last executing test programs: 46.252247719s ago: executing program 3 (id=541): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b'], 0x48) 46.224674649s ago: executing program 3 (id=543): r0 = syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a10000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905035a1d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x4, 0x0, 0xb, 0x3, 0x0, 0x0, 0x0, 0x80000044, 0xf, 0xe, 0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 44.047025574s ago: executing program 3 (id=597): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 43.814878398s ago: executing program 3 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000004340)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 43.757577129s ago: executing program 3 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.714499699s ago: executing program 3 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:sudo_exec_t:s0\x00', 0x21, 0x1) 43.67162276s ago: executing program 32 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:sudo_exec_t:s0\x00', 0x21, 0x1) 35.280786354s ago: executing program 4 (id=740): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 35.254078344s ago: executing program 4 (id=741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 35.185045145s ago: executing program 4 (id=743): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000380)={0x0, 0x1, 0x2, 0x1}) 35.139427706s ago: executing program 4 (id=744): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$eJzslL9KA0EQxr/diwkROztBLAwYi1zuLio2IsEXCPgPO6M5Q/RiQnKCiZXY+gC2tr5CGsEXUSsRUlpH9naTWyV/RNAgzq+Y+/Z2dm52Dj4QBPFveX56e7x+bV0YAKaQQEy9fzHCHK7ln+XiB9OpjbvWzcPVenW20q9mp/P170cA3GcN+L2zH08n1HMLvKe3wbGo9C4YTKX3wbGjtAuGPaWPNV0R+aZ5VPJc87DiFYSwRLBFcETIfO6vfclQ0Ppj2n690TzJe55b+0Exan7tLMea1p/+v7qzsbT52eCwlc6AYVPpVcS6s5Ej0e4/EwnrG798fxIkSPw1EfpT55ZhQfOniOYfab9cTdcbzVSpnC+6RffUcTIr1pJlLTvpwIhkHOJ/8cCfJrX6EwNyoyyK87zv12wZe2tHxn6OywP/40jOy7Xw/ujAbuQ+U+dYoJLGkHSCIIixMQcWeOYInNy4GyUIgiAIgiAIgiAI4tu8BwAA//9iEXZY") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 35.042604217s ago: executing program 4 (id=745): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 34.919255399s ago: executing program 4 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) 34.88632469s ago: executing program 33 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) 13.289753101s ago: executing program 0 (id=1296): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x5e69, &(0x7f0000000100)={0x0, 0x1084, 0x40, 0x10000003, 0x2c3}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 13.211280342s ago: executing program 0 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e0000001800028008000c0000000000060010004e2000000400120008000a00", @ANYRES32], 0x54}}, 0x8000) 13.115655714s ago: executing program 0 (id=1304): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c20200009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) 13.015232155s ago: executing program 0 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000040)='.\x00', 0x8000, &(0x7f0000001dc0)={0x87}, 0x20) 12.973926206s ago: executing program 0 (id=1313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0) 12.831204008s ago: executing program 0 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 12.806777938s ago: executing program 34 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 10.650030072s ago: executing program 1 (id=1390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.622008383s ago: executing program 1 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 9.768654626s ago: executing program 1 (id=1414): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x80000003, 0x4) write(r0, &(0x7f0000000440)="08008edf773c8000", 0x8) recvmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x0, 0x0}, 0xff800000}], 0x1, 0x20000000, 0x0) 9.729832667s ago: executing program 1 (id=1415): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00', 0x0) 9.699500657s ago: executing program 1 (id=1416): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x45b, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0x0, 0xd, 0x2}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.580395289s ago: executing program 1 (id=1417): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 9.56606079s ago: executing program 35 (id=1417): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.143857872s ago: executing program 5 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010004b04000023dc5ad93c5c2b7b0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800500160003000000080004"], 0x44}}, 0x0) 1.018784865s ago: executing program 5 (id=1590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 979.724955ms ago: executing program 6 (id=1591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) sync() r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 931.117416ms ago: executing program 5 (id=1593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 912.497586ms ago: executing program 6 (id=1595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 906.268666ms ago: executing program 5 (id=1596): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7c8, &(0x7f0000001280)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 889.362937ms ago: executing program 6 (id=1597): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x101a00, 0x0) 850.613887ms ago: executing program 7 (id=1598): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4841) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000004) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/139, 0x8b}], 0x1, &(0x7f0000000500)=""/23, 0x17}, 0x81}], 0x1, 0x40002002, 0x0) 820.421198ms ago: executing program 5 (id=1599): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) 801.341828ms ago: executing program 7 (id=1600): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@llx}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1c) 777.504338ms ago: executing program 7 (id=1601): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000000000950000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) io_setup(0x60a, &(0x7f0000000240)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x0, 0x0) io_destroy(r1) 630.549541ms ago: executing program 7 (id=1607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006a02"]) 561.917352ms ago: executing program 5 (id=1610): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/softnet_stat\x00') read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x23, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x1, 0x1, 0x7, ';'}, @local=@item_4={0x3, 0x2, 0xa, '8nok'}, @global=@item_4={0x3, 0x1, 0xa, "a8784bb0"}, @global=@item_4={0x3, 0x1, 0xb, "e4b42a2c"}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) 500.987503ms ago: executing program 7 (id=1613): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x0) 479.448393ms ago: executing program 8 (id=1614): readlink(0x0, 0x0, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000001200)) 471.068774ms ago: executing program 7 (id=1615): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0xa6080) 434.181034ms ago: executing program 8 (id=1617): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x10000000}}, 0x10, 0x0}, 0x20044000) 419.281944ms ago: executing program 8 (id=1618): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTX/sp66DMVRECntwMpeurT8m+DAfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6dE3atMuaznw+cMM590fOPbn3nHxPTkIC6Fuj2UMh4uWI+CaJOBIRSb5tMPKNo6v7LT+6MZUtSaysfPpXUt8vyzeeq3HcoTzzUkT89lXEqcLGcquLS7Olcjmdz/NjtbmrY9XFpdOX50oz6Ux6ZWJy8uzbkxPvvftO1+r6xoV/vv/k3odnvz6x/N0vD47eSeJcHM63NddjZ4azh5vNa0ZjNH9NhuLcE3uPP11he07S6xNgRwbydj4UWR9wJAbyVg/8/30ZEStAn0rat/9IdvVMgN3ViAMaY/vNx8EvrqWaj32ePfxgdQC0sf6Dq5+NxP762OjgcrJuZJSNd0e6UH5Wxq9/3r2TLdGVzyEAOnPzVkScGRzc2P8lef+3c2dar97fnHmyDP0f7J57WfzzZqv4p7AW/0SL+OdQi7a7E1u3/8KDLhTTVhb/vd8y/l2btBoZyHMv1GO+oeTS5XJ6Jo+GT8bQviy/2XzO2eX7bWPl5vgvW7LyG7Fgfh4PBvetP2a6VCvVP7jrgoe3Il5pGf8ma9c/aXH9s9fjQodlHE/vvtZu29b1f7ZWfop4veX1fzyjlWw+PzlWvx/GGnfFRn/fPv57u/J7Xf/s+h/cvP4jSfN8bXX7Zfy4/9+03bZ19Y/O7//h5LN6ejhfd71Uq82PRwwnH29cP/H42Ea+sX9W/5MnNu//Wt3/ByLi8w7rf/vYz692VP8eXf/pbV3/7Sfuf/TFD+3K76z/e6ueOpmvqfd/W+j0BJ/mtQMAAAAAAIC9phARhyMpFNfShUKxuPr9jmNxsFCuVGunLlUWrkxH/beyIzFUaMx0H2n6PsR4/n3YRn7iifxkRByNiG8HDtTzxalKebrXlQcAAAAAAAAAAAAAAAAAAIA94lCb3/9n/hjo9dkBz5y//Ib+tWX778Y/PQF7kvd/6F/aP/Qv7R/6l/YP/Uv7h/61rv2b9Ie+4v0f+pf2DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF114fz5bFlZfnRjKstPX1tcmK1cOz2dVmeLcwtTxanK/NXiTKUyU06LU5W5rZ6vXKlcHZ+IhetjtbRaG6suLl2cqyxcqV28PFeaSS+mQ7tSKwAAAAAAAAAAAAAAAAAAAHi+VBeXZkvlcjovIbGjxODeOA2JLid63TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGP/BQAA///oaTpO") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000600)='q', 0x1, 0x9003) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 322.841876ms ago: executing program 8 (id=1620): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380", @ANYRESDEC], 0x44}}, 0x0) 278.317616ms ago: executing program 8 (id=1621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) sysinfo(&(0x7f0000000180)=""/134) 261.339016ms ago: executing program 6 (id=1623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x6) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 232.313177ms ago: executing program 2 (id=1625): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001c0001800d0001"], 0x30}}, 0x4) 229.980607ms ago: executing program 8 (id=1626): r0 = socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 183.240017ms ago: executing program 6 (id=1627): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000240)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 177.398067ms ago: executing program 6 (id=1628): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000033640)=""/102392, 0x18ff8, 0x0, 0x0}, &(0x7f0000000100)=0x3b) 156.320508ms ago: executing program 2 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) rt_sigsuspend(0x0, 0x0) 141.454918ms ago: executing program 2 (id=1630): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id, 0x40, 0x0, '\x00', @a}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000001b00)={@id, 0x40, 0x0, '\x00', @a}) 95.993469ms ago: executing program 2 (id=1631): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='dots,errors=continue,nodots,dmask=00000000000000000077777,nodots,dots,nodots,showexec,dots,sys_immutable,discard,dots,nodots,nodots,dots,nodots,dots,nfs,dots,dots,dots,dots,nodots,nodots,nodots,quiet,dots,nodots,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000O00000,erroRs=coe,uid<\x00\x00\x00\x00\x00', @ANYRESDEC, @ANYBLOB=',\x00'], 0xfd, 0x1bf, &(0x7f0000000640)="$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") creat(&(0x7f00000000c0)='./file1\x00', 0xd5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 69.812269ms ago: executing program 2 (id=1632): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000240)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) 0s ago: executing program 2 (id=1633): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) syz_clone3(&(0x7f0000006a80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) kernel console output (not intermixed with test programs): adm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.157846][ T28] audit: type=1400 audit(1743223476.129:411): avc: denied { read } for pid=1962 comm="syz.1.677" path="socket:[23165]" dev="sockfs" ino=23165 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.272451][ T1973] input: syz1 as /devices/virtual/input/input8 [ 53.282544][ T611] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 53.302474][ T611] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 53.314033][ T611] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 53.323130][ T611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.333052][ T1951] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 53.341818][ T611] usb 1-1: invalid MIDI in EP 0 [ 53.370767][ T1061] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 53.381030][ T611] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 53.389262][ T1061] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 53.413718][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.545064][ T611] usb 1-1: USB disconnect, device number 6 [ 54.713701][ T293] EXT4-fs (loop4): unmounting filesystem. [ 55.171679][ T43] device bridge_slave_1 left promiscuous mode [ 55.177693][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.194828][ T43] device bridge_slave_0 left promiscuous mode [ 55.200800][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.215167][ T1982] futex_wake_op: syz.5.683 tries to shift op by -1; fix this program [ 55.232582][ T43] device veth1_macvtap left promiscuous mode [ 55.259527][ T43] device veth0_vlan left promiscuous mode [ 55.491568][ T1061] usb 3-1: USB disconnect, device number 7 [ 55.533292][ T1988] loop5: detected capacity change from 0 to 40427 [ 55.549492][ T1988] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 55.557669][ T1988] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 55.566627][ T1992] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.574638][ T1988] F2FS-fs (loop5): invalid crc value [ 55.574704][ T1992] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.581601][ T1988] F2FS-fs (loop5): Found nat_bits in checkpoint [ 55.592789][ T611] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 55.593247][ T1992] device bridge_slave_0 entered promiscuous mode [ 55.617619][ T1992] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.634928][ T1992] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.642735][ T1992] device bridge_slave_1 entered promiscuous mode [ 55.647478][ T1988] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 55.655848][ T1988] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 55.702633][ T28] audit: type=1400 audit(1743223478.739:412): avc: denied { map } for pid=1987 comm="syz.5.687" path="/19/file0/pids.current" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.756968][ T2006] binder: 2004:2006 ioctl c0306201 0 returned -14 [ 55.771332][ T611] usb 1-1: Using ep0 maxpacket: 32 [ 55.778487][ T611] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.797693][ T611] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 55.798408][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.806694][ T611] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 55.814072][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.823278][ T611] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 55.839737][ T611] usb 1-1: config 128 has no interface number 0 [ 55.842276][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.846196][ T611] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 55.854524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.873083][ T611] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.874705][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.883558][ T611] usb 1-1: config 128 interface 127 has no altsetting 0 [ 55.889960][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.890892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.912093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.914491][ T611] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 55.920146][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.935702][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.942841][ T611] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.943771][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.958300][ T611] usb 1-1: Product: syz [ 55.959043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.966800][ T611] usb 1-1: Manufacturer: syz [ 55.982157][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.983389][ T611] usb 1-1: SerialNumber: syz [ 55.990689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.002646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.010715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.025618][ T1992] device veth0_vlan entered promiscuous mode [ 56.031876][ T2008] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 56.032068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.048658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.056317][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.075078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.086210][ T1992] device veth1_macvtap entered promiscuous mode [ 56.097533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.111682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.129659][ T28] audit: type=1400 audit(1743223479.159:413): avc: denied { setopt } for pid=2015 comm="syz.5.697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.155415][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.169188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.192840][ T2018] loop5: detected capacity change from 0 to 1024 [ 56.208061][ T2018] EXT4-fs: Ignoring removed nobh option [ 56.213539][ T2018] EXT4-fs: Ignoring removed bh option [ 56.228450][ T2018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.250568][ T611] usb 1-1: USB disconnect, device number 7 [ 56.268067][ T496] udevd[496]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.293136][ T2018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 56.312207][ T1785] EXT4-fs (loop5): unmounting filesystem. [ 56.388658][ T28] audit: type=1400 audit(1743223479.419:414): avc: denied { ioctl } for pid=2040 comm="syz.5.706" path="socket:[23515]" dev="sockfs" ino=23515 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.437696][ T2047] loop4: detected capacity change from 0 to 512 [ 56.462497][ T2047] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 56.471468][ T2047] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.495734][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 56.495750][ T28] audit: type=1400 audit(1743223479.529:416): avc: denied { write } for pid=2051 comm="syz.5.710" path="socket:[23530]" dev="sockfs" ino=23530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.514667][ T1992] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.525804][ T28] audit: type=1400 audit(1743223479.539:417): avc: denied { read } for pid=2046 comm="syz.4.709" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.564809][ T1992] EXT4-fs (loop4): unmounting filesystem. [ 56.567503][ T28] audit: type=1400 audit(1743223479.539:418): avc: denied { open } for pid=2046 comm="syz.4.709" path="/8/file0/file0/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.595607][ T28] audit: type=1400 audit(1743223479.539:419): avc: denied { map } for pid=2046 comm="syz.4.709" path="/8/file0/file0/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.687068][ T2068] SELinux: Context Ü is not valid (left unmapped). [ 56.891345][ T501] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 57.001209][ T611] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.071203][ T501] usb 3-1: Using ep0 maxpacket: 8 [ 57.077184][ T501] usb 3-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 57.088339][ T501] usb 3-1: config 0 interface 0 has no altsetting 0 [ 57.094783][ T501] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 57.103649][ T501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.112012][ T501] usb 3-1: config 0 descriptor?? [ 57.181156][ T611] usb 5-1: Using ep0 maxpacket: 16 [ 57.187426][ T611] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.198372][ T611] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.208208][ T611] usb 5-1: config 0 interface 0 has no altsetting 0 [ 57.214673][ T611] usb 5-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 57.223563][ T611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.232514][ T611] usb 5-1: config 0 descriptor?? [ 57.439657][ T2072] loop4: detected capacity change from 0 to 16 [ 57.446048][ T2072] erofs: Unknown parameter 'erofs' [ 57.522240][ T501] petalynx 0003:18B1:0037.000A: item fetching failed at offset 6/7 [ 57.530423][ T501] petalynx 0003:18B1:0037.000A: parse failed [ 57.535120][ T2093] loop5: detected capacity change from 0 to 2048 [ 57.537809][ T501] petalynx: probe of 0003:18B1:0037.000A failed with error -22 [ 57.562785][ T2093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 57.582136][ T1785] EXT4-fs (loop5): unmounting filesystem. [ 57.634450][ T2099] loop5: detected capacity change from 0 to 4096 [ 57.645347][ T2099] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 57.657313][ T611] hid (null): global environment stack underflow [ 57.664021][ T611] hid (null): invalid report_count 32706 [ 57.669529][ T611] hid (null): global environment stack underflow [ 57.676528][ T611] hid (null): unknown global tag 0xc [ 57.681985][ T611] hid (null): bogus close delimiter [ 57.687099][ T611] hid (null): report_id 66874574 is invalid [ 57.692947][ T611] hid (null): unknown global tag 0xd [ 57.698115][ T611] hid (null): unknown global tag 0x7e [ 57.704847][ T611] hid (null): invalid report_size 28216 [ 57.711334][ T611] hid-generic 0003:060B:430A.000B: unexpected long global item [ 57.718954][ T611] hid-generic: probe of 0003:060B:430A.000B failed with error -22 [ 57.731619][ T501] usb 3-1: USB disconnect, device number 8 [ 57.863818][ T611] usb 5-1: USB disconnect, device number 6 [ 57.908172][ T28] audit: type=1326 audit(1743223480.939:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2103 comm="syz.0.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cb4b8d169 code=0x0 [ 57.931445][ T295] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.111188][ T295] usb 6-1: Using ep0 maxpacket: 32 [ 58.117746][ T295] usb 6-1: unable to get BOS descriptor or descriptor too short [ 58.126163][ T295] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 58.134380][ T295] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 58.144633][ T295] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 58.153453][ T295] usb 6-1: config 128 has no interface number 0 [ 58.159515][ T295] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 58.170557][ T295] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.180441][ T295] usb 6-1: config 128 interface 127 has no altsetting 0 [ 58.188540][ T295] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 58.197464][ T295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.205300][ T295] usb 6-1: Product: syz [ 58.209197][ T295] usb 6-1: Manufacturer: syz [ 58.213679][ T295] usb 6-1: SerialNumber: syz [ 58.298397][ T2114] loop2: detected capacity change from 0 to 512 [ 58.304890][ T2114] EXT4-fs: Ignoring removed oldalloc option [ 58.313259][ T2114] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.738: Parent and EA inode have the same ino 15 [ 58.325513][ T2114] EXT4-fs (loop2): Remounting filesystem read-only [ 58.332196][ T2114] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.738: Parent and EA inode have the same ino 15 [ 58.344566][ T2114] EXT4-fs (loop2): Remounting filesystem read-only [ 58.351020][ T2114] EXT4-fs (loop2): 1 orphan inode deleted [ 58.356908][ T2114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.425294][ T295] usb 6-1: USB disconnect, device number 2 [ 58.440249][ T292] EXT4-fs (loop2): unmounting filesystem. [ 58.449005][ T496] udevd[496]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.562147][ T2127] loop4: detected capacity change from 0 to 16 [ 58.588994][ T2127] erofs: (device loop4): mounted with root inode @ nid 36. [ 58.903172][ T2139] loop1: detected capacity change from 0 to 512 [ 58.952508][ T1785] EXT4-fs (loop5): unmounting filesystem. [ 58.958221][ T2139] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.752: casefold flag without casefold feature [ 59.013277][ T2139] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.752: couldn't read orphan inode 15 (err -117) [ 59.034554][ T2139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.034582][ T2138] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.053567][ T2139] syz.1.752 (pid 2139) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 59.063894][ T2138] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.081329][ T2138] device bridge_slave_0 entered promiscuous mode [ 59.096552][ T495] EXT4-fs (loop1): unmounting filesystem. [ 59.096627][ T2138] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.119115][ T2138] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.139856][ T2138] device bridge_slave_1 entered promiscuous mode [ 59.235609][ T28] audit: type=1400 audit(1743223482.269:421): avc: denied { create } for pid=2152 comm="syz.5.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 59.268766][ T28] audit: type=1400 audit(1743223482.269:422): avc: denied { sys_admin } for pid=2152 comm="syz.5.758" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 59.284551][ T2162] loop2: detected capacity change from 0 to 1024 [ 59.306782][ T2162] EXT4-fs: Ignoring removed bh option [ 59.330824][ T2162] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.448007][ T2183] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.471789][ T328] device bridge_slave_1 left promiscuous mode [ 59.481419][ T28] audit: type=1400 audit(1743223482.519:423): avc: denied { unmount } for pid=495 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.506220][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.515661][ T328] device bridge_slave_0 left promiscuous mode [ 59.525475][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.535814][ T328] device veth1_macvtap left promiscuous mode [ 59.549812][ T328] device veth0_vlan left promiscuous mode [ 59.681626][ T2164] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.688992][ T2164] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.702470][ T2164] device bridge_slave_0 entered promiscuous mode [ 59.718172][ T2164] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.726163][ T2164] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.733786][ T2164] device bridge_slave_1 entered promiscuous mode [ 59.780627][ T28] audit: type=1400 audit(1743223482.809:424): avc: denied { ioctl } for pid=2206 comm="syz.2.778" path="socket:[24483]" dev="sockfs" ino=24483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.865705][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.873086][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.886394][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.894794][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.902979][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.909830][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.917167][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.939903][ T2216] loop2: detected capacity change from 0 to 128 [ 59.951157][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.959955][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.962604][ T2216] ext4 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.967957][ T611] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.000240][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.013694][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.021806][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.023233][ T2216] EXT4-fs (loop2): shut down requested (2) [ 60.029836][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.043022][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.050993][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.071781][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.081997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.102684][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.110502][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.123857][ T2138] device veth0_vlan entered promiscuous mode [ 60.130872][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.138611][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.164162][ T2223] loop2: detected capacity change from 0 to 256 [ 60.175315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.184269][ T611] usb 6-1: Using ep0 maxpacket: 32 [ 60.191230][ T611] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.204582][ T2138] device veth1_macvtap entered promiscuous mode [ 60.221762][ T611] usb 6-1: config 0 interface 0 has no altsetting 0 [ 60.228270][ T611] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 60.237149][ T611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.245208][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.253096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.266068][ T611] usb 6-1: config 0 descriptor?? [ 60.282587][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.291819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.300107][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.306999][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.315124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.323475][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.332063][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.343543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.351754][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.358602][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.366088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.374533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.382972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.437519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.447237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.469926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.481852][ T611] usbhid 6-1:0.0: can't add hid device: -71 [ 60.493288][ T611] usbhid: probe of 6-1:0.0 failed with error -71 [ 60.502634][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.514432][ T611] usb 6-1: USB disconnect, device number 3 [ 60.516692][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.531956][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.542892][ T2164] device veth0_vlan entered promiscuous mode [ 60.574144][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.591572][ T28] audit: type=1400 audit(1743223483.629:425): avc: denied { map } for pid=2242 comm="syz.2.794" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.633371][ T2164] device veth1_macvtap entered promiscuous mode [ 60.647899][ T2249] incfs: Options parsing error. -22 [ 60.659114][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.661644][ T2249] incfs: mount failed -22 [ 60.680827][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.760650][ T2253] netlink: 'syz.1.798': attribute type 12 has an invalid length. [ 60.794294][ T328] device veth1_macvtap left promiscuous mode [ 60.800179][ T328] device veth0_vlan left promiscuous mode [ 61.096398][ T2297] syz.0.817[2297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.096478][ T2297] syz.0.817[2297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.129364][ T2302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.819'. [ 61.176359][ T2307] loop6: detected capacity change from 0 to 512 [ 61.184535][ T2307] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.202028][ T2307] EXT4-fs (loop6): 1 truncate cleaned up [ 61.247436][ T2319] loop6: detected capacity change from 0 to 128 [ 61.255661][ T2319] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.324549][ T2312] block device autoloading is deprecated and will be removed. [ 61.346445][ T2312] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 61.395627][ T2329] syz.2.829[2329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.395705][ T2329] syz.2.829[2329] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.489145][ T2338] loop5: detected capacity change from 0 to 4096 [ 61.506955][ T2338] EXT4-fs: Ignoring removed orlov option [ 61.537779][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 61.537793][ T28] audit: type=1400 audit(1743223484.569:431): avc: denied { rename } for pid=2336 comm="syz.5.834" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.538020][ T2338] EXT4-fs error (device loop5): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.5.834: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 61.544028][ T28] audit: type=1400 audit(1743223484.569:432): avc: denied { reparent } for pid=2336 comm="syz.5.834" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.642276][ T2338] EXT4-fs (loop5): Remounting filesystem read-only [ 61.658774][ T2338] EXT4-fs error (device loop5): ext4_get_first_dir_block:3605: inode #12: comm syz.5.834: directory missing '..' [ 61.683848][ T2338] EXT4-fs (loop5): Remounting filesystem read-only [ 61.772853][ T310] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 61.819926][ T611] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 61.835874][ T611] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 61.904218][ T2366] loop0: detected capacity change from 0 to 512 [ 61.904819][ T2368] netlink: 'syz.6.847': attribute type 12 has an invalid length. [ 61.918672][ T2368] netlink: 'syz.6.847': attribute type 29 has an invalid length. [ 61.938992][ T2366] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.846: casefold flag without casefold feature [ 61.953706][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 61.965197][ T2368] netlink: 148 bytes leftover after parsing attributes in process `syz.6.847'. [ 61.965837][ T2373] loop5: detected capacity change from 0 to 512 [ 61.974911][ T2366] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.846: couldn't read orphan inode 15 (err -117) [ 61.997202][ T2373] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.004236][ T310] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 62.021652][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.029628][ T310] usb 3-1: Product: syz [ 62.034493][ T310] usb 3-1: Manufacturer: syz [ 62.038914][ T310] usb 3-1: SerialNumber: syz [ 62.044667][ T310] usb 3-1: config 0 descriptor?? [ 62.050545][ T2373] EXT4-fs (loop5): 1 truncate cleaned up [ 62.050624][ T310] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 62.068052][ T310] usb 3-1: Detected FT-X [ 62.116894][ T2378] loop0: detected capacity change from 0 to 4096 [ 62.127064][ T2378] EXT4-fs: Ignoring removed orlov option [ 62.143812][ T2378] EXT4-fs error (device loop0): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.0.851: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 62.148725][ T2383] loop5: detected capacity change from 0 to 128 [ 62.180957][ T2378] EXT4-fs (loop0): Remounting filesystem read-only [ 62.188174][ T2378] EXT4-fs error (device loop0): ext4_get_first_dir_block:3605: inode #12: comm syz.0.851: directory missing '..' [ 62.200441][ T2378] EXT4-fs (loop0): Remounting filesystem read-only [ 62.251814][ T310] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 62.412778][ T2390] loop0: detected capacity change from 0 to 40427 [ 62.421490][ T2390] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 62.435952][ T2390] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.453347][ T2390] F2FS-fs (loop0): invalid crc value [ 62.462024][ T2390] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.507783][ T2390] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 62.515161][ T2390] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.535704][ T2390] syz.0.855: attempt to access beyond end of device [ 62.535704][ T2390] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 62.558531][ T486] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 62.568498][ T486] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 62.605354][ T486] kworker/u4:6: attempt to access beyond end of device [ 62.605354][ T486] loop0: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 62.660781][ T310] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 62.846342][ T28] audit: type=1400 audit(1743223485.879:433): avc: denied { mounton } for pid=2428 comm="syz.0.872" path="/16/file0" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 62.862048][ T2431] loop5: detected capacity change from 0 to 1024 [ 62.877757][ T295] usb 3-1: USB disconnect, device number 9 [ 62.887528][ T295] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 62.897245][ T295] ftdi_sio 3-1:0.0: device disconnected [ 63.027592][ T28] audit: type=1400 audit(1743223486.059:434): avc: denied { write } for pid=2441 comm="syz.6.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.072689][ T2444] loop5: detected capacity change from 0 to 2048 [ 63.141713][ T2444] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 63.146851][ T2444] loop5: partition table partially beyond EOD, truncated [ 63.154347][ T2444] loop5: p1 start 3405774849 is beyond EOD, truncated [ 63.160949][ T2444] loop5: p2 size 5046285 extends beyond EOD, truncated [ 63.169601][ T2444] loop5: p5 size 5046285 extends beyond EOD, truncated [ 63.298119][ T2460] loop5: detected capacity change from 0 to 1024 [ 63.304831][ T2460] EXT4-fs: Ignoring removed i_version option [ 63.311299][ T2460] EXT4-fs (loop5): Test dummy encryption mode enabled [ 63.451975][ T28] audit: type=1400 audit(1743223486.489:435): avc: denied { write } for pid=2475 comm="syz.2.892" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 63.586315][ T2486] incfs: Options parsing error. -22 [ 63.593076][ T2486] incfs: mount failed -22 [ 63.672504][ T2497] loop2: detected capacity change from 0 to 8192 [ 63.699072][ T2497] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 63.725880][ T2497] FAT-fs (loop2): Filesystem has been set read-only [ 63.733961][ T2497] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 63.771614][ T2508] loop5: detected capacity change from 0 to 256 [ 63.783529][ T2510] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 64.004046][ T2537] xt_bpf: check failed: parse error [ 64.013908][ T2540] SELinux: Context system_u:object_r:textrel_shlib_t:s0 is not valid (left unmapped). [ 64.023407][ T28] audit: type=1400 audit(1743223487.049:436): avc: denied { relabelfrom } for pid=2539 comm="syz.2.921" name="NETLINK" dev="sockfs" ino=26591 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 64.067779][ T28] audit: type=1400 audit(1743223487.059:437): avc: denied { relabelto } for pid=2539 comm="syz.2.921" name="NETLINK" dev="sockfs" ino=26591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 64.107810][ T2543] loop0: detected capacity change from 0 to 512 [ 64.145173][ T2543] EXT4-fs: Ignoring removed nobh option [ 64.181572][ T28] audit: type=1400 audit(1743223487.139:438): avc: denied { mounton } for pid=2541 comm="syz.1.922" path="/129/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 64.238430][ T28] audit: type=1400 audit(1743223487.269:439): avc: denied { connect } for pid=2558 comm="syz.0.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.288034][ T2552] netlink: 'syz.1.926': attribute type 3 has an invalid length. [ 64.316080][ T2565] SELinux: failed to load policy [ 64.320908][ T28] audit: type=1400 audit(1743223487.349:440): avc: denied { load_policy } for pid=2564 comm="syz.0.931" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 64.359196][ T2529] loop5: detected capacity change from 0 to 40427 [ 64.405199][ T2529] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 64.423861][ T2570] loop0: detected capacity change from 0 to 4096 [ 64.434387][ T2529] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 64.452840][ T2570] EXT4-fs (loop0): Test dummy encryption mode enabled [ 64.459500][ T2529] F2FS-fs (loop5): invalid crc value [ 64.477645][ T2529] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.564059][ T2590] loop6: detected capacity change from 0 to 512 [ 64.604776][ T2590] EXT4-fs warning (device loop6): ext4_enable_quotas:7017: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 64.620988][ T2529] F2FS-fs (loop5): Start checkpoint disabled! [ 64.649429][ T2590] EXT4-fs (loop6): mount failed [ 64.655213][ T2529] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 64.671181][ T2529] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 64.763345][ T2607] 9pnet: p9_errstr2errno: server reported unknown error @ [ 64.812155][ T43] kworker/u4:2: attempt to access beyond end of device [ 64.812155][ T43] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 64.936661][ T2599] loop2: detected capacity change from 0 to 40427 [ 64.988427][ T2599] F2FS-fs (loop2): invalid crc value [ 65.001286][ T2599] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.013039][ T2627] device veth0_vlan left promiscuous mode [ 65.020104][ T2627] device veth0_vlan entered promiscuous mode [ 65.039048][ T2627] syz.0.957 (2627) used greatest stack depth: 19048 bytes left [ 65.055571][ T2599] F2FS-fs (loop2): Start checkpoint disabled! [ 65.062279][ T2599] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 65.108753][ T2599] syz.2.945: attempt to access beyond end of device [ 65.108753][ T2599] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.190686][ T2646] devpts: called with bogus options [ 65.196014][ T328] kworker/u4:4: attempt to access beyond end of device [ 65.196014][ T328] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 65.871184][ T501] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 65.895686][ T2696] loop6: detected capacity change from 0 to 40427 [ 65.907405][ T2696] F2FS-fs (loop6): invalid crc value [ 65.916800][ T2696] F2FS-fs (loop6): Found nat_bits in checkpoint [ 65.963652][ T2696] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 65.987149][ T2138] syz-executor: attempt to access beyond end of device [ 65.987149][ T2138] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.052383][ T501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.062206][ T501] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 66.071235][ T501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.087454][ T501] usb 3-1: config 0 descriptor?? [ 66.301923][ T501] usbhid 3-1:0.0: can't add hid device: -71 [ 66.308953][ T501] usbhid: probe of 3-1:0.0 failed with error -71 [ 66.332827][ T501] usb 3-1: USB disconnect, device number 10 [ 66.397636][ T2711] loop6: detected capacity change from 0 to 40427 [ 66.406087][ T2711] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 66.413858][ T2711] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 66.423970][ T2711] F2FS-fs (loop6): Found nat_bits in checkpoint [ 66.459038][ T2711] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 66.466073][ T2711] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 66.492462][ T2719] loop0: detected capacity change from 0 to 128 [ 66.506502][ T486] kworker/u4:6: attempt to access beyond end of device [ 66.506502][ T486] loop6: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 66.548522][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 66.548535][ T28] audit: type=1400 audit(1743223489.579:509): avc: denied { unmount } for pid=2164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 66.718891][ T2727] loop0: detected capacity change from 0 to 512 [ 66.741385][ T2727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.752419][ T2725] device veth0_vlan left promiscuous mode [ 66.761062][ T2725] device veth0_vlan entered promiscuous mode [ 66.774410][ T2727] EXT4-fs (loop0): 1 truncate cleaned up [ 66.787136][ T2727] EXT4-fs mount: 24 callbacks suppressed [ 66.787153][ T2727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 66.813058][ T28] audit: type=1400 audit(1743223489.849:510): avc: denied { setattr } for pid=2726 comm="syz.0.994" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.855019][ T28] audit: type=1400 audit(1743223489.889:511): avc: denied { remove_name } for pid=2726 comm="syz.0.994" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.879136][ T28] audit: type=1400 audit(1743223489.889:512): avc: denied { rename } for pid=2726 comm="syz.0.994" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.901457][ T28] audit: type=1400 audit(1743223489.889:513): avc: denied { unlink } for pid=2726 comm="syz.0.994" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.903518][ T2164] EXT4-fs (loop0): unmounting filesystem. [ 66.940493][ T28] audit: type=1400 audit(1743223489.969:514): avc: denied { relabelfrom } for pid=2734 comm="syz.5.997" name="NETLINK" dev="sockfs" ino=28039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 66.969707][ T28] audit: type=1400 audit(1743223489.969:515): avc: denied { mac_admin } for pid=2734 comm="syz.5.997" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.991895][ T2740] loop2: detected capacity change from 0 to 16 [ 67.001006][ T28] audit: type=1400 audit(1743223489.969:516): avc: denied { relabelto } for pid=2734 comm="syz.5.997" name="NETLINK" dev="sockfs" ino=28039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:textrel_shlib_t:s0" [ 67.029415][ T2740] erofs: (device loop2): mounted with root inode @ nid 36. [ 67.041807][ T2743] tmpfs: Unknown parameter 'noyxÙ' [ 67.044767][ T28] audit: type=1400 audit(1743223490.079:517): avc: denied { mounton } for pid=2742 comm="syz.0.999" path="/54/file0" dev="tmpfs" ino=301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.070126][ T2740] syz.2.1001: attempt to access beyond end of device [ 67.070126][ T2740] loop2: rw=524288, sector=525136, nr_sectors = 8 limit=16 [ 67.091277][ T28] audit: type=1400 audit(1743223490.119:518): avc: denied { bind } for pid=2746 comm="syz.6.1005" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.121563][ T2740] syz.2.1001: attempt to access beyond end of device [ 67.121563][ T2740] loop2: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 67.141444][ T2740] syz.2.1001: attempt to access beyond end of device [ 67.141444][ T2740] loop2: rw=524288, sector=19320, nr_sectors = 8 limit=16 [ 67.282287][ T2765] loop0: detected capacity change from 0 to 128 [ 67.302085][ T2765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.310447][ T2757] device veth0_vlan left promiscuous mode [ 67.312376][ T2765] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.316697][ T2757] device veth0_vlan entered promiscuous mode [ 67.356613][ T2164] EXT4-fs (loop0): unmounting filesystem. [ 67.464145][ T2776] loop0: detected capacity change from 0 to 256 [ 67.477088][ T2776] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.490188][ T2776] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x441ff21b, utbl_chksum : 0xe619d30d) [ 67.713978][ T2791] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 67.724353][ T2791] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 67.743299][ T2795] loop2: detected capacity change from 0 to 512 [ 67.790101][ T2774] loop5: detected capacity change from 0 to 40427 [ 67.793127][ T2799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1027'. [ 67.805324][ T2799] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1027'. [ 67.814770][ T2774] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 67.823596][ T2774] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 67.852228][ T2795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.861074][ T2795] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.861704][ T2774] F2FS-fs (loop5): invalid crc value [ 67.906451][ T292] EXT4-fs (loop2): unmounting filesystem. [ 67.918039][ T2774] F2FS-fs (loop5): Found nat_bits in checkpoint [ 68.033873][ T2774] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 68.043541][ T2774] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 68.075725][ T1785] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 68.075748][ T1785] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 68.091499][ T1785] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 68.104540][ T1785] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 68.117299][ T1785] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 68.138909][ T1785] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 68.138916][ T2821] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1036'. [ 68.170900][ T1785] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 68.232452][ T2836] loop1: detected capacity change from 0 to 16 [ 68.260649][ T2836] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.345489][ T2848] loop5: detected capacity change from 0 to 256 [ 68.361063][ T2848] incfs: Can't find or create .incomplete dir in ./file0 [ 68.368381][ T2848] incfs: mount failed -28 [ 68.401652][ T2852] Invalid ELF header magic: != ELF [ 68.567081][ T2861] loop0: detected capacity change from 0 to 1024 [ 68.581157][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.589659][ T2861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.598155][ T2861] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.617170][ T2861] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 68.632723][ T2861] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 68.645486][ T2861] EXT4-fs (loop0): This should not happen!! Data will be lost [ 68.645486][ T2861] [ 68.655240][ T2861] EXT4-fs (loop0): Total free blocks count 0 [ 68.661409][ T2861] EXT4-fs (loop0): Free/Dirty block details [ 68.667173][ T2861] EXT4-fs (loop0): free_blocks=4293918720 [ 68.672879][ T2861] EXT4-fs (loop0): dirty_blocks=16 [ 68.677806][ T2861] EXT4-fs (loop0): Block reservation details [ 68.683855][ T2861] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 68.696455][ T2164] EXT4-fs (loop0): unmounting filesystem. [ 68.742267][ T2874] hub 1-0:1.0: USB hub found [ 68.746774][ T2874] hub 1-0:1.0: 1 port detected [ 68.776109][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.787657][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.798064][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.811925][ T6] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.820923][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.834212][ T6] usb 7-1: config 0 descriptor?? [ 68.967751][ T2892] loop5: detected capacity change from 0 to 256 [ 68.974671][ T2892] exfat: Deprecated parameter 'namecase' [ 68.980266][ T2892] exfat: Deprecated parameter 'utf8' [ 68.991213][ T2892] exfat: Deprecated parameter 'namecase' [ 68.996785][ T2892] exfat: Deprecated parameter 'utf8' [ 69.004982][ T2892] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 69.038164][ T2894] netlink: 'syz.5.1068': attribute type 12 has an invalid length. [ 69.171157][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 69.192863][ T2904] loop2: detected capacity change from 0 to 256 [ 69.205112][ T2904] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.216212][ T2904] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 69.237798][ T2904] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 69.251202][ T6] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 69.263352][ T6] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 69.361447][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 69.377868][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 69.387900][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.396833][ T2917] incfs: iterate_incfs_dir / -22 [ 69.401325][ T24] usb 1-1: Product: syz [ 69.405622][ T24] usb 1-1: Manufacturer: syz [ 69.410319][ T24] usb 1-1: SerialNumber: syz [ 69.561272][ T501] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 69.741179][ T2913] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 69.749704][ T501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.760486][ T501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.770106][ T501] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.782817][ T501] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.791709][ T501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.800196][ T501] usb 3-1: config 0 descriptor?? [ 69.922201][ T2913] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.932234][ T2913] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.942524][ T2913] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.951426][ T2913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.959244][ T2913] usb 6-1: Product: syz [ 69.963251][ T2913] usb 6-1: Manufacturer: syz [ 69.967625][ T2913] usb 6-1: SerialNumber: syz [ 70.208834][ T501] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 70.216539][ T501] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 70.223836][ T501] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 70.232510][ T24] snd-usb-audio: probe of 1-1:222.0 failed with error -2 [ 70.242315][ T501] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 70.248005][ T496] udevd[496]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.250191][ T2913] usb 6-1: 0:2 : does not exist [ 70.270072][ T501] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 70.277931][ T501] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 70.285674][ T501] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 70.294646][ T2913] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 70.302343][ T501] plantronics 0003:047F:FFFF.000E: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 70.323350][ T2913] usb 6-1: USB disconnect, device number 4 [ 70.434086][ T501] usb 1-1: USB disconnect, device number 8 [ 70.531784][ T1101] udevd[1101]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.562267][ T24] usb 3-1: USB disconnect, device number 11 [ 70.694291][ T2928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 70.721401][ T2930] loop5: detected capacity change from 0 to 256 [ 70.727889][ T2930] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.740348][ T2930] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 70.750799][ T2930] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 70.993488][ T2941] loop0: detected capacity change from 0 to 2048 [ 71.012802][ T2941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.220500][ T2941] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 71.235602][ T2941] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 71.248242][ T2941] EXT4-fs (loop0): This should not happen!! Data will be lost [ 71.248242][ T2941] [ 71.257954][ T2941] EXT4-fs (loop0): Total free blocks count 0 [ 71.269533][ T2941] EXT4-fs (loop0): Free/Dirty block details [ 71.275506][ T2941] EXT4-fs (loop0): free_blocks=2415919104 [ 71.281432][ T2941] EXT4-fs (loop0): dirty_blocks=8192 [ 71.286535][ T2941] EXT4-fs (loop0): Block reservation details [ 71.293126][ T2941] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 71.381568][ T6] usb 7-1: USB disconnect, device number 2 [ 71.391340][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 71.413716][ T2941] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 71.615699][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.635921][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.649648][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.664979][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 71.664995][ T28] audit: type=1400 audit(1743223494.699:586): avc: denied { watch } for pid=2967 comm="syz.5.1097" path="/130/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 71.694064][ T2970] SELinux: failed to load policy [ 71.706828][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.720020][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.729482][ T28] audit: type=1400 audit(1743223494.729:587): avc: denied { load_policy } for pid=2968 comm="syz.0.1098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.751695][ T28] audit: type=1400 audit(1743223494.729:588): avc: denied { unmount } for pid=1785 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 71.771833][ T24] usb 3-1: config 0 descriptor?? [ 71.874644][ T2985] loop0: detected capacity change from 0 to 512 [ 71.900178][ T2985] EXT4-fs: Ignoring removed orlov option [ 71.932552][ T2985] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 71.943370][ T2985] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.003626][ T2955] loop1: detected capacity change from 0 to 131072 [ 72.013585][ T2164] EXT4-fs (loop0): unmounting filesystem. [ 72.023427][ T2955] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 72.031539][ T2955] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.047947][ T2955] F2FS-fs (loop1): invalid crc value [ 72.080333][ T2955] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.113991][ T28] audit: type=1400 audit(1743223495.149:589): avc: denied { write } for pid=3001 comm="syz.0.