last executing test programs: 15.180893502s ago: executing program 3 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000002000)={@void, @val={0x3, 0x0, 0x8, 0x6ec, 0x19, 0xc}, @ipv4=@icmp={{0xa, 0x4, 0x2, 0x5, 0xfc0, 0x66, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xe}, {[@cipso={0x86, 0x11, 0x1, [{0x7, 0x3, "c1"}, {0x1, 0x8, "c6811ebd0700"}]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0x4, "c8d4ab57f8f0b0e11d45bfe3ac5160c2ea76ba09703b410be6c901e853692cc8f02ddf3dadffa763defd8c34b609fa122b383b33fd3e7c64e6b904f3575b082f98c80bed3e30d417052c01a35953b8010ecf1be54d6de76a30aa77305b592b63f05b1cc6c4867d63cd9cb9942ffa950b76cd97d45b33d7904e8abaa4eeb07be4fac0e209007ad7821e005c1d9e847d37d43a2bb56b893ec1d741419ac4e5523926325a72885596596f15c432ae860462424c708128d1ee1215c6877e6343189e1444676d2043f2d50316ab19f0406d89d02b8693594f65650cd08bd6bd6e7bf8d28547b9f28d14b8616fd3d8dc7b010dc22e4e582b5eaf1e8d6676eb698310b04d9fcb64a27d42531826fcc07da223e03a117cebc8277f8b8e26665d5a2558ed601635824bccee570810a2f52741cd290bb4bbe68f7ff93837bfa9b6bf41e22c214e28843c482a2f6123624cce1b7c1971b3f17bb15928e37d29014fb13bc59dfaac48e5dc3b8f46ea49ec8f2eafc63789c05da56bdb01ec463664a0b12dae347a6c4a1ff7ae4f8f9c7f48513075c8ffb2937358ecebe75000c7cb3e7933703a21f262d485a871d9b90e1369ac0005c86cf830b3689c801a4426d931a5e52a6ea9cc6328cf519df87624e64b162e41e6845a24ab0134160febb53b7a0c001d1e6d4f14b0c3e4a1c90d68e681fa03ecc24fa67277d562adc51046b8408516b5dfed1be0a29144621dcbc4cfe0fbc01e924d8dfc373210ecd6a64b41d0408100941e7b375097dc3c062f536fa72d1b68bab09b0c379a114d0c149a112a1a30eb090f32bc270004f3f035436f827b7f2fc99f0db293e021ce78c7afc0a0927a0c45ee1c0aea6b623a45283d0daea112feaf14b5b6b8211d477610eb313ff85b78b66569fd0aa4133edfe9d36a1aa9ab40d96db6a0475d73123549a1729fac38a460c7bd80b289c103ec7d026a259232357e0a3cd7af426c13a284303f6fc3d863f62489bef43ae6ff4eb6febb082c3bf1a03c40a1be5ba7e2eb8330c9d5fb91133ba667632526d8b7350f47d2dafe8a38f25899057f3902a5780b4e02ab674d3c13f4aa19fbcd6bbb1cdad47867c78a79f72c5d9c0873805678e453433323135e33d7b4fb1d7a24e5efec51653210ad0ad0c0a40f90a0fc4148d6bb292c15a8133b3ff755ffc4afcaaf7ce872eea61b3dae375d8be885b0238156ab2fd9068c307d686a7155102374e69ec36f3d43b65b47566b07d211ebedc96c8f9a67d4faff5fc6493701850f754f86b2e15881c685846b214f8d899d4b759f928a2a5c8bd76127963adc9088a27359acee41bb28521613b838320bb1a481167e511c6157cf2f2b5221b4ebd2b3fdeb70bf6e1f8910edb7812e2acf3bd246841a9e6c36da706c0c8760986daa377f6bcb82f94ac490c5cf1abf50110d29b7fcdb864b0e6ec459e4bb6d8a28abdc5e871eb8afac6c16a90b255e82974d850043b4051e4df1f922c48f866c5a1079cd9dcb9e596164f9e38dfc60fc519134d1a427cb72322ecc7820d454d27441c64fb1bc3d2430016b63e2b26f2a617274daf53428f8055cfa2ac918ff1c2ce8cdee45258c2b9a241e7d0b65a2a465fdf91a32e093afbf434b79c28ebb9eaf4ef11d1cdb36c8823db4b0fbd281d213d31b8ae998ddfb896dcf94b728484f917d8e81b90f1505a98c55766eda2a1afd5e006923194d80bcc86e40321da3a49446f6cdbe232df32e6007e3e5e10b42d23248c3e91dafb8c9983f7556b48cd33e0e1bbc1aee35481876b4dd22accebe0c7fe08120dd6a2e31ef24588350cd491214faa6b96701197e43edce95bb6bb0f73b4d608fc68d7b870f633a33ca1a9868979b3bfeffbd32593e923562664ee1133dfcfcfd66a09aeb74a0a04af12186d508c644197602cafc6a20251125548ed51ab9d19db468a4726d14600efbad3c951d8f4fae6e9cf0827e5326886621739d8360b2428859af3ef858f63206821cc94bece56c9712a45dca140b1ed21e5b9bf096c7d846074c719678f3a850d14582de8297725b878316c61b07f14210ceffb4ffe42de9e91b91da09bee1df2f3a3d71449e2d92569037170fc4ab39f0b490820f635d598a01ed2ebfcd2d1de390524781cf76cb75317e4e1cab97a54116718a83ba4fa41892d4efd7dc745c895f46aff3392d0e1f265784063711bb82d8fab79510250b8363714d731821b7705682aa3939d04e34ad0497fc1abc61f5ead33ade1f569d6bf30ccaaa9ebcc2ffbb8c4bbc67c7805feb5e7c3a6fba0a423294fec0c3209fc21038c1c404e07faf7d3ab17840f055631411881620856c7d448a1a1dd304b48ce9e17ba118b60ed27c841650fe7de0e2ba1438dbe6f29303d4adfd1c900d370945d22a4234e073a5939d62404884156b374ddcfa5ba5177a33b7f6b878cc9b538de011f1e520f15f3db6cda3450aba148340b058142483849538368c767fc14216d48291d25367d89f02819f2c3e93210d3fa1debaa0aeeff7636dd16b6853c6fe9e4de3d4d3dff5d393ff0c3dc965a9c21e2a6645b79e7786bd461916537a8fdbeec5c43855b460171ef184543352feb1c3783058fa2dfa4289cb6e23578006fe45440c53cf483533f8eef7f80e8be58369c1a7cc4b8b810b3b6cccdd4532ae91da82d4bdc0885354478ea47a2a21b94053259059c04c2fa6b9881107077ed1ea2474c249eb9f05e5dc25551bd2c1e7e62873b1047e05f0e6b980124e641d7acd2fb4d826d71419d8dd744136070f0106b0f24f535934017aad5733ddfcedb9dda4623c085653540f51464667e7688cd60b34377a4b4164fcc1177fe5ce6369527b99a78a1ba7a04de0241cf80e9165a0e0e88dafa471c374909949787246e093a3b895860a72f471d5e60544c6efd7dcc5ba55d517e3aef48893e43926b2813b9d27e94725e6d9b4f702e546a9aa0bc6f2fd8a70724568f09a2e54e1adbe54ebe082465d75ddbd4c890a9ae4eeccb1854d62efa4f8105fa6bd7ca9469c261dba73419e1c29d4eac7ba2ea6f9eb65590615e1bae57942604e0bdc9fca85ad842a8dc73eb11130a2b251f3c1e1563c2bd582218e7fabe089d820bb45acb93db5f4b0d2126ec77dc17c3276e8dacec308d8496a2493301947aed79d3761d5c9203ac874f730d209b23c2b269824335f02ca65bb83c274d498de296e194a1c74526e52ad4cee881ebee9121215fcc6b01e7e8b577f9a1d1e7b4e4afdb5293017d737ca221c6d22490560d6d0e1ce8ddd7d2e6f9d133b9e84a6ab688e5fd2e01a7cb7eeb79f75c7762164c12bd8eef33b35c2ecf53c0dcba97b11eb84796407ecc0df4983d0ddd84be56b723a5a9275cfcb938dbe3ce60c65d521ba5b750338b5cb50d33036c283ede4f3a6c9b972ab46e93ce4d98655baa05ba80ed344f9747b4047cbda190f99da5a7f409030d31c845f47a3be1f38de0b732b7ebf1618615d3a701a8f745dc7e11482c717b353379ec11eb5589f5ef94889fce9fe532e0c7d55e35b1e27e41b846e8e3d7c1762838f0a736058ceb87c02af6bc43c2d9fa2044a263f28056f6279b974047f8aeb0b035a7ae103b1cbf37805776925617a19407e4e33637d57ae37f659c28b33bc39321e872a1a7676a224c4b3b70aaedebb47bb2290aca5698ef294f7f2aff6463b6cf188eb2631ebb72c72e27c4111a7525d8eb05b938057b46bf65c35087d87f66c8ca0c8d733744f9bbf7505bcb2cdd856626f4c2345475900d7ab08bfa03cf20f92910a28064da631e26c868a03e0242c828663cd21ac3c935553aaf31aeea380423345564b8c5502caf4ad9472de9271703fcae91c95169c57fc3619a305e513e288d20a336d6e2687d2fe705d507a555934605474c833e30f442a8ff83f9365836bc41503a0277bd3796add469d0f07b9983a9e0adfe91fb5005e861e84dbcedacc48cea7b14fec52d92f492c4329c1f70b4df4717849b4f537ee52002f3e2219c8b857f6ae71f6e6cef7faed0986596ce6fc214b497f5460efd9502fe13ebe1220de146f1a3d26d1be650cf913ba8ddb43353814ba0a751585f4923dd85870dc1908da2e9e7530b9415aeb31ae9fcea457c3e44556be55fc9646e78a40aa5684d20d5f5ee3ccffab4039689281576fc78049aa9ecdc3c796a4985f78f71b5aee6e7ca0dbec55b8a440d7235821da64608bb7153423d73a6e3d2e0727e8ad5d05fdfe07d028fbebbe1158ac1cdbbab163b5b909ccb65b52192d9bb8e3099764913d0ee6a92f698e8c1d176f896cbad3ad4f45de259d7a81fb130a9bb063216f4f5c565ad6e9eb5c4b33bf759f80e1163ef45bbc2b6f92646e1af1e39d63e2ebe0ad63ec536bc0d2b1de3641800cad930674e6df3c1233df84234a0f5c709891cdcd3ecbdac74c2ec0242c07efd1e688e45249e483d294f79bd53ef0f805161507bd46e604083310ed7eab550c5718d6be0f7c8632dcd56c8a7ccd8ea76be0bd56ce72395ae77a8208b4a1f4c546886679147fb2c9edd660f69eef30aecdee48f7b3a67a9655f936aa13e5aa06ca55a90b4a02fcf790584c14da4855ab4f8e66042862ea8a84be97b073f9e1d4003e10cd5121434e2928d296c6d1f8e90eeb4c436ddebf5673e83dbfa0b79f98073519eaf50b2f93e6c2bee13611325d2dedfd06f2a6906a7aa04576a8a77c7942d491af1a4672f0ec854259814c637a8493c39f11ff8e299a961a366d8a4e3317b93b1f4001d8b5874fcf16db6e2e81137231feca8ae980638e0659ef0091ac6b785229086b49abc3e7012f1eaa4b8bcb9fc1552c20f095d3bee6d1cb1f6a3421c60e2055b1b85f4dbd2848dbd0ab854a7a329e76677335a3d3bc3a8176ba972ec54da452f0bd83d93cdb72e104d0d603049b865829eecd0714a71f5caae843695bc98b2decbb34a1cb0ebc9ea522825e3b31c21325309a6dc0128e6fc57a034a1d32bec80ca84049d9ba2ef65a83217f57c2e3dab07f271b29d412d02f6479407db3cc8c187c8c1a3b7fe157ff3096b36224886695e61ce89e67feb95a695437914d88bd08dab442b50e82a4b0cf6527a0d98fae21169aebd84454b12e683f3436f679581bcb4584edb048d2256d57ca7b4b792d27ab071e16dbed2e4bf89b3ce7208144a9af87fbe58919638ab1f4cedbc8af8062423296203234ef9349cb6ce2deb6b1e94c6028372d00c2aebcce160ca6bc834105241f1f6e077e1d51b833de80a68456a385688257e08590d22b30bf921ae31dca85cf08fc009fe8f4a2bd8ce9edcf3cacc061feb07d5d4da2ed5a7f6386d214f0c367b1b88d68f4b27a9a35f9403f9a570d70da4b8e5bfd6de6e408730130016790bbcce16fcfeb20c9aae5d1d7628d796dfd7c1f720200de31688975667307aed28651e592c70106fbeb5d6d6e8b638d777435b241470e05b9e29e9675eba8935e72d966827b8684d0a3386d2bb0f17040c3be6e0b26aa17772a817a645818713f2ec2ac500071bd758de46640855dba92caddf812fe60a9258839ee1327d5132a27415b32c1e003f4c95f8be2f5f2532eb7d979b481520dce5e3081f0b54013e6f6436d9b8b11e2d487522ce6be5cf78c73ef364a76ad9f652b64dc4b316ed60714"}}}, 0xfca) 15.022740174s ago: executing program 3 (id=961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) 14.998317445s ago: executing program 3 (id=963): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 14.974379405s ago: executing program 3 (id=965): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x0) 14.326133508s ago: executing program 3 (id=982): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000300)='r', 0x1, 0xdecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r1, 0x8, 0x4000, 0x4000) 13.6552172s ago: executing program 3 (id=999): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/70, 0x46}], 0x1}, 0x2040) 13.636518131s ago: executing program 32 (id=999): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/70, 0x46}], 0x1}, 0x2040) 2.696148818s ago: executing program 0 (id=1360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$incfs(0x0, 0x0, 0x0, 0xc802, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x85, 0x35, 0x26, 0x8, 0x4f2, 0xb746, 0x8e6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x4, 0xe9, 0x0, 0x9, [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xe, 0x1, 0x0, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x4, 0x1, "a530"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x4, 0x5, [0x8, 0x4, 0x5, 0x6, 0x1], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x1, 0xf9}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x5, "cbad"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x3, 0x3, 0xdf}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x3, 0x6, 0x5}]}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1f}) 2.306452776s ago: executing program 5 (id=1373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgid() 2.268148397s ago: executing program 5 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000eb2900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.239118367s ago: executing program 5 (id=1379): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0xe4d, 0x2, 0x7ff, 0x3861, 0x8, 0x3ff, 0x2, 0x1, 0x300, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.148484959s ago: executing program 1 (id=1391): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040c50f80b0000000000001090224000100000000090400000103000000092100000001220300090581030000000000a05a2306697e38c424517ddc14c31864e862340c16ac0000715d82dac0d86f86e5d34f076518407313c1bcae38d64c74e5dec885d2"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x40, 0x11, 0x16, {0x16, 0x31, "558c4956a6832f439b682be65d67f2abd60f7221"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x20, 0xc, 0xc2, {0xc2, 0x22, "b7f23cb277d1788d59bad0eaf7885dfe365e6fdd9785d960c5fd1734fed98c288b739881776579a45e692f0409439ce07d3360031b88d4db276da9b62c09316338f69161525ab6dc9f766cfcd310f10928eb96111d66cca6de892df2a033291234cbb82269f6f5c74f6590a10f5997b1480b9318591c6872b83bd61887292b0c95ad6fa12e46884401392b47ecf6bfdb9d45fee72985618ef701c8c8e666b2e53601dfd98a0680059acfcf48592a036475624ffa8b2469e66f579d454d31a6ec"}}, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x10, 0x10, 0x6, 0xedb9, 0xface}}}, &(0x7f0000000840)={0x84, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x8}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, 0x0}) 1.422347693s ago: executing program 0 (id=1382): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x1c0601, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x183001, 0x0) unshare(0x26020480) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x3, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x5, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.390741243s ago: executing program 0 (id=1384): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.379467724s ago: executing program 0 (id=1385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x3}, {0xfff3, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) 1.234500666s ago: executing program 0 (id=1397): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x146) 1.106171919s ago: executing program 4 (id=1394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) 959.060211ms ago: executing program 4 (id=1396): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x5) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x4000) 490.28837ms ago: executing program 4 (id=1399): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r1, 0x5a718000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0xffffffff, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x24040010}, 0x0) 452.881671ms ago: executing program 2 (id=1400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) 421.260541ms ago: executing program 4 (id=1401): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 420.794191ms ago: executing program 2 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 395.147562ms ago: executing program 2 (id=1403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000a00)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5$\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14|\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1c[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xfa\xff\xff\xff\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4,[\x18\xef5Z\x7fN\xf2\xc0e\xcf\xb6\"\xd47\xe0%]\xae#w\x06U\xab\xea&\xad?R\xda\x01z\x82\xd5\xf9\xef@\x9f\xa6\xaf\x14\xb5\xbd\n\xd6v\b\xb9\x1d\xae\xbb\xbf7\xd9\xcf\xbb_3\x10', 0x3) fsetxattr$security_selinux(r1, &(0x7f00000004c0), &(0x7f0000000540)='system_u:object_r:newrole_exec_t:s0\x00', 0x9, 0x2) 378.708292ms ago: executing program 0 (id=1404): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 368.172423ms ago: executing program 4 (id=1405): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000002640)=[@code={0xa, 0x84, {"48b88ee50000000000000f23d80f21f835c00000f00f23f8460f01a148b819000000000000000f23d00f21f835300000050f23f864f3400f01ea66b83f01b88e3e470ff3b900000000b805000000b9f1b27d040f01d966660fc7b4925f0000000f20e0f30fc7300f22e0c4a5112982ae900000"}}], 0x84}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 357.260333ms ago: executing program 2 (id=1406): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x3, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 261.368145ms ago: executing program 4 (id=1407): pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0xf195, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 100.447617ms ago: executing program 2 (id=1408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000280)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000640)=0x1) close(0x3) 97.525498ms ago: executing program 1 (id=1410): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 83.552658ms ago: executing program 1 (id=1411): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468305f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24040804}, 0x48000) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4820}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 73.310548ms ago: executing program 5 (id=1412): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 62.698759ms ago: executing program 5 (id=1413): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 46.295959ms ago: executing program 1 (id=1414): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 42.215848ms ago: executing program 5 (id=1415): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000001c0)="$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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000100)={&(0x7f0000001600)=""/4096, 0x1000}) 30.594759ms ago: executing program 2 (id=1416): r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'GPL\x00', 0x3a, 'f2fs\x00', 0x3a, './file0'}, 0x30) dup3(r0, r1, 0x80000) 15.953229ms ago: executing program 1 (id=1417): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0010ebff0700395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 1 (id=1418): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) kernel console output (not intermixed with test programs): ] ? cgroup_rstat_updated+0xf5/0x370 [ 38.004770][ T1218] ? xas_nomem+0x6b/0x1f0 [ 38.009100][ T1218] f2fs_readahead+0xfc/0x240 [ 38.013683][ T1218] ? __cfi_f2fs_readahead+0x10/0x10 [ 38.018875][ T1218] read_pages+0x1b0/0xdd0 [ 38.023208][ T1218] ? __cfi___filemap_add_folio+0x10/0x10 [ 38.028844][ T1218] ? page_cache_ra_unbounded+0x720/0x720 [ 38.034479][ T1218] ? folio_add_lru+0x260/0x390 [ 38.039247][ T1218] ? filemap_add_folio+0x105/0x150 [ 38.044362][ T1218] page_cache_ra_unbounded+0x5d1/0x720 [ 38.049823][ T1218] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 38.055800][ T1218] ? __switch_to+0x51f/0xe30 [ 38.060390][ T1218] page_cache_ra_order+0x36a/0xb70 [ 38.065500][ T1218] ? finish_task_switch+0x16b/0x7b0 [ 38.070698][ T1218] ? __switch_to_asm+0x3a/0x60 [ 38.075457][ T1218] ? __schedule+0xb8f/0x14e0 [ 38.080043][ T1218] ? __cfi_page_cache_ra_order+0x10/0x10 [ 38.085679][ T1218] ondemand_readahead+0x817/0xdb0 [ 38.090699][ T1218] ? __kasan_check_read+0x11/0x20 [ 38.095713][ T1218] ? page_cache_sync_ra+0x490/0x490 [ 38.100908][ T1218] page_cache_sync_ra+0x41b/0x490 [ 38.105931][ T1218] f2fs_readdir+0x444/0x940 [ 38.110434][ T1218] ? __cfi_f2fs_readdir+0x10/0x10 [ 38.115456][ T1218] ? down_read_killable+0xb6/0x100 [ 38.120561][ T1218] ? __cfi_down_read_killable+0x10/0x10 [ 38.126106][ T1218] ? fsnotify_perm+0x269/0x5b0 [ 38.130864][ T1218] ? security_file_permission+0x94/0xb0 [ 38.136404][ T1218] iterate_dir+0x271/0x610 [ 38.140812][ T1218] ? __cfi_f2fs_readdir+0x10/0x10 [ 38.145833][ T1218] __se_sys_getdents64+0xe5/0x240 [ 38.150848][ T1218] ? __x64_sys_getdents64+0x90/0x90 [ 38.156039][ T1218] ? xfd_validate_state+0x70/0x150 [ 38.161151][ T1218] ? __cfi_filldir64+0x10/0x10 [ 38.165911][ T1218] ? __bpf_trace_sys_enter+0x62/0x70 [ 38.171192][ T1218] __x64_sys_getdents64+0x7b/0x90 [ 38.176209][ T1218] x64_sys_call+0x15c/0x9a0 [ 38.180708][ T1218] do_syscall_64+0x4c/0xa0 [ 38.185120][ T1218] ? clear_bhb_loop+0x30/0x80 [ 38.189792][ T1218] ? clear_bhb_loop+0x30/0x80 [ 38.194467][ T1218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 38.200356][ T1218] RIP: 0033:0x7fc61538eec9 [ 38.204764][ T1218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.224360][ T1218] RSP: 002b:00007fc613df7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 38.232769][ T1218] RAX: ffffffffffffffda RBX: 00007fc6155e5fa0 RCX: 00007fc61538eec9 [ 38.240737][ T1218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 38.248699][ T1218] RBP: 00007fc615411f91 R08: 0000000000000000 R09: 0000000000000000 [ 38.256663][ T1218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.264623][ T1218] R13: 00007fc6155e6038 R14: 00007fc6155e5fa0 R15: 00007ffc3ede05d8 [ 38.272595][ T1218] [ 38.300752][ T1237] syz.3.279: attempt to access beyond end of device [ 38.300752][ T1237] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 38.331592][ T1218] syz.4.274: attempt to access beyond end of device [ 38.331592][ T1218] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 38.350511][ T1240] loop3: detected capacity change from 0 to 1024 [ 38.358184][ T1218] syz.4.274: attempt to access beyond end of device [ 38.358184][ T1218] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 38.372825][ T1241] syz.4.274: attempt to access beyond end of device [ 38.372825][ T1241] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 38.388542][ T1240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.432502][ T288] EXT4-fs (loop3): unmounting filesystem. [ 38.483916][ T284] syz-executor: attempt to access beyond end of device [ 38.483916][ T284] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.569036][ T1249] device bridge0 entered promiscuous mode [ 38.597379][ T1249] bridge0: port 3(macsec1) entered blocking state [ 38.637120][ T1249] bridge0: port 3(macsec1) entered disabled state [ 38.670406][ T1249] device bridge0 left promiscuous mode [ 38.727617][ T1226] loop0: detected capacity change from 0 to 131072 [ 38.805466][ T1226] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.893665][ T473] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.922561][ T1226] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 38.934809][ T1251] loop1: detected capacity change from 0 to 40427 [ 38.954520][ T1276] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 38.975154][ T1251] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 38.982925][ T1251] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 39.004364][ T1251] F2FS-fs (loop1): invalid crc value [ 39.023604][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 39.023617][ T28] audit: type=1400 audit(1758689795.856:284): avc: denied { write } for pid=1225 comm="syz.0.276" name="encrypted_dir" dev="loop0" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.049934][ T1251] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.051947][ T28] audit: type=1400 audit(1758689795.856:285): avc: denied { add_name } for pid=1225 comm="syz.0.276" name="file" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.104651][ T473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.117048][ T473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.126863][ T1251] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 39.127047][ T473] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 39.134745][ T1251] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.159194][ T473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.183700][ T473] usb 3-1: config 0 descriptor?? [ 39.233611][ T28] audit: type=1400 audit(1758689796.066:286): avc: denied { getopt } for pid=1299 comm="syz.4.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.270986][ T28] audit: type=1400 audit(1758689796.096:287): avc: denied { create } for pid=1250 comm="syz.1.285" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.297118][ T1306] netlink: 104 bytes leftover after parsing attributes in process `syz.4.317'. [ 39.323626][ T28] audit: type=1400 audit(1758689796.096:288): avc: denied { unlink } for pid=1250 comm="syz.1.285" name="file1" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 39.345924][ T1308] loop4: detected capacity change from 0 to 1024 [ 39.372509][ T1308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 39.424695][ T1308] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.450507][ T1308] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 39.465876][ T1308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 39.478197][ T1308] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.478197][ T1308] [ 39.488105][ T1308] EXT4-fs (loop4): Total free blocks count 0 [ 39.494571][ T1308] EXT4-fs (loop4): Free/Dirty block details [ 39.500531][ T1308] EXT4-fs (loop4): free_blocks=20480 [ 39.507033][ T1308] EXT4-fs (loop4): dirty_blocks=16 [ 39.513951][ T1308] EXT4-fs (loop4): Block reservation details [ 39.520034][ T1308] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 39.531769][ T1308] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.563612][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.599130][ T1321] loop0: detected capacity change from 0 to 512 [ 39.618962][ T1321] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.312: casefold flag without casefold feature [ 39.640476][ T1321] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.312: couldn't read orphan inode 15 (err -117) [ 39.654259][ T1321] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.669149][ T1321] syz.0.312 (pid 1321) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 39.697496][ T285] EXT4-fs (loop0): unmounting filesystem. [ 39.766512][ T19] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 39.769729][ T1339] loop4: detected capacity change from 0 to 1024 [ 39.783587][ T19] usb 4-1: config 160 has no interface number 0 [ 39.791855][ T19] usb 4-1: config 160 interface 200 has no altsetting 0 [ 39.811426][ T19] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 39.830777][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.831639][ T1339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.849137][ T19] usb 4-1: Product: syz [ 39.853354][ T19] usb 4-1: Manufacturer: syz [ 39.858133][ T19] usb 4-1: SerialNumber: syz [ 39.863233][ T1339] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.916531][ T284] EXT4-fs (loop4): unmounting filesystem. [ 39.950301][ T1343] loop4: detected capacity change from 0 to 128 [ 39.960687][ T1333] loop1: detected capacity change from 0 to 40427 [ 39.968811][ T1333] F2FS-fs (loop1): fault_type options not supported [ 39.972661][ T1337] loop0: detected capacity change from 0 to 40427 [ 39.975858][ T1333] F2FS-fs (loop1): fault_injection options not supported [ 39.982166][ T28] audit: type=1400 audit(1758689796.826:289): avc: denied { append } for pid=1342 comm="syz.4.322" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.989075][ T1333] F2FS-fs (loop1): Image doesn't support compression [ 40.020641][ T1337] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 40.021260][ T1333] F2FS-fs (loop1): invalid crc value [ 40.033846][ T1337] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.063514][ T1337] F2FS-fs (loop0): invalid crc value [ 40.072653][ T1333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 40.078071][ T19] usb 4-1: MIDIStreaming interface descriptor not found [ 40.115541][ T19] usb 4-1: USB disconnect, device number 4 [ 40.134616][ T1337] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.170906][ T1333] F2FS-fs (loop1): Start checkpoint disabled! [ 40.178949][ T1333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 40.232150][ T1333] syz.1.319: attempt to access beyond end of device [ 40.232150][ T1333] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 40.240836][ T473] usb 3-1: USB disconnect, device number 3 [ 40.250753][ T1333] syz.1.319: attempt to access beyond end of device [ 40.250753][ T1333] loop1: rw=2049, sector=77960, nr_sectors = 376 limit=40427 [ 40.262582][ T1337] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.267863][ T1333] syz.1.319: attempt to access beyond end of device [ 40.267863][ T1333] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 40.279747][ T1337] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.866783][ T1382] device bridge0 entered promiscuous mode [ 40.878127][ T1384] xt_bpf: check failed: parse error [ 40.894194][ T1382] bridge0: port 3(macsec1) entered blocking state [ 40.933639][ T1382] bridge0: port 3(macsec1) entered disabled state [ 40.973822][ T1382] device bridge0 left promiscuous mode [ 41.054864][ T28] audit: type=1400 audit(1758689797.896:290): avc: denied { unlink } for pid=1393 comm="syz.3.343" name="#1" dev="tmpfs" ino=354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 41.126634][ T1396] loop3: detected capacity change from 0 to 512 [ 41.154195][ T28] audit: type=1400 audit(1758689797.996:291): avc: denied { read } for pid=1397 comm="syz.0.345" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.157693][ T1396] EXT4-fs: Ignoring removed nobh option [ 41.238971][ T1380] loop2: detected capacity change from 0 to 40427 [ 41.263642][ T1380] F2FS-fs (loop2): fault_type options not supported [ 41.270326][ T1380] F2FS-fs (loop2): fault_injection options not supported [ 41.284209][ T1380] F2FS-fs (loop2): Image doesn't support compression [ 41.285307][ T1396] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.344: bg 0: block 248: padding at end of block bitmap is not set [ 41.333185][ T1380] F2FS-fs (loop2): invalid crc value [ 41.343690][ T1396] Quota error (device loop3): write_blk: dquota write failed [ 41.351117][ T1396] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 41.355732][ T1380] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.362356][ T1396] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.344: Failed to acquire dquot type 1 [ 41.379062][ T1396] EXT4-fs (loop3): 1 truncate cleaned up [ 41.385057][ T1396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 41.395089][ T1396] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.436849][ T1396] syz.3.344 (1396) used greatest stack depth: 20592 bytes left [ 41.456553][ T288] EXT4-fs (loop3): unmounting filesystem. [ 41.536330][ T1380] F2FS-fs (loop2): Start checkpoint disabled! [ 41.552994][ T1380] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 41.631344][ T1380] bio_check_eod: 1 callbacks suppressed [ 41.631359][ T1380] syz.2.336: attempt to access beyond end of device [ 41.631359][ T1380] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 41.676228][ T1380] syz.2.336: attempt to access beyond end of device [ 41.676228][ T1380] loop2: rw=2049, sector=77960, nr_sectors = 376 limit=40427 [ 41.700360][ T1380] syz.2.336: attempt to access beyond end of device [ 41.700360][ T1380] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 41.761230][ T691] kworker/u4:22: attempt to access beyond end of device [ 41.761230][ T691] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 41.787706][ T1410] loop1: detected capacity change from 0 to 40427 [ 41.815820][ T1410] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 41.850439][ T1410] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 41.860785][ T1410] F2FS-fs (loop1): Found nat_bits in checkpoint [ 41.904428][ T1428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 41.904975][ T1410] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 41.920346][ T1410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 41.948069][ T1431] netlink: 516 bytes leftover after parsing attributes in process `syz.4.358'. [ 41.959745][ T283] syz-executor: attempt to access beyond end of device [ 41.959745][ T283] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 42.030482][ T1437] loop0: detected capacity change from 0 to 256 [ 42.106341][ T1441] loop2: detected capacity change from 0 to 512 [ 42.125087][ T1441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.146500][ T1437] incfs: ino conflict with backing FS 1 [ 42.153145][ T1441] EXT4-fs (loop2): 1 truncate cleaned up [ 42.162365][ T1441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.170754][ T1439] loop4: detected capacity change from 0 to 40427 [ 42.183093][ T1439] F2FS-fs (loop4): invalid crc value [ 42.199483][ T1439] F2FS-fs (loop4): Found nat_bits in checkpoint [ 42.208779][ T287] EXT4-fs (loop2): unmounting filesystem. [ 42.232145][ T1445] input: syz1 as /devices/virtual/input/input7 [ 42.232152][ T1439] F2FS-fs (loop4): Start checkpoint disabled! [ 42.248348][ T1439] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 42.286030][ T1451] loop1: detected capacity change from 0 to 128 [ 42.310103][ T1449] device bridge0 entered promiscuous mode [ 42.328892][ T1449] bridge0: port 4(macsec1) entered blocking state [ 42.349907][ T1449] bridge0: port 4(macsec1) entered disabled state [ 42.358165][ T693] kworker/u4:24: attempt to access beyond end of device [ 42.358165][ T693] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 42.373142][ T1449] device bridge0 left promiscuous mode [ 42.381951][ T1453] loop1: detected capacity change from 0 to 512 [ 42.396714][ T1453] EXT4-fs: Ignoring removed oldalloc option [ 42.404437][ T1453] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.367: dx entry: limit 1024 != root limit 124 [ 42.416485][ T1453] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.367: Corrupt directory, running e2fsck is recommended [ 42.421560][ T1458] device syz_tun entered promiscuous mode [ 42.430299][ T1453] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 42.443347][ T1453] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.367: corrupted in-inode xattr [ 42.455673][ T1453] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.367: couldn't read orphan inode 15 (err -117) [ 42.467766][ T1453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 42.549057][ T1453] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.367: dx entry: limit 1024 != root limit 124 [ 42.561140][ T1453] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.367: Corrupt directory, running e2fsck is recommended [ 42.574878][ T1453] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.367: path /78/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 42.597469][ T1457] device syz_tun left promiscuous mode [ 42.605776][ T1470] incfs: iterate_incfs_dir / -22 [ 42.614328][ T283] EXT4-fs (loop1): unmounting filesystem. [ 42.795456][ T1472] loop2: detected capacity change from 0 to 40427 [ 42.811828][ T1472] F2FS-fs (loop2): fault_injection options not supported [ 42.818963][ T1472] F2FS-fs (loop2): fault_type options not supported [ 42.826295][ T1472] F2FS-fs (loop2): invalid crc value [ 42.857554][ T1472] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.892242][ T1472] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.927219][ T1469] loop0: detected capacity change from 0 to 40427 [ 42.943726][ T1469] F2FS-fs (loop0): fault_injection options not supported [ 42.957103][ T1472] F2FS-fs (loop2): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem [ 42.973844][ T1469] F2FS-fs (loop0): invalid crc value [ 42.981162][ T1490] device bridge0 entered promiscuous mode [ 43.002088][ T1490] bridge0: port 3(macsec1) entered blocking state [ 43.009431][ T1469] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.037047][ T1490] bridge0: port 3(macsec1) entered disabled state [ 43.052415][ T1490] device bridge0 left promiscuous mode [ 43.085120][ T1469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.157704][ T1469] syz.0.375: attempt to access beyond end of device [ 43.157704][ T1469] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.210532][ T285] syz-executor: attempt to access beyond end of device [ 43.210532][ T285] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 43.481300][ T1518] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 43.505669][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 