last executing test programs: 1m39.445548353s ago: executing program 32 (id=371): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), 0x0}, 0x20) 1m38.793015902s ago: executing program 33 (id=393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 1m35.550430369s ago: executing program 34 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) syz_clone(0x62008000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m26.373876791s ago: executing program 35 (id=300): syz_io_uring_setup(0x4ba3, &(0x7f0000000000)={0x0, 0x22d1, 0x200, 0x2, 0x1f9}, 0x0, 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 1m25.777025239s ago: executing program 8 (id=491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) 1m25.776834109s ago: executing program 6 (id=492): r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000002000000f9"], 0x0, 0x0, 0x0, 0x0}, 0x0) setns(r0, 0x0) 1m25.638075362s ago: executing program 8 (id=495): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xeea41, 0x192) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 1m25.592218742s ago: executing program 8 (id=496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 1m25.568938532s ago: executing program 8 (id=497): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[], 0x0) 1m25.568359132s ago: executing program 8 (id=498): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21081e, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0x5}}, {@nodioread_nolock}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x101000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) fallocate(r0, 0x3, 0x2, 0x8000c62) 1m25.513880363s ago: executing program 8 (id=499): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001400010300000000000000001e00"], 0x18}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.159603063s ago: executing program 6 (id=507): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xeea41, 0x192) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 1m24.080745423s ago: executing program 6 (id=508): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 1m24.050689364s ago: executing program 6 (id=509): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[], 0x0) 1m24.017694014s ago: executing program 6 (id=510): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21081e, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0x5}}, {@nodioread_nolock}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x101000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) fallocate(r0, 0x3, 0x2, 0x8000c62) 1m23.905200456s ago: executing program 6 (id=514): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa02000, 0x0, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m20.708987332s ago: executing program 7 (id=557): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 1m20.617004494s ago: executing program 7 (id=561): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b3000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m20.616706253s ago: executing program 7 (id=563): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f0000005d80)=ANY=[@ANYBLOB='iocharset=cp857,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c696f636861727365743d63703933322c666d61736b3d30303030303030303030303030303030303030303030342c6572726f72733d636f6e74696e75652c666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030302c636f6465706167653d63703933322c0087c36ada509ad1217819ccb05e2c31c700a774505074a59028e5cccdd3"], 0x9, 0x1505, &(0x7f0000000180)="$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") write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0xa6080) 1m19.016368076s ago: executing program 7 (id=601): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) close_range(r0, r0, 0x2) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) pidfd_getfd(r2, r2, 0x0) 1m18.944807607s ago: executing program 7 (id=604): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x9, 0x5d, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec7f251438dc8876aa00"}) 1m18.821278869s ago: executing program 7 (id=605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[]) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) 1m10.36117606s ago: executing program 36 (id=499): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001400010300000000000000001e00"], 0x18}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m8.561842796s ago: executing program 37 (id=514): syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa02000, 0x0, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m3.784734575s ago: executing program 38 (id=605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[]) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) 1m0.959333535s ago: executing program 5 (id=773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x109d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) unshare(0x22020600) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x2}) 1m0.796270648s ago: executing program 5 (id=778): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x11) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="cb5b91064694", 0x6}], 0x1, 0x2) 59.92903218s ago: executing program 5 (id=816): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) memfd_create(0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 59.720847853s ago: executing program 5 (id=820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.704054923s ago: executing program 5 (id=822): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000300), 0x5, 0x4a7, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 58.800889496s ago: executing program 5 (id=846): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f00000001c0)='THAWED\x00', 0x7) 43.821924631s ago: executing program 39 (id=846): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000004c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f00000001c0)='THAWED\x00', 0x7) 9.307026816s ago: executing program 2 (id=1982): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='noinline_xattr,active_logs=4,active_logs=4,jqfmt=vfsv1,noinline_data,user_xattr,checkpoint=disable\x00fastboot,fsync_mode=strict,discarG_unit=section,\x00'], 0x21, 0x552d, &(0x7f000000abc0)="$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") r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x8000000018, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x7f]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 8.924545342s ago: executing program 2 (id=1998): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tracing={0x0, 0x7}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000500)={@remote, @empty, @void, {@llc={0x4, {@llc={0xd4, 0xf4, "a3"}}}}}, 0x0) 8.902688442s ago: executing program 2 (id=1989): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000", @ANYRES64, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRES32], 0x25, 0x5586, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x3000, 0xffffffff000, 0x0, 0x0, 0x2}) 8.021724795s ago: executing program 2 (id=1992): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f0000000c00)={[{@usrjquota}, {@block_validity}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}, {@bsdgroups}, {@resgid}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) 7.884946977s ago: executing program 2 (id=1995): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 7.792980738s ago: executing program 2 (id=2001): r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 7.721894669s ago: executing program 40 (id=2001): r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 3.786611746s ago: executing program 4 (id=2122): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0xcc04, &(0x7f0000000100)=ANY=[@ANYBLOB='dots,nodots,dots,nodots,dots,flush,nodots,nodots,dots,nodots,nodots,dots,nodots,dots,nodots,dots,usefree,gid=', @ANYRESHEX=0x0, @ANYRES16=0x0], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000000000000000004000000000060000000000000001000040"]) 3.5087981s ago: executing program 4 (id=2128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3}) 3.4392912s ago: executing program 4 (id=2131): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 2.568088823s ago: executing program 4 (id=2157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "01ff"}, @main=@item_4={0x3, 0x0, 0x0, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 2.396489845s ago: executing program 0 (id=2161): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=@newtaction={0x14}, 0x14}}, 0x100c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 2.336790826s ago: executing program 0 (id=2164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564b"]) 2.326115196s ago: executing program 9 (id=2165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.314036897s ago: executing program 0 (id=2166): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) 2.285732117s ago: executing program 9 (id=2167): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="18fcae977278aeffab01b11015896dd2979391ede335535b8440ca4f71a0665a", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 2.285592087s ago: executing program 0 (id=2169): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.285208297s ago: executing program 9 (id=2178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000d00)=[@transaction_sg={0x400c6313, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 2.192040488s ago: executing program 0 (id=2170): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(0x0, 0x0, 0xffffffffffbffff8) 2.191858878s ago: executing program 9 (id=2171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x2) 2.180513979s ago: executing program 9 (id=2172): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 902.739577ms ago: executing program 4 (id=2173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) 902.600937ms ago: executing program 9 (id=2174): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0x7c, 0x64, 0x10, 0x286d, 0x5329, 0x3fcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x9b, 0x0, 0x0, 0x8, 0x2, 0x50}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 899.255837ms ago: executing program 0 (id=2175): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000980)) 869.657567ms ago: executing program 4 (id=2177): syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x109401) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000000)={0x1ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffff7}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) 685.07769ms ago: executing program 3 (id=2186): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0xf4240, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 642.186821ms ago: executing program 3 (id=2187): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 343.012075ms ago: executing program 3 (id=2198): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000100)={[{@numtail}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@numtail}, {@utf8no}]}, 0x25, 0x34c, &(0x7f0000001740)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x926, 0x20800) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000001240)=""/184) 308.650055ms ago: executing program 1 (id=2189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, 0x12, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0x1400}}, 0x4c}}, 0x0) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 196.999437ms ago: executing program 1 (id=2190): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) 181.634347ms ago: executing program 1 (id=2191): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000e5000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x31, 0x0}, 0x0) 168.475498ms ago: executing program 1 (id=2192): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r1 = dup2(r0, r0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)=ANY=[], 0xb0) sendmmsg$unix(r1, &(0x7f0000004180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x4008890) 145.301858ms ago: executing program 1 (id=2193): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x2b, 0x2, 0x8000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 144.717518ms ago: executing program 3 (id=2194): socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmmsg$sock(r0, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 92.313018ms ago: executing program 1 (id=2195): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0xfffffffd, 0x1, @mcast1, @mcast2, 0x8000, 0x0, 0x2000002}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) 75.440789ms ago: executing program 3 (id=2196): r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x67) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 3 (id=2197): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): 96, nr_sectors = 8 limit=40427 [ 89.045802][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.064715][ T19] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.067786][ T41] kworker/u4:2: attempt to access beyond end of device [ 89.067786][ T41] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 89.084289][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.111454][ T19] usb 10-1: config 0 descriptor?? [ 89.523268][ T19] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 89.533228][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.000E/input/input8 [ 89.627429][ T19] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 90.026682][ T19] usb 10-1: USB disconnect, device number 4 [ 95.317998][ T1213] EXT4-fs (loop5): unmounting filesystem. [ 95.367946][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.377131][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.384473][ T2909] device bridge_slave_0 entered promiscuous mode [ 95.391599][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.399214][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.407410][ T2909] device bridge_slave_1 entered promiscuous mode [ 95.461639][ T2909] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.468624][ T2909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.475721][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.482505][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.507343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.515163][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.522354][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.534126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.542166][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.549187][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.558255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.566365][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.573203][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.587742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.597686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.611843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.623575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.631722][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.639280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.649889][ T2909] device veth0_vlan entered promiscuous mode [ 95.661854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.671360][ T2909] device veth1_macvtap entered promiscuous mode [ 95.681551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.691702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.915764][ T317] device bridge_slave_1 left promiscuous mode [ 95.921826][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.929366][ T317] device bridge_slave_0 left promiscuous mode [ 95.935785][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.943926][ T317] device veth1_macvtap left promiscuous mode [ 95.950339][ T317] device veth0_vlan left promiscuous mode [ 96.004804][ T305] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 96.194758][ T305] usb 10-1: Using ep0 maxpacket: 16 [ 96.201026][ T305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.212502][ T305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.222284][ T305] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.235116][ T305] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.244083][ T305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.252809][ T305] usb 10-1: config 0 descriptor?? [ 96.661048][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.668327][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.675523][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.682575][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.689676][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.696948][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.703998][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.711118][ T305] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 96.722213][ T305] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.000F/input/input9 [ 96.751996][ T2930] loop2: detected capacity change from 0 to 40427 [ 96.759872][ T2930] F2FS-fs (loop2): invalid crc value [ 96.766408][ T2930] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.795789][ T305] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 96.804549][ T2930] F2FS-fs (loop2): Start checkpoint disabled! [ 96.814157][ T2930] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 96.835379][ T2930] syz.2.1071: attempt to access beyond end of device [ 96.835379][ T2930] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.869384][ T19] usb 10-1: USB disconnect, device number 5 [ 96.901063][ T317] kworker/u4:3: attempt to access beyond end of device [ 96.901063][ T317] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 97.016874][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 97.016893][ T28] audit: type=1400 audit(1743659481.174:757): avc: denied { relabelfrom } for pid=2938 comm="syz.0.1076" name="" dev="pipefs" ino=27403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 97.130885][ T28] audit: type=1400 audit(1743659481.284:758): avc: denied { unlink } for pid=2951 comm="syz.1.1081" name="#5" dev="tmpfs" ino=1416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 97.131101][ T2952] overlayfs: invalid origin (0000) [ 97.203179][ T28] audit: type=1400 audit(1743659481.354:759): avc: denied { ioctl } for pid=2956 comm="syz.2.1091" path="socket:[28181]" dev="sockfs" ino=28181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.203396][ T2959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1091'. [ 97.230758][ T28] audit: type=1400 audit(1743659481.394:760): avc: denied { unmount } for pid=1822 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 97.501537][ T2994] loop9: detected capacity change from 0 to 16 [ 97.510906][ T2994] erofs: (device loop9): mounted with root inode @ nid 36. [ 97.553459][ T28] audit: type=1400 audit(1743659481.704:761): avc: denied { execute } for pid=3004 comm="syz.9.1113" path="/113/bus" dev="tmpfs" ino=606 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.637348][ T3016] loop2: detected capacity change from 0 to 1024 [ 97.646567][ T3016] EXT4-fs: Ignoring removed nobh option [ 97.651972][ T3016] EXT4-fs: Ignoring removed bh option [ 97.659668][ T3016] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.686651][ T3016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.708502][ T3016] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 97.731983][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 97.774049][ T28] audit: type=1400 audit(1743659481.924:762): avc: denied { relabelfrom } for pid=3033 comm="syz.9.1123" name="TCPv6" dev="sockfs" ino=27593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 97.774086][ T3034] SELinux: Context system_u:object_r:login_exec_t:s0 is not valid (left unmapped). [ 97.807169][ T28] audit: type=1400 audit(1743659481.964:763): avc: denied { relabelto } for pid=3033 comm="syz.9.1123" name="TCPv6" dev="sockfs" ino=27593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:login_exec_t:s0" [ 97.834493][ T502] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 97.959799][ T28] audit: type=1400 audit(1743659482.114:764): avc: denied { remount } for pid=3042 comm="syz.2.1127" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 98.004764][ T305] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 98.014799][ T502] usb 4-1: Using ep0 maxpacket: 16 [ 98.020987][ T502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.031934][ T502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.042096][ T502] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 98.055284][ T502] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 98.064288][ T502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.072954][ T502] usb 4-1: config 0 descriptor?? [ 98.170777][ T3054] loop2: detected capacity change from 0 to 256 [ 98.180492][ T3054] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.193615][ T305] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.204624][ T305] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.214318][ T305] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.224171][ T305] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.238528][ T305] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.247492][ T305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.255509][ T305] usb 2-1: Product: syz [ 98.259407][ T305] usb 2-1: Manufacturer: syz [ 98.263852][ T305] usb 2-1: SerialNumber: syz [ 98.480896][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.488105][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.495218][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.502296][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.504743][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.509434][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.524750][ T28] audit: type=1400 audit(1743659482.674:765): avc: denied { execstack } for pid=3060 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 98.543964][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.551178][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.558259][ T502] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 98.569181][ T502] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0010/input/input10 [ 98.645629][ T502] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 98.689788][ T502] usb 4-1: USB disconnect, device number 10 [ 98.708388][ T6] usb 3-1: config 255 has an invalid interface number: 20 but max is 0 [ 98.716822][ T6] usb 3-1: config 255 has no interface number 0 [ 98.723001][ T6] usb 3-1: config 255 interface 20 has no altsetting 0 [ 98.731550][ T6] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=8e.4f [ 98.740951][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.749320][ T6] usb 3-1: Product: syz [ 98.753329][ T6] usb 3-1: Manufacturer: syz [ 98.758111][ T6] usb 3-1: SerialNumber: syz [ 98.964886][ T3056] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1133'. [ 98.976296][ T6] usb 3-1: USB disconnect, device number 3 [ 99.272041][ T305] cdc_ncm 2-1:1.0: bind() failure [ 99.280891][ T305] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 99.292565][ T305] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 99.311992][ T305] usb 2-1: USB disconnect, device number 10 [ 99.435782][ T28] audit: type=1400 audit(1743659483.594:766): avc: denied { write } for pid=3079 comm="syz.0.1143" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 99.527159][ T3091] loop3: detected capacity change from 0 to 512 [ 99.534307][ T3091] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.546524][ T3091] EXT4-fs (loop3): 1 truncate cleaned up [ 99.552027][ T3091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.564618][ T3091] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1145: corrupted in-inode xattr [ 99.577701][ T3091] EXT4-fs (loop3): Remounting filesystem read-only [ 99.579449][ T3095] loop2: detected capacity change from 0 to 256 [ 99.584461][ T3091] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1723: inode #15: comm syz.3.1145: unable to update i_inline_off [ 99.593907][ T3095] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 99.602932][ T3091] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.1145: corrupted in-inode xattr [ 99.627212][ T3091] EXT4-fs (loop3): Remounting filesystem read-only [ 99.664886][ T1822] EXT4-fs (loop3): unmounting filesystem. [ 99.725320][ T3109] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 99.820876][ T3128] loop3: detected capacity change from 0 to 16 [ 99.834842][ T3128] erofs: (device loop3): mounted with root inode @ nid 36. [ 99.854154][ T3128] syz.3.1164: attempt to access beyond end of device [ 99.854154][ T3128] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 99.869133][ T3128] syz.3.1164: attempt to access beyond end of device [ 99.869133][ T3128] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 100.385290][ T3214] loop2: detected capacity change from 0 to 512 [ 100.404770][ T297] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 100.431124][ T3214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.444800][ T3214] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.475115][ T3214] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.488522][ T3214] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 100.497502][ T3214] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 100.506979][ T3214] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 100.517746][ T3214] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.529193][ T3214] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1202: dx entry: limit 65535 != root limit 120 [ 100.554320][ T3214] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1202: Corrupt directory, running e2fsck is recommended [ 100.567232][ T3214] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.1202: path /29/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 100.596188][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 100.616551][ T297] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.639895][ T297] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.666713][ T3235] loop2: detected capacity change from 0 to 512 [ 100.673431][ T3235] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.674711][ T297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.680373][ T3235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.698286][ T297] usb 10-1: Product: syz [ 100.702522][ T297] usb 10-1: Manufacturer: syz [ 100.707131][ T297] usb 10-1: SerialNumber: syz [ 100.708505][ T3235] EXT4-fs (loop2): 1 truncate cleaned up [ 100.722924][ T3235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.753190][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 100.766899][ T3245] loop1: detected capacity change from 0 to 512 [ 100.789924][ T3245] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.1217: corrupted inode contents [ 100.801929][ T3245] EXT4-fs error (device loop1): ext4_dirty_inode:6091: inode #16: comm syz.1.1217: mark_inode_dirty error [ 100.813519][ T3245] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.1217: corrupted inode contents [ 100.825796][ T3245] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1217: mark_inode_dirty error [ 100.838678][ T3245] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.1217: corrupted inode contents [ 100.850875][ T3245] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 100.859478][ T3245] EXT4-fs error (device loop1): ext4_do_update_inode:5226: inode #16: comm syz.1.1217: corrupted inode contents [ 100.871580][ T3245] EXT4-fs error (device loop1): ext4_truncate:4313: inode #16: comm syz.1.1217: mark_inode_dirty error [ 100.884439][ T3245] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 100.894461][ T3245] EXT4-fs (loop1): 1 truncate cleaned up [ 100.899992][ T3245] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.909096][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6805: comm kworker/u4:2: Failed to release dquot type 1 [ 100.921976][ T3245] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.934705][ T297] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 100.955955][ T3251] loop2: detected capacity change from 0 to 40427 [ 100.962891][ T3251] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 100.963668][ T293] EXT4-fs (loop1): unmounting filesystem. [ 100.970611][ T3251] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.986885][ T3251] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.012163][ T3258] device pim6reg1 entered promiscuous mode [ 101.032544][ T3251] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.039678][ T3251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.138383][ T297] usb 10-1: USB disconnect, device number 6 [ 101.147553][ T297] usblp0: removed [ 101.188415][ T3271] loop1: detected capacity change from 0 to 1024 [ 101.194963][ T3271] EXT4-fs: Ignoring removed bh option [ 101.200570][ T3271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.216787][ T3271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.233663][ T293] EXT4-fs (loop1): unmounting filesystem. [ 101.448922][ T3311] futex_wake_op: syz.3.1243 tries to shift op by -1; fix this program [ 101.854777][ T297] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 102.046179][ T297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.057117][ T297] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.065976][ T297] usb 1-1: config 1 has no interface number 0 [ 102.071925][ T297] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.082864][ T297] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 102.093888][ T297] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 102.102904][ T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.111186][ T297] usb 1-1: Product: syz [ 102.115515][ T297] usb 1-1: Manufacturer: syz [ 102.118882][ T3358] loop9: detected capacity change from 0 to 512 [ 102.123422][ T297] usb 1-1: SerialNumber: syz [ 102.137963][ T3358] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #16: comm syz.9.1265: corrupted inode contents [ 102.150149][ T3358] EXT4-fs error (device loop9): ext4_dirty_inode:6091: inode #16: comm syz.9.1265: mark_inode_dirty error [ 102.161636][ T3358] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #16: comm syz.9.1265: corrupted inode contents [ 102.174115][ T3358] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #16: comm syz.9.1265: mark_inode_dirty error [ 102.186144][ T3358] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #16: comm syz.9.1265: corrupted inode contents [ 102.198776][ T3358] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 102.207566][ T3358] EXT4-fs error (device loop9): ext4_do_update_inode:5226: inode #16: comm syz.9.1265: corrupted inode contents [ 102.219732][ T3358] EXT4-fs error (device loop9): ext4_truncate:4313: inode #16: comm syz.9.1265: mark_inode_dirty error [ 102.231280][ T3358] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 102.241165][ T3358] EXT4-fs (loop9): 1 truncate cleaned up [ 102.247065][ T3358] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 102.255889][ T3358] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.256035][ T8] __quota_error: 20 callbacks suppressed [ 102.256051][ T8] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 102.282028][ T8] EXT4-fs error (device loop9): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 102.296279][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 102.311731][ T3365] erofs: (device loop19): erofs_read_superblock: cannot find valid erofs superblock [ 102.336495][ T28] audit: type=1400 audit(1743659486.490:786): avc: denied { write } for pid=3366 comm="syz.9.