last executing test programs: 1m12.395585548s ago: executing program 3 (id=741): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) 1m12.395350448s ago: executing program 3 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) readahead(0xffffffffffffffff, 0x6, 0xfffffffffffffffa) 1m12.388060259s ago: executing program 3 (id=745): socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000300000000000000000000001801000020a0702500000000008000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000000400000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 1m12.375500129s ago: executing program 3 (id=746): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 1m12.32350068s ago: executing program 3 (id=748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1m12.131633434s ago: executing program 3 (id=755): ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x301, 0x3) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x40, 0x3c, 0x6, "ffbd19685021"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m12.131054984s ago: executing program 32 (id=755): ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x301, 0x3) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000002c0)={0x40, 0x3c, 0x6, "ffbd19685021"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 41.986403816s ago: executing program 5 (id=1424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r2, 0x0, 0x0) 41.986199426s ago: executing program 5 (id=1425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000e97000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000280)="0f20e035000010000f22e0650f01c566b8a6008ec88fc94094170fc738e4623508c9c58cc58c0fe10a80a119a56f4c810f8f00000100c4a31d185479280b", 0x3e}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.80302331s ago: executing program 5 (id=1430): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x509, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8442}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0xd, 0x0, 0x24000004}, 0x0) 41.663504813s ago: executing program 5 (id=1435): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x80cc88, &(0x7f0000000ec0)={[{@fmask={'fmask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) 41.532354235s ago: executing program 5 (id=1440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xfe2a, 0x0, &(0x7f0000000d40)="fae56ac553d73f32", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.407144917s ago: executing program 5 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 41.317580539s ago: executing program 33 (id=1442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 17.804581935s ago: executing program 0 (id=2059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="2a797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 17.743694706s ago: executing program 0 (id=2060): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, 0x0, 0x0, 0xfba, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000610000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r1, &(0x7f0000000680), 0x0}, 0x20) 17.743345136s ago: executing program 0 (id=2063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) setregid(0xffffffffffffffff, 0x0) 17.728965736s ago: executing program 0 (id=2065): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) 17.702908347s ago: executing program 0 (id=2067): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f00000001c0)={[{@jqfmt_vfsold}]}, 0xfe, 0x565, &(0x7f0000000f00)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5bY3Xboka5ZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo4dho5Acnt85bf3htLtuS2Nj47M8kknxf/fwk//9AHnklIn79OuJEoTnd6uraYqlcTpfz+FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvduzsr557u/vP7370elbx9a/+/n+4dtJnImD+bHGcjyD642RyZjMX5OxOPPYidM9SGyQJP3OAF0Zydv5WGR9wKEYyVs98P/3VURsAEMq0f5hSNXHAfW5fY/mwf8ZDz7cmgA1l39067OR2Ls5N9q/nuyYGWXz3YkepJ+l8csfd25nW/TucwiAXV2/ERGnRkeb+78k7/+6d6qDcx5PQ/8HL87dbPzzVqvxT2F7/BMtxj8HWrTdbuze/gv3W1yW9OpT6mz890HL8e/2otXESB57aXPMN5ZcuFhOs77t5Yg4HmN7sviO9Zy3d6Zxev3eRrv0G8d/2ZalXx8L5vm4P7pn5zXzpVrpWctd9+BGxGstx7/Jdv0nLeo/ez3OdZjG0fTO6+2O7V7+52vjp4g3Wtb/oxWtJF+fHImW65NTm/fDVP2uaPbXzaO/tUu/3+XP6n//k8s/kTSu11afPo0f9/6TtjvW7f0/nny+GR7P910t1WrL0xHjySfN+2ceXVuP18/Pyn/82JP7v1b3/76I+KLD8t88crPtqYNQ//NPVf9PH7j38Zc/tEu/s/rf6lCP53s66f86zeCzvHYAAAAAAAAwaAoRcTCSQnE7XCgUi1vf7zgS+wvlSrV24kJl5dJ8bP5WdiLGCvWV7kMN34eYzr8PW4/PPBafjYjDEfHtyL7NeHGuUp7vd+EBAAAAAAAAAAAAAAAAAABgQBxo8/v/zO8jLS8Zf7E5BJ4rj/yG4bVr++/Fk56AgeT9H4ZXV+1/X+/zAbx43v9hSI31OwNAP3n/h+Gl/cPw0v5heGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FPnzp7Nto31h9fmsvj8ldWVxcqVk/NpdbG4tDJXnKssXy4uVCoL5bQ4V1na7e+VK5XL0zOxcnWqllZrU9XVtfNLlZVLtfMXl0oL6fnU04YAAAAAAAAAAAAAAAAAAACgWXV1bbFULqfLAgJdBUYHIxsCDYFbPWjdfe6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDBvwEAAP//V9Q1fg==") open(0x0, 0x141242, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) 17.598287719s ago: executing program 0 (id=2072): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x62) syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x3a21820, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') 17.587064159s ago: executing program 34 (id=2072): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file1\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x62) syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x3a21820, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000080)='./file0\x00') 2.223954797s ago: executing program 6 (id=2447): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x84}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000710077003e225b7de561"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x34}, 0x10) 2.223452147s ago: executing program 6 (id=2448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000580)={0xa4, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x0, 0x3, 0x10, 0x0, 0x8000, 0x6, 0x1, 0x10, 0x8, 0x8, 0x8, 0x4, 0x0, 0x1, 0x1e, 0x1, 0x45, 0xd8, 0x2, '\x00', 0x32, 0x11000}) 2.137607519s ago: executing program 7 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 2.07953235s ago: executing program 7 (id=2457): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 2.07939522s ago: executing program 7 (id=2458): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@fmask={'fmask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x5}}, {@utf8}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@discard}, {@errors_remount}, {@errors_continue}, {@namecase}, {@fmask={'fmask', 0x3d, 0x80}}]}, 0x1, 0x151a, &(0x7f0000002280)="$eJzs3AucT9XaOPDnWWvtMST9muQyrLWezS+5LJIklyS5JEmSJLklJE1yJCEx7pLGJSG5DEkMIblMTBr3+/2SkCRNkuSWW7L+nwl/p1PnPee8p/d4P+88389nf6xn9n7WfvZ+Zs9v7435vvPQGo1qVm1ARPBvwUt/JAJALAAMBIAbACAAgLJxZeMy12eXmPjv7YT9uR5LudYVsGuJ+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/5nbdx/xrKyzdPz38hL1l34/X9Wxp///4dklBz39dqSN3cBiPlnU7j/WRv3//+s4J/ZiPuftXH/s6rYa10A+1+Ar/+sINvfXcP9z9q4/4xlZdf6/fO1XiCStc/Btf7+Y4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWNZz1VykAuDK+1nUxxhhjjDHGGGPsz+OzXesKGGOMMcYYY4wx9j8PQYAEBQHEQDaIheyQAwQAXA+54AaIwI0QBzdBbrgZ8kBeyAf5IR4KQEHQYMACQQiFoDBE4RYoArdCUSgGxaEEOCgJpeA2KA23Qxm4A8rCnVAO7oLyUAEqQiW4GyrDPVAF7oWqcB9Ug+pQA2rC/VALHoDa8CDUgYegLjwM9eARqA+PQgN4DBrC49AInoDG8CQ0gabQDJpDi/9W/ivQHV6FHtATEqEX9IY+0Bf6QX8YAAPhNRgEr8NgeAOSYAgMhWEwHN6EEfAWjIRRMBrehjHwDoyFcTAeJkAyTIRJ8C70WXvpbE6FaZAC02EGfAAzYRbMhg9hDnwEc2EezIcFkAofw0JYBGnwCSyGTyEdlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEz2AXfA67YQ/shS9gH3z5L+af+Zv8LggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8XYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeD/ej72wNtbGOlgH62LdK6+nsAE2wIbYEBthI2yMjbEJNsFm2AxbYAtsiS2xFbbCNtgG22JbbIftMAETsD22xw7YATtiR+yEnbAzdsYu2BW7ZrySDfBVfBV7YjXRC3tjb+yLSdn64wAcgK/hIHwdX8c3MAmH4FAchsPwTRyBp3EkjsLROBori3dwLI5DEhMwGZNxEk7CyTgZp+D7+D5OwxScjjNwBs7EWTgLP8Q5+BF+hPNwHi7AVEzFhbgI0zANF+MZTMcluBSX4XJcgctxFa7GVbgW1+Fa3IAbcBNuwi24BbfhNtyBO/AzVAD4Oe7BPZiE+3Af7sf9eAAP4EE8iBmYgYfwEB7Gw3gEj+BRPIrH8DiewON4Ck/haTyDZ/EsnsfzeAFfiv+24WfF1iSByKSEEjEiRsSKWJFD5BA5RU6RS+QSERERcSJO5Ba5RR6RR+QT+US8iBcFRUFhhBEkwhgAEFERFUVEEVFUFBXFRXHhhBOlRClRWpQWZUQZvPzDRpQXFURrV0lUEpVFG1dF3CuqiqqimqguaoiaoqaoJWqJ2qK2qCPqiLqirqgnHhH1RS/sj4+JzM40EkOwsRiKTURTIS9P2lKMwFaitWgjnhGjcCS2Ey1dgnheZBbWQfxFjMMXRScxATuLl0UX0VV0E6+I7qKV6yF6iinYS/QW07Cv6Cf6iwFiJlYXH+Kc7DXEGyJJDBFDxTCxAN8UI8RbYqQYJUaLt8UY8Y4YK8aJ8WKCSBYTxSTxrpgs3hNTxPtiqpgmUsR0MUN8IGaKWWK2+FDMER+JuWKemC8WiFTxsVgoFok08YlYLD4V6WKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKT4Tu8TnYrfYI/aKL8Q+8aXYL74SB8TX4qD4RmSIb8Uh8Z04LL4XR8QP4qj4URwTx8UJcVKcEj+J0+KMOCvOifPiZ3FB/CIuCi9AohRSSiUDGSOzyViZXeaQ18mcMrh8dm+UcfImmVveLPPIvDKfzC/jZQFZUGpppJUkQ1lIFpZReYssIm+VRWUxWVyWkHO+u5RdWt4uy8g7ZFl5pywn75KxsoKsKCvJu2VleY+EyKWtqsnqsoasKe+XifCArC0flHXkQ7KufFjWk4/I+vJR2UA+JhvKx2Uj+YRsLJ+UTWRT2Uw2ly3kU7KlfFq2kq1lG/mMbCufle3kczJBPi/bS3/5W+RF2Um+JDvLl2UX2VV2k7/Ii9LLHrKnhF4ge8s+sq/sJ/vLAXKgfE0Okq/LwfINmSSHyKFymBwu35Qj5FtypBwlR8u35Rj5jhwrx8nxcoJMlhPlJPmunCzfk1Pk+3KqnCZT5HTZ//JMs6X8h/nv/kH+4F/3vklullvkVrlNbpc75E75mdwld8ndcrfcK/fKfXKf3C/3ywPygDwoD8oMmSEPyUPysDwsj8gj8qg8Ko/J4/KcPClPyZ/kaXlGnpHn5Hl5Xl64fA5AoRJKKqUCFaOyqViVXeVQ16mc6nqVS92gIupGFaduUrnVzSqPyqvyqfwqXhVQBZVWRllFKlSFVGEVVbdcucZVcVVCOVVSlVK3/Sv5qoi6VRVVxX6Tf6W+xL9TXwvVQrVULVUr1Uq1UW1UW9VWtVPtVIJKUO1Ve9VBdVAdVUfVSXVSnVVn1UV1Ud1UN9VddVc9VA+VqBJVb9VH9VX9VH81QA1Ur6lBapAarAarJJWkhqqhargarkaoEWqkGqlGq9FqjBqjxqqxarwar5JVspqkJqnJarKaoqaoqWqqSlEpaoaaoWaqmWq2mq3mqDlqrpqr5qv5KlWlqoVqoUpTaWqxWqzS1RK1RC1Ty9QKtUKtUqvUGrVGrVPr1Aa1QaWrzWqz2qq2qu1qu9qpdqpdapfarXarvWqv2qf2qf1qvzqgDqiD6qDKUBnqkDqkDqvD6og6oo6qo+qYOqZOqBPqlDqlTqvT6qw6q86r8+qCuqAuqouZt32BCESgAhXEBDFBbBAb5AhyBDmDnEGuIFcQCSJBXBAX5A5uDvIEeYN8Qf4gPigQFAx0YAIbiMtNjwa3BEWCW4OiQbGgeFAicEHJoFRwW1A6uD0oE9wRlA3uDMoFdwXlgwpBxaBScHdQObgnqBLcG1QN7guqBdWDGkHN4P6gVvBAUDt4MKgTPBTUDR4O6gWPBPWDR4MGwWNBw+DxoFHwRNA4eDJoEjQNmgXNgxZ/6vzen877tOuhe+pE3Uv31n10X91P99cD9ED9mh6kX9eD9Rs6SQ/RQ/UwPVy/qUfot/RIPUqP1m/rMfodPVaP0+P1BJ2sJ+pJ+l09Wb+np+j39VQ9Tafo6XqG/kDP1LP0bP2hnqM/0nP1PD1fL9Cp+mO9UC/SafoTvVh/qtP1Er1UL9PL9Qq9Uq/Sq/UavVav0+v1Br1Rb9Kb9Ra9VW/T2/UOvVN/pnfpz/VuvUfv1V/offpLvV9/pQ/or/VB/Y3O0N/qQ/o7fVh/r4/oH/RR/aM+po/rE/qkPqV/0qf1GX1Wn9Pn9c/6gv5FX9Q+8+Y+8+PdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQiQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5m5zt7nH3GPuNfea+8x9prqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdibBJJj2pr3pYDqYjqaj6WQ6mc6ms+liuphuppvpbrqbHqaHSTSJprfpbfqavqa/6W8GmoFmkBlkBpvBJskkmaFmqBluhpsRZoQZaUaZ0Zk3quYdM9aMM+PNBJNsks0kM8lMNpPNFDPFTDVTTYpJMTPMDDPTzDSzzWwzx8wxc81cM9/MN6km1Sw0C02aSTOLzWKTbtLNUrPULDfLzUqz0qw2q81as9ash/Vmo9loNpvNZqvZarab7Wan2Wl2mV1mt9lt9pq9Zp/ZZ/ab/eaAOWAOmoMmw2SYQ+aQOWwOmyPmiDlqjppj5pg5YU6YU+aUOW1Om7PmrDlv8l7+vPQm1ma3Oex1Nqe93uayN9i/jfPZ/DbeFrAFrbZ5bN7fxMZaW9QWs8VtCetsSVvK3va7uLytYCvaSvZuW9neY6v8Lq5lH7C17YO2jn3I1rT3/yauax+29ewTtj4igG1qG9rmtpF9wja2T9omtqltZpvbtvZZ284+ZxPs87a9feF38UK7yK62a+xau87utnvsWXvOHrbf2/P2Z9vD9rQD7Wt2kH3dDrZv2CQ75HfxaPu2HWPfsWPtODveTvhdPNVOsyl2up1hP7Az7Sw7bPdv41T7sZ1j0+xcO8/Otwt+jTNrSrOf2MX2U5tuA1hql9nldoVdaVf9/1qX2Q12o91kd9nP7Va7zW63O+zOKzfCdo/da7+w++yX9pD9zh6wX9uD9ojNsN/+Gmce3xH7gz1qf7TH7HF7wp60p+xP6kp25rGftL/Yi9ZbICQgSYoCiqFsFEvZKQddRznpespFN1CEbqQ4uoly082Uh/JSPspP8VSACpImQ5aIQipEhSlKt9CV8opTCXJUkkrRbVSabqcydAeVpTupHN1F5akCVaRKdDdVpnuoCt1LVek+qkbVqQbVpPupFj1AtelBqkMPUV16mOrRI1SfHqUG9Bg1pMepET1BjelJakJNqRk1pxb0FLWkp6kVtaY29Ay1pWepHT1HCfQ8tacXqAP9hTrSi9SJXqLO9DJ1oa7UjV6h7vQq9aCelEi9qDf1ob7Uj/rTABpIr9Egep0G0xuURENoKA2j4fQmjaC3aCSNotH0No2hd2gsjaPxNIGSaSJNondpMr1HU+h9mkrTKIWm0wz6gGbSLJpNH9Ic+ojm0jyaTwsolT6mhbSI0ugTWkyfUjotoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO2kmf0S76nHbTHtpLX9A++pL201d0gL6mg/QNZdC3dIi+o8P0PR2hH3xP+pGO0XE6QSfpFP1Ep+kMnaVzdJ5+pgv0C10kTxBiKEIZqjAIY8JsYWyYPcwRXhfmDK8Pc4U3hJHwxjAuvCnMHd4c5gnzhvnC/GF8WCAsGOrQhDakMAwLhYXDaHhLWCS8NSwaFguLhyVCF5YMS4W3haXDGCgT3hGWDe8My4V3heXDCuETD1UK7w4rh/eEVcJ7w6rhfWG1sHpYI6wZ3h/WCh8Ia4cPhnXCh8Iy4cNhvfCRsH74aNggfCxsGD4eNgqfCBuHT4ZNwqZhs7B52CJ8KmwZPh22CluHbcJnwrbhs2G78LkwIXw+bB++8Ov6hxf9/fWJYa+wd9gn7BN6/6CcH10QTY1+HF0YXRRNi34SXRz9NJoeXRJdGl0WXR7NvAdaFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53HUup7ve5XI3uIi70e1pd5PL7W52eVxel8/ld/GugCvotDPOOnKhK+QKu6i7xRVxt/YEV8wVdyWccyVdKdfctXAtXEv3tGvlWrs27hn3jHvWPeuec8+5511794Lr4P7iOroXXSf3knvJvey6uK6um3vFdXcTc126JhNdb9fb9XV9XX/X3w10A90gN8gNdoNdkktyQ91QN9wNdyPcCDfSjXSj3Wg3xo1xY91YN96Nd8ku2U1yk9xkN9lNcVPcVDfVpbgUN8PNcDPdTFd51qW9zHVz3Xw336W6VLfQZZ6vNLfYLXbpLt0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9jdcmtTtc/vdfnfAHXAH3Tcuw33rDrnv3GH3vTvifnBH3Y/umDvuTriT7pT7yZ12Z9xZd86ddz+7C+4Xd9F5lxyZGJkUeTcyOfJeZErk/cjUyLRISmR6ZEbkg8jMyKzI7MiHkTmRjyJzI/Mi8yMLIqmRjyMLI4siaZFPIosjn0bSI0siSyPLIssjKyLeF9ga+kK+sI/6W3wRf6sv6ov54r6Ed76kL+Vv86X97b6Mv8OX9Xf6cv4uX95X8BX9k76Jb+qb+ea+hX/Kt/RP+1a+tW/jn/Ft/bO+nX/OJ/jnfXv/gu/g/+I7+hd9J/+S7+xf9l18V9/Nv+K7+1d9D9/TJ/pevrfv4/v6fr6/H+AH+tf8IP+6H+zf8El+iB/qh/nh/k0/wr/lR/pRfnTM237MlUdkmOCT/UQ/yb/rJ/v3/BT/vp/qp/kUP93P8B/4mX6Wn+0/9HP8R36un+fn+wU+1X/sF/pFPs1/4hf7T326X3LlpbJf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf57X6H3+k/87v853633+P3+i/8Pv+l3++/8gf81/6g/8Zn+G/9If+dP+y/90f8D/6o/9Ef88f9CX/Sn/I/+dP+jD/rz/nz/md/wf/iL/L/WWOMMcYY+6dMvDoUv11z6XV+rz/IEX+1cW8AuH5b/oy/Xp95R7k+z6VxPxHfNgIAz/fs/NiVpVq1xMTEy9umSwgKzwO48jdBmWLgarwE2sCzkACtofQf1t9PdD1P/2D+6J0AOf4qJxauxlfn/woAE/9g/qeeGb2wXHg27r+Yfx5A0cJXc7LD1XgJtPn1/UprKPN36s/b8h/Un/3rZIBWf5WTE67GV+svBU/DC5Dwmy0ZY4wxxhhjjLFL+omKHa88f175F59/9Hwer67mZIOr8T96PmeMMcYYY4wxxti192LXbs89lZDQuuO/Pqjy38r6pweN4X9qZh784cB7gCtfUQDwb04IkDmQ/8mj2PIf2VfS5Uvnb1ctP+cD+N/Ryj9jcI1/MDHGGGOMMcb+dFdv+n/7dXWtCmKMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxrKg/8SvE7vWx8gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xda/8vAAD//xtvAG4=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.07835138s ago: executing program 6 (id=2460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 2.015285911s ago: executing program 6 (id=2464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}]}, 0x3c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000004e220000000000000a00"], 0xb8}}, 0x0) 2.013240571s ago: executing program 7 (id=2465): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff9500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x6, 0x5}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x1000000, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.997510582s ago: executing program 6 (id=2467): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.997309091s ago: executing program 7 (id=2468): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.875682544s ago: executing program 7 (id=2470): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000980)={0x2, 0xffffffff, 0x8001, 0x5, 0x1, 0x5}) 1.701404627s ago: executing program 1 (id=2488): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.651676898s ago: executing program 1 (id=2489): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.651412748s ago: executing program 1 (id=2490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) read$FUSE(r3, 0x0, 0x0) 1.634060268s ago: executing program 1 (id=2491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 1.627573789s ago: executing program 1 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) 1.57977276s ago: executing program 1 (id=2493): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.154887558s ago: executing program 2 (id=2501): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x70, 0xfff7, 0x3, 0x0, 0x5, 0x3}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) 1.154665988s ago: executing program 2 (id=2503): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 683.692367ms ago: executing program 4 (id=2514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) timer_delete(0x0) 683.473977ms ago: executing program 4 (id=2515): setreuid(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0xb) 680.409547ms ago: executing program 4 (id=2516): openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) memfd_create(0x0, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x33}}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) 310.398434ms ago: executing program 2 (id=2517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff7, @loopback, 0x1ff}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) 310.310984ms ago: executing program 4 (id=2518): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) 296.470514ms ago: executing program 2 (id=2519): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 296.397714ms ago: executing program 4 (id=2520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 230.029006ms ago: executing program 4 (id=2521): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) 229.637926ms ago: executing program 2 (id=2522): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 179.747837ms ago: executing program 2 (id=2523): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000003c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 0s ago: executing program 6 (id=2524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) kernel console output (not intermixed with test programs): ): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 58.476240][ T285] EXT4-fs (loop4): unmounting filesystem. [ 58.611901][ T288] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 58.620337][ T288] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 58.902461][ T288] usb 1-1: USB disconnect, device number 5 [ 59.426264][ T3068] netlink: 'syz.1.1184': attribute type 4 has an invalid length. [ 59.546340][ T3083] loop2: detected capacity change from 0 to 128 [ 59.647626][ T3102] loop8: detected capacity change from 0 to 7 [ 59.734749][ T3112] xt_hashlimit: size too large, truncated to 1048576 [ 59.921884][ T288] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.997485][ T3118] netlink: 'syz.2.1191': attribute type 4 has an invalid length. [ 60.019982][ T3120] loop2: detected capacity change from 0 to 512 [ 60.033829][ T3120] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.043072][ T3120] ext4 filesystem being mounted at /236/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.086285][ T283] EXT4-fs (loop2): unmounting filesystem. [ 60.112982][ T288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.124296][ T288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.134562][ T288] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.147775][ T288] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.157012][ T288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.165895][ T288] usb 6-1: config 0 descriptor?? [ 60.382183][ T28] audit: type=1400 audit(1756819368.776:687): avc: denied { read } for pid=3129 comm="syz.4.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 60.453733][ T3138] loop8: detected capacity change from 0 to 7 [ 60.583014][ T288] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 60.602144][ T288] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 60.872950][ T466] usb 6-1: USB disconnect, device number 2 [ 61.393631][ T28] audit: type=1400 audit(1756819369.786:688): avc: denied { connect } for pid=3179 comm="syz.4.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.397723][ T3184] loop8: detected capacity change from 0 to 7 [ 61.439321][ T28] audit: type=1400 audit(1756819369.806:689): avc: denied { write } for pid=3179 comm="syz.4.1217" path="socket:[27414]" dev="sockfs" ino=27414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.266885][ T3191] loop4: detected capacity change from 0 to 131072 [ 62.276516][ T3191] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.314708][ T3191] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 62.381942][ T2677] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.573043][ T2677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.584160][ T2677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.593909][ T2677] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.606821][ T2677] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 62.615890][ T2677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.624428][ T2677] usb 6-1: config 0 descriptor?? [ 63.032166][ T2677] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 63.040887][ T2677] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 63.302533][ T2677] usb 6-1: USB disconnect, device number 3 [ 64.054623][ T3230] loop4: detected capacity change from 0 to 40427 [ 64.066643][ T3230] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 64.075363][ T3230] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 64.090899][ T3230] F2FS-fs (loop4): invalid crc value [ 64.102242][ T3230] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 64.143729][ T3230] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 64.150815][ T3230] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.196253][ T3230] syz.4.1236: attempt to access beyond end of device [ 64.196253][ T3230] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 64.363957][ T285] syz-executor: attempt to access beyond end of device [ 64.363957][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.511497][ T3247] loop2: detected capacity change from 0 to 512 [ 64.564250][ T3247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 64.573683][ T3247] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.590382][ T28] audit: type=1400 audit(1756819372.976:690): avc: denied { rename } for pid=3246 comm="syz.2.1241" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.596769][ T3247] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.1241: Directory hole found for htree leaf block 0 [ 64.671943][ T3247] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 64.714102][ T283] EXT4-fs (loop2): unmounting filesystem. [ 64.963681][ T3281] loop5: detected capacity change from 0 to 256 [ 64.995734][ T3273] loop2: detected capacity change from 0 to 40427 [ 65.004993][ T3281] FAT-fs (loop5): Directory bread(block 64) failed [ 65.011636][ T3281] FAT-fs (loop5): Directory bread(block 65) failed [ 65.011664][ T3273] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 65.024980][ T3281] FAT-fs (loop5): Directory bread(block 66) failed [ 65.031540][ T3273] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 65.039852][ T3281] FAT-fs (loop5): Directory bread(block 67) failed [ 65.047192][ T3281] FAT-fs (loop5): Directory bread(block 68) failed [ 65.053963][ T3281] FAT-fs (loop5): Directory bread(block 69) failed [ 65.060757][ T3273] F2FS-fs (loop2): invalid crc value [ 65.066327][ T3281] FAT-fs (loop5): Directory bread(block 70) failed [ 65.072971][ T3281] FAT-fs (loop5): Directory bread(block 71) failed [ 65.079775][ T3281] FAT-fs (loop5): Directory bread(block 72) failed [ 65.086647][ T3281] FAT-fs (loop5): Directory bread(block 73) failed [ 65.094359][ T3273] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 65.144754][ T3273] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 65.152041][ T3273] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 65.213230][ T3273] syz.2.1252: attempt to access beyond end of device [ 65.213230][ T3273] loop2: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 65.488978][ T3295] loop4: detected capacity change from 0 to 128 [ 65.496362][ T283] syz-executor: attempt to access beyond end of device [ 65.496362][ T283] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.512305][ T3295] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.520545][ T3295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 65.529485][ T3295] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.605881][ T285] EXT4-fs (loop4): unmounting filesystem. [ 65.616146][ T28] audit: type=1326 audit(1756819374.006:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.682500][ T28] audit: type=1326 audit(1756819374.006:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.728420][ T28] audit: type=1326 audit(1756819374.006:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.787119][ T28] audit: type=1326 audit(1756819374.006:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.795553][ T3312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1260'. [ 65.832279][ T28] audit: type=1326 audit(1756819374.006:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.854186][ T3298] loop1: detected capacity change from 0 to 8192 [ 65.856156][ T28] audit: type=1326 audit(1756819374.006:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.865998][ T3298] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 65.885796][ T28] audit: type=1326 audit(1756819374.046:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.893718][ T3298] FAT-fs (loop1): Filesystem has been set read-only [ 65.916794][ T28] audit: type=1326 audit(1756819374.046:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 65.946901][ T28] audit: type=1326 audit(1756819374.156:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3297 comm="syz.1.1271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe24478ebe9 code=0x7ffc0000 [ 66.041911][ T691] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.100409][ T3322] loop1: detected capacity change from 0 to 16 [ 66.120566][ T3322] erofs: (device loop1): mounted with root inode @ nid 36. [ 66.138379][ T3322] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 66.151992][ T3322] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 66.231880][ T691] usb 5-1: Using ep0 maxpacket: 16 [ 66.238761][ T691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.266980][ T691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.287773][ T691] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 66.311905][ T691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.320237][ T691] usb 5-1: Product: syz [ 66.334787][ T691] usb 5-1: Manufacturer: syz [ 66.344911][ T691] usb 5-1: SerialNumber: syz [ 66.362108][ T3345] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1279'. [ 66.529811][ T3361] loop0: detected capacity change from 0 to 16 [ 66.549240][ T3361] erofs: (device loop0): mounted with root inode @ nid 36. [ 66.558434][ T691] usb 5-1: 0:2 : does not exist [ 66.566517][ T691] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 66.572641][ T3363] loop5: detected capacity change from 0 to 16 [ 66.584326][ T691] usb 5-1: USB disconnect, device number 4 [ 66.590761][ T3363] erofs: (device loop5): mounted with root inode @ nid 36. [ 66.593695][ T3361] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 66.619098][ T3361] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 66.781245][ T3375] syz.0.1295[3375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.781329][ T3375] syz.0.1295[3375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.082692][ T3377] syz.5.1308[3377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.110235][ T3381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1296'. [ 67.141973][ T3377] syz.5.1308[3377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.313878][ T3401] loop5: detected capacity change from 0 to 1024 [ 67.332304][ T3400] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1306'. [ 67.366715][ T3401] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 67.379125][ T3401] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1305: bg 0: block 88: padding at end of block bitmap is not set [ 67.404929][ T2078] EXT4-fs (loop5): unmounting filesystem. [ 67.426189][ T3379] loop0: detected capacity change from 0 to 40427 [ 67.433467][ T3379] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 67.444823][ T3379] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 67.454525][ T3379] F2FS-fs (loop0): invalid crc value [ 67.473719][ T3379] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.513006][ T3419] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1313'. [ 67.530504][ T3379] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 67.537723][ T3379] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.691924][ T2677] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 69.061914][ T2677] usb 2-1: Using ep0 maxpacket: 16 [ 69.072839][ T2677] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.091859][ T2677] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.102606][ T2677] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.111684][ T2677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.123868][ T2677] usb 2-1: Product: syz [ 69.128069][ T2677] usb 2-1: Manufacturer: syz [ 69.133021][ T2677] usb 2-1: SerialNumber: syz [ 69.344294][ T2677] usb 2-1: 0:2 : does not exist [ 69.351767][ T2677] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 69.375180][ T2677] usb 2-1: USB disconnect, device number 5 [ 69.437581][ T3463] loop4: detected capacity change from 0 to 40427 [ 69.444689][ T3463] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 69.452771][ T3463] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 69.462322][ T3463] F2FS-fs (loop4): invalid crc value [ 69.468982][ T3463] F2FS-fs (loop4): Found nat_bits in checkpoint [ 69.505862][ T3463] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 69.513082][ T3463] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.519179][ T3466] loop5: detected capacity change from 0 to 40427 [ 69.528219][ T3466] F2FS-fs (loop5): invalid crc value [ 69.535422][ T3466] F2FS-fs (loop5): Found nat_bits in checkpoint [ 69.574626][ T3477] serio: Serial port ptm0 [ 69.582510][ T3466] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 69.711517][ T3483] loop0: detected capacity change from 0 to 512 [ 69.721710][ T3483] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.086615][ T3483] EXT4-fs (loop0): 1 truncate cleaned up [ 70.092526][ T3483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.041988][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 71.042007][ T28] audit: type=1400 audit(1756819379.426:729): avc: denied { map } for pid=3482 comm="syz.0.1336" path="/275/bus/cpuacct.usage_sys" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.073144][ T287] EXT4-fs (loop0): unmounting filesystem. [ 71.076575][ T2078] syz-executor: attempt to access beyond end of device [ 71.076575][ T2078] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.104854][ T3488] loop1: detected capacity change from 0 to 512 [ 71.183126][ T3488] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 71.197683][ T3488] System zones: 0-2, 18-18, 34-35 [ 71.205937][ T3488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.215188][ T3488] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.257416][ T284] EXT4-fs (loop1): unmounting filesystem. [ 71.293730][ T28] audit: type=1400 audit(1756819379.686:730): avc: denied { append } for pid=3514 comm="syz.1.1349" name="001" dev="devtmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.359263][ T28] audit: type=1326 audit(1756819379.746:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.2.1355" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f131258ebe9 code=0x0 [ 71.417247][ T28] audit: type=1400 audit(1756819379.776:732): avc: denied { read append } for pid=3526 comm="syz.0.1356" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.461888][ T28] audit: type=1400 audit(1756819379.776:733): avc: denied { ioctl } for pid=3526 comm="syz.0.1356" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.488196][ T28] audit: type=1400 audit(1756819379.836:734): avc: denied { bind } for pid=3531 comm="syz.0.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.494376][ T3513] loop5: detected capacity change from 0 to 40427 [ 71.523457][ T28] audit: type=1400 audit(1756819379.906:735): avc: denied { write } for pid=3534 comm="syz.0.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.552091][ T3513] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 71.562236][ T3513] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 71.574475][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 71.583457][ T28] audit: type=1400 audit(1756819379.906:736): avc: denied { nlmsg_write } for pid=3534 comm="syz.0.