43.518219][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.541768][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 43.551118][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.588111][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.613456][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.631978][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.650665][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.669141][ T879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.783861][ T1534] fuse: Unknown parameter 'fd00000000000000000000' [ 43.809984][ T1533] loop0: detected capacity change from 0 to 512 [ 43.855689][ T1533] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.395: casefold flag without casefold feature [ 43.881467][ T1533] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.395: couldn't read orphan inode 15 (err -117) [ 43.913912][ T1533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.945434][ T1544] loop1: detected capacity change from 0 to 512 [ 43.963987][ T1544] EXT4-fs: Ignoring removed nobh option [ 43.979666][ T285] EXT4-fs (loop0): unmounting filesystem. [ 44.005155][ T1544] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.398: iget: bad i_size value: 38620345925642 [ 44.053248][ T1544] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.398: couldn't read orphan inode 15 (err -117) [ 44.079453][ T1544] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.118791][ T1559] loop0: detected capacity change from 0 to 256 [ 44.157018][ T1559] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 44.192517][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 44.192532][ T28] audit: type=1400 audit(1758689801.026:310): avc: denied { map } for pid=1543 comm="syz.1.398" path="/82/file1/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.195331][ T1566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.398: bg 0: block 5: invalid block bitmap [ 44.286149][ T1566] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 44.311637][ T1566] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.311637][ T1566] [ 44.336839][ T1566] EXT4-fs (loop1): Total free blocks count 0 [ 44.342951][ T1566] EXT4-fs (loop1): Free/Dirty block details [ 44.349338][ T1566] EXT4-fs (loop1): free_blocks=0 [ 44.354713][ T1566] EXT4-fs (loop1): dirty_blocks=1296 [ 44.360077][ T1566] EXT4-fs (loop1): Block reservation details [ 44.366692][ T1566] EXT4-fs (loop1): i_reserved_data_blocks=1296 [ 44.399383][ T1578] loop4: detected capacity change from 0 to 512 [ 44.417804][ T766] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 1276 with error 28 [ 44.448474][ T1578] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.457688][ T1578] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.494335][ T284] EXT4-fs (loop4): unmounting filesystem. [ 44.558120][ T28] audit: type=1400 audit(1758689801.396:311): avc: denied { wake_alarm } for pid=1585 comm="syz.1.414" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 44.566371][ T1565] loop3: detected capacity change from 0 to 40427 [ 44.587432][ T28] audit: type=1400 audit(1758689801.426:312): avc: denied { name_bind } for pid=1587 comm="syz.4.415" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.608618][ T1565] F2FS-fs (loop3): fault_injection options not supported [ 44.624590][ T1565] F2FS-fs (loop3): invalid crc value [ 44.638574][ T1565] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.721827][ T1565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.754142][ T28] audit: type=1400 audit(1758689801.596:313): avc: denied { relabelfrom } for pid=1598 comm="syz.1.419" name="" dev="pipefs" ino=19328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 44.819235][ T1565] syz.3.407: attempt to access beyond end of device [ 44.819235][ T1565] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.874370][ T288] syz-executor: attempt to access beyond end of device [ 44.874370][ T288] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 45.213893][ T1628] loop3: detected capacity change from 0 to 4096 [ 45.240285][ T1634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.435'. [ 45.268179][ T1628] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.327181][ T1643] loop2: detected capacity change from 0 to 512 [ 45.366656][ T1628] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.432: corrupted inode contents [ 45.383358][ T1628] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #15: comm syz.3.432: mark_inode_dirty error [ 45.400925][ T1643] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.439: casefold flag without casefold feature [ 45.408293][ T1628] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.432: corrupted inode contents [ 45.428081][ T1648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'. [ 45.438323][ T1643] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.439: couldn't read orphan inode 15 (err -117) [ 45.454217][ T1628] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.432: mark_inode_dirty error [ 45.468163][ T1643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.518162][ T287] EXT4-fs (loop2): unmounting filesystem. [ 45.524379][ T1628] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.432: corrupted inode contents [ 45.536638][ T1628] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.432: mark_inode_dirty error [ 45.549796][ T1628] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.432: corrupted inode contents [ 45.563025][ T1628] EXT4-fs error (device loop3): ext4_truncate:4314: inode #15: comm syz.3.432: mark_inode_dirty error [ 45.574290][ T1628] EXT4-fs error (device loop3) in ext4_setattr:5660: Corrupt filesystem [ 45.583186][ T1657] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #15: comm syz.3.432: corrupted inode contents [ 45.594982][ T28] audit: type=1400 audit(1758689802.416:314): avc: denied { setattr } for pid=1627 comm="syz.3.432" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.638908][ T288] EXT4-fs (loop3): unmounting filesystem. [ 45.733438][ T28] audit: type=1400 audit(1758689802.566:315): avc: denied { map } for pid=1667 comm="syz.0.450" path="socket:[19452]" dev="sockfs" ino=19452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.761963][ T28] audit: type=1400 audit(1758689802.566:316): avc: denied { read } for pid=1667 comm="syz.0.450" path="socket:[19452]" dev="sockfs" ino=19452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 45.793651][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 45.801200][ T473] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 45.811721][ T28] audit: type=1400 audit(1758689802.646:317): avc: denied { ioctl } for pid=1659 comm="syz.4.445" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.837606][ T1666] loop3: detected capacity change from 0 to 40427 [ 45.840769][ T1037] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 45.854044][ T28] audit: type=1400 audit(1758689802.686:318): avc: denied { read write } for pid=1665 comm="syz.3.449" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.856200][ T1666] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 45.880689][ T28] audit: type=1400 audit(1758689802.686:319): avc: denied { open } for pid=1665 comm="syz.3.449" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.909612][ T1666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.918788][ T1666] F2FS-fs (loop3): invalid crc value [ 45.926639][ T1666] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.967001][ T1666] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.974257][ T1666] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 45.998409][ T473] usb 5-1: Using ep0 maxpacket: 16 [ 46.003593][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 46.009956][ T19] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 46.018217][ T473] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.035670][ T19] usb 2-1: config 0 has no interface number 0 [ 46.042031][ T19] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.053297][ T19] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.054640][ T1037] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.063197][ T473] usb 5-1: config 7 has an invalid interface number: 88 but max is 0 [ 46.081279][ T19] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 46.090532][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.092090][ T1037] usb 3-1: New USB device found, idVendor=050e, idProduct=a4a1, bcdDevice= 0.40 [ 46.098780][ T473] usb 5-1: config 7 has no interface number 0 [ 46.114098][ T473] usb 5-1: config 7 interface 88 has no altsetting 0 [ 46.121458][ T19] usb 2-1: config 0 descriptor?? [ 46.122147][ T1037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.136554][ T473] usb 5-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 46.144866][ T1037] usb 3-1: Product: syz [ 46.149750][ T1037] usb 3-1: Manufacturer: syz [ 46.157979][ T473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.163692][ T1037] usb 3-1: SerialNumber: syz [ 46.166257][ T288] F2FS-fs (loop3): Issue discard(5637, 5637, 1) failed, ret: -5 [ 46.180505][ T473] usb 5-1: Product: syz [ 46.202538][ T473] usb 5-1: Manufacturer: syz [ 46.208721][ T473] usb 5-1: SerialNumber: syz [ 46.401059][ T1686] loop3: detected capacity change from 0 to 128 [ 46.420397][ T473] usb-storage 5-1:7.88: USB Mass Storage device detected [ 46.436162][ T473] usb-storage 5-1:7.88: Quirks match for vid 0482 pid 0100: 8 [ 46.443934][ T473] usb-storage 5-1:7.88: This device (0482,0100,0100 S 05 P fe) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 46.443934][ T473] Please send a copy of this message to and [ 46.508496][ T473] usb 5-1: USB disconnect, device number 4 [ 46.731715][ T19] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0008/input/input8 [ 46.750387][ T19] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0008/input/input9 [ 46.764725][ T19] uclogic 0003:28BD:0071.0008: input,hiddev96,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 46.968501][ T24] usb 2-1: USB disconnect, device number 4 [ 47.021864][ T1773] netlink: 7000 bytes leftover after parsing attributes in process `syz.4.465'. [ 47.190074][ T1037] cdc_ncm 3-1:1.0: bind() failure [ 47.198245][ T1037] usb 3-1: USB disconnect, device number 4 [ 47.351319][ T1791] netlink: 96 bytes leftover after parsing attributes in process `syz.3.472'. [ 47.499484][ T1796] loop1: detected capacity change from 0 to 1024 [ 47.506829][ T1796] EXT4-fs: Ignoring removed orlov option [ 47.518991][ T1796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.528466][ T1796] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.584761][ T865] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:172: lblock 0 mapped to illegal pblock 0 (length 1) [ 47.606025][ T865] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 47.619776][ T865] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.619776][ T865] [ 47.655797][ T283] EXT4-fs (loop1): unmounting filesystem. [ 47.707170][ T1800] loop1: detected capacity change from 0 to 512 [ 47.734076][ T1800] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.845088][ T802] Bluetooth: hci0: Frame reassembly failed (-84) [ 48.034329][ T1815] loop1: detected capacity change from 0 to 512 [ 48.054075][ T1815] EXT4-fs: Ignoring removed orlov option [ 48.066200][ T1815] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 48.074574][ T19] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.083137][ T1815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 48.104574][ T1815] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.482: corrupted in-inode xattr [ 48.123787][ T1815] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.482: couldn't read orphan inode 15 (err -117) [ 48.151881][ T1815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.196737][ T283] EXT4-fs (loop1): unmounting filesystem. [ 48.275037][ T1826] netlink: 27 bytes leftover after parsing attributes in process `syz.4.486'. [ 48.284762][ T19] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.303611][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 48.306153][ T1830] loop1: detected capacity change from 0 to 512 [ 48.320867][ T19] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 48.327401][ T1830] EXT4-fs: Ignoring removed nobh option [ 48.345562][ T1830] EXT4-fs (loop1): Test dummy encryption mode enabled [ 48.346949][ T19] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.364640][ T1830] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 48.372665][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.381046][ T1830] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.488: invalid indirect mapped block 2683928664 (level 1) [ 48.382139][ T1837] loop3: detected capacity change from 0 to 16 [ 48.407565][ T1830] EXT4-fs (loop1): Remounting filesystem read-only [ 48.413938][ T19] usb 3-1: Product: syz [ 48.414265][ T1837] erofs: (device loop3): mounted with root inode @ nid 36. [ 48.425462][ T19] usb 3-1: Manufacturer: syz [ 48.425479][ T19] usb 3-1: SerialNumber: syz [ 48.442836][ T1837] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=86 [ 48.451604][ T1830] EXT4-fs (loop1): 1 truncate cleaned up [ 48.452095][ T1837] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=86 [ 48.466573][ T1837] overlayfs: failed to get metacopy (-117) [ 48.469671][ T1830] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.499141][ T1843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 48.504625][ T1830] EXT4-fs (loop1): shut down requested (1) [ 48.534388][ T283] EXT4-fs (loop1): unmounting filesystem. [ 48.623339][ T1862] loop3: detected capacity change from 0 to 128 [ 48.805927][ T1873] loop1: detected capacity change from 0 to 16 [ 48.812498][ T1873] erofs: (device loop1): mounted with root inode @ nid 36. [ 48.864688][ T1875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 48.969479][ T1877] loop1: detected capacity change from 0 to 512 [ 48.976247][ T1877] EXT4-fs: Ignoring removed orlov option [ 48.993797][ T1877] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 49.002648][ T1877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 49.011385][ T1877] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.511: corrupted in-inode xattr [ 49.024929][ T1877] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.511: couldn't read orphan inode 15 (err -117) [ 49.037420][ T1877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.053595][ T1037] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 49.070848][ T283] EXT4-fs (loop1): unmounting filesystem. [ 49.104680][ T1882] loop1: detected capacity change from 0 to 1024 [ 49.114754][ T1882] EXT4-fs: Ignoring removed i_version option [ 49.130972][ T1882] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 49.140698][ T1882] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.156236][ T1882] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.513: lblock 0 mapped to illegal pblock 0 (length 4) [ 49.171449][ T1882] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.513: lblock 3 mapped to illegal pblock 3 (length 1) [ 49.185658][ T1882] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 49.198929][ T1882] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.198929][ T1882] [ 49.213427][ T1706] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:213: lblock 8 mapped to illegal pblock 8 (length 8) [ 49.228137][ T1706] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 49.240621][ T1706] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.240621][ T1706] [ 49.243587][ T1037] usb 4-1: Using ep0 maxpacket: 32 [ 49.252407][ T283] EXT4-fs (loop1): unmounting filesystem. [ 49.262364][ T1037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.283606][ T1037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.293358][ T1037] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 49.302440][ T1037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.323676][ T1037] usb 4-1: config 0 descriptor?? [ 49.450840][ T19] cdc_ncm 3-1:1.0: bind() failure [ 49.460849][ T19] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 49.477565][ T19] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 49.489220][ T19] usb 3-1: USB disconnect, device number 5 [ 49.656247][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 49.656260][ T28] audit: type=1400 audit(1758689806.496:408): avc: denied { read } for pid=1900 comm="syz.1.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.716695][ T28] audit: type=1400 audit(1758689806.556:409): avc: denied { relabelfrom } for pid=1902 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 49.736598][ T28] audit: type=1400 audit(1758689806.556:410): avc: denied { relabelto } for pid=1902 comm="syz.1.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 49.759075][ T1037] savu 0003:1E7D:2D5A.0009: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 49.863652][ T985] Bluetooth: hci0: command 0x1003 tx timeout [ 49.864147][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.875841][ T1806] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 49.889979][ T28] audit: type=1400 audit(1758689806.726:411): avc: denied { create } for pid=1911 comm="syz.0.