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.440084][ T3378] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 102.449845][ T28] audit: type=1400 audit(1743659486.610:787): avc: denied { relabelto } for pid=3376 comm="syz.9.1272" name="132" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.479320][ T28] audit: type=1400 audit(1743659486.610:788): avc: denied { associate } for pid=3376 comm="syz.9.1272" name="132" dev="tmpfs" ino=701 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.506807][ T28] audit: type=1400 audit(1743659486.640:789): avc: denied { write } for pid=1791 comm="syz-executor" name="132" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.532733][ T28] audit: type=1400 audit(1743659486.640:790): avc: denied { remove_name } for pid=1791 comm="syz-executor" name="binderfs" dev="tmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.560562][ T28] audit: type=1400 audit(1743659486.640:791): avc: denied { rmdir } for pid=1791 comm="syz-executor" name="132" dev="tmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 102.616885][ T3387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1277'. [ 102.749332][ T3413] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 102.778524][ T28] audit: type=1400 audit(1743659486.930:792): avc: denied { write } for pid=3418 comm="syz.3.1293" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.800550][ T3421] loop2: detected capacity change from 0 to 1024 [ 102.803056][ T3419] binder: 3418:3419 ioctl c0306201 200000000080 returned -14 [ 102.808846][ T3421] EXT4-fs: Ignoring removed bh option [ 102.821440][ T3421] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.836858][ T3421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.863248][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 102.936483][ T297] cdc_ncm 1-1:1.1: bind() failure [ 102.944730][ T6] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 102.978409][ T28] audit: type=1400 audit(1743659487.130:793): avc: denied { shutdown } for pid=3450 comm="syz.3.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.000101][ T3455] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 103.006195][ T28] audit: type=1400 audit(1743659487.130:794): avc: denied { nlmsg_write } for pid=3451 comm="syz.1.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 103.059998][ T3464] loop2: detected capacity change from 0 to 256 [ 103.067223][ T3464] exfat: Deprecated parameter 'namecase' [ 103.072835][ T3464] exfat: Deprecated parameter 'utf8' [ 103.083077][ T3464] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 103.124818][ T6] usb 10-1: Using ep0 maxpacket: 8 [ 103.131348][ T6] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 103.160903][ T6] usb 10-1: config 179 has no interface number 0 [ 103.173836][ T6] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 103.193325][ T6] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 103.205128][ T6] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.218838][ T6] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 103.231074][ T6] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 103.247418][ T6] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 103.257934][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.268969][ T3396] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 103.276097][ T297] usb 1-1: USB disconnect, device number 6 [ 103.329076][ T3492] loop2: detected capacity change from 0 to 16 [ 103.337115][ T3492] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.479712][ T3503] loop2: detected capacity change from 0 to 512 [ 103.495784][ T3396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.499473][ T3503] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.1329: corrupted inode contents [ 103.504603][ T3396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.516998][ T3503] EXT4-fs error (device loop2): ext4_dirty_inode:6091: inode #16: comm syz.2.1329: mark_inode_dirty error [ 103.535486][ T3503] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.1329: corrupted inode contents [ 103.548385][ T3503] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1329: mark_inode_dirty error [ 103.561296][ T3503] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.1329: corrupted inode contents [ 103.573419][ T3503] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 103.582846][ T3503] EXT4-fs error (device loop2): ext4_do_update_inode:5226: inode #16: comm syz.2.1329: corrupted inode contents [ 103.596205][ T3503] EXT4-fs error (device loop2): ext4_truncate:4313: inode #16: comm syz.2.1329: mark_inode_dirty error [ 103.607559][ T3503] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 103.618329][ T3503] EXT4-fs (loop2): 1 truncate cleaned up [ 103.624023][ T3503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.632978][ T3503] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.645056][ T8] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:0: Failed to release dquot type 1 [ 103.681246][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 103.717080][ T3518] loop1: detected capacity change from 0 to 256 [ 103.733484][ T3518] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 103.737575][ T502] usb 10-1: USB disconnect, device number 7 [ 103.745781][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.745820][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 103.859913][ T3530] loop2: detected capacity change from 0 to 256 [ 103.866534][ T3530] exfat: Deprecated parameter 'namecase' [ 103.882357][ T3530] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 103.913471][ T3530] syz.2.1341: attempt to access beyond end of device [ 103.913471][ T3530] loop2: rw=34817, sector=34359738488, nr_sectors = 8 limit=256 [ 104.003564][ T3540] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 104.246168][ T3565] loop3: detected capacity change from 0 to 512 [ 104.253030][ T3565] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.275790][ T3565] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.292223][ T3565] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 104.302372][ T3565] EXT4-fs (loop3): 1 truncate cleaned up [ 104.311770][ T3565] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.374735][ T297] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 104.412610][ T1822] EXT4-fs (loop3): unmounting filesystem. [ 104.483760][ T3572] loop9: detected capacity change from 0 to 40427 [ 104.495000][ T3572] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 104.512916][ T3572] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 104.544072][ T3572] F2FS-fs (loop9): Found nat_bits in checkpoint [ 104.566018][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.593508][ T297] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 104.612257][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.614077][ T3572] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 104.627334][ T3572] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 104.629069][ T297] usb 2-1: config 0 descriptor?? [ 104.908356][ T3619] loop2: detected capacity change from 0 to 512 [ 104.927063][ T3619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 104.941348][ T3619] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.964500][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 104.987315][ T324] tipc: Subscription rejected, illegal request [ 105.049338][ T297] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 105.063744][ T3641] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=3641 comm=syz.2.1386 [ 105.068304][ T297] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input11 [ 105.158051][ T297] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 105.441192][ T3695] loop9: detected capacity change from 0 to 256 [ 105.447794][ T3695] exfat: Deprecated parameter 'namecase' [ 105.453359][ T3695] exfat: Deprecated parameter 'utf8' [ 105.463244][ T3695] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 105.564233][ T297] usb 2-1: USB disconnect, device number 11 [ 105.647101][ T3700] loop9: detected capacity change from 0 to 40427 [ 105.654253][ T3700] F2FS-fs (loop9): fault_type options not supported [ 105.661901][ T3700] F2FS-fs (loop9): invalid crc value [ 105.672016][ T3700] F2FS-fs (loop9): Found nat_bits in checkpoint [ 105.777468][ T3700] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 105.825075][ T3700] netlink: 'syz.9.1412': attribute type 11 has an invalid length. [ 105.935407][ T3724] loop2: detected capacity change from 0 to 128 [ 105.942063][ T3724] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 106.034618][ T3737] loop9: detected capacity change from 0 to 512 [ 106.049026][ T3737] EXT4-fs (loop9): 1 orphan inode deleted [ 106.054831][ T3737] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 106.063893][ T3737] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.074490][ T317] EXT4-fs error (device loop9): ext4_release_dquot:6805: comm kworker/u4:3: Failed to release dquot type 1 [ 106.105559][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 106.132668][ T3749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'. [ 106.279005][ T3747] loop9: detected capacity change from 0 to 40427 [ 106.286033][ T3747] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 106.293872][ T3747] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 106.303484][ T3747] F2FS-fs (loop9): invalid crc value [ 106.310221][ T3747] F2FS-fs (loop9): Found nat_bits in checkpoint [ 106.356986][ T3747] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 106.363992][ T3747] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 106.736639][ T3781] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1452'. [ 107.014977][ T297] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.104808][ T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.124733][ T19] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 107.133285][ T3810] loop1: detected capacity change from 0 to 256 [ 107.143196][ T3810] exfat: Deprecated parameter 'namecase' [ 107.150025][ T3810] exfat: Deprecated parameter 'utf8' [ 107.158988][ T3810] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 107.204758][ T297] usb 1-1: Using ep0 maxpacket: 8 [ 107.211481][ T297] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 107.220297][ T297] usb 1-1: config 179 has no interface number 0 [ 107.228152][ T297] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 107.239372][ T297] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 107.250646][ T297] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 107.261815][ T297] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 107.273858][ T297] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 107.288015][ T297] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 107.296980][ T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.305810][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.317082][ T6] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.326147][ T3783] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.333697][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.341923][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.354977][ T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.365877][ T6] usb 4-1: config 0 descriptor?? [ 107.370759][ T19] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.383896][ T19] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.394079][ T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.403263][ T19] usb 10-1: config 0 descriptor?? [ 107.506098][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 107.506115][ T28] audit: type=1400 audit(1743659491.660:804): avc: denied { connect } for pid=3827 comm="syz.1.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.532348][ T28] audit: type=1400 audit(1743659491.660:805): avc: denied { ioctl } for pid=3827 comm="syz.1.1464" path="socket:[32102]" dev="sockfs" ino=32102 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.565764][ T3783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.574046][ T3783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.587997][ T28] audit: type=1400 audit(1743659491.740:806): avc: denied { compute_member } for pid=3831 comm="syz.1.1466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 107.748946][ T3836] loop1: detected capacity change from 0 to 40427 [ 107.756285][ T3836] F2FS-fs (loop1): fault_injection options not supported [ 107.764060][ T3836] F2FS-fs (loop1): invalid crc value [ 107.770920][ T3836] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.793600][ T313] usb 1-1: USB disconnect, device number 7 [ 107.799482][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 107.799521][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 107.817797][ T6] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 107.819676][ T3836] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.827427][ T19] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 107.844274][ T3838] f2fs_ckpt-7:1: attempt to access beyond end of device [ 107.844274][ T3838] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 107.844303][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0012/input/input12 [ 107.871281][ T19] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 107.947606][ T6] keytouch 0003:0926:3333.0012: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 108.108042][ T313] usb 10-1: USB disconnect, device number 8 [ 108.347094][ T305] usb 4-1: USB disconnect, device number 11 [ 108.514895][ T3854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1472'. [ 108.642332][ T28] audit: type=1400 audit(1743659492.790:807): avc: denied { unmount } for pid=1791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.665738][ T3870] loop9: detected capacity change from 0 to 256 [ 108.766054][ T3880] loop9: detected capacity change from 0 to 256 [ 108.772616][ T3880] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.793355][ T28] audit: type=1400 audit(1743659492.940:808): avc: denied { mount } for pid=3881 comm="syz.0.1486" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.795131][ T3880] FAT-fs (loop9): Directory bread(block 64) failed [ 108.821644][ T3880] FAT-fs (loop9): Directory bread(block 65) failed [ 108.828161][ T3880] FAT-fs (loop9): Directory bread(block 66) failed [ 108.834763][ T3880] FAT-fs (loop9): Directory bread(block 67) failed [ 108.841162][ T3880] FAT-fs (loop9): Directory bread(block 68) failed [ 108.847639][ T3880] FAT-fs (loop9): Directory bread(block 69) failed [ 108.854011][ T3880] FAT-fs (loop9): Directory bread(block 70) failed [ 108.873552][ T3880] FAT-fs (loop9): Directory bread(block 71) failed [ 108.880346][ T3880] FAT-fs (loop9): Directory bread(block 72) failed [ 108.888590][ T3880] FAT-fs (loop9): Directory bread(block 73) failed [ 108.895057][ T19] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.941944][ T28] audit: type=1400 audit(1743659493.090:809): avc: denied { remount } for pid=3879 comm="syz.9.1485" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 109.004944][ T3900] loop3: detected capacity change from 0 to 256 [ 109.059262][ T3909] loop1: detected capacity change from 0 to 256 [ 109.077611][ T3909] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.084736][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 109.095806][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.110363][ T3909] FAT-fs (loop1): Directory bread(block 64) failed [ 109.116895][ T3909] FAT-fs (loop1): Directory bread(block 65) failed [ 109.116989][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.123364][ T3909] FAT-fs (loop1): Directory bread(block 66) failed [ 109.138873][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.139652][ T3909] FAT-fs (loop1): Directory bread(block 67) failed [ 109.151923][ T19] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.151953][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.152773][ T19] usb 3-1: config 0 descriptor?? [ 109.175356][ T3909] FAT-fs (loop1): Directory bread(block 68) failed [ 109.186235][ T3909] FAT-fs (loop1): Directory bread(block 69) failed [ 109.192635][ T3909] FAT-fs (loop1): Directory bread(block 70) failed [ 109.199390][ T3909] FAT-fs (loop1): Directory bread(block 71) failed [ 109.205868][ T3909] FAT-fs (loop1): Directory bread(block 72) failed [ 109.212439][ T3909] FAT-fs (loop1): Directory bread(block 73) failed [ 109.324783][ T502] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 109.345855][ T3916] device veth0_vlan left promiscuous mode [ 109.351787][ T3916] device veth0_vlan entered promiscuous mode [ 109.364720][ T305] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 109.390625][ T28] audit: type=1400 audit(1743659493.540:810): avc: denied { mount } for pid=3917 comm="syz.1.1501" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.439017][ T3922] loop1: detected capacity change from 0 to 256 [ 109.452700][ T3922] FAT-fs (loop1): Directory bread(block 64) failed [ 109.460409][ T3922] FAT-fs (loop1): Directory bread(block 65) failed [ 109.466920][ T3922] FAT-fs (loop1): Directory bread(block 66) failed [ 109.473341][ T3922] FAT-fs (loop1): Directory bread(block 67) failed [ 109.479953][ T3922] FAT-fs (loop1): Directory bread(block 68) failed [ 109.486432][ T3922] FAT-fs (loop1): Directory bread(block 69) failed [ 109.492873][ T3922] FAT-fs (loop1): Directory bread(block 70) failed [ 109.499488][ T3922] FAT-fs (loop1): Directory bread(block 71) failed [ 109.505957][ T3922] FAT-fs (loop1): Directory bread(block 72) failed [ 109.512371][ T3922] FAT-fs (loop1): Directory bread(block 73) failed [ 109.520146][ T502] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.531332][ T502] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.545136][ T502] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.554205][ T502] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.562225][ T502] usb 10-1: SerialNumber: syz [ 109.568356][ T305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.579844][ T305] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 109.588827][ T305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.589995][ T19] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 109.604890][ T305] usb 1-1: config 0 descriptor?? [ 109.613640][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0014/input/input13 [ 109.699171][ T19] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 109.795980][ T313] usb 3-1: USB disconnect, device number 4 [ 109.799699][ T502] usb 10-1: 0:2 : does not exist [ 109.812080][ T502] usb 10-1: usbmixer: too many channels (61) in unit 5 [ 109.835176][ T502] usb 10-1: USB disconnect, device number 9 [ 110.005781][ T3959] netlink: 'syz.1.1521': attribute type 12 has an invalid length. [ 110.013630][ T3959] netlink: 'syz.1.1521': attribute type 29 has an invalid length. [ 110.021863][ T305] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 110.022477][ T3959] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1521'. [ 110.040798][ T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0015/input/input14 [ 110.069582][ T3963] loop1: detected capacity change from 0 to 256 [ 110.076381][ T3963] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.087099][ T3963] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 110.098532][ T3963] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 110.126875][ T305] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 110.318997][ T3976] netlink: 'syz.2.1529': attribute type 4 has an invalid length. [ 110.326975][ T3976] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1529'. [ 110.365060][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 110.373830][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 110.383292][ T3983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 110.392822][ T3983] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 110.504747][ T19] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 110.539549][ T28] audit: type=1400 audit(1743659494.690:811): avc: denied { mounton } for pid=3997 comm="syz.2.1538" path="/129/file0" dev="tmpfs" ino=692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 110.540093][ T305] usb 1-1: USB disconnect, device number 8 [ 110.696157][ T4000] syz.3.1539[4000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.696238][ T4000] syz.3.1539[4000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.706093][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.730785][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.742188][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.751293][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.759185][ T19] usb 2-1: Product: syz [ 110.763156][ T19] usb 2-1: Manufacturer: syz [ 110.767965][ T19] usb 2-1: SerialNumber: syz [ 110.866161][ T4000] loop3: detected capacity change from 0 to 40427 [ 110.873153][ T4000] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 110.881310][ T4000] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 110.892070][ T4000] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.932381][ T4000] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 110.939529][ T4000] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 110.973502][ T1822] syz-executor: attempt to access beyond end of device [ 110.973502][ T1822] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.995280][ T19] usb 2-1: 0:2 : does not exist [ 111.002282][ T19] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 111.015477][ T19] usb 2-1: USB disconnect, device number 12 [ 111.100062][ T28] audit: type=1400 audit(1743659495.250:812): avc: denied { create } for pid=4007 comm="syz.0.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.170152][ T28] audit: type=1400 audit(1743659495.320:813): avc: denied { read } for pid=4014 comm="syz.0.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 111.423919][ T4041] syz.9.1557[4041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.424017][ T4041] syz.9.1557[4041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.469146][ T4020] loop3: detected capacity change from 0 to 40427 [ 111.500505][ T4020] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 111.509277][ T4020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 111.520704][ T4020] F2FS-fs (loop3): invalid crc value [ 111.531591][ T4020] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.597397][ T4070] loop1: detected capacity change from 0 to 512 [ 111.604711][ T4070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.606880][ T4020] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 111.617114][ T4070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.620458][ T4020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.629107][ T4070] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.707579][ T293] EXT4-fs (loop1): unmounting filesystem. [ 112.014765][ T502] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 112.219181][ T502] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.229250][ T502] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.239633][ T502] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.240945][ T4167] loop1: detected capacity change from 0 to 1024 [ 112.248708][ T502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.262731][ T502] usb 3-1: Product: syz [ 112.266727][ T502] usb 3-1: Manufacturer: syz [ 112.271367][ T502] usb 3-1: SerialNumber: syz [ 112.344387][ T6] kernel write not supported for file /cpuinfo (pid: 6 comm: kworker/0:0) [ 112.471055][ T4196] netlink: 'syz.9.1625': attribute type 3 has an invalid length. [ 112.480254][ T502] usb 3-1: 0:2 : does not exist [ 112.486618][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1625'. [ 112.495898][ T502] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 112.509434][ T502] usb 3-1: USB disconnect, device number 5 [ 112.563194][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 112.563210][ T28] audit: type=1400 audit(1743659496.710:827): avc: denied { shutdown } for pid=4215 comm="syz.3.1634" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.814784][ T496] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 112.874752][ T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.996120][ T496] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 113.007835][ T496] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.027141][ T496] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.036332][ T496] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.044264][ T496] usb 10-1: Product: syz [ 113.048515][ T496] usb 10-1: Manufacturer: syz [ 113.053059][ T496] usb 10-1: SerialNumber: syz [ 113.057581][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 113.064493][ T6] usb 4-1: config 0 has an invalid interface number: 155 but max is 0 [ 113.072873][ T4209] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 113.080281][ T6] usb 4-1: config 0 has no interface number 0 [ 113.088597][ T6] usb 4-1: New USB device found, idVendor=286d, idProduct=5329, bcdDevice=3f.cc [ 113.098728][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.107887][ T6] usb 4-1: Product: syz [ 113.112128][ T6] usb 4-1: Manufacturer: syz [ 113.116565][ T6] usb 4-1: SerialNumber: syz [ 113.122011][ T6] usb 4-1: config 0 descriptor?? [ 113.127630][ T6] usb-storage 4-1:0.155: USB Mass Storage device detected [ 113.211044][ T28] audit: type=1400 audit(1743659497.360:828): avc: denied { map } for pid=4237 comm="syz.2.1643" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.294790][ T496] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 113.329667][ T6] usb 4-1: USB disconnect, device number 12 [ 113.379382][ T496] usb 10-1: USB disconnect, device number 10 [ 113.386181][ T496] usblp0: removed [ 113.828321][ T4263] syz.0.1652[4263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.828400][ T4263] syz.0.1652[4263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.956205][ T4275] loop9: detected capacity change from 0 to 512 [ 113.975016][ T4275] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 113.986991][ T4275] EXT4-fs (loop9): 1 truncate cleaned up [ 113.992691][ T4275] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 114.019363][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 114.032345][ T4279] syz.9.1659[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.032419][ T4279] syz.9.1659[4279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.114786][ T297] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 114.135270][ T19] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.299110][ T4291] netlink: 96 bytes leftover after parsing attributes in process `syz.9.1664'. [ 114.318019][ T297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.328270][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.339174][ T297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 114.348108][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.358013][ T297] usb 4-1: config 1 has no interface number 0 [ 114.364046][ T297] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.374731][ T19] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 114.383960][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.391967][ T297] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 114.402364][ T19] usb 1-1: config 0 descriptor?? [ 114.414783][ T297] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.426039][ T297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.433913][ T297] usb 4-1: Product: syz [ 114.438051][ T297] usb 4-1: Manufacturer: syz [ 114.442520][ T297] usb 4-1: SerialNumber: syz [ 114.585904][ T4306] loop1: detected capacity change from 0 to 2048 [ 114.598236][ T4306] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e02c, mo2=0002] [ 114.606380][ T4306] System zones: 0-7 [ 114.610718][ T4306] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 114.674870][ T4309] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1671: bg 0: block 234: padding at end of block bitmap is not set [ 114.689391][ T4309] EXT4-fs (loop1): Remounting filesystem read-only [ 114.714747][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 114.758571][ T293] EXT4-fs (loop1): unmounting filesystem. [ 114.820750][ T19] hid-steam 0003:28DE:1142.0016: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 114.833279][ T19] hid-steam 0003:28DE:1142.0017: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 114.895910][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.906764][ T6] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.915790][ T19] hid-steam 0003:28DE:1142.0016: Steam wireless receiver connected [ 114.923682][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.932999][ T6] usb 3-1: config 0 descriptor?? [ 115.024139][ T313] usb 1-1: USB disconnect, device number 9 [ 115.031023][ T313] hid-steam 0003:28DE:1142.0016: Steam wireless receiver disconnected [ 115.252325][ T297] cdc_ncm 4-1:1.1: bind() failure [ 115.340704][ T6] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 115.350658][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0018/input/input15 [ 115.426422][ T6] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 115.454974][ T6] usb 4-1: USB disconnect, device number 13 [ 115.644460][ T28] audit: type=1400 audit(1743659499.790:829): avc: denied { sqpoll } for pid=4337 comm="syz.0.1683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.800226][ T4343] binder: 4342:4343 ioctl c0306201 0 returned -14 [ 115.855336][ T6] usb 3-1: USB disconnect, device number 6 [ 115.867208][ T28] audit: type=1400 audit(1743659500.020:830): avc: denied { getopt } for pid=4348 comm="syz.1.