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.147566][ T28] audit: type=1400 audit(1743223495.179:590): avc: denied { create } for pid=2996 comm="syz.6.1108" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.168636][ T3002] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.177831][ T2955] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.182098][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0xd [ 72.185527][ T2955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 72.199159][ T3002] FAT-fs (loop13): unable to read boot sector [ 72.205824][ T24] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 72.238480][ T24] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 72.240281][ T28] audit: type=1400 audit(1743223495.209:591): avc: denied { mounton } for pid=2996 comm="syz.6.1108" path="/69/file0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.322966][ T28] audit: type=1400 audit(1743223495.249:592): avc: denied { unlink } for pid=2138 comm="syz-executor" name="file0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 72.467499][ T3029] loop6: detected capacity change from 0 to 2048 [ 72.501258][ T28] audit: type=1400 audit(1743223495.529:593): avc: denied { name_bind } for pid=3032 comm="syz.0.1122" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 72.544294][ T3029] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 72.562290][ T3042] loop5: detected capacity change from 0 to 128 [ 72.645039][ T2138] EXT4-fs (loop6): unmounting filesystem. [ 72.677043][ T28] audit: type=1400 audit(1743223495.709:594): avc: denied { connect } for pid=3045 comm="syz.5.1128" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.726061][ T28] audit: type=1400 audit(1743223495.729:595): avc: denied { ioctl } for pid=3045 comm="syz.5.1128" path="socket:[29737]" dev="sockfs" ino=29737 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.802697][ T3059] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1115'. [ 72.854533][ T3063] loop5: detected capacity change from 0 to 128 [ 72.856225][ T3065] loop1: detected capacity change from 0 to 512 [ 72.884732][ T3063] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.902632][ T3065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.912402][ T3063] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.921452][ T3065] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.958089][ T486] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 72.984967][ T495] EXT4-fs (loop1): unmounting filesystem. [ 72.991288][ T6] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.182293][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.202153][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.214750][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.228664][ T6] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.238708][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.247712][ T6] usb 7-1: config 0 descriptor?? [ 73.545773][ T3126] 9pnet: p9_errstr2errno: server reported unknown error @ÿ0x0000000000000004 [ 73.664297][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.672720][ T3135] loop0: detected capacity change from 0 to 8192 [ 73.682956][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.690369][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.702578][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.709910][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.717444][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.725083][ T3135] loop0: p3 p4 < > [ 73.725452][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.728807][ T3135] loop0: p3 start 18548 is beyond EOD, [ 73.737950][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.751416][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.757593][ T3135] truncated [ 73.758630][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.769321][ T6] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 73.781918][ T102] loop0: p3 p4 < > [ 73.785644][ T102] loop0: p3 start 18548 is beyond EOD, truncated [ 73.804709][ T6] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 73.839150][ T6] plantronics 0003:047F:FFFF.0010: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 73.865996][ T1101] udevd[1101]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.871217][ T501] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 73.949632][ T6] usb 7-1: USB disconnect, device number 3 [ 74.050105][ T3146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1170'. [ 74.082282][ T501] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.113881][ T501] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.141921][ T501] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.159912][ T501] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.167973][ T501] usb 6-1: SerialNumber: syz [ 74.217238][ T3156] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1176'. [ 74.341840][ T24] usb 3-1: USB disconnect, device number 12 [ 74.376480][ T501] usb 6-1: 0:2 : does not exist [ 74.386416][ T501] usb 6-1: USB disconnect, device number 5 [ 74.440840][ T3159] loop0: detected capacity change from 0 to 40427 [ 74.493269][ T3159] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.501051][ T3159] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.510983][ T3175] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1182'. [ 74.521515][ T3159] F2FS-fs (loop0): invalid crc value [ 74.545635][ T3159] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 74.558210][ T3159] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 74.600944][ T3159] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.608357][ T496] udevd[496]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.624005][ T3159] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.741185][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 74.931215][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 74.937469][ T24] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 74.955654][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.975877][ T24] usb 3-1: config 0 has no interface number 0 [ 74.991200][ T24] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 75.011163][ T24] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 75.032249][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 75.051151][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.069124][ T24] usb 3-1: Product: syz [ 75.073296][ T2913] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 75.080694][ T24] usb 3-1: Manufacturer: syz [ 75.090706][ T24] usb 3-1: SerialNumber: syz [ 75.101584][ T24] usb 3-1: config 0 descriptor?? [ 75.106632][ T3168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 75.127405][ T3168] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 75.178285][ T3215] kvm: apic: phys broadcast and lowest prio [ 75.184059][ T3215] kvm: apic: phys broadcast and lowest prio [ 75.188789][ T3208] loop5: detected capacity change from 0 to 40427 [ 75.201281][ T3208] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 75.215257][ T3208] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 75.225313][ T3208] F2FS-fs (loop5): Found nat_bits in checkpoint [ 75.261172][ T2913] usb 1-1: Using ep0 maxpacket: 16 [ 75.267810][ T3208] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 75.269079][ T2913] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 75.276863][ T3208] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 75.284030][ T2913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.298893][ T2913] usb 1-1: Product: syz [ 75.303104][ T2913] usb 1-1: Manufacturer: syz [ 75.307525][ T2913] usb 1-1: SerialNumber: syz [ 75.312956][ T2913] usb 1-1: config 0 descriptor?? [ 75.319033][ T2913] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 75.338745][ T2913] usb 1-1: Detected FT232H [ 75.347253][ T6] usb 3-1: USB disconnect, device number 13 [ 75.361570][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.361570][ T3208] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.482328][ T3226] syz.1.1199[3226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.482416][ T3226] syz.1.1199[3226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.519302][ T2913] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 75.556967][ T2913] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 75.562564][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.562564][ T3208] loop5: rw=2049, sector=77824, nr_sectors = 2072 limit=40427 [ 75.566336][ T2913] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 75.585943][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.585943][ T3208] loop5: rw=2049, sector=79896, nr_sectors = 2024 limit=40427 [ 75.606148][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.606148][ T3208] loop5: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 75.623238][ T2913] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 75.633483][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.633483][ T3208] loop5: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 75.643342][ T2913] usb 1-1: USB disconnect, device number 9 [ 75.681442][ T2913] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 75.685868][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.685868][ T3208] loop5: rw=2049, sector=57344, nr_sectors = 5208 limit=40427 [ 75.693008][ T2913] ftdi_sio 1-1:0.0: device disconnected [ 75.824116][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.824116][ T3208] loop5: rw=2049, sector=62552, nr_sectors = 12880 limit=40427 [ 75.868760][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.868760][ T3208] loop5: rw=2049, sector=75432, nr_sectors = 2392 limit=40427 [ 75.909992][ T3208] syz.5.1195: attempt to access beyond end of device [ 75.909992][ T3208] loop5: rw=2049, sector=81920, nr_sectors = 3944 limit=40427 [ 75.964714][ T1785] syz-executor: attempt to access beyond end of device [ 75.964714][ T1785] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 76.184193][ T3268] loop2: detected capacity change from 0 to 2048 [ 76.203182][ T3268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.225147][ T292] EXT4-fs (loop2): unmounting filesystem. [ 76.343236][ T3281] loop5: detected capacity change from 0 to 256 [ 76.413812][ T3285] loop5: detected capacity change from 0 to 128 [ 76.415840][ T3273] loop0: detected capacity change from 0 to 40427 [ 76.431152][ T611] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.449133][ T3285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 76.460676][ T3273] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 76.467372][ T3285] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.467449][ T3273] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.530726][ T1785] EXT4-fs (loop5): unmounting filesystem. [ 76.537124][ T3273] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.587995][ T3273] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.595087][ T3273] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.618008][ T3283] loop2: detected capacity change from 0 to 40427 [ 76.631203][ T611] usb 7-1: Using ep0 maxpacket: 8 [ 76.637422][ T611] usb 7-1: config 0 has no interfaces? [ 76.645225][ T611] usb 7-1: New USB device found, idVendor=07e8, idProduct=a867, bcdDevice=2d.22 [ 76.654215][ T611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.668324][ T611] usb 7-1: config 0 descriptor?? [ 76.751011][ T3283] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.758981][ T3283] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.779794][ T3292] loop5: detected capacity change from 0 to 40427 [ 76.788408][ T3292] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 76.796071][ T3292] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 76.828636][ T3283] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.862198][ T3292] F2FS-fs (loop5): Found nat_bits in checkpoint [ 76.895217][ T611] usb 7-1: USB disconnect, device number 4 [ 76.903452][ T3283] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.910920][ T3292] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 76.917869][ T3292] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 76.941275][ T3283] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 77.085582][ T292] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 77.085606][ T292] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 