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.913672][ T6] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 49.923662][ T28] audit: type=1400 audit(1758689806.766:412): avc: denied { read } for pid=1913 comm="syz.0.526" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.947394][ T28] audit: type=1400 audit(1758689806.766:413): avc: denied { open } for pid=1913 comm="syz.0.526" path="/88/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.005037][ T28] audit: type=1400 audit(1758689806.846:414): avc: denied { ioctl } for pid=1921 comm="syz.0.530" path="socket:[20837]" dev="sockfs" ino=20837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.033884][ T28] audit: type=1400 audit(1758689806.846:415): avc: denied { write } for pid=1921 comm="syz.0.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.074681][ T473] usb 4-1: USB disconnect, device number 5 [ 50.080781][ T28] audit: type=1400 audit(1758689806.916:416): avc: denied { map } for pid=1930 comm="syz.2.535" path="socket:[20113]" dev="sockfs" ino=20113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.103988][ T1037] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 50.122370][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 50.143668][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 50.164964][ T6] usb 5-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 50.174131][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.182485][ T6] usb 5-1: config 0 descriptor?? [ 50.188043][ T1895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 50.195472][ T28] audit: type=1400 audit(1758689807.036:417): avc: denied { watch watch_reads } for pid=1929 comm="syz.0.534" path="/94" dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 50.294647][ T1037] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.306026][ T1037] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 50.315274][ T1037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.325905][ T1037] usb 2-1: config 0 descriptor?? [ 50.613470][ T1943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.684493][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.695973][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.721261][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.735076][ T1037] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 50.745462][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.759126][ T1037] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input13 [ 50.764452][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.816530][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.832145][ T1075] usb 5-1: USB disconnect, device number 5 [ 50.849261][ T1037] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 50.870062][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.879394][ T876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.931321][ T1965] loop2: detected capacity change from 0 to 512 [ 50.978517][ T1965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.987706][ T1965] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.022202][ T287] EXT4-fs (loop2): unmounting filesystem. [ 51.096158][ T1976] netlink: 'syz.2.552': attribute type 29 has an invalid length. [ 51.165631][ T1037] usb 2-1: USB disconnect, device number 5 [ 51.233761][ T39] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 51.307725][ T1995] loop2: detected capacity change from 0 to 512 [ 51.331381][ T1995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.341553][ T1995] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.359255][ T1995] EXT4-fs (loop2): unmounting filesystem. [ 51.424693][ T39] usb 1-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 51.443587][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.462450][ T39] usb 1-1: config 0 descriptor?? [ 51.649564][ T2021] loop4: detected capacity change from 0 to 512 [ 51.659130][ T2021] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.880051][ T39] smartjoyplus 0003:0925:8866.000C: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.0-1/input0 [ 51.892124][ T39] smartjoyplus 0003:0925:8866.000C: Force feedback for SmartJoy PLUS PS2/USB adapter [ 51.913758][ T2062] random: crng reseeded on system resumption [ 52.091859][ T39] usb 1-1: USB disconnect, device number 5 [ 52.167176][ T2106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 52.323390][ T2108] loop2: detected capacity change from 0 to 40427 [ 52.332599][ T2108] F2FS-fs (loop2): invalid crc value [ 52.339387][ T2108] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.353625][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 52.372065][ T2108] F2FS-fs (loop2): Start checkpoint disabled! [ 52.378688][ T2108] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 52.410378][ T815] bio_check_eod: 2 callbacks suppressed [ 52.410387][ T815] kworker/u4:139: attempt to access beyond end of device [ 52.410387][ T815] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 52.543676][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 52.554793][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 52.563331][ T6] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 52.571692][ T6] usb 2-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 52.590964][ T6] usb 2-1: config 4 has no interface number 0 [ 52.611877][ T6] usb 2-1: string descriptor 0 read error: -22 [ 52.620934][ T6] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 52.630127][ T473] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.645003][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.657591][ T6] usb 2-1: Found UVC 0.02 device (04f2:b746) [ 52.673899][ T6] usb 2-1: No valid video chain found. [ 52.813710][ T473] usb 5-1: Using ep0 maxpacket: 16 [ 52.824306][ T473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.872691][ T473] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.900758][ T473] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 52.914942][ T473] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 52.924450][ T473] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.943735][ T473] usb 5-1: config 0 descriptor?? [ 52.949468][ T6] usb 2-1: USB disconnect, device number 6 [ 53.023094][ T2176] loop3: detected capacity change from 0 to 256 [ 53.034245][ T2176] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.045384][ T2176] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 53.058009][ T2176] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 53.119807][ T2178] loop3: detected capacity change from 0 to 8192 [ 53.217205][ T2184] futex_wake_op: syz.3.649 tries to shift op by -1; fix this program [ 53.243662][ T344] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.358706][ T473] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.000D/input/input14 [ 53.408579][ T2194] netlink: 96 bytes leftover after parsing attributes in process `syz.1.653'. [ 53.445092][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.445847][ T473] appleir 0003:05AC:8241.000D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 53.463585][ T344] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.478642][ T344] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 53.493897][ T344] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 53.522789][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.545443][ T344] usb 3-1: config 0 descriptor?? [ 53.563326][ T473] usb 5-1: USB disconnect, device number 6 [ 53.710171][ T2209] serio: Serial port ptm0 [ 53.766789][ T2213] kvm: MWAIT instruction emulated as NOP! [ 53.863664][ T1075] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 53.958924][ T344] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 53.967822][ T344] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 54.044567][ T1075] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.055491][ T1075] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 54.066911][ T1075] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.075982][ T1075] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.083960][ T1075] usb 4-1: Product: syz [ 54.088180][ T1075] usb 4-1: Manufacturer: syz [ 54.092787][ T1075] usb 4-1: SerialNumber: syz [ 54.098902][ T1075] cdc_mbim 4-1:1.0: skipping garbage [ 54.223940][ T344] usb 3-1: USB disconnect, device number 6 [ 54.299843][ T2203] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.552334][ T2230] loop1: detected capacity change from 0 to 512 [ 54.559240][ T2230] EXT4-fs (loop1): Test dummy encryption mode enabled [ 54.566066][ T2230] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.577202][ T2230] EXT4-fs (loop1): 1 truncate cleaned up [ 54.582886][ T2230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.598070][ T2230] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 54.613945][ T283] EXT4-fs (loop1): unmounting filesystem. [ 54.722552][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 54.722569][ T28] audit: type=1400 audit(1758689811.556:462): avc: denied { ioctl } for pid=2245 comm="syz.0.674" path="socket:[21715]" dev="sockfs" ino=21715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.769987][ T28] audit: type=1400 audit(1758689811.576:463): avc: denied { append } for pid=2247 comm="syz.1.675" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 54.810356][ T28] audit: type=1400 audit(1758689811.646:464): avc: denied { read write } for pid=2254 comm="syz.2.678" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.836307][ T28] audit: type=1400 audit(1758689811.676:465): avc: denied { open } for pid=2254 comm="syz.2.678" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.861254][ T28] audit: type=1400 audit(1758689811.706:466): avc: denied { ioctl } for pid=2254 comm="syz.2.678" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.908628][ T2203] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 54.919011][ T1075] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 54.929803][ T1075] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:52:0c:cf:df:1f [ 54.981353][ T28] audit: type=1400 audit(1758689811.816:467): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 55.012336][ T28] audit: type=1400 audit(1758689811.816:468): avc: denied { block_suspend } for pid=2271 comm="syz.4.684" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 55.039436][ T28] audit: type=1400 audit(1758689811.816:469): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.066685][ T28] audit: type=1400 audit(1758689811.816:470): avc: denied { read } for pid=142 comm="dhcpcd" name="n17" dev="tmpfs" ino=4767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.092231][ T28] audit: type=1400 audit(1758689811.816:471): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=4767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.171821][ T142] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 55.190134][ T473] usb 4-1: USB disconnect, device number 6 [ 55.196490][ T473] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 55.226638][ T2302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 55.273614][ T1075] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 55.457196][ T1075] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 55.481657][ T1075] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 55.506259][ T1075] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.518947][ T1075] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.527105][ T1075] usb 1-1: Product: syz [ 55.532174][ T1075] usb 1-1: Manufacturer: syz [ 55.536847][ T1075] usb 1-1: SerialNumber: syz [ 55.547993][ T2275] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 55.569651][ T2352] xt_hashlimit: size too large, truncated to 1048576 [ 55.768904][ T2275] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 55.818052][ T2374] input: syz1 as /devices/virtual/input/input15 [ 55.884707][ T2380] SELinux: Context system_u: is not valid (left unmapped). [ 55.935356][ T2385] netlink: 'syz.2.716': attribute type 1 has an invalid length. [ 56.046436][ T2400] loop1: detected capacity change from 0 to 1024 [ 56.056381][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.070708][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.077285][ T2404] loop4: detected capacity change from 0 to 128 [ 56.078375][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.092153][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.099814][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.100214][ T2400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.109128][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.117041][ T2400] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.133723][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.146786][ T796] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 56.161666][ T796] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 56.161690][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.174045][ T796] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.174045][ T796] [ 56.174060][ T796] EXT4-fs (loop1): Total free blocks count 0 [ 56.174071][ T796] EXT4-fs (loop1): Free/Dirty block details [ 56.181811][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.191050][ T796] EXT4-fs (loop1): free_blocks=4293918720 [ 56.191065][ T796] EXT4-fs (loop1): dirty_blocks=16 [ 56.191076][ T796] EXT4-fs (loop1): Block reservation details [ 56.191086][ T796] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 56.192031][ T283] EXT4-fs (loop1): unmounting filesystem. [ 56.197505][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.246314][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.253744][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.261121][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.268511][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.275900][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.283255][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.290627][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.298016][ T19] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 56.305888][ T19] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 56.369299][ T2413] fido_id[2413]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.410886][ T1075] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 56.423674][ T344] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.433850][ T1075] cdc_ncm 1-1:1.0: bind() failure [ 56.439384][ T1075] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 56.446370][ T1075] cdc_ncm 1-1:1.1: bind() failure [ 56.455264][ T1075] usb 1-1: USB disconnect, device number 6 [ 56.613621][ T344] usb 5-1: Using ep0 maxpacket: 16 [ 56.620028][ T344] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 56.631184][ T344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.641613][ T344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.641721][ T2431] loop3: detected capacity change from 0 to 128 [ 56.652356][ T344] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.666368][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.674556][ T344] usb 5-1: Product: syz [ 56.678865][ T344] usb 5-1: Manufacturer: syz [ 56.683526][ T344] usb 5-1: SerialNumber: syz [ 56.806284][ T2446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=2446 comm=syz.3.741 [ 56.819666][ T2446] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 56.897212][ T2459] loop3: detected capacity change from 0 to 512 [ 56.904056][ T2459] EXT4-fs: Ignoring removed oldalloc option [ 56.912068][ T2459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.925878][ T2459] EXT4-fs (loop3): 1 truncate cleaned up [ 56.936969][ T2459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.958971][ T2463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.748'. [ 56.971809][ T288] EXT4-fs (loop3): unmounting filesystem. [ 57.011597][ T2470] syz.2.751[2470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.011675][ T2470] syz.2.751[2470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.025071][ T2470] serio: Serial port ptm0 [ 57.104020][ T344] usb 5-1: 0:2 : does not exist [ 57.190479][ T2475] loop3: detected capacity change from 0 to 40427 [ 57.206952][ T2475] F2FS-fs (loop3): invalid crc value [ 57.220043][ T2475] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.249120][ T2475] F2FS-fs (loop3): Start checkpoint disabled! [ 57.255883][ T2475] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 57.286663][ T1569] kworker/u4:205: attempt to access beyond end of device [ 57.286663][ T1569] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 57.372974][ T2486] loop3: detected capacity change from 0 to 256 [ 57.386264][ T2486] FAT-fs (loop3): Directory bread(block 64) failed [ 57.392990][ T2486] FAT-fs (loop3): Directory bread(block 65) failed [ 57.399591][ T2486] FAT-fs (loop3): Directory bread(block 66) failed [ 57.406165][ T2486] FAT-fs (loop3): Directory bread(block 67) failed [ 57.412730][ T2486] FAT-fs (loop3): Directory bread(block 68) failed [ 57.419314][ T2486] FAT-fs (loop3): Directory bread(block 69) failed [ 57.426094][ T2486] FAT-fs (loop3): Directory bread(block 70) failed [ 57.432646][ T2486] FAT-fs (loop3): Directory bread(block 71) failed [ 57.439224][ T2486] FAT-fs (loop3): Directory bread(block 72) failed [ 57.445804][ T2486] FAT-fs (loop3): Directory bread(block 73) failed [ 57.481135][ T2486] syz.3.757: attempt to access beyond end of device [ 57.481135][ T2486] loop3: rw=2049, sector=1768, nr_sectors = 128 limit=256 [ 57.499568][ T815] kworker/u4:139: attempt to access beyond end of device [ 57.499568][ T815] loop3: rw=1, sector=1896, nr_sectors = 1924 limit=256 [ 57.513471][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 57.694747][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.707641][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.719740][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 57.738176][ T39] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.747825][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.751203][ T344] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 57.771628][ T39] usb 2-1: config 0 descriptor?? [ 57.787900][ T344] usb 5-1: USB disconnect, device number 7 [ 58.044165][ T2508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 58.143582][ T1075] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 58.182057][ T39] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 58.201204][ T39] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 58.214713][ T39] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 58.333599][ T1075] usb 3-1: Using ep0 maxpacket: 32 [ 58.339954][ T1075] usb 3-1: config 1 interface 0 altsetting 77 bulk endpoint 0x3 has invalid maxpacket 1023 [ 58.350420][ T1075] usb 3-1: config 1 interface 0 altsetting 77 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 58.363826][ T1075] usb 3-1: config 1 interface 0 has no altsetting 0 [ 58.390739][ T1075] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.407193][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.416129][ T1075] usb 3-1: SerialNumber: syz [ 58.438480][ T2502] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.477968][ T19] usb 2-1: USB disconnect, device number 7 [ 58.651279][ T2555] loop4: detected capacity change from 0 to 1024 [ 58.657141][ T2502] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.694634][ T2555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.764651][ T284] EXT4-fs (loop4): unmounting filesystem. [ 58.894246][ T2574] incfs: Backing dir is not set, filesystem can't be mounted. [ 58.901738][ T2574] incfs: mount failed -2 [ 59.093769][ T1075] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 59.182940][ T2606] loop3: detected capacity change from 0 to 1024 [ 59.225909][ T2606] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.234578][ T2606] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.250781][ T2606] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 59.265838][ T2606] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 59.279915][ T2606] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.279915][ T2606] [ 59.289647][ T2606] EXT4-fs (loop3): Total free blocks count 0 [ 59.295744][ T2606] EXT4-fs (loop3): Free/Dirty block details [ 59.301984][ T2606] EXT4-fs (loop3): free_blocks=4293918720 [ 59.307819][ T2606] EXT4-fs (loop3): dirty_blocks=32 [ 59.312990][ T2606] EXT4-fs (loop3): Block reservation details [ 59.319082][ T2606] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 59.331905][ T796] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 59.482087][ T2636] loop3: detected capacity change from 0 to 2048 [ 59.500646][ T2636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 59.503663][ T1075] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 59.521124][ T2636] EXT4-fs error (device loop3): ext4_read_inline_dir:1601: inode #12: block 9: comm syz.3.817: path /175/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 59.521364][ T473] usb 3-1: USB disconnect, device number 7 [ 59.547863][ T473] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 59.558239][ T288] EXT4-fs (loop3): unmounting filesystem. [ 59.686077][ T2659] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 59.696765][ T2659] FAT-fs (loop7): unable to read boot sector [ 59.727715][ T1075] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 59.741721][ T1075] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 59.751906][ T1075] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 59.772696][ T1075] usb 2-1: string descriptor 0 read error: -22 [ 59.779876][ T1075] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 59.792252][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.812124][ T1075] usb 2-1: 0:2 : does not exist [ 60.063687][ T294] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 60.071005][ T39] usb 2-1: USB disconnect, device number 8 [ 60.223943][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 60.223958][ T28] audit: type=1400 audit(1758689817.076:517): avc: denied { mount } for pid=2697 comm="syz.4.834" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.258803][ T28] audit: type=1400 audit(1758689817.106:518): avc: denied { getopt } for pid=2697 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.279686][ T28] audit: type=1400 audit(1758689817.106:519): avc: denied { remount } for pid=2697 comm="syz.4.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.301288][ T28] audit: type=1400 audit(1758689817.106:520): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 60.301298][ T2702] syz.4.836[2702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.301362][ T2702] syz.4.836[2702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.343052][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.382577][ T294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.402635][ T294] usb 4-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00 [ 60.412003][ T294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.420976][ T294] usb 4-1: config 0 descriptor?? [ 60.443589][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.623584][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 60.629770][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 60.636569][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 60.645654][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.654277][ T24] usb 3-1: config 0 descriptor?? [ 60.829035][ T294] hid-generic 0003:0457:FFFF.0011: unknown main item tag 0x0 [ 60.836484][ T294] hid-generic 0003:0457:FFFF.0011: unknown main item tag 0x0 [ 60.844576][ T294] hid-generic 0003:0457:FFFF.0011: hidraw0: USB HID v0.00 Device [HID 0457:ffff] on usb-dummy_hcd.3-1/input0 [ 61.029781][ T344] usb 4-1: USB disconnect, device number 7 [ 61.060794][ T24] hid (null): nested delimiters [ 61.065986][ T24] hid (null): report_id 42461 is invalid [ 61.267144][ T294] usb 3-1: USB disconnect, device number 8 [ 61.459742][ T28] audit: type=1400 audit(1758689818.306:521): avc: denied { unlink } for pid=284 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=1011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.466921][ T2719] loop4: detected capacity change from 0 to 512 [ 61.507978][ T2719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.548185][ T2719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 61.564546][ T2719] System zones: 0-2, 18-18, 34-34 [ 61.574359][ T2719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.583503][ T2719] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.608080][ T284] EXT4-fs (loop4): unmounting filesystem. [ 61.625515][ T2728] device pim6reg1 entered promiscuous mode [ 61.707735][ T2735] loop4: detected capacity change from 0 to 128 [ 61.727646][ T2735] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.737471][ T2735] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 61.791783][ T284] EXT4-fs (loop4): unmounting filesystem. [ 61.987408][ T2738] loop3: detected capacity change from 0 to 40427 [ 62.005115][ T2738] F2FS-fs (loop3): invalid crc value [ 62.017272][ T2738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.055067][ T2738] F2FS-fs (loop3): Start checkpoint disabled! [ 62.061795][ T2738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 62.083581][ T294] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.137181][ T2738] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 62.166380][ T1569] kworker/u4:205: attempt to access beyond end of device [ 62.166380][ T1569] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.238814][ T2749] loop4: detected capacity change from 0 to 40427 [ 62.248922][ T2749] F2FS-fs (loop4): fault_injection options not supported [ 62.273767][ T294] usb 3-1: Using ep0 maxpacket: 8 [ 62.280006][ T294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.294904][ T2749] F2FS-fs (loop4): invalid crc value [ 62.305012][ T294] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 62.325315][ T2749] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.325950][ T294] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 62.361084][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.373612][ T294] usb 3-1: Product: syz [ 62.377787][ T294] usb 3-1: Manufacturer: syz [ 62.378537][ T28] audit: type=1400 audit(1758689819.226:522): avc: denied { bind } for pid=2758 comm="syz.3.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.392526][ T294] usb 3-1: SerialNumber: syz [ 62.426195][ T294] usb 3-1: config 0 descriptor?? [ 62.433769][ T2749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.542194][ T2749] syz.4.854: attempt to access beyond end of device [ 62.542194][ T2749] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 62.593403][ T284] syz-executor: attempt to access beyond end of device [ 62.593403][ T284] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 62.683602][ T2630] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 62.695838][ T2769] loop3: detected capacity change from 0 to 512 [ 62.716167][ T2769] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.734539][ T2769] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 62.750196][ T2775] loop4: detected capacity change from 0 to 512 [ 62.767308][ T2775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.784025][ T2775] EXT4-fs (loop4): 1 truncate cleaned up [ 62.801265][ T28] audit: type=1400 audit(1758689819.646:523): avc: denied { setattr } for pid=2774 comm="syz.4.860" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.854189][ T28] audit: type=1400 audit(1758689819.706:524): avc: denied { unlink } for pid=2774 comm="syz.4.860" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 62.903737][ T2630] usb 1-1: Using ep0 maxpacket: 16 [ 62.917669][ T2630] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 62.918187][ T344] usb 3-1: USB disconnect, device number 9 [ 62.935631][ T2630] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.944193][ T2630] usb 1-1: Product: syz [ 62.948366][ T2630] usb 1-1: Manufacturer: syz [ 62.952964][ T2630] usb 1-1: SerialNumber: syz [ 62.966768][ T2630] usb 1-1: config 0 descriptor?? [ 62.975684][ T2784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.866'. [ 62.982675][ T2630] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 62.988187][ T2784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.866'. [ 62.998061][ T2630] usb 1-1: Detected FT-X [ 63.176819][ T2630] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 63.198395][ T2789] loop3: detected capacity change from 0 to 40427 [ 63.209517][ T2789] F2FS-fs (loop3): fault_injection options not supported [ 63.216651][ T2789] F2FS-fs (loop3): fault_type options not supported [ 63.224090][ T2789] F2FS-fs (loop3): invalid crc value [ 63.240761][ T2789] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.275351][ T2789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 63.585220][ T2630] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 63.599888][ T2630] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 63.620875][ T28] audit: type=1326 audit(1758689820.466:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2803 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61538eec9 code=0x7ffc0000 [ 63.628351][ T2630] usb 1-1: USB disconnect, device number 7 [ 63.664147][ T2630] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 63.679986][ T2799] loop3: detected capacity change from 0 to 40427 [ 63.684959][ T2630] ftdi_sio 1-1:0.0: device disconnected [ 63.695158][ T28] audit: type=1326 audit(1758689820.496:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2803 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc61538eec9 code=0x7ffc0000 [ 63.715504][ T2799] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 63.743870][ T2799] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 63.769137][ T2799] F2FS-fs (loop3): invalid crc value [ 63.787037][ T2799] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.855575][ T2799] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 63.864568][ T2799] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 63.902010][ T288] syz-executor: attempt to access beyond end of device [ 63.902010][ T288] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 63.980601][ T2815] netlink: 340 bytes leftover after parsing attributes in process `syz.4.879'. [ 64.296365][ T2841] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.324017][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 64.443623][ T344] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 64.515457][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.529231][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.539366][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 64.564689][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 64.583609][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.597832][ T24] usb 5-1: config 0 descriptor?? [ 64.634779][ T344] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 64.653362][ T344] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 64.662094][ T344] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.672816][ T344] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 64.687578][ T344] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 64.703600][ T344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.736537][ T344] usb 4-1: config 0 descriptor?? [ 64.857451][ T2879] loop1: detected capacity change from 0 to 16 [ 64.875028][ T2879] erofs: (device loop1): mounted with root inode @ nid 36. [ 64.931338][ T2882] loop2: detected capacity change from 0 to 8192 [ 64.949763][ T344] usb 4-1: USB disconnect, device number 8 [ 64.977367][ T2887] netlink: 'syz.2.910': attribute type 4 has an invalid length. [ 65.003074][ T2890] loop2: detected capacity change from 0 to 512 [ 65.010068][ T2890] EXT4-fs: Ignoring removed orlov option [ 65.017449][ T2890] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 65.039721][ T2890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 65.049548][ T2890] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.911: corrupted in-inode xattr [ 65.062058][ T2890] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.911: couldn't read orphan inode 15 (err -117) [ 65.075073][ T2890] EXT4-fs mount: 2 callbacks suppressed [ 65.075083][ T2890] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 65.100797][ T287] EXT4-fs (loop2): unmounting filesystem. [ 65.135692][ T2899] loop2: detected capacity change from 0 to 16 [ 65.145924][ T2899] erofs: (device loop2): mounted with root inode @ nid 36. [ 65.156349][ T2899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 65.168486][ T2899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 65.178094][ T2899] overlayfs: failed to get metacopy (-117) [ 65.216386][ T24] usb 5-1: string descriptor 0 read error: -22 [ 65.418583][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0013/input/input16 [ 65.435256][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0013/input/input17 [ 65.448200][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0013/input/input18 [ 65.485126][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0013/input/input19 [ 65.511697][ T24] uclogic 0003:256C:006D.0013: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 65.537619][ T2933] loop1: detected capacity change from 0 to 1024 [ 65.613495][ T2933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.667221][ T2630] usb 5-1: USB disconnect, device number 8 [ 65.686384][ T2933] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.717347][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 65.717362][ T28] audit: type=1400 audit(1758689822.566:534): avc: denied { map } for pid=2929 comm="syz.1.929" path="/208/file1/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.734166][ T2948] loop3: detected capacity change from 0 to 256 [ 65.760538][ T283] EXT4-fs (loop1): unmounting filesystem. [ 65.790097][ T2948] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 65.873864][ T28] audit: type=1400 audit(1758689822.726:535): avc: denied { read write } for pid=288 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.917078][ T28] audit: type=1400 audit(1758689822.726:536): avc: denied { open } for pid=288 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.944715][ T28] audit: type=1400 audit(1758689822.726:537): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.975820][ T28] audit: type=1400 audit(1758689822.736:538): avc: denied { bpf } for pid=2958 comm="syz.3.941" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.012320][ T28] audit: type=1400 audit(1758689822.736:539): avc: denied { map_create } for pid=2958 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.048531][ T28] audit: type=1400 audit(1758689822.736:540): avc: denied { map_read map_write } for pid=2958 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.095550][ T28] audit: type=1400 audit(1758689822.736:541): avc: denied { prog_load } for pid=2958 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.133898][ T28] audit: type=1400 audit(1758689822.736:542): avc: denied { perfmon } for pid=2958 comm="syz.3.941" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.174821][ T28] audit: type=1400 audit(1758689822.736:543): avc: denied { prog_run } for pid=2958 comm="syz.3.