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.050791][ T4370] syz.3.1699[4370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.050872][ T4370] syz.3.1699[4370] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.063991][ T28] audit: type=1400 audit(1743659500.220:831): avc: denied { relabelfrom } for pid=4369 comm="syz.1.1700" name="NETLINK" dev="sockfs" ino=33482 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.151303][ T28] audit: type=1400 audit(1743659500.220:832): avc: denied { relabelto } for pid=4369 comm="syz.1.1700" name="NETLINK" dev="sockfs" ino=33482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 116.151581][ T4377] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 116.344929][ T4373] loop3: detected capacity change from 0 to 40427 [ 116.355243][ T4373] F2FS-fs (loop3): fault_injection options not supported [ 116.368380][ T4373] F2FS-fs (loop3): invalid crc value [ 116.390187][ T4373] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.461213][ T4397] loop9: detected capacity change from 0 to 1024 [ 116.471270][ T4373] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.493710][ T28] audit: type=1400 audit(1743659500.640:833): avc: denied { rename } for pid=4372 comm="syz.3.1701" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.495049][ T4391] f2fs_ckpt-7:3: attempt to access beyond end of device [ 116.495049][ T4391] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 116.554732][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 116.567150][ T4397] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 116.575675][ T4397] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.604284][ T4397] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 116.619384][ T4397] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 116.637870][ T4397] EXT4-fs (loop9): This should not happen!! Data will be lost [ 116.637870][ T4397] [ 116.672105][ T28] audit: type=1400 audit(1743659500.820:834): avc: denied { append } for pid=4396 comm="syz.9.1712" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 116.704782][ T4397] EXT4-fs (loop9): Total free blocks count 0 [ 116.724961][ T4397] EXT4-fs (loop9): Free/Dirty block details [ 116.735184][ T4397] EXT4-fs (loop9): free_blocks=4293918720 [ 116.741322][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.761428][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.775208][ T4397] EXT4-fs (loop9): dirty_blocks=80 [ 116.784465][ T4397] EXT4-fs (loop9): Block reservation details [ 116.790402][ T6] usb 2-1: config 1 has no interface number 0 [ 116.790434][ T6] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.810595][ T4397] EXT4-fs (loop9): i_reserved_data_blocks=5 [ 116.827172][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 116.834714][ T6] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 116.849594][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.868026][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.874583][ T4427] overlayfs: failed to set xattr on upper [ 116.875993][ T6] usb 2-1: Product: syz [ 116.876013][ T6] usb 2-1: Manufacturer: syz [ 116.882591][ T4427] overlayfs: ...falling back to index=off,metacopy=off. [ 116.885941][ T6] usb 2-1: SerialNumber: syz [ 116.901979][ T4427] overlayfs: ...falling back to xino=off. [ 116.907966][ T4427] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 117.041736][ T28] audit: type=1326 audit(1743659501.190:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0dd58d169 code=0x7ffc0000 [ 117.065981][ T28] audit: type=1326 audit(1743659501.190:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0dd58d169 code=0x7ffc0000 [ 117.150891][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.158126][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.165460][ T496] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 117.214742][ T313] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 117.300142][ T4470] SELinux: Context system_u:object_r:ipmi_device_t:s0 is not valid (left unmapped). [ 117.332311][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.340776][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.348297][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.357691][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.365296][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.365846][ T496] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.372701][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.392170][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.399826][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.407550][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.414297][ T496] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.424191][ T496] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.425879][ T313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.443188][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.452427][ T313] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.461593][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.469616][ T496] usb 10-1: config 0 descriptor?? [ 117.475021][ T313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 117.487571][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.495308][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.503012][ T313] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 117.512408][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.521064][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.530589][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.545101][ T4432] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 117.553243][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.561908][ T313] hub 3-1:1.0: bad descriptor, ignoring hub [ 117.569435][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.577306][ T313] hub: probe of 3-1:1.0 failed with error -5 [ 117.584936][ T313] cdc_wdm 3-1:1.0: skipping garbage [ 117.590224][ T313] cdc_wdm 3-1:1.0: skipping garbage [ 117.595399][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.603028][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.614638][ T313] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 117.627131][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.635489][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.643399][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.652371][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.660403][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.668063][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.675510][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.683055][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.691961][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.699773][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.707480][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.715121][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.723218][ T6] cdc_ncm 2-1:1.1: bind() failure [ 117.735753][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.743351][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.750818][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.758415][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.765898][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.781265][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.788773][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.796016][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.803240][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.810944][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.818616][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.826101][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.834027][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.841744][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.849234][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.856634][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.864423][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.871885][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.879294][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.886677][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.888807][ T496] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 117.902624][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.910398][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.918029][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.924372][ T496] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001A/input/input16 [ 117.945098][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.952581][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.960115][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.967649][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.975570][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.983052][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.990445][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 117.997975][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.005384][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.012898][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.020617][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.027401][ T496] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 118.040156][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.047806][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.055316][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.063094][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.070505][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.077891][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.085444][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.094718][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.106805][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.115608][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.123034][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.130393][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.137901][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.145755][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.153149][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.160983][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.169716][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.178748][ T19] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 118.188717][ T19] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz0] on syz0 [ 118.218422][ T313] usb 2-1: USB disconnect, device number 13 [ 118.301954][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 118.301971][ T28] audit: type=1400 audit(1743659502.450:848): avc: denied { mounton } for pid=4484 comm="syz.0.1749" path="/211/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 118.365428][ T28] audit: type=1400 audit(1743659502.520:849): avc: denied { watch watch_reads } for pid=4490 comm="syz.3.1752" path="/224/file0" dev="tmpfs" ino=1191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.407685][ T502] usb 10-1: USB disconnect, device number 11 [ 118.469363][ T28] audit: type=1400 audit(1743659502.620:850): avc: denied { listen } for pid=4504 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.490486][ T28] audit: type=1400 audit(1743659502.640:851): avc: denied { accept } for pid=4504 comm="syz.1.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.535420][ T6] usb 3-1: USB disconnect, device number 7 [ 118.794893][ T496] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 118.884779][ T6] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 118.959584][ T28] audit: type=1400 audit(1743659503.110:852): avc: denied { append } for pid=4544 comm="syz.3.1774" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 118.985476][ T496] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.996359][ T496] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.012087][ T496] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.021039][ T496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.028818][ T496] usb 1-1: Product: syz [ 119.032898][ T496] usb 1-1: Manufacturer: syz [ 119.037335][ T496] usb 1-1: SerialNumber: syz [ 119.075943][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.086071][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.094844][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 119.105794][ T6] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 119.115065][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.124204][ T4432] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 119.131831][ T6] hub 3-1:1.0: bad descriptor, ignoring hub [ 119.137931][ T6] hub: probe of 3-1:1.0 failed with error -5 [ 119.143893][ T6] cdc_wdm 3-1:1.0: skipping garbage [ 119.149313][ T6] cdc_wdm 3-1:1.0: skipping garbage [ 119.155138][ T6] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 119.180022][ T4554] loop1: detected capacity change from 0 to 2048 [ 119.206838][ T4554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 119.215242][ T313] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 119.227625][ T293] EXT4-fs (loop1): unmounting filesystem. [ 119.246863][ T496] usb 1-1: 0:2 : does not exist [ 119.253438][ T496] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 119.263766][ T496] usb 1-1: USB disconnect, device number 10 [ 119.395886][ T313] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.406205][ T313] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.415032][ T313] usb 10-1: config 1 has no interface number 0 [ 119.421537][ T313] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.432877][ T313] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 119.443358][ T313] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.452340][ T313] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.460380][ T313] usb 10-1: Product: syz [ 119.464354][ T313] usb 10-1: Manufacturer: syz [ 119.469085][ T313] usb 10-1: SerialNumber: syz [ 119.474180][ T19] usb 3-1: USB disconnect, device number 8 [ 119.507877][ T6] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 119.694727][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 119.700763][ T6] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.711666][ T6] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.721273][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.727703][ T6] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.736574][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.745095][ T6] usb 2-1: config 0 descriptor?? [ 119.854760][ T496] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 120.044783][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 120.053144][ T496] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.064409][ T496] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.074892][ T496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.084423][ T496] usb 4-1: config 0 descriptor?? [ 120.157979][ T6] hid (null): unknown global tag 0xc [ 120.225921][ T19] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 120.234212][ T19] usb 1-1: config 0 has no interface number 0 [ 120.240572][ T19] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 120.251612][ T19] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.261505][ T19] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 120.270558][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.280914][ T19] usb 1-1: config 0 descriptor?? [ 120.286299][ T313] cdc_ncm 10-1:1.1: bind() failure [ 120.294212][ T19] usb 1-1: MIDIStreaming interface descriptor not found [ 120.315316][ T19] snd-usb-audio: probe of 1-1:0.156 failed with error -12 [ 120.352553][ T4575] loop2: detected capacity change from 0 to 131072 [ 120.359495][ T4575] F2FS-fs (loop2): Invalid log_blocksize (32), supports only 12 [ 120.367061][ T4575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.368730][ T19] usb 2-1: USB disconnect, device number 14 [ 120.378376][ T4575] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.420879][ T4575] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.427939][ T4575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.489301][ T6] usb 10-1: USB disconnect, device number 12 [ 120.497813][ T496] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 120.498517][ T313] usb 1-1: USB disconnect, device number 11 [ 120.515807][ T496] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.001C/input/input17 [ 120.607301][ T496] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 120.633322][ T4582] loop2: detected capacity change from 0 to 256 [ 120.640104][ T4582] exfat: Deprecated parameter 'utf8' [ 120.645316][ T4582] exfat: Deprecated parameter 'utf8' [ 120.653462][ T4582] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 120.781299][ T4594] loop2: detected capacity change from 0 to 2048 [ 120.796599][ T4594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.813820][ T41] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.828844][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 1 with error 28 [ 120.841357][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.841357][ T41] [ 120.851084][ T41] EXT4-fs (loop2): Total free blocks count 0 [ 120.857141][ T41] EXT4-fs (loop2): Free/Dirty block details [ 120.862858][ T41] EXT4-fs (loop2): free_blocks=2415919104 [ 120.868439][ T41] EXT4-fs (loop2): dirty_blocks=16 [ 120.873462][ T41] EXT4-fs (loop2): Block reservation details [ 120.879321][ T41] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 120.886068][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 121.001850][ T496] usb 4-1: USB disconnect, device number 14 [ 121.031257][ T4602] loop1: detected capacity change from 0 to 512 [ 121.038712][ T4602] SELinux: security_context_str_to_sid (unc) failed with errno=-22 [ 121.052556][ T28] audit: type=1400 audit(1743659505.200:853): avc: denied { relabelto } for pid=4600 comm="syz.2.1798" name="" dev="pipefs" ino=35013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 121.105778][ T28] audit: type=1400 audit(1743659505.260:854): avc: denied { getattr } for pid=4611 comm="syz.0.1802" name="KEY" dev="sockfs" ino=35030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.181050][ T4627] netem: change failed [ 121.314746][ T502] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 121.424786][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.464764][ T313] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 121.515862][ T502] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.526260][ T502] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.537126][ T502] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.546257][ T502] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.554407][ T502] usb 10-1: Product: syz [ 121.558781][ T502] usb 10-1: Manufacturer: syz [ 121.563324][ T502] usb 10-1: SerialNumber: syz [ 121.568395][ T4637] syz.3.1814[4637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.568475][ T4637] syz.3.1814[4637] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.605925][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.628031][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.637652][ T6] usb 3-1: config 1 has no interface number 0 [ 121.643585][ T6] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.654941][ T6] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 121.670247][ T313] usb 1-1: Using ep0 maxpacket: 16 [ 121.680254][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.689424][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.700207][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.708641][ T313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.721348][ T6] usb 3-1: Product: syz [ 121.725509][ T6] usb 3-1: Manufacturer: syz [ 121.730044][ T6] usb 3-1: SerialNumber: syz [ 121.734483][ T313] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.744791][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.755290][ T313] usb 1-1: config 0 descriptor?? [ 121.772800][ T502] usb 10-1: 0:2 : does not exist [ 121.779936][ T502] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 121.791885][ T502] usb 10-1: USB disconnect, device number 13 [ 122.219747][ T313] usbhid 1-1:0.0: can't add hid device: -71 [ 122.226079][ T313] usbhid: probe of 1-1:0.0 failed with error -71 [ 122.233651][ T313] usb 1-1: USB disconnect, device number 12 [ 122.297962][ T4649] device batadv_slave_1 entered promiscuous mode [ 122.305797][ T4648] device batadv_slave_1 left promiscuous mode [ 122.343337][ T4653] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1820'. [ 122.445581][ T28] audit: type=1400 audit(1743659506.600:855): avc: denied { ioctl } for pid=4665 comm="syz.3.1826" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 122.485625][ T4668] loop3: detected capacity change from 0 to 128 [ 122.565895][ T6] cdc_ncm 3-1:1.1: bind() failure [ 122.704777][ T305] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 122.770524][ T496] usb 3-1: USB disconnect, device number 9 [ 122.794837][ T502] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 122.881260][ T4700] xt_hashlimit: size too large, truncated to 1048576 [ 122.896047][ T305] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.908554][ T305] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 122.918133][ T305] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.927141][ T305] usb 10-1: config 0 descriptor?? [ 122.985824][ T502] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.997011][ T502] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.009930][ T502] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.021100][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.031783][ T502] usb 4-1: Product: syz [ 123.036540][ T502] usb 4-1: Manufacturer: syz [ 123.041697][ T502] usb 4-1: SerialNumber: syz [ 123.117879][ T28] audit: type=1400 audit(1743659507.270:856): avc: denied { name_bind } for pid=4702 comm="syz.0.1843" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 123.249752][ T502] usb 4-1: 0:2 : does not exist [ 123.259121][ T502] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 123.270846][ T502] usb 4-1: USB disconnect, device number 15 [ 123.342991][ T305] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 123.354200][ T305] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001D/input/input18 [ 123.389563][ T28] audit: type=1400 audit(1743659507.540:857): avc: denied { ioctl } for pid=4713 comm="syz.2.1848" path="/166/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.438026][ T305] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 123.545712][ T28] audit: type=1400 audit(1743659507.700:858): avc: denied { shutdown } for pid=4722 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.882927][ T502] usb 10-1: USB disconnect, device number 14 [ 124.344748][ T305] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 124.404751][ T502] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 124.450591][ T4786] overlayfs: failed to set xattr on upper [ 124.459019][ T4786] overlayfs: ...falling back to index=off,metacopy=off. [ 124.466214][ T4786] overlayfs: ...falling back to xino=off. [ 124.472045][ T4786] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 124.534813][ T305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.552029][ T305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.560851][ T305] usb 1-1: config 1 has no interface number 0 [ 124.568924][ T305] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.581187][ T305] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 124.593300][ T305] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.602543][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.615479][ T305] usb 1-1: Product: syz [ 124.620027][ T305] usb 1-1: Manufacturer: syz [ 124.624524][ T305] usb 1-1: SerialNumber: syz [ 124.630519][ T502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.648538][ T502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.666283][ T502] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 124.685108][ T502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.694590][ T502] usb 4-1: config 0 descriptor?? [ 124.974799][ T6] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 125.103474][ T502] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 125.115599][ T502] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 125.155835][ T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.165950][ T6] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.176310][ T6] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.185290][ T6] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.193356][ T6] usb 10-1: Product: syz [ 125.197412][ T6] usb 10-1: Manufacturer: syz [ 125.201876][ T6] usb 10-1: SerialNumber: syz [ 125.204770][ T502] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected [ 125.308550][ T502] usb 4-1: USB disconnect, device number 16 [ 125.315648][ T502] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected [ 125.409502][ T6] usb 10-1: 0:2 : does not exist [ 125.416491][ T6] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 125.427178][ T6] usb 10-1: USB disconnect, device number 15 [ 125.468824][ T305] cdc_ncm 1-1:1.1: bind() failure [ 125.671038][ T502] usb 1-1: USB disconnect, device number 13 [ 125.845560][ T4809] netem: change failed [ 125.864130][ T4811] loop2: detected capacity change from 0 to 2048 [ 125.876464][ T4811] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 125.896559][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 125.930121][ T4823] overlayfs: failed to set xattr on upper [ 125.936083][ T4823] overlayfs: ...falling back to index=off,metacopy=off. [ 125.938225][ T4821] loop3: detected capacity change from 0 to 2048 [ 125.944742][ T4823] overlayfs: ...falling back to xino=off. [ 125.955083][ T4823] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 125.982546][ T4821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.990546][ T4830] loop9: detected capacity change from 0 to 256 [ 125.998152][ T4830] exfat: Deprecated parameter 'utf8' [ 126.003340][ T4830] exfat: Deprecated parameter 'utf8' [ 126.011658][ T1822] EXT4-fs (loop3): unmounting filesystem. [ 126.023843][ T4830] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 126.075902][ T4841] netem: change failed [ 126.215806][ T4864] incfs: Options parsing error. -22 [ 126.221214][ T4864] incfs: mount failed -22 [ 126.314800][ T502] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.369669][ T4890] netlink: 'syz.9.1905': attribute type 280 has an invalid length. [ 126.505989][ T502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.517050][ T502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.526935][ T305] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.534489][ T502] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 126.543535][ T502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.552315][ T502] usb 3-1: config 0 descriptor?? [ 126.745866][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.756145][ T305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 126.765107][ T305] usb 4-1: config 1 has no interface number 0 [ 126.771629][ T305] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.782365][ T305] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 126.793217][ T305] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.802220][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.810099][ T305] usb 4-1: Product: syz [ 126.814070][ T305] usb 4-1: Manufacturer: syz [ 126.818501][ T305] usb 4-1: SerialNumber: syz [ 126.973823][ T502] hid-steam 0003:28DE:1142.0020: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 126.986040][ T502] hid-steam 0003:28DE:1142.0021: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 127.074743][ T502] hid-steam 0003:28DE:1142.0020: Steam wireless receiver connected [ 127.178131][ T313] usb 3-1: USB disconnect, device number 10 [ 127.185444][ T313] hid-steam 0003:28DE:1142.0020: Steam wireless receiver disconnected [ 127.627208][ T305] cdc_ncm 4-1:1.1: bind() failure [ 127.715729][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1912'. [ 127.718823][ T4908] loop2: detected capacity change from 0 to 128 [ 127.833314][ T6] usb 4-1: USB disconnect, device number 17 [ 127.859122][ T4925] device batadv_slave_1 entered promiscuous mode [ 127.866097][ T4921] device batadv_slave_1 left promiscuous mode [ 127.879518][ T4928] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 127.889519][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1925'. [ 128.124778][ T313] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 128.305973][ T313] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.316871][ T313] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.326804][ T313] usb 10-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 128.336182][ T313] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.344765][ T313] usb 10-1: config 0 descriptor?? [ 128.681660][ T4963] futex_wake_op: syz.3.1940 tries to shift op by -1; fix this program [ 128.719365][ T4967] xt_hashlimit: size too large, truncated to 1048576 [ 128.753989][ T313] hid-steam 0003:28DE:1142.0022: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 128.777217][ T313] hid-steam 0003:28DE:1142.0023: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.9-1/input0 [ 128.874837][ T313] hid-steam 0003:28DE:1142.0022: Steam wireless receiver connected [ 128.909124][ T28] audit: type=1400 audit(1743659513.060:859): avc: denied { accept } for pid=4974 comm="syz.2.1956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.960451][ T502] usb 10-1: USB disconnect, device number 16 [ 128.976059][ T502] hid-steam 0003:28DE:1142.0022: Steam wireless receiver disconnected [ 129.038127][ T4987] tipc: Started in network mode [ 129.043651][ T4987] tipc: Node identity ac1414bb, cluster identity 4711 [ 129.065042][ T4987] tipc: New replicast peer: 172.30.1.3 [ 129.081007][ T4987] tipc: Enabled bearer , priority 10 [ 129.125301][ T4995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1954'. [ 129.209772][ T5005] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 129.231903][ T5005] SELinux: failed to load policy [ 129.275569][ T5016] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1965'. [ 129.294742][ T5016] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 129.572885][ T5043] loop2: detected capacity change from 0 to 512 [ 129.597426][ T5043] EXT4-fs (loop2): 1 orphan inode deleted [ 129.603225][ T5043] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 129.612468][ T5043] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.623132][ T4730] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 129.633683][ T4730] EXT4-fs error (device loop2): ext4_release_dquot:6805: comm kworker/u4:9: Failed to release dquot type 1 [ 129.643611][ T5052] netlink: 'syz.0.1979': attribute type 4 has an invalid length. [ 129.656400][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 129.734784][ T502] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 129.823371][ T5059] loop2: detected capacity change from 0 to 40427 [ 129.830656][ T5059] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 129.837616][ T5059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.846489][ T5059] F2FS-fs (loop2): invalid crc value [ 129.852918][ T5059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.887247][ T5059] F2FS-fs (loop2): Start checkpoint disabled! [ 129.894139][ T5059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 129.901086][ T5059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 129.924772][ T502] usb 4-1: Using ep0 maxpacket: 32 [ 129.930979][ T502] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 129.933677][ T4730] kworker/u4:9: attempt to access beyond end of device [ 129.933677][ T4730] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 129.939223][ T502] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 129.961633][ T502] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 129.970354][ T502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.979911][ T502] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.989617][ T502] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.002701][ T502] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.011779][ T502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.028685][ T502] usb 4-1: config 0 descriptor?? [ 130.214721][ T305] tipc: Node number set to 2886997179 [ 130.233644][ T5078] loop2: detected capacity change from 0 to 40427 [ 130.235436][ T502] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 130.240532][ T5078] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 130.258138][ T5078] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 130.267204][ T5078] F2FS-fs (loop2): invalid crc value [ 130.273916][ T5078] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.308666][ T5078] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 130.315702][ T5078] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 130.437798][ T502] usb 4-1: USB disconnect, device number 18 [ 130.444252][ T502] usblp0: removed [ 130.970070][ T5091] loop2: detected capacity change from 0 to 512 [ 130.999815][ T5091] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1992: inode #1: comm syz.2.1992: iget: illegal inode # [ 131.014531][ T5098] loop9: detected capacity change from 0 to 256 [ 131.015178][ T5091] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1992: error while reading EA inode 1 err=-117 [ 131.033122][ T5091] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1992: inode #1: comm syz.2.1992: iget: illegal inode # [ 131.046472][ T5091] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1992: error while reading EA inode 1 err=-117 [ 131.059270][ T5091] EXT4-fs (loop2): 1 orphan inode deleted [ 131.065037][ T5091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.081184][ T2909] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 131.113302][ T28] audit: type=1400 audit(1743659515.250:860): avc: denied { read } for pid=2909 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 131.149230][ T28] audit: type=1400 audit(1743659515.250:861): avc: denied { open } for pid=2909 comm="syz-executor" path="/208/bus/lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 131.187168][ T2909] EXT4-fs (loop2): unmounting filesystem. [ 131.545872][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.552748][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.569421][ T5113] device bridge_slave_0 entered promiscuous mode [ 131.586328][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.604231][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.624256][ T5113] device bridge_slave_1 entered promiscuous mode [ 131.786025][ T4730] tipc: Disabling bearer [ 131.791350][ T4730] tipc: Left network mode [ 131.812036][ T5102] loop3: detected capacity change from 0 to 131072 [ 131.818240][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.825512][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.832831][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.839740][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.847235][ T5102] F2FS-fs (loop3): Invalid log_blocksize (32), supports only 12 [ 131.868289][ T5102] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 131.888428][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.898137][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.905679][ T5102] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.905714][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.951791][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.960174][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.963680][ T5102] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 131.967063][ T4760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.984079][ T5102] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 132.003271][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.017166][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.024092][ T4760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.043487][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.057448][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.088836][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.113044][ T5113] device veth0_vlan entered promiscuous mode [ 132.128334][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.156509][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.176320][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.197416][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.215416][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.246599][ T5113] device veth1_macvtap entered promiscuous mode [ 132.269184][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.277431][ T5125] SELinux: failed to load policy [ 132.292646][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.301144][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.318021][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.327010][ T4760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.454562][ T5144] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2013'. [ 132.534992][ T4730] device bridge_slave_1 left promiscuous mode [ 132.540982][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.542223][ T5153] syz.9.2021[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.548016][ T5153] syz.9.2021[5153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.559625][ T4730] device bridge_slave_0 left promiscuous mode [ 132.587003][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.610182][ T4730] device veth1_macvtap left promiscuous mode [ 132.622507][ T4730] device veth0_vlan left promiscuous mode [ 132.729679][ T5166] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2025'. [ 132.744727][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.767190][ T5175] loop3: detected capacity change from 0 to 2048 [ 132.784127][ T5181] syz.9.2033[5181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.784208][ T5181] syz.9.2033[5181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.786884][ T5175] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e02c, mo2=0002] [ 132.815801][ T5175] System zones: 0-7 [ 132.819996][ T5175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.821350][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2033'. [ 132.881620][ T28] audit: type=1400 audit(1743659517.030:862): avc: denied { watch } for pid=5188 comm="syz.9.2036" path="/260/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 132.922244][ T5192] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2031: bg 0: block 234: padding at end of block bitmap is not set [ 132.940035][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 132.949156][ T5192] EXT4-fs (loop3): Remounting filesystem read-only [ 132.949208][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.967082][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.981486][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.997690][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.020889][ T5204] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2043'. [ 133.030628][ T24] usb 5-1: config 0 descriptor?? [ 133.091228][ T1822] EXT4-fs (loop3): unmounting filesystem. [ 133.111102][ T28] audit: type=1400 audit(1743659517.260:863): avc: denied { ioctl } for pid=5213 comm="syz.9.2049" path="socket:[38100]" dev="sockfs" ino=38100 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.172634][ T28] audit: type=1400 audit(1743659517.320:864): avc: denied { execute_no_trans } for pid=5229 comm="syz.0.2055" path="/293/file0" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.355198][ T5251] netlink: 'syz.1.2063': attribute type 12 has an invalid length. [ 133.451704][ T24] savu 0003:1E7D:2D5A.0024: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 133.605383][ T5277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2075'. [ 133.725595][ T24] usb 5-1: USB disconnect, device number 4 [ 134.650983][ T5347] overlayfs: missing 'lowerdir' [ 134.964862][ T1815] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.100020][ T5374] loop3: detected capacity change from 0 to 1024 [ 135.114882][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 135.116821][ T5374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.130782][ T5374] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.147009][ T5374] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 135.161769][ T5374] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 135.174168][ T5374] EXT4-fs (loop3): This should not happen!! Data will be lost [ 135.174168][ T5374] [ 135.183977][ T5220] Bluetooth: hci0: command 0x1003 tx timeout [ 135.184014][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.198330][ T5374] EXT4-fs (loop3): Total free blocks count 0 [ 135.204462][ T5374] EXT4-fs (loop3): Free/Dirty block details [ 135.223561][ T5374] EXT4-fs (loop3): free_blocks=4293918720 [ 135.229266][ T5374] EXT4-fs (loop3): dirty_blocks=80 [ 135.234246][ T5374] EXT4-fs (loop3): Block reservation details [ 135.242161][ T5374] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 135.246787][ T5385] loop4: detected capacity change from 0 to 256 [ 135.266121][ T1822] EXT4-fs (loop3): unmounting filesystem. [ 135.275100][ T5388] loop9: detected capacity change from 0 to 512 [ 135.282480][ T5388] EXT4-fs: Ignoring removed oldalloc option [ 135.297939][ T5388] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.309321][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 135.325516][ T6] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 135.328347][ T5388] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 135.333894][ T6] usb 1-1: config 179 has no interface number 0 [ 135.343296][ T5388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=b846c01c, mo2=0102] [ 135.349077][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 135.356983][ T5388] System zones: [ 135.367882][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 135.368012][ T5388] 0-2 [ 135.371379][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.382488][ T5388] , 18-18 [ 135.384916][ T6] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 135.384949][ T6] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 135.384986][ T6] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 135.385011][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.386177][ T5366] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 135.396344][ T5388] , 34-34 [ 135.451355][ T5388] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 135.459694][ T5388] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.2125: bad orphan inode 15 [ 135.469878][ T5388] ext4_test_bit(bit=14, block=18) = 1 [ 135.475124][ T5388] is_bad_inode(inode)=0 [ 135.479088][ T5388] NEXT_ORPHAN(inode)=2264924160 [ 135.483775][ T5388] max_ino=32 [ 135.486966][ T5388] i_nlink=0 [ 135.490457][ T5388] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 135.510909][ T5388] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2125: bg 0: block 80: padding at end of block bitmap is not set [ 135.526936][ T5388] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 135.535839][ T5388] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 135.584134][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.592492][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.614467][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 135.645997][ T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input19 [ 135.670889][ T5421] netlink: 'syz.9.2137': attribute type 10 has an invalid length. [ 135.846770][ T5366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.855203][ T5366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.901192][ T5436] syz.9.2145[5436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.901252][ T5436] syz.9.2145[5436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.948816][ T5440] loop9: detected capacity change from 0 to 512 [ 135.966520][ T5440] EXT4-fs: Ignoring removed oldalloc option [ 135.975345][ T5440] EXT4-fs error (device loop9): ext4_xattr_inode_iget:400: comm syz.9.2147: Parent and EA inode have the same ino 15 [ 135.987971][ T5440] EXT4-fs (loop9): Remounting filesystem read-only [ 135.994489][ T5440] EXT4-fs error (device loop9): ext4_xattr_inode_iget:400: comm syz.9.2147: Parent and EA inode have the same ino 15 [ 136.007213][ T5440] EXT4-fs (loop9): Remounting filesystem read-only [ 136.013688][ T5440] EXT4-fs (loop9): 1 orphan inode deleted [ 136.019319][ T5440] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 136.035470][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 136.066374][ T6] usb 1-1: USB disconnect, device number 14 [ 136.066432][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 136.066467][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 136.169291][ T5454] loop9: detected capacity change from 0 to 512 [ 136.178363][ T5454] EXT4-fs (loop9): 1 truncate cleaned up [ 136.183856][ T5454] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 136.200486][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 136.218286][ T5457] loop9: detected capacity change from 0 to 512 [ 136.226372][ T5457] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2154: casefold flag without casefold feature [ 136.239222][ T5457] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2154: couldn't read orphan inode 15 (err -117) [ 136.251333][ T5457] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 136.265717][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 136.282890][ T5461] loop9: detected capacity change from 0 to 2048 [ 136.296460][ T5461] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 136.308103][ T28] audit: type=1400 audit(1743659520.470:865): avc: denied { setattr } for pid=5460 comm="syz.9.2155" name="00000000000000000000000000000003" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 136.334965][ T28] audit: type=1400 audit(1743659520.490:866): avc: denied { rmdir } for pid=1791 comm="syz-executor" name="lost+found" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 136.359187][ T28] audit: type=1400 audit(1743659520.520:867): avc: denied { unlink } for pid=1791 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 136.382103][ T28] audit: type=1400 audit(1743659520.520:868): avc: denied { remove_name } for pid=1791 comm="syz-executor" name="00000000000000000000000000000003" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 136.383237][ T1791] EXT4-fs (loop9): unmounting filesystem. [ 136.407781][ T28] audit: type=1400 audit(1743659520.520:869): avc: denied { unlink } for pid=1791 comm="syz-executor" name="00000000000000000000000000000003" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 136.587991][ T5472] syz.0.2158[5472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.588076][ T5472] syz.0.2158[5472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.620430][ T5478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5478 comm=syz.0.2161 [ 136.724883][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.727862][ T5495] binder: 5494:5495 ioctl c0306201 200000000300 returned -22 [ 136.914776][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 136.922907][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.933859][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.944211][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 136.957717][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.966934][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.975413][ T6] usb 5-1: config 0 descriptor?? [ 137.383516][ T6] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 137.394975][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0025/input/input20 [ 137.485730][ T6] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 137.588616][ T24] usb 5-1: USB disconnect, device number 6 [ 138.109464][ T5505] syz.4.2173[5505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.109547][ T5505] syz.4.2173[5505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.187329][ T5522] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 138.384720][ T24] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 138.384744][ T6] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 138.584755][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 138.584809][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 138.591192][ T24] usb 10-1: config 0 has an invalid interface number: 155 but max is 0 [ 138.596187][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.603293][ T24] usb 10-1: config 0 has no interface number 0 [ 138.613928][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.621625][ T24] usb 10-1: New USB device found, idVendor=286d, idProduct=5329, bcdDevice=3f.cc [ 138.629477][ T6] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 138.647207][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.652155][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.658074][ T6] usb 1-1: config 0 descriptor?? [ 138.668325][ T24] usb 10-1: Product: syz [ 138.674143][ T5536] loop3: detected capacity change from 0 to 256 [ 138.680409][ T24] usb 10-1: Manufacturer: syz [ 138.685639][ T24] usb 10-1: SerialNumber: syz [ 138.692120][ T24] usb 10-1: config 0 descriptor?? [ 138.700728][ T24] usb-storage 10-1:0.155: USB Mass Storage device detected [ 138.702265][ T5536] FAT-fs (loop3): Directory bread(block 64) failed [ 138.714356][ T5536] FAT-fs (loop3): Directory bread(block 65) failed [ 138.721265][ T5536] FAT-fs (loop3): Directory bread(block 66) failed [ 138.728077][ T5536] FAT-fs (loop3): Directory bread(block 67) failed [ 138.732728][ T28] audit: type=1400 audit(1743659522.890:870): avc: denied { read } for pid=5537 comm="syz.1.2189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 138.734512][ T5536] FAT-fs (loop3): Directory bread(block 68) failed [ 138.760838][ T5536] FAT-fs (loop3): Directory bread(block 69) failed [ 138.767325][ T5536] FAT-fs (loop3): Directory bread(block 70) failed [ 138.768831][ T5542] syz.1.2190[5542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.773730][ T5542] syz.1.2190[5542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.773741][ T5536] FAT-fs (loop3): Directory bread(block 71) failed [ 138.802549][ T5536] FAT-fs (loop3): Directory bread(block 72) failed [ 138.809365][ T5536] FAT-fs (loop3): Directory bread(block 73) failed [ 138.927492][ T24] usb 10-1: USB disconnect, device number 17 [ 138.938230][ T28] audit: type=1400 audit(1743659523.090:871): avc: denied { append } for pid=5553 comm="syz.3.2196" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 138.966197][ T1822] ------------[ cut here ]------------ [ 138.969582][ T28] audit: type=1400 audit(1743659523.110:872): avc: denied { rename } for pid=5555 comm="syz.3.2197" name="file0" dev="incremental-fs" ino=1621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.971617][ T1822] WARNING: CPU: 0 PID: 1822 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 139.002442][ T1822] Modules linked in: [ 139.006434][ T1822] CPU: 0 PID: 1822 Comm: syz-executor Not tainted 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 139.016739][ T1822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.026716][ T1822] RIP: 0010:drop_nlink+0xc1/0x110 [ 139.031540][ T1822] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 139.051383][ T1822] RSP: 0018:ffffc90000cf7bf0 EFLAGS: 00010293 [ 139.057358][ T1822] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff888115739440 [ 139.065211][ T1822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.073109][ T1822] RBP: ffffc90000cf7c18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 139.081097][ T1822] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 139.088878][ T1822] R13: 1ffff110227a610b R14: ffff888113d30810 R15: ffff888113d30858 [ 139.096835][ T1822] FS: 000055556ff73500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 139.105560][ T1822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.111964][ T1822] CR2: 000055556ff964e8 CR3: 00000001379b1000 CR4: 00000000003506b0 [ 139.119800][ T1822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.127603][ T1822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.135432][ T1822] Call Trace: [ 139.138523][ T1822] [ 139.141312][ T1822] ? show_regs+0x58/0x60 [ 139.145400][ T1822] ? __warn+0x160/0x3d0 [ 139.149383][ T1822] ? drop_nlink+0xc1/0x110 [ 139.153711][ T1822] ? report_bug+0x4d5/0x7d0 [ 139.158093][ T1822] ? drop_nlink+0xc1/0x110 [ 139.162332][ T1822] ? handle_bug+0x41/0x70 [ 139.166592][ T1822] ? exc_invalid_op+0x1b/0x50 [ 139.171074][ T1822] ? asm_exc_invalid_op+0x1b/0x20 [ 139.176335][ T1822] ? drop_nlink+0x44/0x110 [ 139.180657][ T1822] ? drop_nlink+0xc1/0x110 [ 139.184931][ T1822] ? drop_nlink+0xc1/0x110 [ 139.189155][ T1822] shmem_rmdir+0x59/0x90 [ 139.193232][ T1822] vfs_rmdir+0x398/0x500 [ 139.197359][ T1822] incfs_kill_sb+0x113/0x230 [ 139.202089][ T1822] deactivate_locked_super+0xad/0x110 [ 139.207322][ T1822] deactivate_super+0xbe/0xf0 [ 139.211807][ T1822] cleanup_mnt+0x485/0x510 [ 139.216093][ T1822] ? user_path_at_empty+0x14e/0x1a0 [ 139.221099][ T1822] __cleanup_mnt+0x19/0x20 [ 139.225518][ T1822] task_work_run+0x24d/0x2e0 [ 139.230041][ T1822] ? task_work_cancel+0x2e0/0x2e0 [ 139.234930][ T1822] ? __x64_sys_umount+0x122/0x170 [ 139.239762][ T1822] exit_to_user_mode_loop+0x94/0xa0 [ 139.244828][ T1822] exit_to_user_mode_prepare+0x5a/0xa0 [ 139.250101][ T1822] syscall_exit_to_user_mode+0x26/0x130 [ 139.255862][ T1822] do_syscall_64+0x47/0xb0 [ 139.260216][ T1822] ? clear_bhb_loop+0x55/0xb0 [ 139.264788][ T1822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.270541][ T1822] RIP: 0033:0x7fc0dd58e497 [ 139.275106][ T1822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 139.294851][ T1822] RSP: 002b:00007ffeccea4d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.303057][ T1822] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0dd58e497 [ 139.310889][ T1822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeccea4e50 [ 139.318997][ T1822] RBP: 00007ffeccea4e50 R08: 0000000000000000 R09: 0000000000000000 [ 139.327135][ T1822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeccea5ee0 [ 139.335514][ T1822] R13: 00007fc0dd60e08c R14: 0000000000021eba R15: 00007ffeccea5f20 [ 139.343276][ T1822] [ 139.346731][ T1822] ---[ end trace 0000000000000000 ]--- [ 139.352447][ T1822] ================================================================== [ 139.360338][ T1822] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 139.366580][ T1822] Write of size 4 at addr 0000000000000170 by task syz-executor/1822 [ 139.374480][ T1822] [ 139.376658][ T1822] CPU: 1 PID: 1822 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 139.387931][ T1822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.397902][ T1822] Call Trace: [ 139.400949][ T1822] [ 139.403742][ T1822] dump_stack_lvl+0x151/0x1b7 [ 139.408504][ T1822] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 139.414066][ T1822] ? _printk+0xd1/0x111 [ 139.418243][ T1822] print_report+0xe1/0x4e0 [ 139.423453][ T1822] ? __virt_addr_valid+0x59/0x2f0 [ 139.428446][ T1822] ? kasan_addr_to_slab+0xd/0x80 [ 139.433451][ T1822] ? ihold+0x20/0x60 [ 139.437151][ T1822] kasan_report+0x13c/0x170 [ 139.441491][ T1822] ? ihold+0x20/0x60 [ 139.445228][ T1822] kasan_check_range+0x294/0x2a0 [ 139.449997][ T1822] __kasan_check_write+0x14/0x20 [ 139.454771][ T1822] ihold+0x20/0x60 [ 139.458333][ T1822] vfs_rmdir+0x268/0x500 [ 139.462408][ T1822] incfs_kill_sb+0x113/0x230 [ 139.466934][ T1822] deactivate_locked_super+0xad/0x110 [ 139.472139][ T1822] deactivate_super+0xbe/0xf0 [ 139.476643][ T1822] cleanup_mnt+0x485/0x510 [ 139.480988][ T1822] ? user_path_at_empty+0x14e/0x1a0 [ 139.486024][ T1822] __cleanup_mnt+0x19/0x20 [ 139.490272][ T1822] task_work_run+0x24d/0x2e0 [ 139.494782][ T1822] ? task_work_cancel+0x2e0/0x2e0 [ 139.499817][ T1822] ? __x64_sys_umount+0x122/0x170 [ 139.504765][ T1822] exit_to_user_mode_loop+0x94/0xa0 [ 139.510072][ T1822] exit_to_user_mode_prepare+0x5a/0xa0 [ 139.515443][ T1822] syscall_exit_to_user_mode+0x26/0x130 [ 139.520913][ T1822] do_syscall_64+0x47/0xb0 [ 139.525178][ T1822] ? clear_bhb_loop+0x55/0xb0 [ 139.529679][ T1822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.535448][ T1822] RIP: 0033:0x7fc0dd58e497 [ 139.539660][ T1822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 139.559191][ T1822] RSP: 002b:00007ffeccea4d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.567461][ T1822] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0dd58e497 [ 139.575494][ T1822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeccea4e50 [ 139.583267][ T1822] RBP: 00007ffeccea4e50 R08: 0000000000000000 R09: 0000000000000000 [ 139.591047][ T1822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeccea5ee0 [ 139.598864][ T1822] R13: 00007fc0dd60e08c R14: 0000000000021eba R15: 00007ffeccea5f20 [ 139.606671][ T1822] [ 139.609530][ T1822] ================================================================== [ 139.618347][ T6] savu 0003:1E7D:2D5A.0026: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 139.627726][ T1822] Disabling lock debugging due to kernel taint [ 139.636133][ T1822] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 139.642458][ T6] usb 1-1: USB disconnect, device number 15 [ 139.643852][ T1822] #PF: supervisor write access in kernel mode [ 139.643865][ T1822] #PF: error_code(0x0002) - not-present page [ 139.643877][ T1822] PGD 128ea8067 P4D 128ea8067 PUD 0 [ 139.666809][ T1822] Oops: 0002 [#1] PREEMPT SMP KASAN [ 139.672044][ T1822] CPU: 1 PID: 1822 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00054-g3e6e324f5b47 #0 [ 139.683397][ T1822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.693288][ T1822] RIP: 0010:ihold+0x25/0x60 [ 139.697623][ T1822] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 139.717163][ T1822] RSP: 0018:ffffc90000cf7c30 EFLAGS: 00010246 [ 139.723058][ T1822] RAX: ffff888115739400 RBX: 0000000000000001 RCX: ffff888115739440 [ 139.730969][ T1822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.739092][ T1822] RBP: ffffc90000cf7c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 139.747122][ T1822] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110227a62ea [ 139.754879][ T1822] R13: ffff88810bb70440 R14: 0000000000000000 R15: 1ffff1102176e08e [ 139.762683][ T1822] FS: 000055556ff73500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 139.772147][ T1822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.779081][ T1822] CR2: 0000000000000170 CR3: 00000001379b1000 CR4: 00000000003506a0 [ 139.787848][ T1822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.796696][ T1822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.805673][ T1822] Call Trace: [ 139.808993][ T1822] [ 139.812120][ T1822] ? __die_body+0x62/0xb0 [ 139.817087][ T1822] ? __die+0x7e/0x90 [ 139.820988][ T1822] ? page_fault_oops+0x7f9/0xa90 [ 139.826164][ T1822] ? vprintk_default+0x26/0x30 [ 139.831802][ T1822] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 139.837270][ T1822] ? add_taint+0x44/0xe0 [ 139.841476][ T1822] ? panic+0x667/0x667 [ 139.845474][ T1822] ? preempt_schedule_thunk+0x16/0x18 [ 139.850866][ T1822] ? exc_page_fault+0x529/0x6d0 [ 139.855520][ T1822] ? asm_exc_page_fault+0x27/0x30 [ 139.860383][ T1822] ? add_taint+0x93/0xe0 [ 139.864461][ T1822] ? ihold+0x25/0x60 [ 139.868191][ T1822] vfs_rmdir+0x268/0x500 [ 139.872288][ T1822] incfs_kill_sb+0x113/0x230 [ 139.876696][ T1822] deactivate_locked_super+0xad/0x110 [ 139.881904][ T1822] deactivate_super+0xbe/0xf0 [ 139.886418][ T1822] cleanup_mnt+0x485/0x510 [ 139.890687][ T1822] ? user_path_at_empty+0x14e/0x1a0 [ 139.895709][ T1822] __cleanup_mnt+0x19/0x20 [ 139.900060][ T1822] task_work_run+0x24d/0x2e0 [ 139.904814][ T1822] ? task_work_cancel+0x2e0/0x2e0 [ 139.910127][ T1822] ? __x64_sys_umount+0x122/0x170 [ 139.915070][ T1822] exit_to_user_mode_loop+0x94/0xa0 [ 139.920390][ T1822] exit_to_user_mode_prepare+0x5a/0xa0 [ 139.925832][ T1822] syscall_exit_to_user_mode+0x26/0x130 [ 139.931198][ T1822] do_syscall_64+0x47/0xb0 [ 139.935442][ T1822] ? clear_bhb_loop+0x55/0xb0 [ 139.939963][ T1822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.945946][ T1822] RIP: 0033:0x7fc0dd58e497 [ 139.950198][ T1822] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 139.970723][ T1822] RSP: 002b:00007ffeccea4d98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 139.979133][ T1822] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc0dd58e497 [ 139.987321][ T1822] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeccea4e50 [ 139.995398][ T1822] RBP: 00007ffeccea4e50 R08: 0000000000000000 R09: 0000000000000000 [ 140.003710][ T1822] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeccea5ee0 [ 140.011672][ T1822] R13: 00007fc0dd60e08c R14: 0000000000021eba R15: 00007ffeccea5f20 [ 140.019836][ T1822] [ 140.022696][ T1822] Modules linked in: [ 140.026698][ T1822] CR2: 0000000000000170 [ 140.030675][ T1822] ---[ end trace 0000000000000000 ]--- [ 140.036346][ T1822] RIP: 0010:ihold+0x25/0x60 [ 140.041395][ T1822] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 140.061082][ T1822] RSP: 0018:ffffc90000cf7c30 EFLAGS: 00010246 [ 140.067608][ T1822] RAX: ffff888115739400 RBX: 0000000000000001 RCX: ffff888115739440 [ 140.076413][ T1822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.084504][ T1822] RBP: ffffc90000cf7c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 140.092831][ T1822] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110227a62ea [ 140.101157][ T1822] R13: ffff88810bb70440 R14: 0000000000000000 R15: 1ffff1102176e08e [ 140.109131][ T1822] FS: 000055556ff73500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 140.118616][ T1822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.125377][ T1822] CR2: 0000000000000170 CR3: 00000001379b1000 CR4: 00000000003506a0 [ 140.133383][ T1822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.141288][ T1822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.149189][ T1822] Kernel panic - not syncing: Fatal exception [ 140.155325][ T1822] Kernel Offset: disabled [ 140.159452][ T1822] Rebooting in 86400 seconds..