77.087771][ T3309] capability: warning: `syz.5.1231' uses 32-bit capabilities (legacy support in use) [ 77.141568][ T292] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 77.141595][ T292] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 77.149289][ T292] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 77.159905][ T292] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 77.167637][ T292] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 77.385375][ T3319] loop5: detected capacity change from 0 to 40427 [ 77.404905][ T3319] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 77.417911][ T3319] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 77.459846][ T3319] F2FS-fs (loop5): Found nat_bits in checkpoint [ 77.508022][ T3319] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 77.515934][ T3319] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 77.556929][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 77.556946][ T28] audit: type=1400 audit(1743223500.589:738): avc: denied { ioctl } for pid=3331 comm="syz.2.1240" path="/227/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.581486][ T3332] incfs_lookup_dentry err:-13 [ 77.593970][ T3319] VFS:Filesystem freeze failed [ 77.669681][ T28] audit: type=1400 audit(1743223500.699:739): avc: denied { create } for pid=3340 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.691492][ T28] audit: type=1400 audit(1743223500.729:740): avc: denied { bind } for pid=3340 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.711255][ T310] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 77.725578][ T28] audit: type=1400 audit(1743223500.729:741): avc: denied { name_bind } for pid=3340 comm="syz.0.1246" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 77.751939][ T28] audit: type=1400 audit(1743223500.729:742): avc: denied { node_bind } for pid=3340 comm="syz.0.1246" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 77.772528][ T28] audit: type=1400 audit(1743223500.749:743): avc: denied { setopt } for pid=3340 comm="syz.0.1246" lport=28196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 77.798234][ T28] audit: type=1400 audit(1743223500.789:744): avc: denied { create } for pid=3344 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.831973][ T28] audit: type=1400 audit(1743223500.789:745): avc: denied { setopt } for pid=3344 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.834283][ T3357] binder: 3356:3357 ioctl c0306201 200000000640 returned -22 [ 77.852174][ T28] audit: type=1400 audit(1743223500.819:746): avc: denied { getopt } for pid=3350 comm="syz.2.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.885807][ T28] audit: type=1400 audit(1743223500.869:747): avc: denied { create } for pid=3353 comm="syz.2.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 77.924312][ T3362] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1255'. [ 77.941298][ T310] usb 7-1: Using ep0 maxpacket: 16 [ 77.947925][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.960282][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.972579][ T3366] loop0: detected capacity change from 0 to 256 [ 77.979302][ T310] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 77.992530][ T310] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 78.003483][ T3366] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 78.016054][ T3366] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1) [ 78.024169][ T310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.031202][ T3366] exFAT-fs (loop0): failed to load alloc-bitmap [ 78.032107][ T611] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 78.038173][ T3366] exFAT-fs (loop0): failed to recognize exfat type [ 78.052588][ T310] usb 7-1: config 0 descriptor?? [ 78.235512][ T611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.246422][ T611] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.256029][ T611] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 78.264925][ T611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.273547][ T611] usb 6-1: config 0 descriptor?? [ 78.401162][ T2913] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 78.471161][ T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 78.479573][ T310] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 78.486621][ T310] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 78.493680][ T310] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 78.501549][ T310] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.6-1/input0 [ 78.581137][ T2913] usb 3-1: Using ep0 maxpacket: 16 [ 78.587315][ T2913] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 78.596012][ T2913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.605953][ T2913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 78.616020][ T2913] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.624908][ T2913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.632813][ T2913] usb 3-1: Product: syz [ 78.636767][ T2913] usb 3-1: Manufacturer: syz [ 78.641243][ T2913] usb 3-1: SerialNumber: syz [ 78.650075][ T611] usbhid 6-1:0.0: can't add hid device: -71 [ 78.656273][ T611] usbhid: probe of 6-1:0.0 failed with error -71 [ 78.663893][ T611] usb 6-1: USB disconnect, device number 6 [ 78.692283][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.701026][ T6] usb 1-1: config 1 has no interface number 0 [ 78.707355][ T6] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.718108][ T6] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 78.727003][ T6] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.738086][ T6] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 99 [ 78.749845][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.758766][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.766865][ T6] usb 1-1: Product: syz [ 78.770855][ T6] usb 1-1: Manufacturer: syz [ 78.775512][ T6] usb 1-1: SerialNumber: syz [ 78.855551][ T3387] loop1: detected capacity change from 0 to 8192 [ 78.863320][ T3387] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.982727][ T3383] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 79.052507][ T2913] usb 3-1: 0:2 : does not exist [ 79.062232][ T3399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3399 comm=syz.5.1272 [ 79.079808][ T310] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device [ 79.090923][ T310] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse [ 79.099838][ T310] kovaplus: probe of 0003:1E7D:2D50.0011 failed with error -71 [ 79.113230][ T310] usb 7-1: USB disconnect, device number 5 [ 79.141810][ T3403] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 79.180199][ T3407] loop5: detected capacity change from 0 to 512 [ 79.192614][ T3407] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1276: inode #1: comm syz.5.1276: iget: illegal inode # [ 79.209476][ T3407] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1276: error while reading EA inode 1 err=-117 [ 79.222248][ T3407] EXT4-fs (loop5): 1 orphan inode deleted [ 79.227807][ T3407] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 79.247978][ T1785] EXT4-fs (loop5): unmounting filesystem. [ 79.601177][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 79.608686][ T3383] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 79.621818][ T6] cdc_ncm 1-1:1.1: bind() failure [ 79.659751][ T2913] usb 3-1: USB disconnect, device number 14 [ 79.787157][ T3428] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 79.794430][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 79.802080][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.812802][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.827631][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.837098][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.845488][ T501] usb 1-1: USB disconnect, device number 10 [ 79.853818][ T24] usb 6-1: config 0 descriptor?? [ 79.859659][ T24] hub 6-1:0.0: USB hub found [ 79.871898][ T496] udevd[496]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.060680][ T24] hub 6-1:0.0: 22 ports detected [ 80.070454][ T24] hub 6-1:0.0: insufficient power available to use all downstream ports [ 80.261007][ T3447] loop2: detected capacity change from 0 to 512 [ 80.274292][ T24] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 80.274620][ T3447] EXT4-fs: dax option not supported [ 80.281161][ T24] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 80.309369][ T3447] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.312730][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 80.318863][ T3447] exFAT-fs (loop2): unable to read boot sector [ 80.330342][ T3447] exFAT-fs (loop2): failed to read boot sector [ 80.337536][ T24] usbhid: probe of 6-1:0.0 failed with error -71 [ 80.354795][ T3447] exFAT-fs (loop2): failed to recognize exfat type [ 80.381962][ T24] usb 6-1: USB disconnect, device number 7 [ 80.466658][ T3464] loop6: detected capacity change from 0 to 256 [ 80.484981][ T3464] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 80.506696][ T3466] device batadv_slave_1 entered promiscuous mode [ 80.525144][ T3463] device batadv_slave_1 left promiscuous mode [ 80.662555][ T3482] loop6: detected capacity change from 0 to 512 [ 80.688338][ T3482] EXT4-fs: Ignoring removed orlov option [ 80.700012][ T3482] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.1309: Attempting to read directory block (0) that is past i_size (256) [ 80.714504][ T3482] EXT4-fs (loop6): Remounting filesystem read-only [ 80.721002][ T3482] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 80.729262][ T3482] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 80.757612][ T2138] EXT4-fs (loop6): unmounting filesystem. [ 80.902346][ T3504] loop2: detected capacity change from 0 to 128 [ 80.935447][ T3504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.944046][ T3504] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.977289][ T292] EXT4-fs (loop2): unmounting filesystem. [ 81.042539][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.049475][ T3509] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.058901][ T3509] device bridge_slave_0 entered promiscuous mode [ 81.065911][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.072975][ T3509] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.082041][ T3509] device bridge_slave_1 entered promiscuous mode [ 81.132519][ T3520] netlink: 'syz.2.1325': attribute type 4 has an invalid length. [ 81.211636][ T310] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 81.252173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.260450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.285167][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.293543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.302382][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.309347][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.317476][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.326569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.334831][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.341799][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.349292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.357726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.385894][ T3509] device veth0_vlan entered promiscuous mode [ 81.392211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.400815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.410230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.418753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.426503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.426790][ T310] usb 6-1: config 0 has an invalid interface number: 18 but max is 0 [ 81.442108][ T328] device bridge_slave_1 left promiscuous mode [ 81.451222][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.461231][ T310] usb 6-1: config 0 has no interface number 0 [ 81.467183][ T310] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 81.477057][ T310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.488948][ T310] usb 6-1: config 0 descriptor?? [ 81.494229][ T328] device bridge_slave_0 left promiscuous mode [ 81.502193][ T310] usb 6-1: bad CDC descriptors [ 81.503128][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.522034][ T328] device veth1_macvtap left promiscuous mode [ 81.614114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.627343][ T3509] device veth1_macvtap entered promiscuous mode [ 81.637883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.649834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.725610][ T6] usb 6-1: USB disconnect, device number 8 [ 81.816390][ T3552] loop7: detected capacity change from 0 to 2048 [ 81.842754][ T3552] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 81.867610][ T3509] EXT4-fs (loop7): unmounting filesystem. [ 81.888187][ T3557] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 81.902470][ T3558] input: syz0 as /devices/virtual/input/input10 [ 81.905147][ T3557] FAT-fs (loop5): unable to read boot sector [ 82.029809][ T3573] loop1: detected capacity change from 0 to 512 [ 82.036632][ T3573] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.050319][ T3573] EXT4-fs (loop1): 1 truncate cleaned up [ 82.056620][ T3573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 82.076675][ T3573] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 82.091852][ T3573] EXT4-fs (loop1): Remounting filesystem read-only [ 82.098239][ T3573] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1347: invalid indirect mapped block 3489660928 (level 0) [ 82.150246][ T3573] EXT4-fs (loop1): Remounting filesystem read-only [ 82.161919][ T3580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.168979][ T3580] IPv6: NLM_F_CREATE should be set when creating new route [ 82.181074][ T3573] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1347: invalid indirect mapped block 6 (level 1) [ 82.201508][ T3573] EXT4-fs (loop1): Remounting filesystem read-only [ 82.225895][ T495] EXT4-fs (loop1): unmounting filesystem. [ 82.336253][ T3601] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 82.365693][ T3601] FAT-fs (loop13): unable to read boot sector [ 82.647160][ T3645] IPv6: sit1: Disabled Multicast RS [ 82.756012][ T3658] tipc: Enabling of bearer rejected, media not registered [ 82.779849][ T3663] input: syz1 as /devices/virtual/input/input11 [ 82.791174][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 82.791189][ T28] audit: type=1400 audit(1743223505.819:788): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=882 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.881540][ T28] audit: type=1400 audit(1743223505.819:789): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=882 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.909976][ T28] audit: type=1400 audit(1743223505.819:790): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=882 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 83.087027][ T3661] loop5: detected capacity change from 0 to 40427 [ 83.093833][ T3661] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 83.101530][ T3661] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 83.123271][ T3659] loop2: detected capacity change from 0 to 40427 [ 83.142807][ T3661] F2FS-fs (loop5): Found nat_bits in checkpoint [ 83.143905][ T3659] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 83.156811][ T3659] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.173374][ T3659] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.228237][ T3659] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.235505][ T3659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.265691][ T3661] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 83.274706][ T3661] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 83.324898][ T3659] bio_check_eod: 4 callbacks suppressed [ 83.324921][ T3659] syz.2.1384: attempt to access beyond end of device [ 83.324921][ T3659] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.344431][ T28] audit: type=1400 audit(1743223506.379:791): avc: denied { remount } for pid=3660 comm="syz.5.1386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.623525][ T3659] syz.2.1384: attempt to access beyond end of device [ 83.623525][ T3659] loop2: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 83.654038][ T3711] overlayfs: conflicting lowerdir path [ 83.661596][ T3659] syz.2.1384: attempt to access beyond end of device [ 83.661596][ T3659] loop2: rw=2049, sector=79880, nr_sectors = 2040 limit=40427 [ 83.704085][ T3659] syz.2.1384: attempt to access beyond end of device [ 83.704085][ T3659] loop2: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 83.750219][ T3659] syz.2.1384: attempt to access beyond end of device [ 83.750219][ T3659] loop2: rw=2049, sector=57344, nr_sectors = 5712 limit=40427 [ 83.808534][ T3659] syz.2.1384: attempt to access beyond end of device [ 83.808534][ T3659] loop2: rw=2049, sector=63056, nr_sectors = 14768 limit=40427 [ 83.835879][ T3659] syz.2.1384: attempt to access beyond end of device [ 83.835879][ T3659] loop2: rw=2049, sector=81920, nr_sectors = 3944 limit=40427 [ 83.857138][ T292] syz-executor: attempt to access beyond end of device [ 83.857138][ T292] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 83.915761][ T28] audit: type=1400 audit(1743223506.949:792): avc: denied { connect } for pid=3729 comm="syz.1.1414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.945580][ T28] audit: type=1400 audit(1743223506.949:793): avc: denied { write } for pid=3729 comm="syz.1.1414" path="socket:[32530]" dev="sockfs" ino=32530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.969217][ T2913] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 83.977070][ T28] audit: type=1400 audit(1743223506.949:794): avc: denied { read } for pid=3729 comm="syz.1.1414" laddr=172.20.20.10 lport=1 faddr=172.20.20.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.081139][ T1061] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 84.133582][ T3735] netlink: 'syz.2.1413': attribute type 4 has an invalid length. [ 84.141277][ T3735] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1413'. [ 84.182679][ T2913] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.194474][ T2913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.205518][ T2913] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.215947][ T2913] usb 7-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 84.224934][ T2913] usb 7-1: New USB device strings: Mfr=0, Product=32, SerialNumber=0 [ 84.233061][ T2913] usb 7-1: Product: syz [ 84.239972][ T2913] usb 7-1: config 0 descriptor?? [ 84.272120][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.279044][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.286481][ T3738] device bridge_slave_0 entered promiscuous mode [ 84.291174][ T1061] usb 6-1: Using ep0 maxpacket: 16 [ 84.293831][ T3738] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.300391][ T1061] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 84.304750][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.320264][ T1061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.320839][ T3738] device bridge_slave_1 entered promiscuous mode [ 84.328109][ T1061] usb 6-1: Product: syz [ 84.328126][ T1061] usb 6-1: Manufacturer: syz [ 84.328140][ T1061] usb 6-1: SerialNumber: syz [ 84.333123][ T1061] usb 6-1: config 0 descriptor?? [ 84.355383][ T1061] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 84.363601][ T1061] usb 6-1: Detected FT232H [ 84.429065][ T3738] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.435956][ T3738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.443073][ T3738] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.449866][ T3738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.451165][ T501] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 84.483994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.492577][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.499720][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.511756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.519824][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.526698][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.536137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.544441][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.551310][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.560314][ T1061] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 84.568445][ T1061] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 84.575583][ T1061] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 84.582852][ T1061] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.597569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.608435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.618187][ T1061] usb 6-1: USB disconnect, device number 9 [ 84.624703][ T1061] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.635273][ T1061] ftdi_sio 6-1:0.0: device disconnected [ 84.642539][ T501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.654330][ T501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.661605][ T3738] device veth0_vlan entered promiscuous mode [ 84.676713][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.683651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.692321][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.699620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.707364][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.714255][ T501] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.726997][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.734018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.741208][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.747901][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.752182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.754861][ T501] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.771360][ T328] device bridge_slave_1 left promiscuous mode [ 84.777291][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.784276][ T501] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.792194][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.798883][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.805862][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.813319][ T501] usb 3-1: config 0 descriptor?? [ 84.820116][ T2913] wacom 0003:056A:010E.0012: unknown main item tag 0x0 [ 84.828297][ T328] device bridge_slave_0 left promiscuous mode [ 84.837329][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.844659][ T2913] wacom 0003:056A:010E.0012: hidraw0: USB HID vff.ea Device [syz] on usb-dummy_hcd.6-1/input0 [ 84.857722][ T328] device veth1_macvtap left promiscuous mode [ 84.863980][ T328] device veth0_vlan left promiscuous mode [ 84.888804][ T310] usb 7-1: USB disconnect, device number 6 [ 85.033509][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.042089][ T3738] device veth1_macvtap entered promiscuous mode [ 85.055525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.064019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.076797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.085220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.162914][ T3758] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 85.174116][ T3758] SELinux: failed to load policy [ 85.179915][ T28] audit: type=1400 audit(1743223508.209:795): avc: denied { mount } for pid=3759 comm="syz.8.1425" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.223776][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.238047][ T28] audit: type=1400 audit(1743223508.239:796): avc: denied { unmount } for pid=3738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.260100][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.269384][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.278935][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.290558][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.301914][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.309234][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.316494][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.323737][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.330956][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.338427][ T501] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 85.345868][ T501] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 85.374814][ T501] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.437452][ T3777] device vlan2 entered promiscuous mode [ 85.457154][ T3777] device gretap0 entered promiscuous mode [ 85.538051][ T501] usb 3-1: USB disconnect, device number 15 [ 85.633148][ T3800] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.641699][ T295] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.651589][ T295] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.662360][ T3801] loop6: detected capacity change from 0 to 1024 [ 85.671431][ T295] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.691189][ T295] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.717897][ T3801] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 85.789027][ T3813] loop8: detected capacity change from 0 to 2048 [ 85.821570][ T3813] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0102] [ 85.829750][ T3813] System zones: 0-7 [ 85.834250][ T3813] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 85.853999][ T3813] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.869007][ T3813] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 85.881660][ T3813] EXT4-fs (loop8): This should not happen!! Data will be lost [ 85.881660][ T3813] [ 85.891826][ T3813] EXT4-fs (loop8): Total free blocks count 0 [ 85.897745][ T3813] EXT4-fs (loop8): Free/Dirty block details [ 85.903898][ T3813] EXT4-fs (loop8): free_blocks=2415919104 [ 85.909466][ T3813] EXT4-fs (loop8): dirty_blocks=16 [ 85.914980][ T3813] EXT4-fs (loop8): Block reservation details [ 85.917120][ T3819] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 85.920780][ T3813] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 86.070359][ T3832] device ip6tnl1 entered promiscuous mode [ 86.103792][ T28] audit: type=1400 audit(1743223509.139:797): avc: denied { unmount } for pid=3738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.181187][ T501] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 86.287837][ T3848] SELinux: Context system_u:object_r:lib_t:s0 is not valid (left unmapped). [ 86.329282][ T3842] loop5: detected capacity change from 0 to 40427 [ 86.353120][ T3842] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 86.360837][ T3842] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 86.374518][ T3851] device bridge1 entered promiscuous mode [ 86.382765][ T3842] F2FS-fs (loop5): invalid crc value [ 86.418559][ T3842] F2FS-fs (loop5): Found nat_bits in checkpoint [ 86.461772][ T3842] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 86.476242][ T3842] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 86.476861][ T2138] EXT4-fs (loop6): unmounting filesystem. [ 86.532477][ T3864] loop6: detected capacity change from 0 to 512 [ 86.541541][ T3864] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.548273][ T3864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 