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.604656][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 71.614817][ T3513] F2FS-fs (loop5): invalid crc value [ 71.622122][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 71.634451][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1361'. [ 71.644472][ T3513] F2FS-fs (loop5): Found nat_bits in checkpoint [ 71.707686][ T3513] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 71.717556][ T3513] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 71.788389][ T3551] loop4: detected capacity change from 0 to 512 [ 71.835724][ T3551] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 71.844966][ T3551] System zones: 0-2, 18-18, 34-35 [ 71.851230][ T3551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.860532][ T3551] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.906799][ T285] EXT4-fs (loop4): unmounting filesystem. [ 71.926139][ T3559] loop5: detected capacity change from 0 to 256 [ 71.935001][ T3559] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 71.956595][ T28] audit: type=1400 audit(1756819380.346:737): avc: denied { execute } for pid=3558 comm="syz.5.1366" path="/123/file2/file1" dev="loop5" ino=1048709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 71.981728][ T3559] syz.5.1366: attempt to access beyond end of device [ 71.981728][ T3559] loop5: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 71.996607][ T3559] syz.5.1366: attempt to access beyond end of device [ 71.996607][ T3559] loop5: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 71.999095][ T3565] loop0: detected capacity change from 0 to 512 [ 72.010657][ T3559] syz.5.1366: attempt to access beyond end of device [ 72.010657][ T3559] loop5: rw=0, sector=440, nr_sectors = 8 limit=256 [ 72.030552][ T3559] syz.5.1366: attempt to access beyond end of device [ 72.030552][ T3559] loop5: rw=0, sector=440, nr_sectors = 8 limit=256 [ 72.044531][ T3566] syz.5.1366: attempt to access beyond end of device [ 72.044531][ T3566] loop5: rw=0, sector=440, nr_sectors = 8 limit=256 [ 72.058303][ T3559] syz.5.1366: attempt to access beyond end of device [ 72.058303][ T3559] loop5: rw=0, sector=440, nr_sectors = 8 limit=256 [ 72.066216][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1371'. [ 72.072113][ T3559] syz.5.1366: attempt to access beyond end of device [ 72.072113][ T3559] loop5: rw=0, sector=440, nr_sectors = 8 limit=256 [ 72.094172][ T3559] syz.5.1366: attempt to access beyond end of device [ 72.094172][ T3559] loop5: rw=0, sector=440, nr_sectors = 8 limit=256 [ 72.107754][ T3559] syz.5.1366: attempt to access beyond end of device [ 72.107754][ T3559] loop5: rw=0, sector=440, nr_sectors = 8 limit=256 [ 72.122031][ T3565] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 72.131333][ T3565] System zones: 0-2, 18-18, 34-35 [ 72.141454][ T3565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.158070][ T3565] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.270457][ T3578] loop2: detected capacity change from 0 to 256 [ 72.287926][ T287] EXT4-fs (loop0): unmounting filesystem. [ 72.307790][ T3578] FAT-fs (loop2): bogus number of FAT sectors [ 72.345200][ T3578] FAT-fs (loop2): Can't find a valid FAT filesystem [ 72.548091][ T3595] loop1: detected capacity change from 0 to 512 [ 72.562181][ T3595] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.603298][ T3595] EXT4-fs (loop1): 1 truncate cleaned up [ 72.609078][ T3595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.648674][ T284] EXT4-fs (loop1): unmounting filesystem. [ 72.741882][ T466] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.906507][ T3605] loop1: detected capacity change from 0 to 256 [ 72.917492][ T3605] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 72.934225][ T466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.950773][ T466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.976925][ T466] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.989451][ T3603] loop5: detected capacity change from 0 to 40427 [ 72.997073][ T3603] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 73.000101][ T466] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.003779][ T3603] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 73.021037][ T466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.022221][ T3603] F2FS-fs (loop5): invalid crc value [ 73.036212][ T466] usb 5-1: config 0 descriptor?? [ 73.043460][ T3603] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 73.081358][ T3603] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 73.088657][ T3603] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 73.446608][ T466] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 73.464340][ T466] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description [ 73.484421][ T466] plantronics 0003:047F:FFFF.0010: parse failed [ 73.497289][ T466] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22 [ 73.585682][ T3622] loop5: detected capacity change from 0 to 512 [ 73.627407][ T3622] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 73.640966][ T3622] System zones: 0-2, 18-18, 34-35 [ 73.654548][ T3622] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.673955][ T691] usb 5-1: USB disconnect, device number 5 [ 73.681662][ T3622] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.772904][ T2078] EXT4-fs (loop5): unmounting filesystem. [ 73.885223][ T3632] loop5: detected capacity change from 0 to 256 [ 73.893666][ T3632] FAT-fs (loop5): bogus number of FAT sectors [ 73.899774][ T3632] FAT-fs (loop5): Can't find a valid FAT filesystem [ 73.950193][ T3636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1394'. [ 74.204252][ T28] audit: type=1400 audit(1756819382.596:738): avc: denied { compute_member } for pid=3638 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 74.213587][ T3641] loop4: detected capacity change from 0 to 512 [ 74.281037][ T3643] loop1: detected capacity change from 0 to 512 [ 74.282038][ T3641] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.292099][ T3643] EXT4-fs: Ignoring removed nobh option [ 74.333072][ T3643] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1413: iget: bad i_size value: 38620345925642 [ 74.355097][ T3641] EXT4-fs (loop4): 1 truncate cleaned up [ 74.360806][ T3641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.369652][ T3643] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1413: couldn't read orphan inode 15 (err -117) [ 74.405075][ T3643] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.426154][ T3643] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.1413: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 74.448375][ T285] EXT4-fs (loop4): unmounting filesystem. [ 74.456285][ T3643] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.1.1413: path /276/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=128 fake=0 [ 74.535152][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.546185][ T284] EXT4-fs (loop1): unmounting filesystem. [ 74.567195][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.580400][ T3648] device bridge_slave_0 entered promiscuous mode [ 74.589997][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.599068][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.607428][ T3648] device bridge_slave_1 entered promiscuous mode [ 74.609210][ T3666] loop2: detected capacity change from 0 to 256 [ 74.635769][ T43] device bridge_slave_1 left promiscuous mode [ 74.642381][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.652502][ T43] device bridge_slave_0 left promiscuous mode [ 74.654235][ T3666] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 74.661589][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.688339][ T43] device veth1_macvtap left promiscuous mode [ 74.702420][ T43] device veth0_vlan left promiscuous mode [ 74.715362][ T3677] loop5: detected capacity change from 0 to 512 [ 74.732260][ T3677] ext4: Bad value for 'mb_optimize_scan' [ 74.772849][ T3681] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.786736][ T3681] FAT-fs (loop3): unable to read boot sector [ 75.034729][ T3706] loop4: detected capacity change from 0 to 256 [ 75.052352][ T3706] FAT-fs (loop4): bogus number of FAT sectors [ 75.058484][ T3706] FAT-fs (loop4): Can't find a valid FAT filesystem [ 75.213978][ T3730] loop5: detected capacity change from 0 to 256 [ 75.220786][ T3730] exfat: Deprecated parameter 'utf8' [ 75.242213][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.252366][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.274645][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.287366][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.298595][ T3730] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 75.312841][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.319922][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.329474][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.339032][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.357302][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.364416][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.378136][ T3736] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1439'. [ 75.397289][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.421703][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.430231][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.438516][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.447337][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.475708][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.493283][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.511656][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.531685][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.542882][ T3648] device veth0_vlan entered promiscuous mode [ 75.567781][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.587338][ T3743] 9pnet: p9_errstr2errno: server reported unknown error @ [ 75.595587][ T3648] device veth1_macvtap entered promiscuous mode [ 75.603689][ T3745] capability: warning: `syz.2.1444' uses deprecated v2 capabilities in a way that may be insecure [ 75.620988][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.631296][ T3747] input: syz1 as /devices/virtual/input/input10 [ 75.641377][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.657518][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.676481][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.693976][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 75.707218][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 75.716726][ T3751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 75.774058][ T3755] tipc: Started in network mode [ 75.779116][ T3755] tipc: Node identity ac14142f, cluster identity 4711 [ 75.786943][ T3755] tipc: New replicast peer: 0.0.0.0 [ 75.792594][ T3755] tipc: Enabled bearer , priority 10 [ 76.911873][ T6] tipc: Node number set to 2886997039 [ 77.056673][ T3766] loop1: detected capacity change from 0 to 256 [ 77.118571][ T3766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 77.129629][ T3770] loop0: detected capacity change from 0 to 256 [ 77.135974][ T3772] syz.4.1463[3772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.137082][ T3772] syz.4.1463[3772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.137840][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.167971][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.178731][ T3752] device bridge_slave_0 entered promiscuous mode [ 77.188704][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.196132][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.204891][ T3752] device bridge_slave_1 entered promiscuous mode [ 77.225088][ T3768] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1452'. [ 77.239518][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.278671][ T3777] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.293513][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 77.309970][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.318774][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 77.328979][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.332795][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 77.332809][ T28] audit: type=1400 audit(1756819385.726:743): avc: denied { setopt } for pid=3787 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.337478][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.372601][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.381019][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.387168][ T3790] loop2: detected capacity change from 0 to 128 [ 77.389777][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.396232][ T3790] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 77.477222][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.484360][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.508779][ T28] audit: type=1400 audit(1756819385.896:744): avc: denied { append } for pid=3804 comm="syz.1.1467" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.532028][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.562951][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.574609][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.597058][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.605616][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.614243][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.621323][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.647611][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.659068][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.666190][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.682669][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.691576][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.720166][ T3828] loop4: detected capacity change from 0 to 128 [ 77.727151][ T3828] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 77.756604][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.768866][ T3834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.787507][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.797798][ T28] audit: type=1400 audit(1756819386.186:745): avc: denied { load_policy } for pid=3836 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 77.809604][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.818249][ T3837] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 77.835238][ T288] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 77.840099][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.850769][ T3837] SELinux: failed to load policy [ 77.865419][ T3752] device veth0_vlan entered promiscuous mode [ 77.885047][ T3752] device veth1_macvtap entered promiscuous mode [ 77.892965][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.913651][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.940131][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.962919][ T3847] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 77.975082][ T3847] SELinux: failed to load policy [ 78.006285][ T3848] loop6: detected capacity change from 0 to 256 [ 78.013188][ T3848] FAT-fs (loop6): bogus number of FAT sectors [ 78.019613][ T3848] FAT-fs (loop6): Can't find a valid FAT filesystem [ 78.030104][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.042079][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.064902][ T288] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 78.079460][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.089578][ T288] usb 3-1: config 0 descriptor?? [ 78.302553][ T3884] 9pnet: p9_errstr2errno: server reported unknown error @ [ 78.317166][ T3885] loop4: detected capacity change from 0 to 1024 [ 78.365902][ T28] audit: type=1400 audit(1756819386.756:746): avc: denied { bind } for pid=3892 comm="syz.1.