacity change from 0 to 512 [ 74.225120][ T4486] EXT4-fs error (device loop5): __ext4_new_inode:1075: comm syz.5.1817: reserved inode found cleared - inode=9 [ 74.234174][ T4490] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2759: inode #12: comm syz.3.1808: corrupted xattr block 142 [ 74.255208][ T1642] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 74.256115][ T4490] EXT4-fs (loop3): Remounting filesystem read-only [ 74.269174][ T4490] EXT4-fs (loop3): 1 truncate cleaned up [ 74.269860][ T1252] EXT4-fs (loop5): unmounting filesystem. [ 74.274824][ T4490] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.367052][ T2986] EXT4-fs (loop3): unmounting filesystem. [ 74.424021][ T4512] loop3: detected capacity change from 0 to 512 [ 74.430861][ T4512] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.437537][ T4512] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.449251][ T4512] EXT4-fs (loop3): 1 truncate cleaned up [ 74.454847][ T1642] usb 5-1: Using ep0 maxpacket: 16 [ 74.459977][ T4512] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.470512][ T1642] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.481617][ T1642] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.494377][ T1642] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 74.503350][ T1642] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.504188][ T2986] EXT4-fs (loop3): unmounting filesystem. [ 74.512285][ T1642] usb 5-1: config 0 descriptor?? [ 74.547256][ T4526] loop3: detected capacity change from 0 to 512 [ 74.555383][ T4526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.571137][ T4526] EXT4-fs warning (device loop3): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.592072][ T797] hid-generic 0003:05AC:4262.000B: unbalanced delimiter at end of report description [ 74.604738][ T797] hid-generic: probe of 0003:05AC:4262.000B failed with error -22 [ 74.612940][ T2986] EXT4-fs (loop3): unmounting filesystem. [ 74.654143][ T4533] tipc: Enabling of bearer rejected, media not registered [ 74.793722][ T797] usb 2-1: USB disconnect, device number 9 [ 75.249950][ T4557] loop0: detected capacity change from 0 to 40427 [ 75.257508][ T4557] F2FS-fs (loop0): invalid crc value [ 75.267465][ T4557] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.316746][ T4557] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 75.448235][ T4575] netlink: 'syz.0.1843': attribute type 1 has an invalid length. [ 75.456027][ T4575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1843'. [ 75.476062][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 75.476080][ T28] audit: type=1400 audit(1743710488.713:724): avc: denied { create } for pid=4576 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.505859][ T28] audit: type=1400 audit(1743710488.713:725): avc: denied { write } for pid=4576 comm="syz.3.1844" path="socket:[35440]" dev="sockfs" ino=35440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.532421][ T28] audit: type=1400 audit(1743710488.713:726): avc: denied { nlmsg_read } for pid=4576 comm="syz.3.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 75.535232][ T4581] loop3: detected capacity change from 0 to 512 [ 75.571186][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.586671][ T28] audit: type=1400 audit(1743710488.823:727): avc: denied { execute } for pid=4580 comm="syz.3.1846" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.591044][ T4584] loop0: detected capacity change from 0 to 512 [ 75.614871][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 75.631552][ T4584] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.639647][ T4584] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 75.640150][ T4581] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 75.647682][ T4584] System zones: [ 75.657685][ T4581] EXT4-fs warning (device loop3): ext4_enable_quotas:7017: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.657747][ T4584] 0-2, 18-18, 34-35 [ 75.686567][ T4584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.698143][ T2986] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /106/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 75.719566][ T291] EXT4-fs (loop0): unmounting filesystem. [ 75.810086][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 75.816058][ T19] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 75.830059][ T19] usb 2-1: config 179 has no interface number 0 [ 75.836646][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 75.854301][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 75.880062][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.899966][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 75.900179][ T311] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 75.940079][ T19] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 75.962914][ T19] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 75.980087][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.001303][ T4567] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.025345][ T28] audit: type=1400 audit(1743710489.263:728): avc: denied { mounton } for pid=4595 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 76.027468][ T4593] loop0: detected capacity change from 0 to 40427 [ 76.053876][ T4593] F2FS-fs (loop0): fault_injection options not supported [ 76.060878][ T4593] F2FS-fs (loop0): Image doesn't support compression [ 76.067383][ T4593] F2FS-fs (loop0): Image doesn't support compression [ 76.073900][ T4593] F2FS-fs (loop0): fault_type options not supported [ 76.082930][ T4593] F2FS-fs (loop0): invalid crc value [ 76.091432][ T4593] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.120213][ T311] usb 6-1: Using ep0 maxpacket: 32 [ 76.126657][ T311] usb 6-1: unable to get BOS descriptor or descriptor too short [ 76.139227][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.146592][ T4595] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.153700][ T311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.159142][ T4593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.164500][ T4595] device bridge_slave_0 entered promiscuous mode [ 76.177565][ T311] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 76.188542][ T311] usb 6-1: string descriptor 0 read error: -22 [ 76.194667][ T311] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.204511][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.214671][ T311] usb 6-1: cannot find UAC_HEADER [ 76.219617][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.221673][ T311] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 76.228288][ T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 76.245051][ T4595] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.252725][ T4595] device bridge_slave_1 entered promiscuous mode [ 76.350455][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.357380][ T4595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.364522][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.371403][ T4595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.381694][ T313] device bridge_slave_1 left promiscuous mode [ 76.387871][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.410733][ T313] device bridge_slave_0 left promiscuous mode [ 76.416762][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.428570][ T4567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.429042][ T311] usb 6-1: USB disconnect, device number 6 [ 76.442695][ T4567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.451748][ T313] device veth1_macvtap left promiscuous mode [ 76.457651][ T313] device veth0_vlan left promiscuous mode [ 76.606396][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.618527][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.626215][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.640504][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.648794][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.652942][ T24] usb 2-1: USB disconnect, device number 10 [ 76.655805][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.669024][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 76.677447][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 76.701105][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.709326][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.716221][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.725824][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.737269][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.745600][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.766058][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.774627][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.788841][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.797386][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.806415][ T4595] device veth0_vlan entered promiscuous mode [ 76.812709][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.820530][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.837005][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.845844][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.857201][ T4595] device veth1_macvtap entered promiscuous mode [ 76.868241][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.876581][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.884839][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.905158][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.913664][ T28] audit: type=1400 audit(1743710490.153:729): avc: denied { mounton } for pid=4595 