last executing test programs: 11.528434528s ago: executing program 0 (id=58): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000"], 0x40}, 0x0) 11.34857055s ago: executing program 0 (id=61): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x50, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4e, 0xf7, 0x2}}}}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "31eb1215"}]}}, 0x0}, 0x0) 9.273337777s ago: executing program 0 (id=102): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x55a, &(0x7f0000000b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 9.051512431s ago: executing program 0 (id=110): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$eJzs3dFrJHcdAPDvTLLX5C41qfqgBWuxlUvV2ySN1wYfqoLoU0Gt+HrGZBNCNtkj2bSXUGyKf4AgogVf9MkXwT9AkL74LkJB30VFkXrVB4X2RmZ29u6y2U1yuJuB5POBX3Z+M7Pz/f427G9/v51hJ4BL6+mImI2IsYh4LiKmy/VpWeKwU/L93rv7+kpeksiyV95NIinXdY/1WPl4rXzaRER882sR302Ox93dP9hcbjYbO2V9rr2VvJ9lBzc2tpbXG+uN7cXFhReWXly6uTQ/lHbORMRLX/nrj3/wi6++9JvPvfanW3+f/V6e1n+z7I3oaccwdZpeK16LrvGI2BlFsIqMFy3suFlxLgAAnCwf7384Ij5VjP+nY6wYzQEAAAAXSfbFqXg/icgAAACACyuNiKlI0np5ve9UpGm93rmG96NxNW22dtufXWvtba/m2yJmopaubTQb8+W1AzNRS/L6QnmNbbf+fE99MSKeiIgfTU8W9fpKq7la9ZcfAAAAcElc65n//3u6M/8vHFacHAAAADA8M1UnAAAAAIyc+T8AAABcfOb/AAAAcKF9/eWX85J173+9+ur+3mbr1Rurjd3N+tbeSn2ltXO7vt5qrRe/2bd12vGardbtz8f23p25dmO3Pbe7f3Brq7W33b61ceQW2AAAAMA5euKTb/8xiYjDL0wWJXel3FaLyMYe3nm8igyBUUkfZee/jC4P4Pw9/Pk+WWEewPkzpIfLq1Z1AkDlklO2D7x453fDzwUAABiN6x8ffP7/3bVKUwNGrDz/n5w2/wcunrGqEwAq0zn/dy/rqDob4DzVThoBmBTAhZcO5/z/KZcSJjoUAACo2FRRkrRezgOmIk3r9YjHi9sC1JK1jWZjPiI+FBF/mK49ltcXimcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcEZZlkQGAAAAXGgR6d+6d+a6Pv3sVO/3A1eS/0wXjxHx2k9f+cmd5XZ7ZyFf/8/769tvleufr+IbDAAAAKBXd57enccDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDC9d/f1lW45z7j/+HJEzPSLPx4TxeNE1CLi6r+SGH/oeUlEjA0h/uGbEfGxfvGTPK2YKbM4Ev9KRBoRk8OK3/f1PyF+dOJfG0J8uMzezvufL/V7/6XxdPHY//03Xpb/1+D+L73f/40N6P8eH3TQ2tHqk+/8am5g/Dcjnhzv3/904yf58frEf+aMbfzOtw4OBm3Lfh5xvV//lxyNNdfeuj23u39wY2Nreb2x3theXFx4YenFpZtL83NrG81G+bdvjB9+4tf3HtQ+ONb+qyf0v0X7B7z+z56x/R+8c+fuRzqLPf+ZqMXPsmz2mf7//8JnjsfvfvZ9utwrr+evYfrWt/vGf+qXv39qUG55+1cHtH/ilPbPnrH9z33j+38+464AwDnY3T/YXG42GzsWLDzCQj7urDyNJJI4vmm5+sQ6C2+U77HlZvfdNqQj/7acHI0y+Yr6IwAAYHQeDPp7tyTVJAQAAAAAAAAAAAAAAAAAAACX0Kk/AzZoUxoRZ/w5sd6Yh9U0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRP8LAAD//0mN1e4=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x265, 0x2) 8.651494206s ago: executing program 0 (id=117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000020000040"]) 8.497498808s ago: executing program 0 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x40, 0xf, 0x7, {0x7, 0x0, "6828c27fce"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.497386938s ago: executing program 32 (id=120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x40, 0xf, 0x7, {0x7, 0x0, "6828c27fce"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.59476849s ago: executing program 5 (id=134): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1f1, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0xe10000, 0x1000000000084003, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) 3.634306962s ago: executing program 2 (id=149): setresgid(0xee00, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) lchown(&(0x7f0000000300)='./file0\x00', 0xee01, 0x0) 3.563122713s ago: executing program 2 (id=150): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@filename='./file0\x00', 0x0, 0x0) 3.475883804s ago: executing program 2 (id=152): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab787c179fd1f8a0e91ddaaca7bd6447a4b4e00d9683f6a1af1ea09de2b7fb0a01000000000b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c9b40f45f819e01177d3d458dd4992861ac000000000000000000000000000000002b16", "90be8b1c5512406c7f00", [0x0, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x10001, 0x0, 0x0, 0x0, 0x18, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff000000000000000000000000f0ff000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c85cc6400", [0x800, 0xffffc]}}) 3.284232427s ago: executing program 4 (id=153): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000100)={0x20, 0xf, 0x4, "7c103142"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x20, 0x9, 0x4, "67c8a427"}, 0x0, 0x0}) 3.205453768s ago: executing program 2 (id=154): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0806032465580600000401"], 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.987374981s ago: executing program 5 (id=156): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4f7, &(0x7f0000002a80)="$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") unshare(0x20000400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e4a0800000000030800000000000000040000000000000002ffffec"]) 2.794311153s ago: executing program 5 (id=158): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x41, 0x3, 0x3c8, 0x258, 0x19, 0x0, 0x0, 0x0, 0x330, 0x1f0, 0x1f0, 0x330, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) 2.762371444s ago: executing program 5 (id=159): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 2.702986184s ago: executing program 5 (id=160): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001400)={0x44, &(0x7f0000001180)={0x20, 0x15, 0x4, "3fcb3f27"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.387161468s ago: executing program 1 (id=163): io_setup(0x7, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)="01", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x1, r1, 0x0, 0x0, 0x7}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.344371039s ago: executing program 3 (id=164): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) 2.219746101s ago: executing program 1 (id=165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001900010025bd7000000000000a003f00", @ANYRES32=0x0, @ANYBLOB="000000000800020002000000140001"], 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0xb4}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.167263251s ago: executing program 1 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, "01"}, @main=@item_4={0x3, 0x0, 0x8, "5247d80d"}]}}, 0x0}, 0x0) 1.720737467s ago: executing program 2 (id=167): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1}], 0x1) 1.709458758s ago: executing program 2 (id=168): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404355810700000000000109022400010000000009040600010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x7, {0x7, 0x0, "6469804600"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.49506564s ago: executing program 3 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000900000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @dev}}}}}}, 0x0) 1.454584051s ago: executing program 3 (id=170): r0 = inotify_init() munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 1.454438561s ago: executing program 3 (id=171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x8, 0x8d3a) 1.453924121s ago: executing program 3 (id=172): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x1, 0x5549, &(0x7f0000003d80)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) pwrite64(r0, &(0x7f0000000940)='2', 0x1, 0x8000c61) fallocate(r0, 0x8, 0x0, 0x10000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1.141541445s ago: executing program 3 (id=173): syz_pidfd_open(0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xfc, 0xeb, 0xe4, 0x40, 0x547, 0x6801, 0x436f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x44, 0x13}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 481.795314ms ago: executing program 4 (id=174): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x60b, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 481.261034ms ago: executing program 4 (id=175): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 442.912814ms ago: executing program 5 (id=176): io_setup(0x7, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000140)="01", 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x8, 0x1, r1, 0x0, 0x0, 0x7}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 386.651235ms ago: executing program 4 (id=177): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, &(0x7f0000ffcffc)) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 365.388635ms ago: executing program 4 (id=178): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000cf4000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00007b4000/0x1000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 286.930516ms ago: executing program 1 (id=179): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) dup3(r0, r1, 0x80000) 278.341207ms ago: executing program 1 (id=180): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 212.520617ms ago: executing program 1 (id=181): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x1, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) 0s ago: executing program 4 (id=182): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x8801, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts. [ 22.087177][ T23] audit: type=1400 audit(1743660011.880:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.088735][ T342] cgroup1: Unknown subsys name 'net' [ 22.109676][ T23] audit: type=1400 audit(1743660011.880:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.115385][ T342] cgroup1: Unknown subsys name 'net_prio' [ 22.142429][ T342] cgroup1: Unknown subsys name 'devices' [ 22.148693][ T23] audit: type=1400 audit(1743660011.940:68): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.287472][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 22.293166][ T342] cgroup1: Unknown subsys name 'rlimit' [ 22.299180][ T23] audit: type=1400 audit(1743660012.090:69): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 22.484295][ T23] audit: type=1400 audit(1743660012.270:70): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.507667][ T23] audit: type=1400 audit(1743660012.280:71): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.510208][ T346] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.532405][ T23] audit: type=1400 audit(1743660012.280:72): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.563624][ T23] audit: type=1400 audit(1743660012.340:73): avc: denied { relabelto } for pid=346 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.588885][ T23] audit: type=1400 audit(1743660012.340:74): avc: denied { write } for pid=346 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.614356][ T23] audit: type=1400 audit(1743660012.360:75): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.614427][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.133280][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.140216][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.147671][ T354] device bridge_slave_0 entered promiscuous mode [ 23.167788][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.174803][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.182164][ T354] device bridge_slave_1 entered promiscuous mode [ 23.218339][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.225213][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.232399][ T357] device bridge_slave_0 entered promiscuous mode [ 23.254356][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.261301][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.268649][ T352] device bridge_slave_0 entered promiscuous mode [ 23.275241][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.282071][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.289618][ T357] device bridge_slave_1 entered promiscuous mode [ 23.316320][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.323160][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.330530][ T352] device bridge_slave_1 entered promiscuous mode [ 23.430017][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.437158][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.444821][ T355] device bridge_slave_0 entered promiscuous mode [ 23.460828][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.467696][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.475082][ T356] device bridge_slave_0 entered promiscuous mode [ 23.481748][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.488813][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.496304][ T355] device bridge_slave_1 entered promiscuous mode [ 23.509616][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.516474][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.523905][ T356] device bridge_slave_1 entered promiscuous mode [ 23.652435][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.659297][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.666539][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.673359][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.690386][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.697239][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.704354][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.711142][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.729149][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.736003][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.743187][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.749981][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.759488][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.766350][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.773434][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.780238][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.851478][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.858803][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.865928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.873202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.880607][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.887646][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.895670][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.902666][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.910353][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.917417][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.927300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.934780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.960378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.968135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.976198][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.983021][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.991107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.999237][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.006076][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.013221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.021370][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.028210][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.035593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.043584][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.050434][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.072175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.080318][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.087166][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.095547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.103516][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.110374][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.117704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.125632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.133580][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.140426][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.147581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.177224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.185396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.193353][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.200229][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.208338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.216307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.224126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.236528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.244673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.268512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.276482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.283719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.291998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.301228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.309419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.317452][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.324271][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.345154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.352748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.360766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.368650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.377195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.386560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.394285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.414475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.422707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.431373][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.438231][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.451217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.459389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.474843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.483232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.491613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.500250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.508435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.516221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.528902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.536983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.545071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.552864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.579100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.587068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.595814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.603879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.612191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.620896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.629220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.637652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.650596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.658740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.686200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.693989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.702075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.710172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.718343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.726586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.734969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.742939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.753525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.761693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.780280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.788783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.817359][ T352] request_module fs-gadgetfs succeeded, but still no fs? [ 24.826038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.834068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.850441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.870149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.884587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.930538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.970188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.985882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.999792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.002487][ T396] [ 25.008492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.020678][ T396] ********************************************************** [ 25.040002][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.043318][ T396] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 25.050381][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.056371][ T396] ** ** [ 25.071834][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.075971][ T396] ** trace_printk() being used. Allocating extra memory. ** [ 25.082002][ T103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.087228][ T396] ** ** [ 25.102152][ T396] ** This means that this is a DEBUG kernel and it is ** [ 25.109563][ T396] ** unsafe for production use. ** [ 25.118695][ T396] ** ** [ 25.130955][ T396] ** If you see this message and you are not debugging ** [ 25.140025][ T396] ** the kernel, report this immediately to your vendor! ** [ 25.149938][ T396] ** ** [ 25.159114][ T396] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 25.167039][ T399] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 25.194790][ T399] ext4 filesystem being mounted at /4/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 25.198338][ T396] ********************************************************** [ 25.215312][ T415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.272623][ T399] fs-verity: sha512 using implementation "sha512-generic" [ 25.297063][ T417] syz.1.15 (417) used greatest stack depth: 19480 bytes left [ 25.583052][ T429] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 26.003116][ T399] fs-verity (loop0, inode 13): Error -4 building Merkle tree [ 26.165567][ T355] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 26.173197][ T355] FAT-fs (loop1): Filesystem has been set read-only [ 26.189778][ T447] process 'syz.2.25' launched './file0' with NULL argv: empty string added [ 26.353034][ T504] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 26.434455][ T345] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.775020][ T506] ====================================================== [ 26.775020][ T506] WARNING: the mand mount option is being deprecated and [ 26.775020][ T506] will be removed in v5.15! [ 26.775020][ T506] ====================================================== [ 26.801472][ T345] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.804003][ T512] cgroup: syz.0.53 (512) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 26.812435][ T345] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 26.831572][ T512] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 26.838878][ T345] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 26.863700][ T506] F2FS-fs (loop1): invalid crc value [ 26.981641][ T506] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 27.034539][ T345] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.046736][ T345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.063645][ T345] usb 5-1: Product: syz [ 27.071280][ T345] usb 5-1: Manufacturer: syz [ 27.080348][ T345] usb 5-1: SerialNumber: syz [ 27.293804][ T540] netlink: 'syz.2.63': attribute type 13 has an invalid length. [ 27.305175][ T23] kauditd_printk_skb: 91 callbacks suppressed [ 27.305184][ T23] audit: type=1400 audit(1743660017.100:167): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=10883 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.348599][ T23] audit: type=1400 audit(1743660017.100:168): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10883 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.380866][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 27.380901][ T23] audit: type=1400 audit(1743660017.100:169): avc: denied { getattr } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10883 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.394820][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 27.444438][ T376] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.447579][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 27.451914][ T74] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.466904][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 27.467292][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 27.485026][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 27.493512][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 27.502121][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 27.527022][ T23] audit: type=1400 audit(1743660017.320:170): avc: denied { mount } for pid=543 comm="syz.1.59" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 27.569971][ T23] audit: type=1400 audit(1743660017.360:171): avc: denied { relabelfrom } for pid=545 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 27.589561][ T23] audit: type=1400 audit(1743660017.360:172): avc: denied { relabelto } for pid=545 comm="syz.1.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 27.724521][ T376] usb 4-1: Using ep0 maxpacket: 16 [ 27.754499][ T74] usb 1-1: Using ep0 maxpacket: 16 [ 27.765658][ T23] audit: type=1400 audit(1743660017.560:173): avc: denied { read } for pid=564 comm="syz.1.73" name="ppp" dev="devtmpfs" ino=9493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.788507][ T23] audit: type=1400 audit(1743660017.560:174): avc: denied { open } for pid=564 comm="syz.1.73" path="/dev/ppp" dev="devtmpfs" ino=9493 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.811487][ T23] audit: type=1400 audit(1743660017.570:175): avc: denied { ioctl } for pid=564 comm="syz.1.73" path="/dev/ppp" dev="devtmpfs" ino=9493 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 27.864816][ T376] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.875617][ T376] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.887221][ T376] usb 4-1: config 0 interface 0 has no altsetting 0 [ 27.894268][ T376] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 27.903668][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.914286][ T376] usb 4-1: config 0 descriptor?? [ 27.919441][ T74] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 27.921889][ T23] audit: type=1400 audit(1743660017.710:176): avc: denied { shutdown } for pid=571 comm="syz.1.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.931136][ T74] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 27.959387][ T74] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.969527][ T74] usb 1-1: config 0 descriptor?? [ 28.117639][ T577] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 28.125361][ T577] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.138999][ T577] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.176972][ T577] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 28.183852][ T577] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 28.224514][ T345] cdc_ncm 5-1:1.0: bind() failure [ 28.254794][ T345] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 28.274559][ T345] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 28.283358][ T345] usb 5-1: USB disconnect, device number 2 [ 28.405703][ T376] apple 0003:05AC:0247.0001: unexpected long global item [ 28.412930][ T376] apple 0003:05AC:0247.0001: parse failed [ 28.419099][ T376] apple: probe of 0003:05AC:0247.0001 failed with error -22 [ 28.464696][ T74] samsung 0003:0419:0600.0002: hidraw0: USB HID v0.04 Device [HID 0419:0600] on usb-dummy_hcd.0-1/input0 [ 28.523077][ T589] xt_hashlimit: size too large, truncated to 1048576 [ 28.611880][ T345] usb 4-1: USB disconnect, device number 2 [ 28.627274][ T587] EXT4-fs (loop1): Test dummy encryption mode enabled [ 28.639726][ T587] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 28.652162][ T587] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 28.663424][ T587] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 28.706834][ T401] usb 1-1: USB disconnect, device number 2 [ 28.870021][ T612] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 28.886160][ T612] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 29.027421][ T618] EXT4-fs (loop2): Ignoring removed orlov option [ 29.048758][ T618] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000010,orlov,noload,,errors=continue [ 29.103331][ T356] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 29.192834][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 29.206886][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 29.304439][ T74] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.344116][ T650] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.399563][ T650] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:2998: comm syz.0.102: Allocating blocks 497-513 which overlap fs metadata [ 29.420775][ T650] EXT4-fs (loop0): pa ffff8881e9ed7c78: logic 256, phys. 385, len 8 [ 29.428706][ T650] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:3895: group 0, free 0, pa_free 1 [ 29.615835][ T668] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 29.636076][ T676] input: syz0 as /devices/virtual/input/input4 [ 29.647681][ T668] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 29.658917][ T668] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 29.667093][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.679416][ T668] System zones: 0-1, 15-15, 18-18, 34-34 [ 29.683027][ T74] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 29.686492][ T668] EXT4-fs (loop0): orphan cleanup on readonly fs [ 29.695340][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.702264][ T668] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 29.710177][ T74] usb 2-1: config 0 descriptor?? [ 29.744486][ T668] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 29.752534][ T668] EXT4-fs error (device loop0): ext4_orphan_get:1262: comm syz.0.110: bad orphan inode 16 [ 29.764304][ T668] ext4_test_bit(bit=15, block=18) = 1 [ 29.770446][ T668] is_bad_inode(inode)=0 [ 29.775832][ T668] NEXT_ORPHAN(inode)=0 [ 29.779755][ T668] max_ino=32 [ 29.782795][ T668] i_nlink=2 [ 29.785033][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 29.786292][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000007,,errors=continue [ 29.850541][ T352] EXT4-fs error (device loop0): ext4_ext_check_inode:543: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 29.868729][ T352] EXT4-fs error (device loop0): ext4_ext_check_inode:543: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 29.956337][ T352] syz-executor (352) used greatest stack depth: 18744 bytes left [ 29.975631][ T687] tipc: Failed to remove local publication {66,0,2}/46436149 [ 30.064215][ T690] FAT-fs (loop3): Directory bread(block 64) failed [ 30.074240][ T690] FAT-fs (loop3): Directory bread(block 65) failed [ 30.074475][ T74] usbhid 2-1:0.0: can't add hid device: -71 [ 30.080679][ T690] FAT-fs (loop3): Directory bread(block 66) failed [ 30.092678][ T690] FAT-fs (loop3): Directory bread(block 67) failed [ 30.105293][ T401] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.106123][ T74] usbhid: probe of 2-1:0.0 failed with error -71 [ 30.113617][ T690] FAT-fs (loop3): Directory bread(block 68) failed [ 30.125534][ T690] FAT-fs (loop3): Directory bread(block 69) failed [ 30.131921][ T690] FAT-fs (loop3): Directory bread(block 70) failed [ 30.138250][ T690] FAT-fs (loop3): Directory bread(block 71) failed [ 30.140625][ T74] usb 2-1: USB disconnect, device number 2 [ 30.146728][ T690] FAT-fs (loop3): Directory bread(block 72) failed [ 30.157313][ T690] FAT-fs (loop3): Directory bread(block 73) failed [ 30.218194][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.226231][ T692] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.233705][ T692] device bridge_slave_0 entered promiscuous mode [ 30.241187][ T692] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.248077][ T692] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.255970][ T692] device bridge_slave_1 entered promiscuous mode [ 30.304690][ T692] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.311525][ T692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.318683][ T692] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.325440][ T692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.353231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.360882][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.368195][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.379957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.388124][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.394978][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.404222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.412521][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.419370][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.433493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.448370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.463248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.475737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.490392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.503826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.512958][ T103] device bridge_slave_1 left promiscuous mode [ 30.519222][ T103] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.526438][ T18] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.533815][ T103] device bridge_slave_0 left promiscuous mode [ 30.540078][ T103] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.629385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.637456][ T401] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 30.646568][ T401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.654368][ T401] usb 3-1: Product: syz [ 30.661066][ T401] usb 3-1: Manufacturer: syz [ 30.665678][ T401] usb 3-1: SerialNumber: syz [ 30.681972][ T401] usb 3-1: config 0 descriptor?? [ 30.774479][ T18] usb 4-1: Using ep0 maxpacket: 16 [ 30.894756][ T18] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 103, changing to 10 [ 30.906158][ T18] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.916426][ T18] usb 4-1: config 0 interface 0 has no altsetting 0 [ 30.922851][ T18] usb 4-1: New USB device found, idVendor=227d, idProduct=0709, bcdDevice= 0.00 [ 30.931624][ T345] usb 3-1: USB disconnect, device number 2 [ 30.932000][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.946060][ T18] usb 4-1: config 0 descriptor?? [ 30.973718][ T725] erofs: (device loop5): mounted with opts: , root inode @ nid 36. [ 30.986535][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3917 @ nid 36 [ 30.997125][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3916 @ nid 36 [ 31.007991][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3915 @ nid 36 [ 31.018577][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3914 @ nid 36 [ 31.029258][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3913 @ nid 36 [ 31.040080][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3912 @ nid 36 [ 31.050725][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3911 @ nid 36 [ 31.061217][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3910 @ nid 36 [ 31.071691][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3909 @ nid 36 [ 31.082316][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3908 @ nid 36 [ 31.092975][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3907 @ nid 36 [ 31.103496][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3906 @ nid 36 [ 31.108186][ T570] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.113990][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3905 @ nid 36 [ 31.131784][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3904 @ nid 36 [ 31.142709][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3903 @ nid 36 [ 31.153428][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3902 @ nid 36 [ 31.164117][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3901 @ nid 36 [ 31.174754][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3900 @ nid 36 [ 31.185397][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3899 @ nid 36 [ 31.196024][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3898 @ nid 36 [ 31.206472][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3897 @ nid 36 [ 31.217408][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3896 @ nid 36 [ 31.227959][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3895 @ nid 36 [ 31.238454][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3894 @ nid 36 [ 31.248959][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3893 @ nid 36 [ 31.259421][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3892 @ nid 36 [ 31.269931][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3891 @ nid 36 [ 31.274439][ T74] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.281326][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3890 @ nid 36 [ 31.281342][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3889 @ nid 36 [ 31.309752][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3888 @ nid 36 [ 31.320582][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3887 @ nid 36 [ 31.331531][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3886 @ nid 36 [ 31.342278][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3885 @ nid 36 [ 31.352852][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3884 @ nid 36 [ 31.363318][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3883 @ nid 36 [ 31.373834][ T570] usb 2-1: Using ep0 maxpacket: 8 [ 31.374497][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3882 @ nid 36 [ 31.389331][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3881 @ nid 36 [ 31.399860][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3880 @ nid 36 [ 31.410613][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3879 @ nid 36 [ 31.414930][ T18] hid (null): report_id 60507 is invalid [ 31.421120][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3878 @ nid 36 [ 31.427362][ T18] hid (null): invalid report_count 13028 [ 31.437229][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3877 @ nid 36 [ 31.437239][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3876 @ nid 36 [ 31.437256][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3875 @ nid 36 [ 31.443168][ T18] hid (null): unknown global tag 0xd [ 31.457287][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3874 @ nid 36 [ 31.472460][ T18] hid (null): unknown global tag 0xd [ 31.475560][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3873 @ nid 36 [ 31.482612][ T18] hid (null): unknown global tag 0xd [ 31.493217][ T733] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 31.496112][ T18] hid (null): invalid report_count 335270962 [ 31.506245][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3872 @ nid 36 [ 31.506255][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3871 @ nid 36 [ 31.506264][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3870 @ nid 36 [ 31.506273][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3869 @ nid 36 [ 31.506283][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3868 @ nid 36 [ 31.506292][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3867 @ nid 36 [ 31.506301][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3866 @ nid 36 [ 31.506311][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3865 @ nid 36 [ 31.506319][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3864 @ nid 36 [ 31.506328][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3863 @ nid 36 [ 31.506337][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3862 @ nid 36 [ 31.506345][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3861 @ nid 36 [ 31.506355][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3860 @ nid 36 [ 31.506364][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3859 @ nid 36 [ 31.506373][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3858 @ nid 36 [ 31.506383][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3857 @ nid 36 [ 31.506398][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3856 @ nid 36 [ 31.513055][ T18] hid (null): nested delimiters [ 31.518999][ T733] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 31.519005][ T733] netlink: 'syz.2.136': attribute type 2 has an invalid length. [ 31.525604][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3855 @ nid 36 [ 31.543113][ T18] hid (null): unknown global tag 0x1d [ 31.546445][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3854 @ nid 36 [ 31.556771][ T570] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.567134][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3853 @ nid 36 [ 31.582584][ T18] hid-generic 0003:227D:0709.0003: unknown main item tag 0x0 [ 31.590501][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3852 @ nid 36 [ 31.600655][ T18] hid-generic 0003:227D:0709.0003: unknown main item tag 0x0 [ 31.609418][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3851 @ nid 36 [ 31.620698][ T18] hid-generic 0003:227D:0709.0003: unknown main item tag 0x0 [ 31.631072][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3850 @ nid 36 [ 31.642968][ T18] hid-generic 0003:227D:0709.0003: unknown main item tag 0x0 [ 31.651649][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3849 @ nid 36 [ 31.662608][ T18] hid-generic 0003:227D:0709.0003: unknown main item tag 0x0 [ 31.683204][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3848 @ nid 36 [ 31.683214][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3847 @ nid 36 [ 31.683224][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3846 @ nid 36 [ 31.683233][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3845 @ nid 36 [ 31.683243][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3844 @ nid 36 [ 31.683252][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3843 @ nid 36 [ 31.683261][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3842 @ nid 36 [ 31.683278][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3841 @ nid 36 [ 31.694382][ T570] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 31.724171][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3840 @ nid 36 [ 31.735081][ T74] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 31.740044][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3839 @ nid 36 [ 31.750860][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.764737][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3838 @ nid 36 [ 31.768848][ T18] hid-generic 0003:227D:0709.0003: unknown main item tag 0x0 [ 31.776429][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3837 @ nid 36 [ 31.786482][ T74] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.793686][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3836 @ nid 36 [ 31.804425][ T570] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 31.811770][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3835 @ nid 36 [ 31.822294][ T18] hid-generic 0003:227D:0709.0003: unknown main item tag 0x0 [ 31.829269][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3834 @ nid 36 [ 31.839907][ T74] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 31.847001][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3833 @ nid 36 [ 31.857677][ T570] usb 2-1: config 4 has no interface number 0 [ 31.868466][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3832 @ nid 36 [ 31.878671][ T18] hid-generic 0003:227D:0709.0003: unexpected long global item [ 31.888977][ T345] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.900201][ T18] hid-generic: probe of 0003:227D:0709.0003 failed with error -22 [ 31.910243][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3831 @ nid 36 [ 31.933982][ T18] usb 4-1: USB disconnect, device number 3 [ 31.939853][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3830 @ nid 36 [ 31.984603][ T74] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 31.992319][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3829 @ nid 36 [ 32.009598][ T74] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.010191][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3828 @ nid 36 [ 32.029856][ T74] usb 5-1: Manufacturer: syz [ 32.030352][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3827 @ nid 36 [ 32.048519][ T74] usb 5-1: config 0 descriptor?? [ 32.049545][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3826 @ nid 36 [ 32.164676][ T570] usb 2-1: string descriptor 0 read error: -22 [ 32.175676][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3825 @ nid 36 [ 32.183218][ T570] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 32.193400][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3824 @ nid 36 [ 32.198159][ T570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.208293][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3823 @ nid 36 [ 32.277903][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3822 @ nid 36 [ 32.281235][ T570] uvcvideo: Found UVC 0.02 device (04f2:b746) [ 32.288416][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3821 @ nid 36 [ 32.288432][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3820 @ nid 36 [ 32.299722][ T570] uvcvideo: No valid video chain found. [ 32.308359][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3819 @ nid 36 [ 32.332243][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3818 @ nid 36 [ 32.343216][ T345] usb 3-1: Using ep0 maxpacket: 32 [ 32.344513][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3817 @ nid 36 [ 32.359036][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3816 @ nid 36 [ 32.375398][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3815 @ nid 36 [ 32.386064][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3814 @ nid 36 [ 32.396603][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3813 @ nid 36 [ 32.407462][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3812 @ nid 36 [ 32.418413][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3811 @ nid 36 [ 32.428942][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3810 @ nid 36 [ 32.439569][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3809 @ nid 36 [ 32.450027][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3808 @ nid 36 [ 32.460518][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3807 @ nid 36 [ 32.464491][ T345] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 32.471031][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3806 @ nid 36 [ 32.471047][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3805 @ nid 36 [ 32.489452][ T345] usb 3-1: config 0 has no interface number 0 [ 32.489541][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3804 @ nid 36 [ 32.518365][ T376] usb 2-1: USB disconnect, device number 3 [ 32.528105][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3803 @ nid 36 [ 32.538764][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3802 @ nid 36 [ 32.550605][ T74] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 32.558092][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3801 @ nid 36 [ 32.569311][ T74] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 32.578906][ T74] appleir 0003:05AC:8243.0004: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 32.589865][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3800 @ nid 36 [ 32.616749][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3799 @ nid 36 [ 32.627449][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3798 @ nid 36 [ 32.638089][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3797 @ nid 36 [ 32.649209][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3796 @ nid 36 [ 32.660356][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3795 @ nid 36 [ 32.664536][ T345] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 32.670896][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3794 @ nid 36 [ 32.680320][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.698440][ T345] usb 3-1: Product: syz [ 32.702579][ T345] usb 3-1: Manufacturer: syz [ 32.707347][ T345] usb 3-1: SerialNumber: syz [ 32.712510][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3793 @ nid 36 [ 32.723811][ T345] usb 3-1: config 0 descriptor?? [ 32.728773][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3792 @ nid 36 [ 32.739843][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3791 @ nid 36 [ 32.750792][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3790 @ nid 36 [ 32.761621][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3789 @ nid 36 [ 32.773076][ T345] smsc95xx v1.0.6 [ 32.777039][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3788 @ nid 36 [ 32.787872][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3787 @ nid 36 [ 32.798907][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3786 @ nid 36 [ 32.809736][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3785 @ nid 36 [ 32.820816][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3784 @ nid 36 [ 32.831663][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3783 @ nid 36 [ 32.842513][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3782 @ nid 36 [ 32.853343][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3781 @ nid 36 [ 32.864217][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3780 @ nid 36 [ 32.875041][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3779 @ nid 36 [ 32.885941][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3778 @ nid 36 [ 32.896991][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3777 @ nid 36 [ 32.906538][ T376] usb 5-1: USB disconnect, device number 3 [ 32.907824][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3776 @ nid 36 [ 32.924072][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3775 @ nid 36 [ 32.934947][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3774 @ nid 36 [ 32.945978][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3773 @ nid 36 [ 32.956867][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3772 @ nid 36 [ 32.967662][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3771 @ nid 36 [ 32.979113][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3770 @ nid 36 [ 32.989719][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3769 @ nid 36 [ 33.000840][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3768 @ nid 36 [ 33.010363][ T741] F2FS-fs (loop3): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 33.011374][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3767 @ nid 36 [ 33.030194][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3766 @ nid 36 [ 33.040843][ T741] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 33.050596][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3765 @ nid 36 [ 33.061657][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3764 @ nid 36 [ 33.064510][ T741] F2FS-fs (loop3): invalid crc value [ 33.072900][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3763 @ nid 36 [ 33.083929][ T741] F2FS-fs (loop3): Found nat_bits in checkpoint [ 33.088017][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3762 @ nid 36 [ 33.088028][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3761 @ nid 36 [ 33.088037][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3760 @ nid 36 [ 33.088047][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3759 @ nid 36 [ 33.088056][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3758 @ nid 36 [ 33.088065][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3757 @ nid 36 [ 33.088075][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3756 @ nid 36 [ 33.088084][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3755 @ nid 36 [ 33.088093][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3754 @ nid 36 [ 33.088110][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3753 @ nid 36 [ 33.125831][ T741] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 33.126168][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3752 @ nid 36 [ 33.137364][ T741] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 33.147094][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3751 @ nid 36 [ 33.211952][ T23] kauditd_printk_skb: 42 callbacks suppressed [ 33.211962][ T23] audit: type=1400 audit(1743660022.990:218): avc: denied { setattr } for pid=740 comm="syz.3.139" name="file1" dev="loop3" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.217418][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3750 @ nid 36 [ 33.273264][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3749 @ nid 36 [ 33.283780][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3748 @ nid 36 [ 33.294233][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3747 @ nid 36 [ 33.305123][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3746 @ nid 36 [ 33.315676][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3745 @ nid 36 [ 33.316718][ T23] audit: type=1400 audit(1743660023.110:219): avc: denied { remove_name } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=10883 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.326142][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3744 @ nid 36 [ 33.326152][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3743 @ nid 36 [ 33.326162][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3742 @ nid 36 [ 33.326171][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3741 @ nid 36 [ 33.326181][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3740 @ nid 36 [ 33.326191][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3739 @ nid 36 [ 33.326200][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3738 @ nid 36 [ 33.326208][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3737 @ nid 36 [ 33.326224][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3736 @ nid 36 [ 33.370007][ T23] audit: type=1400 audit(1743660023.110:220): avc: denied { rename } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=10883 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.380342][ T401] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 33.391224][ T23] audit: type=1400 audit(1743660023.110:221): avc: denied { create } for pid=146 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.401508][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3735 @ nid 36 [ 33.504184][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3734 @ nid 36 [ 33.514819][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3733 @ nid 36 [ 33.525324][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3732 @ nid 36 [ 33.535865][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3731 @ nid 36 [ 33.546336][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3730 @ nid 36 [ 33.557043][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3729 @ nid 36 [ 33.567627][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3728 @ nid 36 [ 33.578275][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3727 @ nid 36 [ 33.588910][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3726 @ nid 36 [ 33.599390][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3725 @ nid 36 [ 33.609918][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3724 @ nid 36 [ 33.620394][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3723 @ nid 36 [ 33.630932][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3722 @ nid 36 [ 33.641761][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3721 @ nid 36 [ 33.641844][ T751] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 33.652454][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3720 @ nid 36 [ 33.670545][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3719 @ nid 36 [ 33.680357][ T751] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 33.681209][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3718 @ nid 36 [ 33.699825][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3717 @ nid 36 [ 33.710612][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3716 @ nid 36 [ 33.721266][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3715 @ nid 36 [ 33.731933][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3714 @ nid 36 [ 33.745563][ T751] F2FS-fs (loop4): Found nat_bits in checkpoint [ 33.748670][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3713 @ nid 36 [ 33.762298][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3712 @ nid 36 [ 33.772856][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3711 @ nid 36 [ 33.783491][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3710 @ nid 36 [ 33.794036][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3709 @ nid 36 [ 33.804916][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3708 @ nid 36 [ 33.812428][ T751] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 33.815512][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3707 @ nid 36 [ 33.815522][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3706 @ nid 36 [ 33.815532][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3705 @ nid 36 [ 33.815541][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3704 @ nid 36 [ 33.815550][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3703 @ nid 36 [ 33.815560][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3702 @ nid 36 [ 33.815569][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3701 @ nid 36 [ 33.815577][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3700 @ nid 36 [ 33.815592][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3699 @ nid 36 [ 33.904670][ T751] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 33.908421][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.923857][ T751] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 33.925765][ T345] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 33.925775][ T345] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 33.925910][ T401] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 33.936318][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3698 @ nid 36 [ 33.942616][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.943470][ T401] usb 2-1: config 0 descriptor?? [ 33.963541][ T23] audit: type=1400 audit(1743660023.760:222): avc: denied { append } for pid=757 comm="syz.3.141" name="kvm" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.971078][ T345] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 34.010668][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3697 @ nid 36 [ 34.037724][ T345] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 34.053792][ T345] usb 3-1: USB disconnect, device number 3 [ 34.059634][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3696 @ nid 36 [ 34.073246][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3695 @ nid 36 [ 34.085232][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3694 @ nid 36 [ 34.094151][ T751] attempt to access beyond end of device [ 34.094151][ T751] loop4: rw=2049, want=45104, limit=40427 [ 34.095767][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3693 @ nid 36 [ 34.117673][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3692 @ nid 36 [ 34.119941][ T751] attempt to access beyond end of device [ 34.119941][ T751] loop4: rw=0, want=45104, limit=40427 [ 34.128204][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3691 @ nid 36 [ 34.128213][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3690 @ nid 36 [ 34.128230][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3689 @ nid 36 [ 34.170578][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3688 @ nid 36 [ 34.171760][ T751] attempt to access beyond end of device [ 34.171760][ T751] loop4: rw=2049, want=40968, limit=40427 [ 34.181344][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3687 @ nid 36 [ 34.202727][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3686 @ nid 36 [ 34.213238][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3685 @ nid 36 [ 34.223861][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3684 @ nid 36 [ 34.234446][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3683 @ nid 36 [ 34.244917][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3682 @ nid 36 [ 34.255648][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3681 @ nid 36 [ 34.264434][ T376] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.266379][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3680 @ nid 36 [ 34.283971][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3679 @ nid 36 [ 34.294618][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3678 @ nid 36 [ 34.305115][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3677 @ nid 36 [ 34.315632][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3676 @ nid 36 [ 34.326117][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3675 @ nid 36 [ 34.336611][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3674 @ nid 36 [ 34.347177][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3673 @ nid 36 [ 34.357630][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3672 @ nid 36 [ 34.368141][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3671 @ nid 36 [ 34.378649][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3670 @ nid 36 [ 34.389166][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3669 @ nid 36 [ 34.399652][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3668 @ nid 36 [ 34.410195][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3667 @ nid 36 [ 34.420749][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3666 @ nid 36 [ 34.431385][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3665 @ nid 36 [ 34.441881][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3664 @ nid 36 [ 34.452372][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3663 @ nid 36 [ 34.462886][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3662 @ nid 36 [ 34.473458][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3661 @ nid 36 [ 34.479390][ T766] SELinux: security policydb version 18 (MLS) not backwards compatible [ 34.484538][ T23] audit: type=1400 audit(1743660024.270:223): avc: denied { load_policy } for pid=765 comm="syz.2.146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.493275][ T766] SELinux: failed to load policy [ 34.512683][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3660 @ nid 36 [ 34.528150][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3659 @ nid 36 [ 34.538725][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3658 @ nid 36 [ 34.551554][ T401] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 34.554591][ T376] usb 4-1: Using ep0 maxpacket: 16 [ 34.562782][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3657 @ nid 36 [ 34.578412][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3656 @ nid 36 [ 34.589162][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3655 @ nid 36 [ 34.599762][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3654 @ nid 36 [ 34.610188][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3653 @ nid 36 [ 34.620719][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3652 @ nid 36 [ 34.631213][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3651 @ nid 36 [ 34.641721][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3650 @ nid 36 [ 34.654067][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3649 @ nid 36 [ 34.665215][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3648 @ nid 36 [ 34.675937][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3647 @ nid 36 [ 34.676944][ T23] audit: type=1400 audit(1743660024.470:224): avc: denied { create } for pid=767 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.706705][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3646 @ nid 36 [ 34.707474][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.717257][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3645 @ nid 36 [ 34.748163][ T376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.760858][ T23] audit: type=1400 audit(1743660024.470:225): avc: denied { write } for pid=767 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.764518][ T401] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71 [ 34.782059][ T376] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.789077][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3644 @ nid 36 [ 34.802969][ T376] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.812244][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3643 @ nid 36 [ 34.826135][ T23] audit: type=1400 audit(1743660024.470:226): avc: denied { read } for pid=767 comm="syz.2.