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.391182][ T3885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 78.430915][ T28] audit: type=1400 audit(1756819386.756:747): avc: denied { node_bind } for pid=3892 comm="syz.1.1504" saddr=::200:4e1c:ac14:1424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 78.454873][ T285] EXT4-fs (loop4): unmounting filesystem. [ 78.489759][ T3902] tipc: Started in network mode [ 78.501577][ T288] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 78.515299][ T3902] tipc: Node identity 48, cluster identity 4711 [ 78.521579][ T288] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 78.523989][ T3902] tipc: Node number set to 72 [ 78.612053][ T288] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected [ 78.642365][ T43] device bridge_slave_1 left promiscuous mode [ 78.648526][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.657966][ T43] device bridge_slave_0 left promiscuous mode [ 78.664195][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.677205][ T43] device veth1_macvtap left promiscuous mode [ 78.679539][ T3922] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+ÿÿ [ 78.683811][ T43] device veth0_vlan left promiscuous mode [ 78.711438][ T466] usb 3-1: USB disconnect, device number 5 [ 78.722625][ T466] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected [ 78.762150][ T39] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 78.943020][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.954116][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.963983][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.979975][ T39] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.989135][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.997863][ T39] usb 7-1: config 0 descriptor?? [ 79.141924][ T288] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 79.161922][ T691] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 79.323514][ T288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.333673][ T288] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.343524][ T288] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 79.352930][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 79.361077][ T691] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.372244][ T288] usb 1-1: SerialNumber: syz [ 79.377645][ T691] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 79.388463][ T691] usb 2-1: config 0 interface 0 has no altsetting 0 [ 79.395379][ T691] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 79.404528][ T691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.413373][ T691] usb 2-1: config 0 descriptor?? [ 79.413722][ T39] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 79.418937][ T3935] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 79.427185][ T39] plantronics 0003:047F:FFFF.0013: unbalanced collection at end of report description [ 79.443397][ T39] plantronics 0003:047F:FFFF.0013: parse failed [ 79.449769][ T39] plantronics: probe of 0003:047F:FFFF.0013 failed with error -22 [ 79.596561][ T288] usb 1-1: 0:2 : does not exist [ 79.602724][ T288] usb 1-1: USB disconnect, device number 6 [ 79.632296][ T39] usb 7-1: USB disconnect, device number 2 [ 79.640580][ T691] usb 2-1: string descriptor 0 read error: -71 [ 79.648242][ T691] usbhid 2-1:0.0: can't add hid device: -71 [ 79.657468][ T691] usbhid: probe of 2-1:0.0 failed with error -71 [ 79.664497][ T691] usb 2-1: USB disconnect, device number 6 [ 80.215265][ T3955] syz.1.1532[3955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.215344][ T3955] syz.1.1532[3955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.248186][ T3958] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1531'. [ 80.356603][ T28] audit: type=1400 audit(1756819388.746:748): avc: denied { map } for pid=3963 comm="syz.1.1536" path="socket:[31261]" dev="sockfs" ino=31261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.358278][ T3962] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 80.440868][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 80.452295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.504023][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 80.523777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.533495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.533830][ T3976] syz.2.1540[3976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.541692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.572116][ T3976] syz.2.1540[3976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.575863][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.622366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.636252][ T28] audit: type=1400 audit(1756819389.026:749): avc: denied { listen } for pid=3983 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.981890][ T288] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.163599][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.174589][ T288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.184465][ T288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.197560][ T288] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.206643][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.215283][ T288] usb 3-1: config 0 descriptor?? [ 81.477240][ T3999] syz.0.1560[3999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.477332][ T3999] syz.0.1560[3999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.480560][ T4001] loop1: detected capacity change from 0 to 256 [ 81.543010][ T4007] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1551'. [ 81.623876][ T288] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 81.643233][ T288] plantronics 0003:047F:FFFF.0014: unbalanced collection at end of report description [ 81.655347][ T288] plantronics 0003:047F:FFFF.0014: parse failed [ 81.661649][ T288] plantronics: probe of 0003:047F:FFFF.0014 failed with error -22 [ 81.737041][ T4031] loop6: detected capacity change from 0 to 256 [ 81.765232][ T4035] loop6: detected capacity change from 0 to 128 [ 81.796397][ T4041] loop1: detected capacity change from 0 to 128 [ 81.809011][ T4041] EXT4-fs: Ignoring removed nobh option [ 81.817811][ T4041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.837054][ T4041] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.852045][ T39] usb 3-1: USB disconnect, device number 6 [ 81.863239][ T4041] fscrypt (loop1, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 81.884117][ T284] EXT4-fs (loop1): unmounting filesystem. [ 81.896391][ T4052] mmap: syz.1.1572 (4052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.668477][ T4058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1575'. [ 82.754085][ T4077] loop2: detected capacity change from 0 to 128 [ 82.825587][ T4084] loop2: detected capacity change from 0 to 128 [ 82.844807][ T4084] EXT4-fs: Ignoring removed nobh option [ 82.855777][ T4084] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.864434][ T4088] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1586'. [ 82.873669][ T4084] ext4 filesystem being mounted at /304/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.890040][ T4084] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 82.924792][ T283] EXT4-fs (loop2): unmounting filesystem. [ 82.965004][ T28] audit: type=1400 audit(1756819391.356:750): avc: denied { relabelfrom } for pid=4099 comm="syz.6.1592" name="" dev="pipefs" ino=31833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 82.991975][ T288] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 83.006631][ T28] audit: type=1400 audit(1756819391.396:751): avc: denied { ioctl } for pid=4096 comm="syz.4.1591" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.154595][ T4117] loop2: detected capacity change from 0 to 256 [ 83.191913][ T288] usb 2-1: Using ep0 maxpacket: 16 [ 83.200328][ T288] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.219085][ T288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.234856][ T4125] loop6: detected capacity change from 0 to 128 [ 83.241204][ T288] usb 2-1: config 0 has no interface number 0 [ 83.251907][ T4125] EXT4-fs: Ignoring removed nobh option [ 83.259315][ T288] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 83.271857][ T288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.285215][ T288] usb 2-1: Product: syz [ 83.289728][ T288] usb 2-1: Manufacturer: syz [ 83.294953][ T4125] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 83.303430][ T288] usb 2-1: SerialNumber: syz [ 83.312554][ T288] usb 2-1: config 0 descriptor?? [ 83.317684][ T4125] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.336043][ T288] snd-usb-audio: probe of 2-1:0.1 failed with error -2 [ 83.345421][ T4125] fscrypt (loop6, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 83.364911][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 83.380143][ T4133] tipc: Started in network mode [ 83.385100][ T4133] tipc: Node identity 48, cluster identity 4711 [ 83.391399][ T4133] tipc: Node number set to 72 [ 83.465705][ T4146] loop2: detected capacity change from 0 to 512 [ 83.483119][ T28] audit: type=1400 audit(1756819391.876:752): avc: denied { write } for pid=4149 comm="syz.6.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.496007][ T4146] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.1611: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 83.521130][ T4146] EXT4-fs error (device loop2): ext4_quota_enable:7012: comm syz.2.1611: Bad quota inode: 3, type: 0 [ 83.532610][ T4146] EXT4-fs warning (device loop2): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 83.536607][ T39] usb 2-1: USB disconnect, device number 7 [ 83.548580][ T4146] EXT4-fs (loop2): mount failed [ 83.813299][ T4181] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1627'. [ 83.901882][ T288] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.071926][ T39] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 84.083186][ T288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.100703][ T288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.110684][ T288] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 84.119978][ T288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.138452][ T288] usb 7-1: config 0 descriptor?? [ 84.272983][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.283247][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.299462][ T39] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.313270][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.313812][ T4211] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1639'. [ 84.330867][ T39] usb 5-1: SerialNumber: syz [ 84.353205][ T28] audit: type=1400 audit(1756819392.746:753): avc: denied { append } for pid=4212 comm="syz.0.1641" name="event2" dev="devtmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 84.538812][ T39] usb 5-1: 0:2 : does not exist [ 84.545707][ T39] usb 5-1: USB disconnect, device number 6 [ 84.549442][ T288] hid-steam 0003:28DE:1142.0015: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 84.564956][ T288] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 84.652035][ T288] hid-steam 0003:28DE:1142.0015: Steam wireless receiver connected [ 84.755698][ T39] usb 7-1: USB disconnect, device number 3 [ 84.762310][ T39] hid-steam 0003:28DE:1142.0015: Steam wireless receiver disconnected [ 85.294470][ T4261] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1658'. [ 85.397414][ T4271] 9pnet_fd: Insufficient options for proto=fd [ 85.405949][ T4271] x_tables: duplicate entry at hook 3 [ 85.583480][ T28] audit: type=1400 audit(1756819393.976:754): avc: denied { getattr } for pid=4294 comm="syz.2.1677" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.628518][ T28] audit: type=1400 audit(1756819394.016:755): avc: denied { setopt } for pid=4298 comm="syz.4.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.761900][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 85.937925][ T4312] syz.2.1686[4312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.937978][ T4312] syz.2.1686[4312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.952619][ T28] audit: type=1400 audit(1756819394.346:756): avc: denied { validate_trans } for pid=4311 comm="syz.2.1686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.985828][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.997347][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.007619][ T39] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 86.016955][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.026005][ T39] usb 2-1: config 0 descriptor?? [ 86.191919][ T59] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.381917][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 86.388186][ T59] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.396248][ T59] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.406460][ T59] usb 1-1: config 0 has no interface number 0 [ 86.413843][ T59] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 86.422922][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.431077][ T59] usb 1-1: Product: syz [ 86.435320][ T59] usb 1-1: Manufacturer: syz [ 86.440817][ T39] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 86.451950][ T59] usb 1-1: SerialNumber: syz [ 86.458426][ T59] usb 1-1: config 0 descriptor?? [ 86.463529][ T39] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 86.483280][ T4330] incfs: Options parsing error. -22 [ 86.486032][ T4328] loop6: detected capacity change from 0 to 512 [ 86.495709][ T59] snd-usb-audio: probe of 1-1:0.1 failed with error -2 [ 86.496915][ T4330] incfs: mount failed -22 [ 86.513881][ T4328] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #3: comm syz.6.1695: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 86.532453][ T4328] EXT4-fs error (device loop6): ext4_quota_enable:7012: comm syz.6.1695: Bad quota inode: 3, type: 0 [ 86.543426][ T39] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected [ 86.543605][ T4328] EXT4-fs warning (device loop6): ext4_enable_quotas:7053: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 86.566420][ T4328] EXT4-fs (loop6): mount failed [ 86.620530][ T4340] loop4: detected capacity change from 0 to 512 [ 86.627555][ T4340] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.661232][ T288] usb 2-1: USB disconnect, device number 8 [ 86.669263][ T288] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected [ 86.690095][ T549] usb 1-1: USB disconnect, device number 7 [ 87.202410][ T4350] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1697'. [ 87.261539][ T4366] x_tables: duplicate underflow at hook 4 [ 88.321893][ T59] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.331858][ T549] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 88.331973][ T39] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.503005][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.513939][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.522977][ T549] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.523774][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 88.535074][ T549] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 88.539875][ T59] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 88.551053][ T549] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.559787][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.566634][ T549] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 88.576852][ T39] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 88.583577][ T549] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.591745][ T59] usb 5-1: config 0 descriptor?? [ 88.600539][ T549] usb 3-1: config 0 descriptor?? [ 88.604610][ T39] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.610113][ T4382] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 88.619841][ T39] usb 7-1: config 0 has no interface number 0 [ 88.634861][ T39] usb 7-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 88.643948][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.652009][ T39] usb 7-1: Product: syz [ 88.656231][ T39] usb 7-1: Manufacturer: syz [ 88.660858][ T39] usb 7-1: SerialNumber: syz [ 88.666324][ T39] usb 7-1: config 0 descriptor?? [ 88.673908][ T39] snd-usb-audio: probe of 7-1:0.1 failed with error -2 [ 88.838554][ T549] usb 3-1: string descriptor 0 read error: -71 [ 88.846953][ T549] usbhid 3-1:0.0: can't add hid device: -71 [ 88.852961][ T549] usbhid: probe of 3-1:0.0 failed with error -71 [ 88.861290][ T549] usb 3-1: USB disconnect, device number 7 [ 88.910080][ T691] usb 7-1: USB disconnect, device number 4 [ 89.032134][ T4407] x_tables: duplicate underflow at hook 4 [ 89.040170][ T59] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 89.058715][ T59] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 89.068744][ T28] audit: type=1400 audit(1756819397.446:757): avc: denied { ioctl } for pid=4410 comm="syz.0.1729" path="socket:[33425]" dev="sockfs" ino=33425 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.141880][ T59] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 89.154391][ T28] audit: type=1400 audit(1756819397.546:758): avc: denied { read } for pid=4426 comm="syz.1.1737" path="socket:[32463]" dev="sockfs" ino=32463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.203656][ T28] audit: type=1400 audit(1756819397.596:759): avc: denied { mount } for pid=4430 comm="syz.0.1739" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 89.290658][ T59] usb 5-1: USB disconnect, device number 7 [ 89.297588][ T59] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 89.402578][ T28] audit: type=1400 audit(1756819397.796:760): avc: denied { watch watch_reads } for pid=4450 comm="syz.2.1749" path="/353" dev="tmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.643862][ T4466] loop2: detected capacity change from 0 to 40427 [ 89.651458][ T4466] F2FS-fs (loop2): invalid crc value [ 89.658125][ T4466] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.698758][ T4466] F2FS-fs (loop2): Start checkpoint disabled! [ 89.706096][ T4466] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 89.814636][ T4497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1766'. [ 89.875036][ T4503] xt_bpf: check failed: parse error [ 90.012257][ T691] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 90.024284][ T691] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 90.039460][ T691] hid-generic 0003:0004:0000.001B: unknown main item tag 0x0 [ 90.050346][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 90.053374][ T691] hid-generic 0003:0004:0000.001B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 90.059534][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'. [ 90.114536][ T43] bio_check_eod: 97597 callbacks suppressed [ 90.114553][ T43] kworker/u4:2: attempt to access beyond end of device [ 90.114553][ T43] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 90.177035][ T4531] xt_bpf: check failed: parse error [ 90.217190][ T4538] netem: change failed [ 90.266879][ T28] audit: type=1400 audit(1756819398.656:761): avc: denied { name_bind } for pid=4544 comm="syz.6.1790" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 90.317183][ T691] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 90.325965][ T691] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 90.333626][ T691] hid-generic 0003:0004:0000.001C: unknown main item tag 0x0 [ 90.351404][ T691] hid-generic 0003:0004:0000.001C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 90.357285][ T4534] loop2: detected capacity change from 0 to 40427 [ 90.385026][ T4534] F2FS-fs (loop2): invalid crc value [ 90.399298][ T4534] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.442576][ T4567] netem: change failed [ 90.445597][ T4534] F2FS-fs (loop2): Start checkpoint disabled! [ 90.463193][ T4534] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 90.509039][ T465] kworker/u4:5: attempt to access beyond end of device [ 90.509039][ T465] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 90.637907][ T4583] loop2: detected capacity change from 0 to 1024 [ 90.644710][ T4583] EXT4-fs: Ignoring removed orlov option [ 90.687754][ T4583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.716710][ T283] EXT4-fs (loop2): unmounting filesystem. [ 90.925834][ T4624] loop4: detected capacity change from 0 to 1024 [ 90.932772][ T4624] EXT4-fs: Ignoring removed orlov option [ 90.955795][ T4624] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.986171][ T285] EXT4-fs (loop4): unmounting filesystem. [ 91.101416][ T4627] loop2: detected capacity change from 0 to 40427 [ 91.109643][ T4627] F2FS-fs (loop2): invalid crc value [ 91.116538][ T4627] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.153938][ T4627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.167564][ T4627] syz.2.1824: attempt to access beyond end of device [ 91.167564][ T4627] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.251924][ T691] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 91.431895][ T691] usb 1-1: Using ep0 maxpacket: 16 [ 91.438318][ T691] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 91.448922][ T691] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 91.458074][ T691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.466079][ T691] usb 1-1: Product: syz [ 91.470430][ T691] usb 1-1: Manufacturer: syz [ 91.475062][ T691] usb 1-1: SerialNumber: syz [ 91.480056][ T691] usb 1-1: config 0 descriptor?? [ 91.485738][ T691] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 91.493495][ T691] usb 1-1: Detected FT232R [ 91.571852][ T549] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 91.590390][ T4651] loop6: detected capacity change from 0 to 256 [ 91.686229][ T691] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 91.752990][ T549] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 91.764073][ T549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.774962][ T549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.784853][ T549] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 91.798514][ T549] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 91.807570][ T549] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 91.815672][ T549] usb 5-1: Manufacturer: syz [ 91.820739][ T549] usb 5-1: config 0 descriptor?? [ 91.894651][ T691] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.921910][ T39] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 92.097322][ T691] usb 1-1: USB disconnect, device number 8 [ 92.107180][ T691] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 92.112948][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.118006][ T691] ftdi_sio 1-1:0.0: device disconnected [ 92.139132][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.149341][ T39] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 92.158451][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.167939][ T39] usb 7-1: config 0 descriptor?? [ 92.228227][ T549] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 92.242087][ T549] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 92.251390][ T549] appleir 0003:05AC:8243.001D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 92.444205][ T28] audit: type=1400 audit(1756819400.836:762): avc: denied { accept } for pid=4673 comm="syz.2.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.492712][ T691] usb 5-1: USB disconnect, device number 8 [ 92.579447][ T39] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 92.591905][ T39] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 92.671870][ T39] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected [ 92.787047][ T39] usb 7-1: USB disconnect, device number 5 [ 92.793845][ T39] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected [ 93.452118][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1871'. [ 93.466037][ T4736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.545091][ T4752] loop2: detected capacity change from 0 to 128 [ 93.570855][ T4752] FAT-fs (loop2): Directory bread(block 162) failed [ 93.579586][ T4752] FAT-fs (loop2): Directory bread(block 163) failed [ 93.601013][ T4752] FAT-fs (loop2): Directory bread(block 164) failed [ 93.608328][ T4752] FAT-fs (loop2): Directory bread(block 165) failed [ 93.621615][ T4752] FAT-fs (loop2): Directory bread(block 166) failed [ 93.629000][ T4752] FAT-fs (loop2): Directory bread(block 167) failed [ 93.639350][ T4752] FAT-fs (loop2): Directory bread(block 168) failed [ 93.653355][ T4774] loop6: detected capacity change from 0 to 128 [ 93.661852][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'. [ 93.661879][ T4752] FAT-fs (loop2): Directory bread(block 169) failed [ 93.686195][ T4774] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 93.701911][ T4774] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.730725][ T4752] FAT-fs (loop2): Directory bread(block 162) failed [ 93.738308][ T4752] FAT-fs (loop2): Directory bread(block 163) failed [ 93.745732][ T4752] syz.2.1879: attempt to access beyond end of device [ 93.745732][ T4752] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 93.759170][ T4752] syz.2.1879: attempt to access beyond end of device [ 93.759170][ T4752] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 93.829645][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 93.985358][ T4819] loop6: detected capacity change from 0 to 128 [ 94.003255][ T4819] FAT-fs (loop6): Directory bread(block 162) failed [ 94.009946][ T4819] FAT-fs (loop6): Directory bread(block 163) failed [ 94.122253][ T4819] FAT-fs (loop6): Directory bread(block 164) failed [ 94.138562][ T4819] FAT-fs (loop6): Directory bread(block 165) failed [ 94.145831][ T4819] FAT-fs (loop6): Directory bread(block 166) failed [ 94.171852][ T4819] FAT-fs (loop6): Directory bread(block 167) failed [ 94.178575][ T4819] FAT-fs (loop6): Directory bread(block 168) failed [ 94.208874][ T4819] FAT-fs (loop6): Directory bread(block 169) failed [ 94.223160][ T4819] FAT-fs (loop6): Directory bread(block 162) failed [ 94.240147][ T4819] FAT-fs (loop6): Directory bread(block 163) failed [ 94.250579][ T4819] syz.6.1910: attempt to access beyond end of device [ 94.250579][ T4819] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 94.281897][ T4819] syz.6.1910: attempt to access beyond end of device [ 94.281897][ T4819] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 94.296296][ T4828] loop4: detected capacity change from 0 to 128 [ 94.315141][ T4828] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.329473][ T28] audit: type=1400 audit(1756819402.716:763): avc: denied { bind } for pid=4830 comm="syz.2.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 94.329535][ T4828] ext4 filesystem being mounted at /330/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.480393][ T285] EXT4-fs (loop4): unmounting filesystem. [ 94.538724][ T4853] loop6: detected capacity change from 0 to 128 [ 94.555466][ T4853] EXT4-fs: Ignoring removed nobh option [ 94.570627][ T4853] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 94.589108][ T4853] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.671443][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 94.682165][ T28] audit: type=1326 audit(1756819403.076:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.1.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24478ebe9 code=0x7fc00000 [ 94.682189][ T4851] loop4: detected capacity change from 0 to 40427 [ 94.682632][ T4851] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 94.720095][ T4851] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.732407][ T4851] F2FS-fs (loop4): invalid crc value [ 94.761954][ T4851] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 94.782943][ T4851] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 94.812652][ T4871] loop2: detected capacity change from 0 to 128 [ 94.830097][ T4871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.841542][ T4871] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.855260][ T28] audit: type=1400 audit(1756819403.246:765): avc: denied { write } for pid=4873 comm="syz.1.1941" path="socket:[34730]" dev="sockfs" ino=34730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.880307][ T4851] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.887419][ T4851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.906357][ T4877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 94.913037][ T4851] syz.4.1921: attempt to access beyond end of device [ 94.913037][ T4851] loop4: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 94.980714][ T283] EXT4-fs (loop2): unmounting filesystem. [ 95.108437][ T4891] loop4: detected capacity change from 0 to 128 [ 95.119952][ T4891] FAT-fs (loop4): Directory bread(block 162) failed [ 95.126958][ T4891] FAT-fs (loop4): Directory bread(block 163) failed [ 95.133912][ T4891] FAT-fs (loop4): Directory bread(block 164) failed [ 95.140577][ T4891] FAT-fs (loop4): Directory bread(block 165) failed [ 95.147524][ T4891] FAT-fs (loop4): Directory bread(block 166) failed [ 95.164510][ T4891] FAT-fs (loop4): Directory bread(block 167) failed [ 95.171176][ T4891] FAT-fs (loop4): Directory bread(block 168) failed [ 95.172029][ T39] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 95.181792][ T4891] FAT-fs (loop4): Directory bread(block 169) failed [ 95.200024][ T4891] FAT-fs (loop4): Directory bread(block 162) failed [ 95.207313][ T4891] FAT-fs (loop4): Directory bread(block 163) failed [ 95.214438][ T4891] syz.4.1937: attempt to access beyond end of device [ 95.214438][ T4891] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 95.227687][ T4891] syz.4.1937: attempt to access beyond end of device [ 95.227687][ T4891] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 95.264502][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 95.382897][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.399748][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.416835][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 95.441857][ T39] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.469253][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.498220][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.515624][ T39] usb 2-1: Product: syz [ 95.520680][ T39] usb 2-1: Manufacturer: syz [ 95.530002][ T39] usb 2-1: SerialNumber: syz [ 95.588394][ T4879] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.612398][ T39] cdc_mbim 2-1:1.0: skipping garbage [ 95.640020][ T4919] loop6: detected capacity change from 0 to 512 [ 95.664594][ T4919] EXT4-fs: Ignoring removed nobh option [ 95.670761][ T4919] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.693426][ T4919] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1950: iget: bad i_size value: 38620345925642 [ 95.716185][ T4919] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1950: couldn't read orphan inode 15 (err -117) [ 95.739171][ T4919] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 95.762557][ T4919] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1950: bg 0: block 5: invalid block bitmap [ 95.770699][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.788324][ T4919] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 95.815091][ T4919] EXT4-fs (loop6): This should not happen!! Data will be lost [ 95.815091][ T4919] [ 95.826300][ T4919] EXT4-fs (loop6): Total free blocks count 0 [ 95.832547][ T4919] EXT4-fs (loop6): Free/Dirty block details [ 95.838603][ T4919] EXT4-fs (loop6): free_blocks=0 [ 95.844529][ T4919] EXT4-fs (loop6): dirty_blocks=64 [ 95.850489][ T4919] EXT4-fs (loop6): Block reservation details [ 95.856930][ T4919] EXT4-fs (loop6): i_reserved_data_blocks=64 [ 95.878285][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 95.931935][ T466] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 96.172710][ T466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.191877][ T466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.202507][ T466] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.226832][ T466] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.251871][ T466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.261163][ T466] usb 5-1: config 0 descriptor?? [ 96.462462][ T4974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1975'. [ 96.636961][ T39] cdc_mbim 2-1:1.0: bind() failure [ 96.642773][ T39] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 96.649756][ T39] cdc_ncm 2-1:1.1: bind() failure [ 96.655899][ T39] usb 2-1: USB disconnect, device number 9 [ 96.674061][ T466] plantronics 0003:047F:FFFF.0020: unknown main item tag 0xd [ 96.682471][ T466] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 96.691165][ T466] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 96.731907][ T288] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 96.922999][ T288] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.933197][ T288] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.942905][ T288] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.952099][ T288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.952573][ T39] usb 5-1: USB disconnect, device number 9 [ 96.960089][ T288] usb 7-1: SerialNumber: syz [ 97.163032][ T288] usb 7-1: 0:2 : does not exist [ 97.169517][ T288] usb 7-1: USB disconnect, device number 6 [ 97.304947][ T28] audit: type=1400 audit(1756819405.696:766): avc: denied { append } for pid=5001 comm="syz.2.1986" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.330500][ T28] audit: type=1400 audit(1756819405.716:767): avc: denied { open } for pid=5001 comm="syz.2.1986" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 97.396685][ T5016] loop2: detected capacity change from 0 to 16 [ 97.403667][ T5016] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 97.414669][ T5016] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 97.426394][ T5016] erofs: (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 97.438154][ T5016] erofs: (device loop2): mounted with root inode @ nid 36. [ 97.656676][ T5029] loop4: detected capacity change from 0 to 40427 [ 97.667410][ T5029] F2FS-fs (loop4): invalid crc value [ 97.674707][ T5022] loop2: detected capacity change from 0 to 40427 [ 97.681761][ T5022] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 97.689608][ T5022] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 97.702082][ T5029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.702248][ T5038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2002'. [ 97.737298][ T5029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.751664][ T5022] F2FS-fs (loop2): invalid crc value [ 97.763159][ T28] audit: type=1400 audit(1756819406.156:768): avc: denied { setopt } for pid=5041 comm="syz.6.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.786263][ T285] syz-executor: attempt to access beyond end of device [ 97.786263][ T285] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.802216][ T5022] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 97.821958][ T5022] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 97.902110][ T5022] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 97.909462][ T5022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.920100][ T5058] raw_sendmsg: syz.6.2009 forgot to set AF_INET. Fix it! [ 97.972854][ T5022] syz.2.1998: attempt to access beyond end of device [ 97.972854][ T5022] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 98.148394][ T5073] loop4: detected capacity change from 0 to 512 [ 98.183063][ T5073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 98.253321][ T5073] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 98.303826][ T285] EXT4-fs (loop4): unmounting filesystem. [ 98.535241][ T28] audit: type=1326 audit(1756819406.926:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 98.586514][ T28] audit: type=1326 audit(1756819406.926:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 98.612124][ T5094] loop6: detected capacity change from 0 to 40427 [ 98.619451][ T5094] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 98.632797][ T28] audit: type=1326 audit(1756819406.926:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 98.661865][ T5094] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 98.680377][ T28] audit: type=1326 audit(1756819406.926:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 98.704343][ T5131] bridge0: port 3(gretap0) entered blocking state [ 98.712194][ T5131] bridge0: port 3(gretap0) entered disabled state [ 98.712265][ T5094] F2FS-fs (loop6): invalid crc value [ 98.719314][ T5131] device gretap0 entered promiscuous mode [ 98.730117][ T5131] bridge0: port 3(gretap0) entered blocking state [ 98.736588][ T5131] bridge0: port 3(gretap0) entered forwarding state [ 98.768924][ T5094] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 98.790424][ T5094] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 98.848161][ T5094] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 98.855891][ T5094] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 98.925909][ T5094] syz.6.2027: attempt to access beyond end of device [ 98.925909][ T5094] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 99.082066][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 99.247918][ T374] tipc: Disabling bearer [ 99.259488][ T374] tipc: Left network mode [ 99.271900][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 99.278506][ T39] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.288383][ T39] usb 2-1: config 0 has no interface number 0 [ 99.294657][ T39] usb 2-1: config 0 interface 184 has no altsetting 0 [ 99.312382][ T39] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.331606][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.348126][ T39] usb 2-1: Product: syz [ 99.352641][ T39] usb 2-1: Manufacturer: syz [ 99.363935][ T39] usb 2-1: SerialNumber: syz [ 99.373047][ T39] usb 2-1: config 0 descriptor?? [ 99.392201][ T39] smsc75xx v1.0.0 [ 99.395978][ T39] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 99.402304][ T5203] loop6: detected capacity change from 0 to 512 [ 99.412441][ T39] smsc75xx: probe of 2-1:0.184 failed with error -22 [ 99.442061][ T5203] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 99.468988][ T5203] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 99.508629][ T5208] loop2: detected capacity change from 0 to 256 [ 99.516586][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 99.577249][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.589773][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.603532][ T5206] device bridge_slave_0 entered promiscuous mode [ 99.607129][ T691] usb 2-1: USB disconnect, device number 10 [ 99.610622][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.623352][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.630804][ T5206] device bridge_slave_1 entered promiscuous mode [ 99.668077][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 99.668093][ T28] audit: type=1326 audit(1756819408.056:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.2083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f131258ebe9 code=0x0 [ 99.773987][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.781168][ T5206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.788564][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.795600][ T5206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.821298][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.829396][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.837811][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.854933][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.863362][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.870413][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.878052][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.886353][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.893430][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.907387][ T374] device bridge_slave_1 left promiscuous mode [ 99.913795][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.921497][ T374] device bridge_slave_0 left promiscuous mode [ 99.928032][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.936772][ T374] device veth1_macvtap left promiscuous mode [ 99.943156][ T374] device veth0_vlan left promiscuous mode [ 99.952677][ T28] audit: type=1326 audit(1756819408.346:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 99.976285][ T28] audit: type=1326 audit(1756819408.356:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 99.999970][ T28] audit: type=1326 audit(1756819408.366:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 100.023601][ T28] audit: type=1326 audit(1756819408.366:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 100.047306][ T28] audit: type=1326 audit(1756819408.366:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 100.071045][ T28] audit: type=1326 audit(1756819408.366:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 100.094553][ T28] audit: type=1326 audit(1756819408.366:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 100.118030][ T28] audit: type=1326 audit(1756819408.366:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 100.144683][ T28] audit: type=1326 audit(1756819408.366:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.4.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbbfc38ebe9 code=0x7ffc0000 [ 100.172553][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.181160][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.204397][ T5206] device veth0_vlan entered promiscuous mode [ 100.211234][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.219771][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.228082][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.236480][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.251591][ T5206] device veth1_macvtap entered promiscuous mode [ 100.258763][ T5241] netem: change failed [ 100.263403][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.283664][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.294308][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.314249][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.327190][ T465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.369440][ T5258] loop7: detected capacity change from 0 to 512 [ 100.376116][ T5258] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 100.395268][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2074'. [ 100.481728][ T5268] loop7: detected capacity change from 0 to 256 [ 100.553989][ T5278] loop2: detected capacity change from 0 to 8192 [ 100.611922][ T288] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.688734][ T5304] IPv6: NLM_F_REPLACE set, but no existing node found! [ 100.802011][ T288] usb 5-1: Using ep0 maxpacket: 16 [ 100.812144][ T288] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 100.830718][ T288] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 100.854401][ T288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.871299][ T288] usb 5-1: Product: syz [ 100.884904][ T288] usb 5-1: Manufacturer: syz [ 100.895161][ T288] usb 5-1: SerialNumber: syz [ 100.906776][ T288] usb 5-1: config 0 descriptor?? [ 100.915547][ T288] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 100.925677][ T288] usb 5-1: Detected FT232R [ 101.032312][ T5369] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2147'. [ 101.116536][ T288] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 101.181055][ T5391] loop6: detected capacity change from 0 to 256 [ 101.328648][ T288] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.341931][ T19] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 101.345598][ T5385] loop2: detected capacity change from 0 to 40427 [ 101.356739][ T5385] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.366549][ T5385] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.382928][ T5385] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.399574][ T5417] loop6: detected capacity change from 0 to 1024 [ 101.418514][ T5385] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.426390][ T5385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 101.432601][ T5417] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 101.448227][ T5417] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.473899][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 101.533538][ T19] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.553878][ T19] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.564225][ T288] usb 5-1: USB disconnect, device number 10 [ 101.574673][ T5436] bridge0: port 3(gretap0) entered blocking state [ 101.581565][ T19] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 101.590888][ T5436] bridge0: port 3(gretap0) entered disabled state [ 101.597712][ T288] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.607364][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 101.615638][ T288] ftdi_sio 5-1:0.0: device disconnected [ 101.622010][ T5436] device gretap0 entered promiscuous mode [ 101.628596][ T19] usb 8-1: SerialNumber: syz [ 101.633534][ T5436] bridge0: port 3(gretap0) entered blocking state [ 101.640096][ T5436] bridge0: port 3(gretap0) entered forwarding state [ 101.851097][ T19] usb 8-1: 0:2 : does not exist [ 103.029680][ T19] usb 8-1: USB disconnect, device number 2 [ 104.017098][ T6] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.057130][ T5457] loop4: detected capacity change from 0 to 256 [ 104.162107][ T5470] bridge0: port 3(gretap0) entered blocking state [ 104.168688][ T5470] bridge0: port 3(gretap0) entered disabled state [ 104.176225][ T5470] device gretap0 entered promiscuous mode [ 104.182681][ T5470] bridge0: port 3(gretap0) entered blocking state [ 104.189152][ T5470] bridge0: port 3(gretap0) entered forwarding state [ 104.211835][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 104.218193][ T6] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 104.233859][ T5472] loop7: detected capacity change from 0 to 1024 [ 104.240445][ T6] usb 3-1: config 0 has no interface number 0 [ 104.246829][ T6] usb 3-1: config 0 interface 184 has no altsetting 0 [ 104.262829][ T6] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 104.281919][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.311165][ T6] usb 3-1: Product: syz [ 104.316283][ T6] usb 3-1: Manufacturer: syz [ 104.325601][ T6] usb 3-1: SerialNumber: syz [ 104.325982][ T5472] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 104.353503][ T5472] EXT4-fs (loop7): shut down requested (1) [ 104.372136][ T6] usb 3-1: config 0 descriptor?? [ 104.389347][ T5472] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 104.402811][ T6] smsc75xx v1.0.0 [ 104.406475][ T6] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 104.435477][ T5472] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 104.458693][ T6] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 104.472714][ T5472] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=15 [ 104.529141][ T5206] EXT4-fs (loop7): unmounting filesystem. [ 104.589745][ T6] usb 3-1: USB disconnect, device number 8 [ 104.676992][ T28] kauditd_printk_skb: 2218 callbacks suppressed [ 104.677011][ T28] audit: type=1326 audit(1756819413.066:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.719328][ T28] audit: type=1326 audit(1756819413.066:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.750536][ T28] audit: type=1326 audit(1756819413.066:3006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.774704][ T28] audit: type=1326 audit(1756819413.066:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.802910][ T28] audit: type=1326 audit(1756819413.066:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.843844][ T28] audit: type=1326 audit(1756819413.066:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.865916][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 104.867785][ T28] audit: type=1326 audit(1756819413.066:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.908803][ T28] audit: type=1326 audit(1756819413.066:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.952008][ T28] audit: type=1326 audit(1756819413.066:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 104.991892][ T28] audit: type=1326 audit(1756819413.066:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5445 comm="syz.1.