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 66.363596][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 66.486966][ T2969] loop4: detected capacity change from 0 to 40427 [ 66.505223][ T2969] F2FS-fs (loop4): fault_injection options not supported [ 66.519975][ T2969] F2FS-fs (loop4): fault_type options not supported [ 66.534253][ T2969] F2FS-fs (loop4): invalid crc value [ 66.548992][ T2969] F2FS-fs (loop4): Found nat_bits in checkpoint [ 66.553619][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 66.562887][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 66.584819][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.601438][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.614984][ T2969] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.618559][ T24] usb 1-1: Product: syz [ 66.643043][ T2969] syz.4.945: attempt to access beyond end of device [ 66.643043][ T2969] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.655416][ T24] usb 1-1: Manufacturer: syz [ 66.663740][ T24] usb 1-1: SerialNumber: syz [ 68.615268][ T2984] netlink: 276 bytes leftover after parsing attributes in process `syz.3.952'. [ 68.643772][ T2986] SELinux: truncated policydb string identifier [ 68.645780][ T2984] netlink: 276 bytes leftover after parsing attributes in process `syz.3.952'. [ 68.653794][ T2986] SELinux: failed to load policy [ 68.720136][ T2993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.143455][ T3021] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 69.174448][ T3021] FAT-fs (loop3): unable to read boot sector [ 69.190941][ T3017] loop3: detected capacity change from 0 to 40427 [ 69.197094][ T3025] input: syz0 as /devices/virtual/input/input20 [ 69.211084][ T3017] F2FS-fs (loop3): invalid crc value [ 69.230730][ T3017] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.256528][ T2973] loop2: detected capacity change from 0 to 131072 [ 69.288591][ T2973] F2FS-fs (loop2): Test dummy encryption mode enabled [ 69.288967][ T3030] netlink: 'syz.4.972': attribute type 12 has an invalid length. [ 69.311767][ T2973] F2FS-fs (loop2): invalid crc value [ 69.323868][ T3017] F2FS-fs (loop3): Start checkpoint disabled! [ 69.326442][ T3030] xt_hashlimit: max too large, truncated to 1048576 [ 69.346919][ T3017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 69.360392][ T24] cdc_ncm 1-1:1.0: bind() failure [ 69.366780][ T2973] F2FS-fs (loop2): Found nat_bits in checkpoint [ 69.369538][ T24] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 69.400112][ T24] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 69.424048][ T24] usb 1-1: USB disconnect, device number 8 [ 69.480204][ T2973] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 69.541402][ T288] syz-executor: attempt to access beyond end of device [ 69.541402][ T288] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 69.587899][ T288] syz-executor: attempt to access beyond end of device [ 69.587899][ T288] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 69.666545][ T3066] loop2: detected capacity change from 0 to 256 [ 69.692135][ T3066] exfat: Deprecated parameter 'utf8' [ 69.698045][ T796] kworker/u4:123: attempt to access beyond end of device [ 69.698045][ T796] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 69.714984][ T3066] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 69.727124][ T3046] loop4: detected capacity change from 0 to 40427 [ 69.765317][ T3046] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.826820][ T3046] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.863449][ T3078] loop2: detected capacity change from 0 to 128 [ 69.882644][ T3078] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 69.913970][ T3078] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.924533][ T284] syz-executor: attempt to access beyond end of device [ 69.924533][ T284] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 69.925508][ T3078] ext2 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.963627][ T294] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 70.048373][ T287] EXT4-fs (loop2): unmounting filesystem. [ 70.145872][ T294] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 70.154197][ T294] usb 2-1: config 0 has no interface number 0 [ 70.160338][ T294] usb 2-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 70.171562][ T294] usb 2-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 70.185410][ T294] usb 2-1: config 0 interface 247 has no altsetting 0 [ 70.192292][ T294] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 70.206925][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.218803][ T294] usb 2-1: config 0 descriptor?? [ 70.264206][ T3098] loop4: detected capacity change from 0 to 128 [ 70.275907][ T3098] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.303751][ T3098] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.366854][ T815] device bridge_slave_1 left promiscuous mode [ 70.373015][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.384254][ T1075] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 70.392931][ T815] device bridge_slave_0 left promiscuous mode [ 70.400753][ T815] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.409488][ T815] device veth1_macvtap left promiscuous mode [ 70.415684][ T815] device veth0_vlan left promiscuous mode [ 70.578678][ T1075] usb 1-1: Using ep0 maxpacket: 32 [ 70.585456][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.599763][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.609719][ T1075] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 70.618998][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.647531][ T1075] usb 1-1: config 0 descriptor?? [ 70.661839][ T294] usb 2-1: Cannot read MAC address [ 70.667696][ T294] MOSCHIP usb-ethernet driver: probe of 2-1:0.247 failed with error -71 [ 70.683404][ T3101] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.695985][ T294] usb 2-1: USB disconnect, device number 9 [ 70.701860][ T3101] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.714430][ T3101] device bridge_slave_0 entered promiscuous mode [ 70.721713][ T3101] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.729139][ T3101] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.736833][ T3101] device bridge_slave_1 entered promiscuous mode [ 70.817127][ T3101] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.824225][ T3101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.831516][ T3101] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.838583][ T3101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.848101][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.861287][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.894217][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.901985][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.924097][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.932590][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.941145][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.948228][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.956616][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.965003][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.973204][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.980247][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.987652][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.005980][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.016538][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.024805][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.043053][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.051677][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.061083][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.062677][ T1075] savu 0003:1E7D:2D5A.0014: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 71.069522][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.089866][ T3101] device veth0_vlan entered promiscuous mode [ 71.096679][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.104563][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.119255][ T3101] device veth1_macvtap entered promiscuous mode [ 71.126642][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.135086][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.143369][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.159754][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.168258][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.176904][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.185749][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.200637][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 71.200650][ T28] audit: type=1400 audit(1758689828.046:626): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/root/syzkaller.BONlFk/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.233480][ T28] audit: type=1400 audit(1758689828.046:627): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.282929][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.287426][ T28] audit: type=1400 audit(1758689828.046:628): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.312153][ T28] audit: type=1400 audit(1758689828.046:629): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/root/syzkaller.BONlFk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.349607][ T1075] usb 1-1: USB disconnect, device number 9 [ 71.356043][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 71.356054][ T28] audit: type=1400 audit(1758689828.046:630): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/root/syzkaller.BONlFk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=25957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.373724][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.420458][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 71.437846][ T28] audit: type=1400 audit(1758689828.076:631): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.440704][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.468666][ T28] audit: type=1400 audit(1758689828.076:632): avc: denied { mounton } for pid=3101 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 71.486912][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.494963][ T28] audit: type=1400 audit(1758689828.076:633): avc: denied { mount } for pid=3101 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.506424][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.546552][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.587231][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.673835][ T3158] netlink: 'syz.5.1020': attribute type 29 has an invalid length. [ 71.717994][ T28] audit: type=1400 audit(1758689828.566:634): avc: denied { create } for pid=3164 comm="syz.2.1034" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.761852][ T28] audit: type=1400 audit(1758689828.566:635): avc: denied { map } for pid=3164 comm="syz.2.1034" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.872498][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 72.107599][ T3214] loop5: detected capacity change from 0 to 512 [ 72.150664][ T1344] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.207858][ T3227] loop5: detected capacity change from 0 to 128 [ 72.265527][ T3227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 72.277937][ T3227] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.351971][ T3101] EXT4-fs (loop5): unmounting filesystem. [ 72.459812][ T3255] loop2: detected capacity change from 0 to 512 [ 72.478619][ T3255] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.683644][ T294] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 72.734533][ T3296] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 72.773113][ T3296] SELinux: failed to load policy [ 72.858587][ T3310] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 72.874790][ T294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.892934][ T294] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 72.910662][ T294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.927342][ T294] usb 6-1: config 0 descriptor?? [ 73.213581][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 73.346795][ T294] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 73.353588][ T344] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 73.356742][ T294] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0015/input/input21 [ 73.393664][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 73.399897][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 73.411139][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 73.417761][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 73.426876][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.435490][ T24] usb 3-1: config 0 descriptor?? [ 73.446297][ T294] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 73.478048][ T1037] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 73.544696][ T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.554878][ T344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.564804][ T344] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 73.574060][ T344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.582069][ T344] usb 2-1: SerialNumber: syz [ 73.664611][ T1037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 73.675577][ T1037] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 73.684642][ T1037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.693511][ T1037] usb 5-1: config 0 descriptor?? [ 73.698929][ T3343] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 73.776813][ T60] usb 6-1: USB disconnect, device number 2 [ 73.790837][ T344] usb 2-1: 0:2 : does not exist [ 73.797917][ T344] usb 2-1: USB disconnect, device number 10 [ 73.841726][ T24] hid (null): global environment stack underflow [ 73.848084][ T24] hid (null): unknown global tag 0xd [ 73.853355][ T24] hid (null): unknown global tag 0x86 [ 73.858854][ T24] hid (null): unknown global tag 0x90 [ 73.864328][ T24] hid (null): report_id 4131346620 is invalid [ 73.870379][ T24] hid (null): unknown global tag 0xe [ 73.875683][ T24] hid (null): unknown global tag 0xd [ 73.881212][ T24] hid (null): global environment stack overflow [ 73.887498][ T24] hid (null): unknown global tag 0xe [ 73.893218][ T24] hid (null): unknown global tag 0xd [ 74.003845][ T1344] udevd[1344]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.033593][ T294] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 74.045615][ T60] usb 3-1: USB disconnect, device number 10 [ 74.109399][ T1037] hid-generic 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 74.213650][ T294] usb 1-1: Using ep0 maxpacket: 16 [ 74.220180][ T294] usb 1-1: unable to get BOS descriptor or descriptor too short [ 74.228466][ T294] usb 1-1: config 7 has an invalid interface number: 88 but max is 0 [ 74.236560][ T294] usb 1-1: config 7 has no interface number 0 [ 74.242619][ T294] usb 1-1: config 7 interface 88 has no altsetting 0 [ 74.250512][ T294] usb 1-1: New USB device found, idVendor=0482, idProduct=0100, bcdDevice= 1.00 [ 74.259533][ T294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.267502][ T294] usb 1-1: Product: syz [ 74.271643][ T294] usb 1-1: Manufacturer: syz [ 74.276226][ T294] usb 1-1: SerialNumber: syz [ 74.311657][ T473] usb 5-1: USB disconnect, device number 9 [ 74.485461][ T294] usb-storage 1-1:7.88: USB Mass Storage device detected [ 74.502837][ T294] usb-storage 1-1:7.88: Quirks match for vid 0482 pid 0100: 8 [ 74.511230][ T294] usb-storage 1-1:7.88: This device (0482,0100,0100 S 05 P fe) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 74.511230][ T294] Please send a copy of this message to and [ 74.561624][ T294] usb 1-1: USB disconnect, device number 10 [ 74.657377][ T3376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 74.723607][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.843337][ T3399] loop2: detected capacity change from 0 to 1024 [ 74.850205][ T3399] EXT4-fs: Ignoring removed i_version