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.832859][ T401] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71 [ 34.851806][ T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.866839][ T23] audit: type=1400 audit(1743660024.620:227): avc: denied { name_bind } for pid=771 comm="syz.2.148" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 34.866990][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3642 @ nid 36 [ 34.897654][ T376] usb 4-1: config 0 descriptor?? [ 34.904077][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3641 @ nid 36 [ 34.914724][ T401] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71 [ 34.921673][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3640 @ nid 36 [ 34.932368][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3639 @ nid 36 [ 34.944498][ T401] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71 [ 34.954660][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3638 @ nid 36 [ 34.968089][ T401] usb 2-1: USB disconnect, device number 4 [ 34.976239][ T778] FAT-fs (loop4): Directory bread(block 64) failed [ 34.982656][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3637 @ nid 36 [ 34.993588][ T778] FAT-fs (loop4): Directory bread(block 65) failed [ 35.000541][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3636 @ nid 36 [ 35.011534][ T778] FAT-fs (loop4): Directory bread(block 66) failed [ 35.018139][ T778] FAT-fs (loop4): Directory bread(block 67) failed [ 35.025542][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3635 @ nid 36 [ 35.034572][ T778] FAT-fs (loop4): Directory bread(block 68) failed [ 35.036374][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3634 @ nid 36 [ 35.042369][ T778] FAT-fs (loop4): Directory bread(block 69) failed [ 35.053215][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3633 @ nid 36 [ 35.072954][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3632 @ nid 36 [ 35.083795][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3631 @ nid 36 [ 35.094613][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3630 @ nid 36 [ 35.106176][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3629 @ nid 36 [ 35.117086][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3628 @ nid 36 [ 35.124534][ T778] FAT-fs (loop4): Directory bread(block 70) failed [ 35.132812][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3627 @ nid 36 [ 35.133959][ T778] FAT-fs (loop4): Directory bread(block 71) failed [ 35.145377][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3626 @ nid 36 [ 35.153819][ T778] FAT-fs (loop4): Directory bread(block 72) failed [ 35.161723][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3625 @ nid 36 [ 35.167903][ T778] FAT-fs (loop4): Directory bread(block 73) failed [ 35.178533][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3624 @ nid 36 [ 35.195076][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3623 @ nid 36 [ 35.205668][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3622 @ nid 36 [ 35.216840][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3621 @ nid 36 [ 35.227585][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3620 @ nid 36 [ 35.241017][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3619 @ nid 36 [ 35.251733][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3618 @ nid 36 [ 35.263528][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3617 @ nid 36 [ 35.274168][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3616 @ nid 36 [ 35.284650][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3615 @ nid 36 [ 35.295386][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3614 @ nid 36 [ 35.306112][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3613 @ nid 36 [ 35.316622][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3612 @ nid 36 [ 35.327196][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3611 @ nid 36 [ 35.337754][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3610 @ nid 36 [ 35.348217][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3609 @ nid 36 [ 35.359028][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3608 @ nid 36 [ 35.369613][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3607 @ nid 36 [ 35.380215][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3606 @ nid 36 [ 35.391594][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3605 @ nid 36 [ 35.392024][ T376] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 35.412900][ T376] microsoft 0003:045E:07DA.0006: No inputs registered, leaving [ 35.415123][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3604 @ nid 36 [ 35.421367][ T376] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 35.431117][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3603 @ nid 36 [ 35.442175][ T376] microsoft 0003:045E:07DA.0006: no inputs found [ 35.452646][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3602 @ nid 36 [ 35.458996][ T376] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 35.478155][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3601 @ nid 36 [ 35.488891][ T725] erofs: (device loop5): z_erofs_vle_normalaccess_readpages: readahead error at page 3600 @ nid 36 [ 35.499557][ T725] attempt to access beyond end of device [ 35.499557][ T725] loop5: rw=0, want=24, limit=16 [ 35.544466][ T401] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.622654][ T794] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.634514][ T376] usb 4-1: USB disconnect, device number 4 [ 35.657357][ T794] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.672597][ T794] EXT4-fs (loop5): 1 truncate cleaned up [ 35.679020][ T794] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 35.804512][ T345] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 35.895999][ T808] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,noinit_itable,,errors=continue [ 35.904543][ T401] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.919333][ T401] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.929406][ T808] EXT4-fs error (device loop1): ext4_generic_delete_entry:2669: inode #2: block 16: comm syz.1.161: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 35.949203][ T808] EXT4-fs error (device loop1) in ext4_delete_entry:2728: Corrupt filesystem [ 35.958071][ T808] EXT4-fs warning (device loop1): ext4_rename_delete:3830: inode #2: comm syz.1.161: Deleting old file: nlink 1, error=-117 [ 36.004622][ T401] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.013836][ T401] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.021896][ T401] usb 3-1: SerialNumber: syz [ 36.036378][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 36.045034][ T345] usb 5-1: Using ep0 maxpacket: 32 [ 36.166344][ T345] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.174260][ T345] usb 5-1: config 0 has no interface number 0 [ 36.274590][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 36.305209][ T401] usb 3-1: 0:2 : does not exist [ 36.334591][ T345] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.343522][ T345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.352226][ T345] usb 5-1: Product: syz [ 36.359866][ T401] usb 3-1: USB disconnect, device number 4 [ 36.374119][ T345] usb 5-1: Manufacturer: syz [ 36.379707][ T345] usb 5-1: SerialNumber: syz [ 36.385573][ T345] usb 5-1: config 0 descriptor?? [ 36.394546][ T5] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 36.402517][ T5] usb 6-1: config 0 has no interface number 0 [ 36.408595][ T5] usb 6-1: config 0 interface 184 has no altsetting 0 [ 36.425081][ T345] smsc95xx v1.0.6 [ 36.564439][ T583] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 36.574793][ T5] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 36.583690][ T5] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.591792][ T5] usb 6-1: Product: syz [ 36.595954][ T5] usb 6-1: Manufacturer: syz [ 36.600276][ T5] usb 6-1: SerialNumber: syz [ 36.605951][ T5] usb 6-1: config 0 descriptor?? [ 36.645608][ T5] smsc75xx v1.0.0 [ 36.924532][ T583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.935327][ T583] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.944913][ T583] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 36.953783][ T583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.962285][ T583] usb 2-1: config 0 descriptor?? [ 37.064504][ T376] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.187793][ T838] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 37.195430][ T838] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.207566][ T838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.229008][ T838] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 37.241229][ T838] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.248380][ T838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 37.278603][ T838] attempt to access beyond end of device [ 37.278603][ T838] loop3: rw=2049, want=45104, limit=40427 [ 37.289864][ T5] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 37.300773][ T5] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 37.311083][ T838] attempt to access beyond end of device [ 37.311083][ T838] loop3: rw=0, want=45104, limit=40427 [ 37.341322][ T838] attempt to access beyond end of device [ 37.341322][ T838] loop3: rw=2049, want=40968, limit=40427 [ 37.434579][ T376] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 37.442383][ T376] usb 3-1: config 0 has no interface number 0 [ 37.448415][ T376] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.459255][ T376] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.460555][ T583] konepure 0003:1E7D:2DB4.0007: item fetching failed at offset 2/5 [ 37.469202][ T376] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 37.484784][ T583] konepure 0003:1E7D:2DB4.0007: parse failed [ 37.485488][ T376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.499385][ T583] konepure: probe of 0003:1E7D:2DB4.0007 failed with error -22 [ 37.505239][ T376] usb 3-1: config 0 descriptor?? [ 37.507100][ T345] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 37.526985][ T345] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 37.554567][ T5] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 37.565615][ T345] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 37.576642][ T5] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 37.586228][ T345] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 37.593679][ T5] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 37.603904][ T345] usb 5-1: USB disconnect, device number 4 [ 37.610194][ T5] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 37.620362][ T5] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 37.627778][ T5] usb 6-1: USB disconnect, device number 2 [ 37.662071][ T570] usb 2-1: USB disconnect, device number 5 [ 37.975864][ T376] uclogic 0003:5543:0781.0008: item fetching failed at offset 5/7 [ 37.983707][ T376] uclogic 0003:5543:0781.0008: parse failed [ 37.989486][ T376] uclogic: probe of 0003:5543:0781.0008 failed with error -22 [ 38.114439][ T18] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.198871][ T860] tipc: Failed to remove local publication {66,0,2}/1826939763 [ 38.234827][ T345] usb 3-1: USB disconnect, device number 5 [ 38.252992][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 38.253004][ T23] audit: type=1400 audit(1743660028.040:240): avc: denied { write } for pid=861 comm="syz.1.180" name="/" dev="incremental-fs" ino=17304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.287129][ T23] audit: type=1400 audit(1743660028.050:241): avc: denied { remove_name } for pid=861 comm="syz.1.180" name="file0" dev="incremental-fs" ino=16222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.310592][ T23] audit: type=1400 audit(1743660028.050:242): avc: denied { rename } for pid=861 comm="syz.1.180" name="file0" dev="incremental-fs" ino=16222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.310762][ T355] ------------[ cut here ]------------ [ 38.333450][ T23] audit: type=1400 audit(1743660028.050:243): avc: denied { add_name } for pid=861 comm="syz.1.180" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.338610][ T355] WARNING: CPU: 1 PID: 355 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 38.338614][ T355] Modules linked in: [ 38.338641][ T355] CPU: 1 PID: 355 Comm: syz-executor Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 38.401363][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.411309][ T355] RIP: 0010:drop_nlink+0xbb/0x100 [ 38.415634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 38.416119][ T355] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 8b 99 f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 d5 db c2 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 38.447365][ T355] RSP: 0018:ffff8881d6acfc68 EFLAGS: 00010293 [ 38.453352][ T355] RAX: ffffffff81a16f2b RBX: 1ffff1103d476a40 RCX: ffff8881f0d88fc0 [ 38.461356][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 38.469166][ T355] RBP: 0000000000000000 R08: ffffffff81a16eaf R09: 0000000000000003 [ 38.471582][ T23] audit: type=1400 audit(1743660028.260:244): avc: denied { write } for pid=865 comm="syz.4.182" name="vga_arbiter" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.476981][ T355] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881ea3b5200 [ 38.476988][ T355] R13: dffffc0000000000 R14: ffff8881ea3b51b8 R15: dffffc0000000000 [ 38.476996][ T355] FS: 000055559296f500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 38.477003][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.477009][ T355] CR2: 0000001b3211aff8 CR3: 00000001d68e2000 CR4: 00000000003406a0 [ 38.477019][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.477025][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.477028][ T355] Call Trace: [ 38.477051][ T355] ? __warn+0x162/0x250 [ 38.503050][ T23] audit: type=1400 audit(1743660028.300:245): avc: denied { open } for pid=865 comm="syz.4.182" path="/dev/vga_arbiter" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.508596][ T355] ? report_bug+0x3a1/0x4e0 [ 38.508607][ T355] ? drop_nlink+0xbb/0x100 [ 38.508615][ T355] ? drop_nlink+0xbb/0x100 [ 38.508631][ T355] ? do_invalid_op+0x6e/0x110 [ 38.517652][ T23] audit: type=1400 audit(1743660028.300:246): avc: denied { read } for pid=865 comm="syz.4.182" name="vga_arbiter" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.525325][ T355] ? invalid_op+0x1e/0x30 [ 38.525336][ T355] ? drop_nlink+0x3f/0x100 [ 38.525343][ T355] ? drop_nlink+0xbb/0x100 [ 38.525356][ T355] ? drop_nlink+0xbb/0x100 [ 38.645861][ T355] ? drop_nlink+0xbb/0x100 [ 38.650108][ T355] shmem_rmdir+0x54/0x80 [ 38.654393][ T355] vfs_rmdir+0x285/0x3c0 [ 38.658479][ T355] incfs_kill_sb+0x105/0x200 [ 38.662998][ T355] deactivate_locked_super+0xa8/0x110 [ 38.668211][ T355] deactivate_super+0x1e2/0x2a0 [ 38.672891][ T355] ? vfs_submount+0xb0/0xb0 [ 38.677229][ T355] ? deactivate_locked_super+0x110/0x110 [ 38.682794][ T355] ? fast_dput+0x7a/0x280 [ 38.686958][ T355] cleanup_mnt+0x44e/0x500 [ 38.691206][ T355] task_work_run+0x140/0x170 [ 38.695743][ T355] exit_to_usermode_loop+0x190/0x1a0 [ 38.700875][ T355] prepare_exit_to_usermode+0x199/0x200 [ 38.706240][ T355] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 38.712060][ T355] RIP: 0033:0x7f71984d1497 [ 38.716313][ T355] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 38.735755][ T355] RSP: 002b:00007ffe79beb0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.743996][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f71984d1497 [ 38.751811][ T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe79beb170 [ 38.759622][ T355] RBP: 00007ffe79beb170 R08: 0000000000000000 R09: 0000000000000000 [ 38.767431][ T355] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe79bec200 [ 38.775244][ T355] R13: 00007f719855108c R14: 0000000000009564 R15: 00007ffe79bec240 [ 38.783061][ T355] ---[ end trace 0a110bd3162e6b02 ]--- [ 38.789283][ T355] ================================================================== [ 38.797171][ T355] BUG: KASAN: null-ptr-deref in ihold+0x1b/0x50 [ 38.803239][ T355] Write of size 4 at addr 0000000000000160 by task syz-executor/355 [ 38.811556][ T355] [ 38.813731][ T355] CPU: 0 PID: 355 Comm: syz-executor Tainted: G W 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 38.824839][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.834738][ T355] Call Trace: [ 38.837863][ T355] dump_stack+0x1d8/0x241 [ 38.842029][ T355] ? panic+0x89d/0x89d [ 38.845962][ T355] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 38.851583][ T355] ? _raw_spin_trylock_bh+0x190/0x190 [ 38.856787][ T355] ? _raw_spin_unlock+0x49/0x60 [ 38.861472][ T355] ? ihold+0x1b/0x50 [ 38.865204][ T355] __kasan_report+0xe9/0x120 [ 38.869639][ T355] ? ihold+0x1b/0x50 [ 38.873364][ T355] kasan_report+0x30/0x60 [ 38.877531][ T355] check_memory_region+0x272/0x280 [ 38.882475][ T355] ihold+0x1b/0x50 [ 38.886038][ T355] vfs_rmdir+0x1e0/0x3c0 [ 38.890115][ T355] incfs_kill_sb+0x105/0x200 [ 38.894568][ T355] deactivate_locked_super+0xa8/0x110 [ 38.899750][ T355] deactivate_super+0x1e2/0x2a0 [ 38.904439][ T355] ? vfs_submount+0xb0/0xb0 [ 38.908785][ T355] ? deactivate_locked_super+0x110/0x110 [ 38.914246][ T355] ? fast_dput+0x7a/0x280 [ 38.918410][ T355] cleanup_mnt+0x44e/0x500 [ 38.922665][ T355] task_work_run+0x140/0x170 [ 38.927096][ T355] exit_to_usermode_loop+0x190/0x1a0 [ 38.932389][ T355] prepare_exit_to_usermode+0x199/0x200 [ 38.937773][ T355] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 38.943565][ T355] RIP: 0033:0x7f71984d1497 [ 38.947778][ T355] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 38.967191][ T355] RSP: 002b:00007ffe79beb0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 38.975439][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f71984d1497 [ 38.983248][ T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe79beb170 [ 38.991063][ T355] RBP: 00007ffe79beb170 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 38.998889][ T355] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe79bec200 [ 39.006780][ T355] R13: 00007f719855108c R14: 0000000000009564 R15: 00007ffe79bec240 [ 39.014586][ T355] ================================================================== [ 39.022485][ T355] Disabling lock debugging due to kernel taint [ 39.051614][ T355] BUG: kernel NULL pointer dereference, address: 0000000000000160 [ 39.059252][ T355] #PF: supervisor write access in kernel mode [ 39.065148][ T355] #PF: error_code(0x0002) - not-present page [ 39.070967][ T355] PGD 1eb2f5067 P4D 1eb2f5067 PUD 0 [ 39.076091][ T355] Oops: 0002 [#1] PREEMPT SMP KASAN [ 39.081122][ T355] CPU: 0 PID: 355 Comm: syz-executor Tainted: G B W 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 39.092227][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 39.102128][ T355] RIP: 0010:ihold+0x20/0x50 [ 39.106458][ T355] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 d4 c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 c5 91 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa d6 c2 ff [ 39.125983][ T355] RSP: 0018:ffff8881d6acfca0 EFLAGS: 00010246 [ 39.131900][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881f0d88fc0 [ 39.139710][ T355] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 39.147506][ T355] RBP: 0000000000000001 R08: ffffffff813ae545 R09: 0000000000000003 [ 39.155318][ T355] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 39.163132][ T355] R13: dffffc0000000000 R14: ffff8881d4058ac8 R15: 0000000000000000 [ 39.170945][ T355] FS: 000055559296f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.179709][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.186132][ T355] CR2: 0000000000000160 CR3: 00000001d68e2000 CR4: 00000000003406b0 [ 39.193947][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.201755][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.209564][ T355] Call Trace: [ 39.212704][ T355] ? __die+0xb4/0x100 [ 39.216518][ T355] ? no_context+0xac7/0xd20 [ 39.220855][ T355] ? is_prefetch+0x4b0/0x4b0 [ 39.225282][ T355] ? ihold+0x1b/0x50 [ 39.229013][ T355] ? __do_page_fault+0xa72/0xbb0 [ 39.233787][ T355] ? __bad_area_nosemaphore+0xc0/0x470 [ 39.239088][ T355] ? page_fault+0x2f/0x40 [ 39.243257][ T355] ? check_panic_on_warn+0x55/0xa0 [ 39.248288][ T355] ? ihold+0x20/0x50 [ 39.252110][ T355] vfs_rmdir+0x1e0/0x3c0 [ 39.256191][ T355] incfs_kill_sb+0x105/0x200 [ 39.260611][ T355] deactivate_locked_super+0xa8/0x110 [ 39.266049][ T355] deactivate_super+0x1e2/0x2a0 [ 39.270684][ T355] ? vfs_submount+0xb0/0xb0 [ 39.275020][ T355] ? deactivate_locked_super+0x110/0x110 [ 39.280487][ T355] ? fast_dput+0x7a/0x280 [ 39.284654][ T355] cleanup_mnt+0x44e/0x500 [ 39.288909][ T355] task_work_run+0x140/0x170 [ 39.293351][ T355] exit_to_usermode_loop+0x190/0x1a0 [ 39.298495][ T355] prepare_exit_to_usermode+0x199/0x200 [ 39.303847][ T355] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 39.309570][ T355] RIP: 0033:0x7f71984d1497 [ 39.313822][ T355] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 39.333364][ T355] RSP: 002b:00007ffe79beb0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 39.341596][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f71984d1497 [ 39.349406][ T355] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe79beb170 [ 39.357219][ T355] RBP: 00007ffe79beb170 R08: 0000000000000000 R09: 0000000000000000 [ 39.365034][ T355] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe79bec200 [ 39.372863][ T355] R13: 00007f719855108c R14: 0000000000009564 R15: 00007ffe79bec240 [ 39.380655][ T355] Modules linked in: [ 39.384486][ T355] CR2: 0000000000000160 [ 39.388468][ T355] ---[ end trace 0a110bd3162e6b03 ]--- [ 39.393774][ T355] RIP: 0010:ihold+0x20/0x50 [ 39.398302][ T355] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 d4 c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 c5 91 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa d6 c2 ff [ 39.417748][ T355] RSP: 0018:ffff8881d6acfca0 EFLAGS: 00010246 [ 39.423645][ T355] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881f0d88fc0 [ 39.431478][ T355] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 39.439270][ T355] RBP: 0000000000000001 R08: ffffffff813ae545 R09: 0000000000000003 [ 39.447086][ T355] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 39.454897][ T355] R13: dffffc0000000000 R14: ffff8881d4058ac8 R15: 0000000000000000 [ 39.462719][ T355] FS: 000055559296f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 39.471472][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.477891][ T355] CR2: 0000000000000160 CR3: 00000001d68e2000 CR4: 00000000003406b0 [ 39.485716][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.493518][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.501333][ T355] Kernel panic - not syncing: Fatal exception [ 39.507313][ T355] Kernel Offset: disabled [ 39.511410][ T355] Rebooting in 86400 seconds..