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe24472adb9 code=0x7ffc0000 [ 105.015757][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 105.155143][ T5509] bridge0: port 3(gretap0) entered blocking state [ 105.161641][ T5509] bridge0: port 3(gretap0) entered disabled state [ 105.174549][ T5509] device gretap0 entered promiscuous mode [ 105.181569][ T5509] bridge0: port 3(gretap0) entered blocking state [ 105.188073][ T5509] bridge0: port 3(gretap0) entered forwarding state [ 105.203835][ T5513] IPv6: NLM_F_REPLACE set, but no existing node found! [ 105.216887][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.228239][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.238225][ T39] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.251404][ T39] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.260526][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.269350][ T39] usb 8-1: config 0 descriptor?? [ 105.357641][ T5527] loop4: detected capacity change from 0 to 512 [ 105.365697][ T5527] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 105.415168][ T5527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2219'. [ 105.438889][ T5536] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2222'. [ 105.611970][ T2677] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 105.681887][ T466] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 105.691037][ T39] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 105.699252][ T39] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 105.707637][ T39] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 105.792889][ T2677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.802567][ T2677] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.812236][ T2677] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.826521][ T2677] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 105.835653][ T2677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 105.843785][ T2677] usb 2-1: Product: syz [ 105.848015][ T2677] usb 2-1: Manufacturer: syz [ 105.852639][ T2677] usb 2-1: SerialNumber: syz [ 105.871855][ T466] usb 7-1: Using ep0 maxpacket: 32 [ 105.878017][ T466] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 105.886412][ T466] usb 7-1: config 0 has no interface number 0 [ 105.892575][ T466] usb 7-1: config 0 interface 184 has no altsetting 0 [ 105.900963][ T466] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 105.910118][ T466] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.918264][ T466] usb 7-1: Product: syz [ 105.922579][ T466] usb 7-1: Manufacturer: syz [ 105.927185][ T466] usb 7-1: SerialNumber: syz [ 105.932559][ T466] usb 7-1: config 0 descriptor?? [ 105.938093][ T466] smsc75xx v1.0.0 [ 105.941768][ T466] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 105.952256][ T466] smsc75xx: probe of 7-1:0.184 failed with error -22 [ 105.962690][ T466] usb 8-1: USB disconnect, device number 3 [ 106.059494][ T2677] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 106.143348][ T19] usb 7-1: USB disconnect, device number 7 [ 106.264537][ T6] usb 2-1: USB disconnect, device number 11 [ 106.271129][ T6] usblp0: removed [ 106.682664][ T5552] bridge0: port 3(gretap0) entered blocking state [ 106.689470][ T5552] bridge0: port 3(gretap0) entered disabled state [ 106.698773][ T5552] device gretap0 entered promiscuous mode [ 106.705102][ T5552] bridge0: port 3(gretap0) entered blocking state [ 106.711573][ T5552] bridge0: port 3(gretap0) entered forwarding state [ 106.740200][ T5561] loop4: detected capacity change from 0 to 1024 [ 106.761404][ T5561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.770425][ T5561] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.835110][ T285] EXT4-fs (loop4): unmounting filesystem. [ 106.841312][ T5578] device ip6_vti0 entered promiscuous mode [ 106.922252][ T5590] loop6: detected capacity change from 0 to 1024 [ 106.939169][ T5590] EXT4-fs: Ignoring removed bh option [ 106.950203][ T5597] loop2: detected capacity change from 0 to 256 [ 106.969235][ T5597] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.985333][ T5601] tipc: MTU too low for tipc bearer [ 107.000325][ T5597] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 107.010232][ T5590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 107.036285][ T5597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.049487][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 107.150179][ T5582] loop4: detected capacity change from 0 to 40427 [ 107.170474][ T5582] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 107.188584][ T5582] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 107.211548][ T5582] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.248839][ T5582] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 107.256084][ T5582] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.351920][ T288] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 107.543606][ T288] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.553578][ T288] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 107.567010][ T288] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 107.576391][ T288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.585202][ T288] usb 7-1: config 0 descriptor?? [ 107.841963][ T466] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 107.992505][ T288] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 107.999810][ T288] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 108.007088][ T288] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 108.014311][ T288] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 108.021519][ T288] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 108.029146][ T288] kovaplus 0003:1E7D:2D50.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 108.031862][ T466] usb 2-1: Using ep0 maxpacket: 32 [ 108.048609][ T466] usb 2-1: config 216 has an invalid interface number: 164 but max is 0 [ 108.057301][ T466] usb 2-1: config 216 has an invalid descriptor of length 10, skipping remainder of the config [ 108.068093][ T466] usb 2-1: config 216 has no interface number 0 [ 108.074585][ T466] usb 2-1: config 216 interface 164 has no altsetting 0 [ 108.083340][ T466] usb 2-1: New USB device found, idVendor=0781, idProduct=55e8, bcdDevice=36.bb [ 108.092597][ T466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.100689][ T466] usb 2-1: Product: syz [ 108.105332][ T466] usb 2-1: Manufacturer: syz [ 108.110020][ T466] usb 2-1: SerialNumber: syz [ 108.317733][ T466] usb-storage 2-1:216.164: USB Mass Storage device detected [ 108.326010][ T466] usb-storage 2-1:216.164: Quirks match for vid 0781 pid 55e8: 800000 [ 108.354205][ T466] usb 2-1: USB disconnect, device number 12 [ 108.592973][ T288] kovaplus 0003:1E7D:2D50.0022: couldn't init struct kovaplus_device [ 108.601167][ T288] kovaplus 0003:1E7D:2D50.0022: couldn't install mouse [ 108.608602][ T288] kovaplus: probe of 0003:1E7D:2D50.0022 failed with error -71 [ 108.616994][ T288] usb 7-1: USB disconnect, device number 8 [ 109.171924][ T288] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 109.208501][ T5735] loop2: detected capacity change from 0 to 16 [ 109.217246][ T5735] erofs: (device loop2): mounted with root inode @ nid 36. [ 109.225428][ T5735] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 109.236937][ T5735] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 109.248479][ T5735] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-95] [ 109.257511][ T5735] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 109.269382][ T5735] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown HEAD1 format 5 for nid 36, please upgrade kernel [ 109.280952][ T5735] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-95] [ 109.289323][ T5735] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 109.362096][ T288] usb 8-1: Using ep0 maxpacket: 16 [ 109.378217][ T288] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 109.388607][ T288] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 109.397746][ T288] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.405841][ T288] usb 8-1: Product: syz [ 109.409985][ T288] usb 8-1: Manufacturer: syz [ 109.414597][ T288] usb 8-1: SerialNumber: syz [ 109.419846][ T288] usb 8-1: config 0 descriptor?? [ 109.426245][ T288] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 109.433878][ T288] usb 8-1: Detected FT232R [ 109.471910][ T19] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 109.626248][ T288] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 109.651837][ T19] usb 7-1: Using ep0 maxpacket: 32 [ 109.658075][ T19] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 109.667026][ T19] usb 7-1: config 0 interface 0 has no altsetting 1 [ 109.674476][ T19] usb 7-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 109.683641][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.691700][ T19] usb 7-1: SerialNumber: syz [ 109.696879][ T19] usb 7-1: config 0 descriptor?? [ 109.702428][ T19] usb-storage 7-1:0.0: USB Mass Storage device detected [ 109.710198][ T19] usb-storage 7-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 109.835002][ T288] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 109.904932][ T288] usb 7-1: USB disconnect, device number 9 [ 110.039601][ T19] usb 8-1: USB disconnect, device number 4 [ 110.045973][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 110.055396][ T19] ftdi_sio 8-1:0.0: device disconnected [ 110.451608][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 110.451625][ T28] audit: type=1400 audit(1756819418.836:3077): avc: denied { getopt } for pid=5802 comm="syz.2.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.458979][ T5805] x_tables: duplicate underflow at hook 4 [ 110.592986][ T5824] syz.7.2353[5824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.593071][ T5824] syz.7.2353[5824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.885908][ T5826] input: syz1 as /devices/virtual/input/input13 [ 110.911941][ T5826] input: failed to attach handler leds to device input13, error: -6 [ 110.932979][ T28] audit: type=1400 audit(1756819419.326:3078): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.968733][ T5831] tipc: Started in network mode [ 110.979481][ T2677] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 110.989182][ T5831] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 110.994482][ T28] audit: type=1400 audit(1756819419.326:3079): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=862 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 110.998991][ T5831] tipc: Enabled bearer , priority 10 [ 111.032971][ T28] audit: type=1400 audit(1756819419.326:3080): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=862 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.159601][ T28] audit: type=1400 audit(1756819419.546:3081): avc: denied { remount } for pid=5843 comm="syz.6.2362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 111.180892][ T2677] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 111.197374][ T2677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.220344][ T2677] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.240353][ T2677] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 111.268799][ T2677] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 111.286869][ T2677] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 111.304147][ T2677] usb 5-1: Manufacturer: syz [ 111.315602][ T2677] usb 5-1: config 0 descriptor?? [ 111.371167][ T5842] loop7: detected capacity change from 0 to 40427 [ 111.383473][ T5842] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 111.394677][ T5842] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 111.424340][ T5842] F2FS-fs (loop7): Found nat_bits in checkpoint [ 111.461906][ T6] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 111.495245][ T5842] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 111.502708][ T5842] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 111.552263][ T5848] f2fs_ckpt-7:7: attempt to access beyond end of device [ 111.552263][ T5848] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.651864][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 111.663583][ T6] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 111.693398][ T6] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 111.711835][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.719864][ T6] usb 3-1: Product: syz [ 111.730367][ T2677] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 111.741118][ T2677] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 111.743118][ T6] usb 3-1: Manufacturer: syz [ 111.753519][ T6] usb 3-1: SerialNumber: syz [ 111.758461][ T5870] loop7: detected capacity change from 0 to 256 [ 111.759055][ T6] usb 3-1: config 0 descriptor?? [ 111.765241][ T2677] appleir 0003:05AC:8243.0023: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 111.781637][ T5870] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.792559][ T6] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 111.792967][ T5870] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 111.800260][ T6] usb 3-1: Detected FT232R [ 111.810825][ T5870] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 111.946618][ T28] audit: type=1400 audit(1756819420.336:3082): avc: denied { append } for pid=5810 comm="syz.4.2345" name="hiddev0" dev="devtmpfs" ino=865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 111.976502][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 111.991951][ T39] tipc: Node number set to 4269801491 [ 112.032574][ T39] usb 5-1: USB disconnect, device number 11 [ 112.083817][ T5898] input: syz1 as /devices/virtual/input/input14 [ 112.090118][ T5898] input: failed to attach handler leds to device input14, error: -6 [ 112.118042][ T5888] loop6: detected capacity change from 0 to 40427 [ 112.125332][ T5888] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 112.132367][ T5888] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 112.143013][ T5888] F2FS-fs (loop6): Found nat_bits in checkpoint [ 112.167881][ T5888] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 112.175071][ T5888] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 112.188145][ T6] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.205386][ T5899] f2fs_ckpt-7:6: attempt to access beyond end of device [ 112.205386][ T5899] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.261914][ T2677] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 112.304607][ T5912] tipc: Enabled bearer , priority 10 [ 112.402532][ T466] usb 3-1: USB disconnect, device number 9 [ 112.408899][ T466] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 112.418758][ T466] ftdi_sio 3-1:0.0: device disconnected [ 112.443125][ T2677] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.453257][ T2677] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 112.464209][ T2677] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 112.475153][ T2677] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.489643][ T2677] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.498831][ T2677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.506833][ T2677] usb 8-1: Product: syz [ 112.511066][ T2677] usb 8-1: Manufacturer: syz [ 112.515663][ T2677] usb 8-1: SerialNumber: syz [ 112.520903][ T5887] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 112.529015][ T2677] cdc_mbim 8-1:1.0: skipping garbage [ 112.591996][ T39] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 112.614959][ T5933] syz.4.2402[5933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.615041][ T5933] syz.4.2402[5933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.640366][ T5938] tipc: Started in network mode [ 112.656795][ T5938] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 112.666125][ T5938] tipc: Enabled bearer , priority 10 [ 112.792850][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.805771][ T39] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 112.814839][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.823308][ T39] usb 7-1: config 0 descriptor?? [ 113.232580][ T39] sony 0003:054C:024B.0024: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.6-1/input0 [ 113.244413][ T39] sony 0003:054C:024B.0024: failed to claim input [ 113.437383][ T39] usb 7-1: USB disconnect, device number 10 [ 113.532116][ T2677] cdc_mbim 8-1:1.0: bind() failure [ 113.537740][ T2677] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 113.544662][ T2677] cdc_ncm 8-1:1.1: bind() failure [ 113.550405][ T2677] usb 8-1: USB disconnect, device number 5 [ 113.791909][ T6] tipc: Node number set to 4269801491 [ 113.983875][ T28] audit: type=1400 audit(1756819422.376:3083): avc: denied { lock } for pid=5950 comm="syz.1.2411" path="socket:[38862]" dev="sockfs" ino=38862 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 114.083394][ T5967] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 114.089585][ T5967] syzkaller0: linktype set to 768 [ 114.249490][ T5979] netem: change failed [ 114.274237][ T5975] loop7: detected capacity change from 0 to 2048 [ 114.309438][ T5984] loop6: detected capacity change from 0 to 1024 [ 114.322541][ T5975] loop7: p1 < > p3 [ 114.327634][ T5975] loop7: p3 size 134217728 extends beyond EOD, truncated [ 114.357090][ T5984] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 114.377148][ T5984] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.419156][ T334] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 114.451281][ T334] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 114.481823][ T334] EXT4-fs (loop6): This should not happen!! Data will be lost [ 114.481823][ T334] [ 114.501906][ T334] EXT4-fs (loop6): Total free blocks count 0 [ 114.508029][ T334] EXT4-fs (loop6): Free/Dirty block details [ 114.514318][ T334] EXT4-fs (loop6): free_blocks=4293918720 [ 114.521577][ T334] EXT4-fs (loop6): dirty_blocks=16 [ 114.526880][ T334] EXT4-fs (loop6): Block reservation details [ 114.533484][ T334] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 114.544078][ T3752] EXT4-fs (loop6): unmounting filesystem. [ 114.722630][ T28] audit: type=1400 audit(1756819423.116:3084): avc: denied { getopt } for pid=6044 comm="syz.7.2452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 114.755998][ T6047] binder: 6046:6047 ioctl c018620c 200000000000 returned -22 [ 114.764878][ T6050] loop4: detected capacity change from 0 to 256 [ 114.772005][ T6050] exfat: Deprecated parameter 'utf8' [ 114.781062][ T6050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 114.814223][ T6057] loop7: detected capacity change from 0 to 256 [ 114.821000][ T6057] exfat: Deprecated parameter 'utf8' [ 114.831292][ T6057] exfat: Deprecated parameter 'namecase' [ 114.840035][ T6057] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 115.128147][ T6111] device vlan3 entered promiscuous mode [ 115.133891][ T6111] device veth0 entered promiscuous mode [ 115.161938][ T19] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 115.241949][ T2677] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 115.270017][ T374] Bluetooth: hci0: Frame reassembly failed (-84) [ 115.352890][ T19] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 115.362017][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.370321][ T19] usb 7-1: config 0 descriptor?? [ 115.423084][ T2677] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.434066][ T2677] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.443854][ T2677] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.456870][ T2677] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.465968][ T2677] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.474944][ T2677] usb 8-1: config 0 descriptor?? [ 115.824249][ T6164] loop4: detected capacity change from 0 to 128 [ 115.831017][ T6164] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.845596][ T28] audit: type=1400 audit(1756819424.236:3085): avc: denied { watch } for pid=6163 comm="syz.4.2507" path="/454/file0/file0" dev="loop4" ino=1048776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 115.883030][ T2677] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 115.892830][ T2677] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 116.378453][ T19] usb 7-1: Cannot set autoneg [ 116.383264][ T19] MOSCHIP usb-ethernet driver: probe of 7-1:0.0 failed with error -71 [ 116.392131][ T19] usb 7-1: USB disconnect, device number 11 [ 116.667190][ T283] ------------[ cut here ]------------ [ 116.672719][ T283] WARNING: CPU: 1 PID: 283 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 116.680632][ T283] Modules linked in: [ 116.684583][ T283] CPU: 1 PID: 283 Comm: syz-executor Not tainted syzkaller #0 [ 116.692294][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.702394][ T283] RIP: 0010:drop_nlink+0xc5/0x110 [ 116.707447][ T283] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 82 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 116.727111][ T283] RSP: 0018:ffffc90000e47c38 EFLAGS: 00010293 [ 116.733213][ T283] RAX: ffffffff81c386c5 RBX: ffff888131d89ec0 RCX: ffff888113516540 [ 116.741195][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.749211][ T283] RBP: ffffc90000e47c60 R08: 0000000000000004 R09: 0000000000000003 [ 116.757305][ T283] R10: fffff520001c8f78 R11: 1ffff920001c8f78 R12: dffffc0000000000 [ 116.765346][ T283] R13: 1ffff110263b13e1 R14: ffff888131d89f08 R15: 0000000000000000 [ 116.773393][ T283] FS: 0000555574572500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 116.782558][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.789150][ T283] CR2: 00005555745954e8 CR3: 000000012fc17000 CR4: 00000000003506a0 [ 116.797263][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.805261][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.813275][ T283] Call Trace: [ 116.816643][ T283] [ 116.819644][ T283] shmem_rmdir+0x5b/0x90 [ 116.824070][ T283] vfs_rmdir+0x393/0x500 [ 116.828341][ T283] incfs_kill_sb+0x105/0x220 [ 116.833068][ T283] deactivate_locked_super+0xb5/0x120 [ 116.838481][ T283] deactivate_super+0xaf/0xe0 [ 116.843210][ T283] cleanup_mnt+0x45f/0x4e0 [ 116.847744][ T283] __cleanup_mnt+0x19/0x20 [ 116.852231][ T283] task_work_run+0x1db/0x240 [ 116.856834][ T283] ? __cfi_task_work_run+0x10/0x10 [ 116.861998][ T283] ? __x64_sys_umount+0x125/0x160 [ 116.867047][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 116.872450][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 116.877654][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 116.883147][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 116.888637][ T283] do_syscall_64+0x58/0xa0 [ 116.893127][ T283] ? clear_bhb_loop+0x30/0x80 [ 116.897832][ T283] ? clear_bhb_loop+0x30/0x80 [ 116.902582][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.902611][ T19] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 116.908580][ T283] RIP: 0033:0x7f131258ff17 [ 116.908602][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 116.908618][ T283] RSP: 002b:00007ffd7839ea08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.948743][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f131258ff17 [ 116.956757][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7839eac0 [ 116.964805][ T283] RBP: 00007ffd7839eac0 R08: 0000000000000000 R09: 0000000000000000 [ 116.972822][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7839fb50 [ 116.980819][ T283] R13: 00007f1312611c05 R14: 000000000001c79e R15: 00007ffd7839fb90 [ 116.988844][ T283] [ 116.991881][ T283] ---[ end trace 0000000000000000 ]--- [ 116.997518][ T283] ================================================================== [ 117.005611][ T283] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 117.011856][ T283] Write of size 4 at addr 0000000000000170 by task syz-executor/283 [ 117.019828][ T283] [ 117.022159][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0 [ 117.031094][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.041143][ T283] Call Trace: [ 117.044421][ T283] [ 117.047350][ T283] __dump_stack+0x21/0x24 [ 117.051848][ T283] dump_stack_lvl+0xee/0x150 [ 117.056436][ T283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.061464][ T283] ? ihold+0x20/0x60 [ 117.065358][ T283] ? ihold+0x20/0x60 [ 117.069255][ T283] print_report+0x3d/0x60 [ 117.073585][ T283] kasan_report+0x122/0x150 [ 117.078084][ T283] ? ihold+0x20/0x60 [ 117.081975][ T283] kasan_check_range+0x280/0x290 [ 117.086911][ T283] __kasan_check_write+0x14/0x20 [ 117.091850][ T283] ihold+0x20/0x60 [ 117.095570][ T283] vfs_rmdir+0x25f/0x500 [ 117.099899][ T283] incfs_kill_sb+0x105/0x220 [ 117.104508][ T283] deactivate_locked_super+0xb5/0x120 [ 117.109879][ T283] deactivate_super+0xaf/0xe0 [ 117.114554][ T283] cleanup_mnt+0x45f/0x4e0 [ 117.118985][ T283] __cleanup_mnt+0x19/0x20 [ 117.123408][ T283] task_work_run+0x1db/0x240 [ 117.128003][ T283] ? __cfi_task_work_run+0x10/0x10 [ 117.133127][ T283] ? __x64_sys_umount+0x125/0x160 [ 117.138171][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 117.143542][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 117.148742][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 117.154383][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 117.159867][ T283] do_syscall_64+0x58/0xa0 [ 117.164286][ T283] ? clear_bhb_loop+0x30/0x80 [ 117.168981][ T283] ? clear_bhb_loop+0x30/0x80 [ 117.173684][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.179733][ T283] RIP: 0033:0x7f131258ff17 [ 117.184156][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 117.203759][ T283] RSP: 002b:00007ffd7839ea08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.212174][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f131258ff17 [ 117.220141][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7839eac0 [ 117.228120][ T283] RBP: 00007ffd7839eac0 R08: 0000000000000000 R09: 0000000000000000 [ 117.236094][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7839fb50 [ 117.244059][ T283] R13: 00007f1312611c05 R14: 000000000001c79e R15: 00007ffd7839fb90 [ 117.252033][ T283] [ 117.255139][ T283] ================================================================== [ 117.263628][ C0] plantronics 0003:047F:FFFF.0025: usb_submit_urb(ctrl) failed: -1 [ 117.273393][ T283] Disabling lock debugging due to kernel taint [ 117.279587][ T283] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 117.287399][ T283] #PF: supervisor write access in kernel mode [ 117.293460][ T283] #PF: error_code(0x0002) - not-present page [ 117.299432][ T283] PGD 1326b2067 P4D 1326b2067 PUD 0 [ 117.304724][ T283] Oops: 0002 [#1] PREEMPT SMP KASAN [ 117.309916][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G B W syzkaller #0 [ 117.318845][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.329159][ T283] RIP: 0010:ihold+0x26/0x60 [ 117.333663][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 7a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 117.353441][ T283] RSP: 0018:ffffc90000e47c78 EFLAGS: 00010246 [ 117.359509][ T283] RAX: ffff888113516500 RBX: 0000000000000000 RCX: ffff888113516540 [ 117.367579][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.375559][ T283] RBP: ffffc90000e47c88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 117.383529][ T283] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff888131d89ecc [ 117.391496][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 117.399461][ T283] FS: 0000555574572500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 117.408398][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.414994][ T283] CR2: 0000000000000170 CR3: 000000012fc17000 CR4: 00000000003506a0 [ 117.423035][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.431014][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.439000][ T283] Call Trace: [ 117.442278][ T283] [ 117.445205][ T283] vfs_rmdir+0x25f/0x500 [ 117.449449][ T283] incfs_kill_sb+0x105/0x220 [ 117.454038][ T283] deactivate_locked_super+0xb5/0x120 [ 117.459496][ T283] deactivate_super+0xaf/0xe0 [ 117.464172][ T283] cleanup_mnt+0x45f/0x4e0 [ 117.468589][ T283] __cleanup_mnt+0x19/0x20 [ 117.473004][ T283] task_work_run+0x1db/0x240 [ 117.477590][ T283] ? __cfi_task_work_run+0x10/0x10 [ 117.482693][ T283] ? __x64_sys_umount+0x125/0x160 [ 117.487723][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 117.493102][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 117.498294][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 117.503744][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 117.509204][ T283] do_syscall_64+0x58/0xa0 [ 117.513611][ T283] ? clear_bhb_loop+0x30/0x80 [ 117.518288][ T283] ? clear_bhb_loop+0x30/0x80 [ 117.523052][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.528968][ T283] RIP: 0033:0x7f131258ff17 [ 117.533385][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 117.553419][ T283] RSP: 002b:00007ffd7839ea08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 117.561836][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f131258ff17 [ 117.569807][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7839eac0 [ 117.577771][ T283] RBP: 00007ffd7839eac0 R08: 0000000000000000 R09: 0000000000000000 [ 117.585828][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7839fb50 [ 117.593793][ T283] R13: 00007f1312611c05 R14: 000000000001c79e R15: 00007ffd7839fb90 [ 117.601762][ T283] [ 117.604776][ T283] Modules linked in: [ 117.608767][ T283] CR2: 0000000000000170 [ 117.612928][ T283] ---[ end trace 0000000000000000 ]--- [ 117.618389][ T283] RIP: 0010:ihold+0x26/0x60 [ 117.622894][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 7a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 117.642671][ T283] RSP: 0018:ffffc90000e47c78 EFLAGS: 00010246 [ 117.648762][ T283] RAX: ffff888113516500 RBX: 0000000000000000 RCX: ffff888113516540 [ 117.656746][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.664712][ T283] RBP: ffffc90000e47c88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 117.672686][ T283] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff888131d89ecc [ 117.680663][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 117.688628][ T283] FS: 0000555574572500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 117.697654][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.704243][ T283] CR2: 0000000000000170 CR3: 000000012fc17000 CR4: 00000000003506a0 [ 117.712316][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.720282][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.728335][ T283] Kernel panic - not syncing: Fatal exception [ 117.734788][ T283] Kernel Offset: disabled [ 117.739113][ T283] Rebooting in 86400 seconds..