option [ 74.880785][ T3410] TCP: TCP_TX_DELAY enabled [ 74.880974][ T3399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.897035][ T3399] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.914703][ T60] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.918962][ T3399] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.1129: lblock 0 mapped to illegal pblock 0 (length 4) [ 74.925334][ T60] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.946777][ T3399] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 3: comm syz.2.1129: lblock 3 mapped to illegal pblock 3 (length 1) [ 74.961197][ T60] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.961245][ T3399] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 74.976490][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.982743][ T3399] EXT4-fs (loop2): This should not happen!! Data will be lost [ 74.982743][ T3399] [ 74.991344][ T60] usb 6-1: SerialNumber: syz [ 75.012086][ T3418] input: syz1 as /devices/virtual/input/input22 [ 75.067539][ T1523] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:191: lblock 8 mapped to illegal pblock 8 (length 8) [ 75.084977][ T1523] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 75.097867][ T1523] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.097867][ T1523] [ 75.110923][ T287] EXT4-fs (loop2): unmounting filesystem. [ 75.192680][ T3432] input: syz0 as /devices/virtual/input/input23 [ 75.213446][ T60] usb 6-1: 0:2 : does not exist [ 75.237407][ T60] usb 6-1: USB disconnect, device number 3 [ 75.615078][ T3468] incfs: iterate_incfs_dir / -22 [ 75.791085][ T3481] netlink: 7000 bytes leftover after parsing attributes in process `syz.1.1164'. [ 75.843736][ T60] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 76.044689][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.065063][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.075196][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.088617][ T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.097888][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.115743][ T60] usb 3-1: config 0 descriptor?? [ 76.225451][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 76.225466][ T28] audit: type=1400 audit(1758689833.076:697): avc: denied { mount } for pid=3529 comm="syz.4.1189" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 76.325380][ T28] audit: type=1400 audit(1758689833.176:698): avc: denied { append } for pid=3534 comm="syz.4.1192" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.351381][ T28] audit: type=1400 audit(1758689833.196:699): avc: denied { open } for pid=3534 comm="syz.4.1192" path="/dev/usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.410317][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.417498][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.425253][ T3536] device bridge_slave_0 entered promiscuous mode [ 76.432150][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.439360][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.446724][ T3536] device bridge_slave_1 entered promiscuous mode [ 76.485880][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.492897][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.500137][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.507154][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.529384][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.536926][ T1523] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.544625][ T1523] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.552702][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.560358][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.567995][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.568251][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.575486][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.584359][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.590988][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.597838][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.605276][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.613112][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.628031][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.629916][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.635086][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.651678][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.659144][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.659531][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.666607][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.666630][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.666648][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.678235][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.682692][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.712254][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.719610][ T3536] device veth0_vlan entered promiscuous mode [ 76.723712][ T60] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 76.734507][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.734553][ T60] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 76.742971][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.751802][ T60] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 76.758799][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.793860][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.810113][ T3536] device veth1_macvtap entered promiscuous mode [ 76.817329][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.829648][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.841003][ T28] audit: type=1400 audit(1758689833.686:700): avc: denied { ioctl } for pid=3552 comm="syz.5.1195" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 76.841563][ T3553] binder: 3552:3553 ioctl c0306201 2000000003c0 returned -14 [ 76.868088][ T1523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.888530][ T294] usb 3-1: USB disconnect, device number 11 [ 76.889200][ T28] audit: type=1400 audit(1758689833.686:701): avc: denied { set_context_mgr } for pid=3552 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 76.956935][ T28] audit: type=1400 audit(1758689833.806:702): avc: denied { mounton } for pid=3561 comm="syz.1.1191" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.957296][ T473] kernel write not supported for file bpf-prog (pid: 473 comm: kworker/0:3) [ 76.993435][ T28] audit: type=1400 audit(1758689833.846:703): avc: denied { create } for pid=3563 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.015525][ T28] audit: type=1400 audit(1758689833.846:704): avc: denied { write } for pid=3563 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.058430][ T28] audit: type=1400 audit(1758689833.846:705): avc: denied { nlmsg_write } for pid=3563 comm="syz.0.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.085564][ T28] audit: type=1400 audit(1758689833.916:706): avc: denied { compute_member } for pid=3565 comm="syz.0.1200" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 77.123937][ T3575] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1204'. [ 77.187207][ T3590] 8021q: VLANs not supported on gre0 [ 77.198365][ T1569] device bridge_slave_1 left promiscuous mode [ 77.212757][ T1569] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.232747][ T1569] device bridge_slave_0 left promiscuous mode [ 77.239183][ T1569] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.239712][ T3598] loop5: detected capacity change from 0 to 512 [ 77.255515][ T1569] device veth1_macvtap left promiscuous mode [ 77.288884][ T1569] device veth0_vlan left promiscuous mode [ 77.447635][ T3625] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1226'. [ 77.561622][ T3652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1236'. [ 77.627986][ T3664] input: syz1 as /devices/virtual/input/input24 [ 77.631665][ T3666] loop4: detected capacity change from 0 to 1024 [ 77.673204][ T3666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.716696][ T284] EXT4-fs (loop4): unmounting filesystem. [ 77.736134][ T3677] loop5: detected capacity change from 0 to 8192 [ 77.851564][ T3703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.273606][ T24] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 78.458520][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 78.475650][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.485150][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 78.495081][ T24] usb 5-1: SerialNumber: syz [ 78.508293][ T3693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 78.538130][ T3737] loop2: detected capacity change from 0 to 512 [ 78.718561][ T3693] loop4: detected capacity change from 0 to 256 [ 78.747367][ T24] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 78.760003][ T24] usb 5-1: USB disconnect, device number 10 [ 78.891689][ T3764] netlink: 'syz.1.1289': attribute type 3 has an invalid length. [ 78.903498][ T3764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 79.073600][ T60] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 79.143578][ T3787] futex_wake_op: syz.2.1299 tries to shift op by -1; fix this program [ 79.179590][ T3793] netem: change failed [ 79.263589][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 79.272647][ T60] usb 6-1: unable to get BOS descriptor or descriptor too short [ 79.284449][ T60] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 79.292676][ T60] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 79.302078][ T60] usb 6-1: config 4 has no interface number 0 [ 79.310435][ T60] usb 6-1: string descriptor 0 read error: -22 [ 79.316904][ T60] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 79.325971][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.335227][ T60] usb 6-1: Found UVC 0.02 device (04f2:b746) [ 79.346762][ T60] usb 6-1: No valid video chain found. [ 79.353667][ T344] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 79.358925][ T3809] futex_wake_op: syz.4.1310 tries to shift op by -1; fix this program [ 79.538721][ T344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.553578][ T24] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 79.562801][ T473] usb 6-1: USB disconnect, device number 4 [ 79.573156][ T344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.582264][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.590361][ T344] usb 2-1: Product: syz [ 79.595057][ T344] usb 2-1: Manufacturer: syz [ 79.599657][ T344] usb 2-1: SerialNumber: syz [ 79.715394][ T815] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.744698][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 79.755901][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 79.768807][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 79.777905][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.787167][ T24] usb 3-1: config 0 descriptor?? [ 79.792410][ T3801] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 79.972626][ T3846] futex_wake_op: syz.0.1327 tries to shift op by -1; fix this program [ 80.130277][ T3858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.415246][ T473] usb 3-1: USB disconnect, device number 12 [ 80.443430][ T3893] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.613466][ T344] cdc_ncm 2-1:1.0: failed to get mac address [ 80.619741][ T344] cdc_ncm 2-1:1.0: bind() failure [ 80.625498][ T344] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 80.632089][ T344] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 80.639327][ T344] usb 2-1: USB disconnect, device number 11 [ 81.404044][ T3936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1366'. [ 81.465109][ T344] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 81.492929][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 81.492946][ T28] audit: type=1400 audit(1758689838.336:733): avc: denied { read } for pid=3939 comm="syz.1.1370" name="file0" dev="incremental-fs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.535864][ T28] audit: type=1400 audit(1758689838.376:734): avc: denied { open } for pid=3939 comm="syz.1.1370" path="/26/file0/file0" dev="incremental-fs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.653579][ T344] usb 1-1: Using ep0 maxpacket: 8 [ 81.661319][ T344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 81.670234][ T344] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 81.678538][ T344] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 81.687293][ T344] usb 1-1: config 4 has no interface number 0 [ 81.695372][ T344] usb 1-1: string descriptor 0 read error: -22 [ 81.701547][ T344] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 81.710832][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.720105][ T344] usb 1-1: Found UVC 0.02 device (04f2:b746) [ 81.727050][ T344] usb 1-1: No valid video chain found. [ 81.746010][ T3966] serio: Serial port ptm1 [ 81.783814][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.783925][ T985] Bluetooth: hci0: command 0x1003 tx timeout [ 81.796130][ T3841] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 81.923579][ T473] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 81.932085][ T2630] usb 1-1: USB disconnect, device number 11 [ 82.003571][ T1075] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 82.114612][ T473] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.125543][ T473] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 82.137093][ T473] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.146184][ T473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.154207][ T473] usb 6-1: Product: syz [ 82.158396][ T473] usb 6-1: Manufacturer: syz [ 82.162961][ T473] usb 6-1: SerialNumber: syz [ 82.168914][ T473] cdc_mbim 6-1:1.0: skipping garbage [ 82.194607][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.205505][ T1075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.215248][ T1075] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 82.224298][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.232865][ T1075] usb 2-1: config 0 descriptor?? [ 82.370103][ T3962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 82.463318][ T28] audit: type=1400 audit(1758689839.306:735): avc: denied { append } for pid=3972 comm="syz.0.1382" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 82.656947][ T3981] input: syz1 as /devices/virtual/input/input28 [ 82.749878][ T3994] loop4: detected capacity change from 0 to 128 [ 82.948887][ T3999] loop4: detected capacity change from 0 to 4096 [ 82.969547][ T3999] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.979750][ T3962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 82.989446][ T473] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 82.997444][ T3999] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1396: corrupted inode contents [ 83.010779][ T3999] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #15: comm syz.4.1396: mark_inode_dirty error [ 83.024199][ T473] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, ae:42:3f:63:10:f2 [ 83.033959][ T3999] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1396: corrupted inode contents [ 83.060142][ T28] audit: type=1400 audit(1758689839.906:736): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 83.083095][ T3999] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1396: mark_inode_dirty error [ 83.093095][ T28] audit: type=1400 audit(1758689839.906:737): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.112521][ T3999] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1396: corrupted inode contents [ 83.126025][ T28] audit: type=1400 audit(1758689839.906:738): avc: denied { read } for pid=142 comm="dhcpcd" name="n19" dev="tmpfs" ino=7700 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.150307][ T28] audit: type=1400 audit(1758689839.906:739): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=7700 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.151220][ T3999] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1396: mark_inode_dirty error [ 83.173714][ T28] audit: type=1400 audit(1758689839.906:740): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=7700 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.204522][ T344] usb 6-1: USB disconnect, device number 5 [ 83.209826][ T28] audit: type=1400 audit(1758689839.956:741): avc: denied { append } for pid=3998 comm="syz.4.1396" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.213588][ T344] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 83.237295][ T3999] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1396: corrupted inode contents [ 83.257151][ T3999] EXT4-fs error (device loop4): ext4_truncate:4314: inode #15: comm syz.4.1396: mark_inode_dirty error [ 83.268451][ T28] audit: type=1400 audit(1758689839.986:742): avc: denied { read } for pid=4009 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.294562][ T3999] EXT4-fs error (device loop4) in ext4_setattr:5660: Corrupt filesystem [ 83.298144][ T1037] usb 2-1: USB disconnect, device number 12 [ 83.303758][ T4007] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1396: corrupted