comm="syz-executor" path="/root/syzkaller.nQ97BT/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.916925][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.982109][ T28] audit: type=1400 audit(1743710490.153:730): avc: denied { mounton } for pid=4595 comm="syz-executor" path="/root/syzkaller.nQ97BT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.009333][ T1642] usbhid 5-1:0.0: can't add hid device: -71 [ 77.015146][ T1642] usbhid: probe of 5-1:0.0 failed with error -71 [ 77.022290][ T1642] usb 5-1: USB disconnect, device number 8 [ 77.029679][ T4615] loop6: detected capacity change from 0 to 1024 [ 77.033332][ T28] audit: type=1400 audit(1743710490.153:731): avc: denied { mounton } for pid=4595 comm="syz-executor" path="/root/syzkaller.nQ97BT/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.075509][ T28] audit: type=1400 audit(1743710490.183:732): avc: denied { mounton } for pid=4595 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.079229][ T4615] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 77.116561][ T4624] loop5: detected capacity change from 0 to 2048 [ 77.143855][ T4629] loop4: detected capacity change from 0 to 512 [ 77.147648][ T4624] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 77.150737][ T4629] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.170905][ T4629] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.177661][ T4629] EXT4-fs (loop4): Test dummy encryption mode enabled [ 77.180886][ T4624] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.187143][ T4629] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.211811][ T4629] EXT4-fs (loop4): 1 truncate cleaned up [ 77.217310][ T4629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 77.220207][ T4624] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 77.245915][ T4624] EXT4-fs (loop5): This should not happen!! Data will be lost [ 77.245915][ T4624] [ 77.269601][ T4624] EXT4-fs (loop5): Total free blocks count 0 [ 77.288990][ T4624] EXT4-fs (loop5): Free/Dirty block details [ 77.306375][ T4595] EXT4-fs (loop6): unmounting filesystem. [ 77.306997][ T4624] EXT4-fs (loop5): free_blocks=2415919104 [ 77.327616][ T4624] EXT4-fs (loop5): dirty_blocks=16 [ 77.332971][ T4624] EXT4-fs (loop5): Block reservation details [ 77.355531][ T4624] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 77.365606][ T293] EXT4-fs (loop4): unmounting filesystem. [ 77.382056][ T324] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 77.397330][ T4642] IPv6: sit1: Disabled Multicast RS [ 77.603849][ T4667] device pim6reg1 entered promiscuous mode [ 77.729703][ T4686] device veth0 entered promiscuous mode [ 77.745644][ T4690] xt_hashlimit: size too large, truncated to 1048576 [ 77.751283][ T4686] device macsec2 entered promiscuous mode [ 77.761249][ T4686] device veth0 left promiscuous mode [ 77.948207][ T4701] loop0: detected capacity change from 0 to 2048 [ 78.079942][ T4701] loop0: unable to read partition table [ 78.085772][ T293] ------------[ cut here ]------------ [ 78.091307][ T293] WARNING: CPU: 1 PID: 293 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 78.099160][ T293] Modules linked in: [ 78.103337][ T293] CPU: 1 PID: 293 Comm: syz-executor Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 78.113034][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.122992][ T293] RIP: 0010:drop_nlink+0xc1/0x110 [ 78.127867][ T293] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 78.142576][ T4709] SELinux: failed to load policy [ 78.148074][ T293] RSP: 0018:ffffc9000dadfbf0 EFLAGS: 00010293 [ 78.158369][ T293] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff88810e41a880 [ 78.166235][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.170188][ T4701] loop0: partition table beyond EOD, [ 78.174099][ T293] RBP: ffffc9000dadfc18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 78.174120][ T293] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 78.179351][ T4701] truncated [ 78.187139][ T293] R13: 1ffff1102652bdc5 R14: ffff88813295ede0 R15: ffff88813295ee28 [ 78.205912][ T293] FS: 0000555594031500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 78.214773][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.221194][ T293] CR2: 00005555940544e8 CR3: 000000012fc89000 CR4: 00000000003506a0 [ 78.225222][ T4701] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 78.228959][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.228977][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.228992][ T293] Call Trace: [ 78.255627][ T293] [ 78.258419][ T293] ? show_regs+0x58/0x60 [ 78.262635][ T293] ? __warn+0x160/0x3d0 [ 78.266595][ T293] ? drop_nlink+0xc1/0x110 [ 78.270899][ T293] ? report_bug+0x4d5/0x7d0 [ 78.275201][ T293] ? drop_nlink+0xc1/0x110 [ 78.279443][ T293] ? handle_bug+0x41/0x70 [ 78.283653][ T293] ? exc_invalid_op+0x1b/0x50 [ 78.288125][ T293] ? asm_exc_invalid_op+0x1b/0x20 [ 78.293009][ T293] ? drop_nlink+0x44/0x110 [ 78.297232][ T293] ? drop_nlink+0xc1/0x110 [ 78.301532][ T293] ? drop_nlink+0xc1/0x110 [ 78.306396][ T293] shmem_rmdir+0x59/0x90 [ 78.310708][ T293] vfs_rmdir+0x398/0x500 [ 78.314780][ T293] incfs_kill_sb+0x113/0x230 [ 78.319192][ T293] deactivate_locked_super+0xad/0x110 [ 78.324425][ T293] deactivate_super+0xbe/0xf0 [ 78.328927][ T293] cleanup_mnt+0x485/0x510 [ 78.332351][ T4716] loop6: detected capacity change from 0 to 128 [ 78.333190][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 78.344298][ T293] __cleanup_mnt+0x19/0x20 [ 78.348528][ T293] task_work_run+0x24d/0x2e0 [ 78.349892][ T4716] EXT4-fs (loop6): Test dummy encryption mode enabled [ 78.352972][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 78.352996][ T293] ? __x64_sys_umount+0x122/0x170 [ 78.353018][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 78.374425][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 78.379687][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 78.385120][ T293] do_syscall_64+0x47/0xb0 [ 78.389321][ T293] ? clear_bhb_loop+0x55/0xb0 [ 78.393869][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.399560][ T293] RIP: 0033:0x7f2808d8e497 [ 78.403837][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 78.423286][ T293] RSP: 002b:00007ffcce3ef8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.431531][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2808d8e497 [ 78.439315][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcce3ef9a0 [ 78.447156][ T293] RBP: 00007ffcce3ef9a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.454975][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcce3f0a30 [ 78.462795][ T293] R13: 00007f2808e0e08c R14: 00000000000130e2 R15: 00007ffcce3f0a70 [ 78.470585][ T293] [ 78.473424][ T293] ---[ end trace 0000000000000000 ]--- [ 78.481168][ T293] ================================================================== [ 78.482306][ T4716] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 78.489060][ T293] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 78.489094][ T293] Write of size 4 at addr 0000000000000170 by task syz-executor/293 [ 78.489113][ T293] [ 78.513362][ T293] CPU: 1 PID: 293 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 78.524559][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.534463][ T293] Call Trace: [ 78.537575][ T293] [ 78.540354][ T293] dump_stack_lvl+0x151/0x1b7 [ 78.544868][ T293] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 78.550161][ T293] ? _printk+0xd1/0x111 [ 78.554154][ T293] print_report+0xe1/0x4e0 [ 78.558406][ T293] ? __virt_addr_valid+0x59/0x2f0 [ 78.563270][ T293] ? kasan_addr_to_slab+0xd/0x80 [ 78.568647][ T293] ? ihold+0x20/0x60 [ 78.572399][ T293] kasan_report+0x13c/0x170 [ 78.576732][ T293] ? ihold+0x20/0x60 [ 78.580457][ T293] kasan_check_range+0x294/0x2a0 [ 78.585232][ T293] __kasan_check_write+0x14/0x20 [ 78.590000][ T293] ihold+0x20/0x60 [ 78.593561][ T293] vfs_rmdir+0x268/0x500 [ 78.597641][ T293] incfs_kill_sb+0x113/0x230 [ 78.602069][ T293] deactivate_locked_super+0xad/0x110 [ 78.607274][ T293] deactivate_super+0xbe/0xf0 [ 78.611786][ T293] cleanup_mnt+0x485/0x510 [ 78.616036][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 78.621080][ T293] __cleanup_mnt+0x19/0x20 [ 78.625327][ T293] task_work_run+0x24d/0x2e0 [ 78.629757][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 78.634611][ T293] ? __x64_sys_umount+0x122/0x170 [ 78.639474][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 78.644506][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 78.649800][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 78.655183][ T293] do_syscall_64+0x47/0xb0 [ 78.659438][ T293] ? clear_bhb_loop+0x55/0xb0 [ 78.663947][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.669685][ T293] RIP: 0033:0x7f2808d8e497 [ 78.673931][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 78.693375][ T293] RSP: 002b:00007ffcce3ef8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 78.701618][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2808d8e497 [ 78.709441][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcce3ef9a0 [ 78.717236][ T293] RBP: 00007ffcce3ef9a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.725051][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcce3f0a30 [ 78.732970][ T293] R13: 00007f2808e0e08c R14: 00000000000130e2 R15: 00007ffcce3f0a70 [ 78.740867][ T293] [ 78.743725][ T293] ================================================================== [ 78.764205][ T293] Disabling lock debugging due to kernel taint [ 78.770189][ T4716] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.781106][ T293] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 78.789003][ T293] #PF: supervisor write access in kernel mode [ 78.794903][ T293] #PF: error_code(0x0002) - not-present page [ 78.800722][ T293] PGD 131f84067 P4D 131f84067 PUD 0 [ 78.805841][ T293] Oops: 0002 [#1] PREEMPT SMP KASAN [ 78.810879][ T293] CPU: 1 PID: 293 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 78.822074][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.831967][ T293] RIP: 0010:ihold+0x25/0x60 [ 78.836300][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 78.855743][ T293] RSP: 0018:ffffc9000dadfc30 EFLAGS: 00010246 [ 78.861641][ T293] RAX: ffff88810e41a800 RBX: 0000000000000001 RCX: ffff88810e41a880 [ 78.869801][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.877610][ T293] RBP: ffffc9000dadfc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 78.885426][ T293] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022fb9906 [ 78.893235][ T293] R13: ffff8881326f7bb0 R14: 0000000000000000 R15: 1ffff110264def7c [ 78.901050][ T293] FS: 0000555594031500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 78.909812][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.916235][ T293] CR2: 0000000000000170 CR3: 000000012fc89000 CR4: 00000000003506a0 [ 78.924059][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.932258][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.940253][ T293] Call Trace: [ 78.943372][ T293] [ 78.946147][ T293] ? __die_body+0x62/0xb0 [ 78.950333][ T293] ? __die+0x7e/0x90 [ 78.954158][ T293] ? page_fault_oops+0x7f9/0xa90 [ 78.958935][ T293] ? vprintk_default+0x26/0x30 [ 78.963803][ T293] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 78.969752][ T293] ? add_taint+0x44/0xe0 [ 78.973863][ T293] ? panic+0x667/0x667 [ 78.977707][ T293] ? preempt_schedule_thunk+0x16/0x18 [ 78.982924][ T293] ? exc_page_fault+0x529/0x6d0 [ 78.987617][ T293] ? asm_exc_page_fault+0x27/0x30 [ 78.992463][ T293] ? add_taint+0x93/0xe0 [ 78.996539][ T293] ? ihold+0x25/0x60 [ 79.000276][ T293] vfs_rmdir+0x268/0x500 [ 79.004353][ T293] incfs_kill_sb+0x113/0x230 [ 79.008789][ T293] deactivate_locked_super+0xad/0x110 [ 79.013988][ T293] deactivate_super+0xbe/0xf0 [ 79.018500][ T293] cleanup_mnt+0x485/0x510 [ 79.022757][ T293] ? user_path_at_empty+0x14e/0x1a0 [ 79.027786][ T293] __cleanup_mnt+0x19/0x20 [ 79.032040][ T293] task_work_run+0x24d/0x2e0 [ 79.036464][ T293] ? task_work_cancel+0x2e0/0x2e0 [ 79.041326][ T293] ? __x64_sys_umount+0x122/0x170 [ 79.046185][ T293] exit_to_user_mode_loop+0x94/0xa0 [ 79.051219][ T293] exit_to_user_mode_prepare+0x5a/0xa0 [ 79.056521][ T293] syscall_exit_to_user_mode+0x26/0x130 [ 79.061894][ T293] do_syscall_64+0x47/0xb0 [ 79.066148][ T293] ? clear_bhb_loop+0x55/0xb0 [ 79.070660][ T293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.076387][ T293] RIP: 0033:0x7f2808d8e497 [ 79.080644][ T293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 79.100084][ T293] RSP: 002b:00007ffcce3ef8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 79.108331][ T293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2808d8e497 [ 79.116142][ T293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcce3ef9a0 [ 79.123965][ T293] RBP: 00007ffcce3ef9a0 R08: 0000000000000000 R09: 0000000000000000 [ 79.131762][ T293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcce3f0a30 [ 79.139575][ T293] R13: 00007f2808e0e08c R14: 00000000000130e2 R15: 00007ffcce3f0a70 [ 79.147393][ T293] [ 79.150250][ T293] Modules linked in: [ 79.154000][ T293] CR2: 0000000000000170 [ 79.158041][ T293] ---[ end trace 0000000000000000 ]--- [ 79.163704][ T293] RIP: 0010:ihold+0x25/0x60 [ 79.168043][ T293] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 79.187573][ T293] RSP: 0018:ffffc9000dadfc30 EFLAGS: 00010246 [ 79.193473][ T293] RAX: ffff88810e41a800 RBX: 0000000000000001 RCX: ffff88810e41a880 [ 79.201286][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 79.209095][ T293] RBP: ffffc9000dadfc40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 79.216908][ T293] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022fb9906 [ 79.224722][ T293] R13: ffff8881326f7bb0 R14: 0000000000000000 R15: 1ffff110264def7c [ 79.232684][ T293] FS: 0000555594031500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 79.241447][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.247866][ T293] CR2: 0000000000000170 CR3: 000000012fc89000 CR4: 00000000003506a0 [ 79.255685][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.263490][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.271305][ T293] Kernel panic - not syncing: Fatal exception [ 79.277325][ T293] Kernel Offset: disabled [ 79.281381][ T293] Rebooting in 86400 seconds..