inode contents [ 83.391963][ T284] EXT4-fs (loop4): unmounting filesystem. [ 83.442793][ T4028] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 83.545280][ T4052] xt_hashlimit: size too large, truncated to 1048576 [ 83.773585][ T473] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 83.802797][ T4065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=4065 comm=syz.1.1411 [ 83.820472][ T4065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1411'. [ 83.863553][ C0] ================================================================== [ 83.871656][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 83.878714][ C0] Write of size 8 at addr ffff888118008a00 by task syz.5.1415/4075 [ 83.886613][ C0] [ 83.888945][ C0] CPU: 0 PID: 4075 Comm: syz.5.1415 Not tainted syzkaller #0 [ 83.896348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.906414][ C0] Call Trace: [ 83.909697][ C0] [ 83.912545][ C0] __dump_stack+0x21/0x24 [ 83.916885][ C0] dump_stack_lvl+0xee/0x150 [ 83.921482][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 83.926513][ C0] ? update_rq_clock+0x536/0x5c0 [ 83.931465][ C0] ? __run_timers+0x32b/0x9a0 [ 83.936158][ C0] print_address_description+0x71/0x200 [ 83.941725][ C0] print_report+0x4a/0x60 [ 83.946066][ C0] kasan_report+0x122/0x150 [ 83.950579][ C0] ? __run_timers+0x32b/0x9a0 [ 83.955272][ C0] __asan_report_store8_noabort+0x17/0x20 [ 83.961009][ C0] __run_timers+0x32b/0x9a0 [ 83.965526][ C0] ? sched_clock+0x9/0x10 [ 83.969881][ C0] ? sched_clock_cpu+0x6e/0x250 [ 83.974751][ C0] ? calc_index+0x200/0x200 [ 83.979275][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 83.984498][ C0] run_timer_softirq+0x6a/0xf0 [ 83.989277][ C0] handle_softirqs+0x1d7/0x600 [ 83.994061][ C0] ? irqtime_account_irq+0xc4/0x240 [ 83.999279][ C0] __irq_exit_rcu+0x52/0xf0 [ 84.003800][ C0] irq_exit_rcu+0x9/0x10 [ 84.008059][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 84.013713][ C0] [ 84.016651][ C0] [ 84.019589][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 84.023487][ T4073] loop2: detected capacity change from 0 to 40427 [ 84.025582][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 84.025614][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d bc 51 02 06 48 89 de e8 c4 b0 43 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d b0 4f 92 7e 65 8b 15 b1 4f 92 [ 84.025628][ C0] RSP: 0018:ffffc90000b0f658 EFLAGS: 00000246 [ 84.025647][ C0] RAX: 00000000100400fb RBX: 00007efc3ee3e000 RCX: ffff88811c070000 [ 84.071679][ C0] RDX: 800000012b633007 RSI: 00007efc3ee3e000 RDI: ffff8881366db840 [ 84.079648][ C0] RBP: ffffc90000b0f690 R08: dffffc0000000000 R09: fffff9400095b191 [ 84.087616][ C0] R10: fffff9400095b191 R11: 1ffffd400095b190 R12: dffffc0000000000 [ 84.095582][ C0] R13: 800000012b633007 R14: 800000012b633007 R15: ffff8881366db840 [ 84.103551][ C0] ? vm_normal_page+0x1c/0x200 [ 84.108317][ C0] copy_page_range+0x102b/0x2850 [ 84.113263][ C0] ? __cfi_copy_page_range+0x10/0x10 [ 84.118544][ C0] copy_mm+0xf06/0x1a10 [ 84.122693][ C0] ? copy_signal+0x630/0x630 [ 84.127278][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 84.131951][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 84.137143][ C0] ? __init_rwsem+0x12c/0x240 [ 84.141814][ C0] ? copy_signal+0x4ea/0x630 [ 84.146402][ C0] copy_process+0x12b4/0x3480 [ 84.151073][ C0] ? cgroup_rstat_updated+0xf5/0x370 [ 84.156350][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 84.161894][ C0] ? cgroup_rstat_updated+0xf5/0x370 [ 84.167170][ C0] ? idle_dummy+0x10/0x10 [ 84.171492][ C0] ? __count_memcg_events+0x8f/0xe0 [ 84.176686][ C0] kernel_clone+0x23a/0x810 [ 84.181187][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 84.186207][ C0] ? __kasan_check_write+0x14/0x20 [ 84.191311][ C0] __x64_sys_clone+0x168/0x1b0 [ 84.196080][ C0] ? __cfi___x64_sys_clone+0x10/0x10 [ 84.201364][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 84.207424][ C0] x64_sys_call+0x990/0x9a0 [ 84.211925][ C0] do_syscall_64+0x4c/0xa0 [ 84.216332][ C0] ? clear_bhb_loop+0x30/0x80 [ 84.221006][ C0] ? clear_bhb_loop+0x30/0x80 [ 84.225679][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.231565][ C0] RIP: 0033:0x7efc3ff8eec9 [ 84.235975][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.255569][ C0] RSP: 002b:00007efc40e7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 84.263974][ C0] RAX: ffffffffffffffda RBX: 00007efc401e5fa0 RCX: 00007efc3ff8eec9 [ 84.271938][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 84.279898][ C0] RBP: 00007efc40011f91 R08: 0000000000000000 R09: 0000000000000000 [ 84.287859][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.295820][ C0] R13: 00007efc401e6038 R14: 00007efc401e5fa0 R15: 00007ffcf14ca1e8 [ 84.303783][ C0] [ 84.306793][ C0] [ 84.309106][ C0] Allocated by task 3841: [ 84.313416][ C0] kasan_set_track+0x4b/0x70 [ 84.317997][ C0] kasan_save_alloc_info+0x25/0x30 [ 84.323103][ C0] __kasan_kmalloc+0x95/0xb0 [ 84.327688][ C0] __kmalloc+0xb1/0x1e0 [ 84.331839][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 84.336854][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 84.341870][ C0] tty_ioctl+0x8ef/0xc60 [ 84.346104][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 84.350772][ C0] __x64_sys_ioctl+0x7b/0x90 [ 84.355349][ C0] x64_sys_call+0x58b/0x9a0 [ 84.359841][ C0] do_syscall_64+0x4c/0xa0 [ 84.364245][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.370129][ C0] [ 84.372440][ C0] Freed by task 3841: [ 84.376406][ C0] kasan_set_track+0x4b/0x70 [ 84.380986][ C0] kasan_save_free_info+0x31/0x50 [ 84.386008][ C0] ____kasan_slab_free+0x132/0x180 [ 84.391110][ C0] __kasan_slab_free+0x11/0x20 [ 84.395865][ C0] slab_free_freelist_hook+0xc2/0x190 [ 84.401228][ C0] __kmem_cache_free+0xb7/0x1b0 [ 84.406073][ C0] kfree+0x6f/0xf0 [ 84.409791][ C0] hci_release_dev+0x12a3/0x13b0 [ 84.414722][ C0] bt_host_release+0x82/0x90 [ 84.419306][ C0] device_release+0xa4/0x1d0 [ 84.423890][ C0] kobject_put+0x19d/0x280 [ 84.428296][ C0] put_device+0x1f/0x30 [ 84.432450][ C0] hci_dev_cmd+0x265/0x720 [ 84.436860][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 84.441527][ C0] sock_do_ioctl+0x101/0x310 [ 84.446111][ C0] sock_ioctl+0x4d8/0x6e0 [ 84.450435][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 84.455099][ C0] __x64_sys_ioctl+0x7b/0x90 [ 84.459677][ C0] x64_sys_call+0x58b/0x9a0 [ 84.464175][ C0] do_syscall_64+0x4c/0xa0 [ 84.468578][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.474464][ C0] [ 84.476778][ C0] Last potentially related work creation: [ 84.482475][ C0] kasan_save_stack+0x3a/0x60 [ 84.487141][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 84.492507][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 84.498305][ C0] insert_work+0x51/0x300 [ 84.502651][ C0] __queue_work+0x9b1/0xd30 [ 84.507145][ C0] queue_work_on+0xd2/0x140 [ 84.511643][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 84.516575][ C0] hci_cmd_sync_status+0x53/0x120 [ 84.521592][ C0] hci_dev_cmd+0x628/0x720 [ 84.526004][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 84.530671][ C0] sock_do_ioctl+0x101/0x310 [ 84.535252][ C0] sock_ioctl+0x4d8/0x6e0 [ 84.539572][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 84.544241][ C0] __x64_sys_ioctl+0x7b/0x90 [ 84.548820][ C0] x64_sys_call+0x58b/0x9a0 [ 84.553312][ C0] do_syscall_64+0x4c/0xa0 [ 84.557723][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.563612][ C0] [ 84.565927][ C0] Second to last potentially related work creation: [ 84.572496][ C0] kasan_save_stack+0x3a/0x60 [ 84.577166][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 84.582535][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 84.588341][ C0] insert_work+0x51/0x300 [ 84.592664][ C0] __queue_work+0x9b1/0xd30 [ 84.597156][ C0] queue_work_on+0xd2/0x140 [ 84.601653][ C0] hci_cmd_timeout+0x191/0x200 [ 84.606410][ C0] process_one_work+0x71f/0xc40 [ 84.611251][ C0] worker_thread+0xa29/0x11f0 [ 84.615918][ C0] kthread+0x281/0x320 [ 84.619977][ C0] ret_from_fork+0x1f/0x30 [ 84.624385][ C0] [ 84.626697][ C0] The buggy address belongs to the object at ffff888118008000 [ 84.626697][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 84.640736][ C0] The buggy address is located 2560 bytes inside of [ 84.640736][ C0] 8192-byte region [ffff888118008000, ffff88811800a000) [ 84.654169][ C0] [ 84.656480][ C0] The buggy address belongs to the physical page: [ 84.662877][ C0] page:ffffea0004600200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118008 [ 84.673103][ C0] head:ffffea0004600200 order:3 compound_mapcount:0 compound_pincount:0 [ 84.681412][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 84.687477][ C0] raw: 4000000000010200 ffffea0004346600 dead000000000003 ffff888100043500 [ 84.696048][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 84.704613][ C0] page dumped because: kasan: bad access detected [ 84.711010][ C0] page_owner tracks the page as allocated [ 84.716711][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 419, tgid 416 (syz.0.34), ts 21736768904, free_ts 21705771397 [ 84.736840][ C0] post_alloc_hook+0x1f5/0x210 [ 84.741598][ C0] prep_new_page+0x1c/0x110 [ 84.746093][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 84.751630][ C0] __alloc_pages+0x1c3/0x450 [ 84.756210][ C0] alloc_slab_page+0x6e/0xf0 [ 84.760795][ C0] new_slab+0x98/0x3d0 [ 84.764863][ C0] ___slab_alloc+0x6bd/0xb20 [ 84.769444][ C0] __slab_alloc+0x5e/0xa0 [ 84.773766][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 84.779219][ C0] kmalloc_trace+0x29/0xb0 [ 84.783630][ C0] audit_log_d_path+0xc6/0x240 [ 84.788385][ C0] common_lsm_audit+0x327/0x16d0 [ 84.793316][ C0] slow_avc_audit+0x1ac/0x220 [ 84.797991][ C0] avc_has_perm+0x1e6/0x240 [ 84.802489][ C0] selinux_file_open+0x467/0x620 [ 84.807419][ C0] security_file_open+0x73/0xb0 [ 84.812265][ C0] page last free stack trace: [ 84.816923][ C0] free_unref_page_prepare+0x742/0x750 [ 84.822373][ C0] free_unref_page+0x8f/0x530 [ 84.827042][ C0] __free_pages+0x67/0x100 [ 84.831451][ C0] __free_slab+0xca/0x1a0 [ 84.835773][ C0] __unfreeze_partials+0x160/0x190 [ 84.840877][ C0] put_cpu_partial+0xa9/0x100 [ 84.845548][ C0] __slab_free+0x1c4/0x280 [ 84.849960][ C0] ___cache_free+0xbf/0xd0 [ 84.854368][ C0] qlist_free_all+0xc6/0x140 [ 84.858948][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 84.864394][ C0] __kasan_slab_alloc+0x24/0x80 [ 84.869240][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 84.874344][ C0] kmem_cache_alloc_node+0x181/0x340 [ 84.879620][ C0] __alloc_skb+0xea/0x4b0 [ 84.883943][ C0] mld_newpack+0x13a/0xa10 [ 84.888347][ C0] add_grhead+0x67/0x300 [ 84.892585][ C0] [ 84.894905][ C0] Memory state around the buggy address: [ 84.900521][ C0] ffff888118008900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.908579][ C0] ffff888118008980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.916627][ C0] >ffff888118008a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.924677][ C0] ^ [ 84.928729][ C0] ffff888118008a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.936775][ C0] ffff888118008b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.944822][ C0] ================================================================== [ 84.952871][ C0] Disabling lock debugging due to kernel taint [ 84.959030][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 84.970733][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 84.979129][ C0] CPU: 0 PID: 4075 Comm: syz.5.1415 Tainted: G B syzkaller #0 [ 84.987963][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 84.998006][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 85.003284][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 85.022881][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 85.028941][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811c070000 [ 85.036909][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 85.044873][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 85.052840][ C0] R10: ffffed1023001139 R11: 1ffff11023001139 R12: dffffc0000000000 [ 85.060807][ C0] R13: 0000000000000000 R14: ffff8881180089c8 R15: 0000000000000008 [ 85.068767][ C0] FS: 00007efc40e806c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.077686][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.084260][ C0] CR2: 00007efc40e7ff98 CR3: 0000000156587000 CR4: 00000000003526b0 [ 85.092230][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.100188][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.108151][ C0] Call Trace: [ 85.111420][ C0] [ 85.114259][ C0] delayed_work_timer_fn+0x61/0x80 [ 85.119368][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 85.125170][ C0] call_timer_fn+0x46/0x2a0 [ 85.129671][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 85.135473][ C0] __run_timers+0x667/0x9a0 [ 85.139971][ C0] ? calc_index+0x200/0x200 [ 85.144469][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 85.149664][ C0] run_timer_softirq+0x6a/0xf0 [ 85.154425][ C0] handle_softirqs+0x1d7/0x600 [ 85.159185][ C0] ? irqtime_account_irq+0xc4/0x240 [ 85.164380][ C0] __irq_exit_rcu+0x52/0xf0 [ 85.168877][ C0] irq_exit_rcu+0x9/0x10 [ 85.173112][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 85.178742][ C0] [ 85.181663][ C0] [ 85.184590][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 85.190565][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 85.196636][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d bc 51 02 06 48 89 de e8 c4 b0 43 00 5b 5d c3 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 48 8b 45 08 65 48 8b 0d b0 4f 92 7e 65 8b 15 b1 4f 92 [ 85.216231][ C0] RSP: 0018:ffffc90000b0f658 EFLAGS: 00000246 [ 85.222289][ C0] RAX: 00000000100400fb RBX: 00007efc3ee3e000 RCX: ffff88811c070000 [ 85.230253][ C0] RDX: 800000012b633007 RSI: 00007efc3ee3e000 RDI: ffff8881366db840 [ 85.238215][ C0] RBP: ffffc90000b0f690 R08: dffffc0000000000 R09: fffff9400095b191 [ 85.246177][ C0] R10: fffff9400095b191 R11: 1ffffd400095b190 R12: dffffc0000000000 [ 85.254138][ C0] R13: 800000012b633007 R14: 800000012b633007 R15: ffff8881366db840 [ 85.262103][ C0] ? vm_normal_page+0x1c/0x200 [ 85.266863][ C0] copy_page_range+0x102b/0x2850 [ 85.271800][ C0] ? __cfi_copy_page_range+0x10/0x10 [ 85.277082][ C0] copy_mm+0xf06/0x1a10 [ 85.281229][ C0] ? copy_signal+0x630/0x630 [ 85.285816][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 85.290481][ C0] ? __cfi__raw_spin_lock+0x10/0x10 [ 85.295674][ C0] ? __init_rwsem+0x12c/0x240 [ 85.300345][ C0] ? copy_signal+0x4ea/0x630 [ 85.304932][ C0] copy_process+0x12b4/0x3480 [ 85.309603][ C0] ? cgroup_rstat_updated+0xf5/0x370 [ 85.314878][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 85.320419][ C0] ? cgroup_rstat_updated+0xf5/0x370 [ 85.325693][ C0] ? idle_dummy+0x10/0x10 [ 85.330019][ C0] ? __count_memcg_events+0x8f/0xe0 [ 85.335214][ C0] kernel_clone+0x23a/0x810 [ 85.339714][ C0] ? __cfi_kernel_clone+0x10/0x10 [ 85.344732][ C0] ? __kasan_check_write+0x14/0x20 [ 85.349834][ C0] __x64_sys_clone+0x168/0x1b0 [ 85.354595][ C0] ? __cfi___x64_sys_clone+0x10/0x10 [ 85.359879][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 85.365940][ C0] x64_sys_call+0x990/0x9a0 [ 85.370437][ C0] do_syscall_64+0x4c/0xa0 [ 85.374842][ C0] ? clear_bhb_loop+0x30/0x80 [ 85.379511][ C0] ? clear_bhb_loop+0x30/0x80 [ 85.384180][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.390064][ C0] RIP: 0033:0x7efc3ff8eec9 [ 85.394472][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.414066][ C0] RSP: 002b:00007efc40e7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 85.422466][ C0] RAX: ffffffffffffffda RBX: 00007efc401e5fa0 RCX: 00007efc3ff8eec9 [ 85.430427][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.438391][ C0] RBP: 00007efc40011f91 R08: 0000000000000000 R09: 0000000000000000 [ 85.446352][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.454315][ C0] R13: 00007efc401e6038 R14: 00007efc401e5fa0 R15: 00007ffcf14ca1e8 [ 85.462280][ C0] [ 85.465286][ C0] Modules linked in: [ 85.469170][ C0] ---[ end trace 0000000000000000 ]--- [ 85.474612][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 85.479891][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 85.499486][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 85.505544][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff88811c070000 [ 85.513513][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 85.521480][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 85.529441][ C0] R10: ffffed1023001139 R11: 1ffff11023001139 R12: dffffc0000000000 [ 85.537401][ C0] R13: 0000000000000000 R14: ffff8881180089c8 R15: 0000000000000008 [ 85.545361][ C0] FS: 00007efc40e806c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.554279][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.560856][ C0] CR2: 00007efc40e7ff98 CR3: 0000000156587000 CR4: 00000000003526b0 [ 85.568825][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.576784][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.584746][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 85.592145][ C0] Kernel Offset: disabled [ 85.596451][ C0] Rebooting in 86400 seconds..