86.565861][ T3864] EXT4-fs (loop6): Test dummy encryption mode enabled [ 86.572630][ T3864] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 86.589338][ T3864] EXT4-fs (loop6): 1 truncate cleaned up [ 86.594864][ T3864] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 86.638321][ T2138] EXT4-fs (loop6): unmounting filesystem. [ 86.701153][ T295] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 86.729059][ T3861] loop2: detected capacity change from 0 to 40427 [ 86.739278][ T3861] F2FS-fs (loop2): invalid crc value [ 86.750012][ T3861] F2FS-fs (loop2): Found nat_bits in checkpoint [ 86.818926][ T3861] F2FS-fs (loop2): Start checkpoint disabled! [ 86.825961][ T3861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 86.892194][ T295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.911154][ T295] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.920720][ T295] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 86.951236][ T295] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.961065][ T295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.971996][ T295] usb 9-1: config 0 descriptor?? [ 87.018047][ T10] kworker/u4:1: attempt to access beyond end of device [ 87.018047][ T10] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.136704][ T3874] loop6: detected capacity change from 0 to 40427 [ 87.158542][ T3874] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 87.170383][ T3883] netlink: 'syz.2.1474': attribute type 10 has an invalid length. [ 87.176504][ T3874] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 87.229389][ T3874] F2FS-fs (loop6): Found nat_bits in checkpoint [ 87.292802][ T3874] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 87.299694][ T3874] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 87.389314][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.399840][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.415923][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.430774][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.441407][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.448947][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.457335][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.465178][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.501145][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.511160][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.518390][ T295] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 87.528027][ T295] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 87.541889][ T295] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 87.659049][ T3895] loop2: detected capacity change from 0 to 40427 [ 87.667039][ T1061] usb 9-1: USB disconnect, device number 2 [ 87.698237][ T3895] F2FS-fs (loop2): invalid crc value [ 87.711320][ T3895] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.747211][ T3895] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 87.779775][ T292] syz-executor: attempt to access beyond end of device [ 87.779775][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.991629][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 87.991654][ T28] audit: type=1400 audit(1743223511.029:805): avc: denied { write } for pid=3924 comm="syz.6.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.057007][ T28] audit: type=1400 audit(1743223511.089:806): avc: denied { write } for pid=3928 comm="syz.6.1490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.077902][ T3929] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1490'. [ 88.129087][ T3933] loop6: detected capacity change from 0 to 512 [ 88.142089][ T3921] loop2: detected capacity change from 0 to 40427 [ 88.149142][ T3921] F2FS-fs (loop2): fault_injection options not supported [ 88.157422][ T496] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.159097][ T3921] F2FS-fs (loop2): invalid crc value [ 88.173602][ T3921] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.207129][ T3937] loop8: detected capacity change from 0 to 512 [ 88.225113][ T3937] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.246267][ T3937] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 88.256568][ T3921] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.264003][ T3937] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 88.273259][ T3937] EXT4-fs error (device loop8): ext4_acquire_dquot:6782: comm syz.8.1493: Failed to acquire dquot type 0 [ 88.291028][ T3937] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 88.307618][ T3937] EXT4-fs (loop8): 1 truncate cleaned up [ 88.313129][ T3937] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 88.328506][ T3937] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 88.343640][ T3738] EXT4-fs (loop8): unmounting filesystem. [ 88.368931][ T3944] loop6: detected capacity change from 0 to 2048 [ 88.415272][ T292] syz-executor: attempt to access beyond end of device [ 88.415272][ T292] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.424481][ T3944] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 88.449989][ T28] audit: type=1400 audit(1743223511.479:807): avc: denied { mounton } for pid=3943 comm="syz.6.1495" path="/149/file0/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.473670][ T3953] loop5: detected capacity change from 0 to 4096 [ 88.492376][ T28] audit: type=1400 audit(1743223511.479:808): avc: denied { write } for pid=3943 comm="syz.6.1495" name=".index" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 88.502771][ T3953] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 88.514409][ T28] audit: type=1400 audit(1743223511.479:809): avc: denied { add_name } for pid=3943 comm="syz.6.1495" name="00000000000000000000000000000003" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 88.546680][ T2138] EXT4-fs (loop6): unmounting filesystem. [ 88.553680][ T28] audit: type=1400 audit(1743223511.509:810): avc: denied { link } for pid=3943 comm="syz.6.1495" name="00000000000000000000000000000003" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 88.568777][ T1785] EXT4-fs (loop5): unmounting filesystem. [ 88.592605][ T28] audit: type=1400 audit(1743223511.519:811): avc: denied { rmdir } for pid=2138 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.592640][ T28] audit: type=1400 audit(1743223511.519:812): avc: denied { rmdir } for pid=2138 comm="syz-executor" name=".index" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 88.723695][ T3968] loop2: detected capacity change from 0 to 2048 [ 88.781978][ T3968] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0102] [ 88.790070][ T3968] System zones: 0-7 [ 88.794481][ T3968] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.807459][ T3983] loop7: detected capacity change from 0 to 512 [ 88.814347][ T3983] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.820494][ T3968] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.835997][ T3968] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 88.859208][ T3983] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 88.870842][ T3988] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.882865][ T501] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 88.892557][ T3988] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.892557][ T3988] [ 88.901785][ T3968] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.901785][ T3968] [ 88.904066][ T3988] EXT4-fs (loop2): Total free blocks count 0 [ 88.917483][ T3988] EXT4-fs (loop2): Free/Dirty block details [ 88.920295][ T3983] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 88.923350][ T3988] EXT4-fs (loop2): free_blocks=2415919104 [ 88.938306][ T3988] EXT4-fs (loop2): dirty_blocks=16 [ 88.943341][ T3988] EXT4-fs (loop2): Block reservation details [ 88.969369][ T3983] EXT4-fs (loop7): changing journal_checksum during remount not supported; ignoring [ 88.970939][ T3995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1515'. [ 88.982814][ T3983] EXT4-fs (loop7): re-mounted. Quota mode: none. [ 89.034356][ T4001] loop2: detected capacity change from 0 to 512 [ 89.041056][ T4001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.061190][ T501] usb 7-1: Using ep0 maxpacket: 32 [ 89.067468][ T3509] EXT4-fs (loop7): unmounting filesystem. [ 89.076276][ T501] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.087869][ T501] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.088213][ T4001] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.1518: corrupted in-inode xattr [ 89.098201][ T501] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.121044][ T501] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.129656][ T501] usb 7-1: config 0 descriptor?? [ 89.132755][ T4007] loop8: detected capacity change from 0 to 128 [ 89.135898][ T501] hub 7-1:0.0: USB hub found [ 89.177398][ T4001] EXT4-fs (loop2): Remounting filesystem read-only [ 89.185349][ T4007] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 89.194173][ T4007] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.204977][ T4001] EXT4-fs (loop2): 1 truncate cleaned up [ 89.242614][ T4001] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.252892][ T3738] EXT4-fs (loop8): unmounting filesystem. [ 89.301669][ T4016] loop8: detected capacity change from 0 to 16 [ 89.303197][ T292] EXT4-fs (loop2): unmounting filesystem. [ 89.315520][ T4016] erofs: (device loop8): erofs_read_superblock: dirblkbits 8 isn't supported [ 89.337324][ T501] hub 7-1:0.0: 22 ports detected [ 89.342380][ T501] hub 7-1:0.0: insufficient power available to use all downstream ports [ 89.397004][ T4016] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1523'. [ 89.542562][ T501] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 89.548743][ T501] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 89.564876][ T501] usbhid 7-1:0.0: can't add hid device: -71 [ 89.570737][ T501] usbhid: probe of 7-1:0.0 failed with error -71 [ 89.602047][ T501] usb 7-1: USB disconnect, device number 7 [ 89.721453][ T295] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 89.861163][ T40] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 89.901516][ T295] usb 6-1: no configurations [ 89.905952][ T295] usb 6-1: can't read configurations, error -22 [ 90.041273][ T40] usb 9-1: Using ep0 maxpacket: 8 [ 90.047422][ T40] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.057545][ T40] usb 9-1: config 0 has no interfaces? [ 90.063557][ T295] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 90.073270][ T40] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 90.083264][ T40] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.091974][ T40] usb 9-1: config 0 descriptor?? [ 90.211386][ T4045] loop7: detected capacity change from 0 to 40427 [ 90.221046][ T4045] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 90.229108][ T4045] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 90.250346][ T4056] loop2: detected capacity change from 0 to 512 [ 90.251558][ T295] usb 6-1: no configurations [ 90.265023][ T295] usb 6-1: can't read configurations, error -22 [ 90.271737][ T295] usb usb6-port1: attempt power cycle [ 90.272476][ T4045] F2FS-fs (loop7): Found nat_bits in checkpoint [ 90.299461][ T6] usb 9-1: USB disconnect, device number 3 [ 90.322090][ T4056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.330837][ T4056] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.361675][ T4045] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 90.371497][ T4045] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 90.379421][ T4056] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 90.394160][ T4056] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 90.406434][ T4056] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.406434][ T4056] [ 90.416763][ T4056] EXT4-fs (loop2): Total free blocks count 0 [ 90.422790][ T4056] EXT4-fs (loop2): Free/Dirty block details [ 90.428550][ T4056] EXT4-fs (loop2): free_blocks=65280 [ 90.435073][ T4056] EXT4-fs (loop2): dirty_blocks=2 [ 90.440016][ T4056] EXT4-fs (loop2): Block reservation details [ 90.446234][ T4056] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 90.469678][ T292] EXT4-fs (loop2): unmounting filesystem. [ 90.499726][ T4068] loop2: detected capacity change from 0 to 256 [ 90.515375][ T4068] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 90.551193][ T40] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 90.681176][ T295] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 90.706073][ T4085] futex_wake_op: syz.2.1552 tries to shift op by -1; fix this program [ 90.721962][ T295] usb 6-1: no configurations [ 90.726498][ T295] usb 6-1: can't read configurations, error -22 [ 90.733709][ T40] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 90.745543][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 90.757025][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.767040][ T40] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.776715][ T40] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 90.789747][ T40] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 90.798653][ T40] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.807092][ T40] usb 7-1: config 0 descriptor?? [ 90.869215][ T4096] loop2: detected capacity change from 0 to 1024 [ 90.891166][ T295] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 90.902726][ T4096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.931896][ T295] usb 6-1: no configurations [ 90.936413][ T295] usb 6-1: can't read configurations, error -22 [ 90.943086][ T4096] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2739: inode #12: comm syz.2.1557: corrupted in-inode xattr [ 90.955980][ T295] usb usb6-port1: unable to enumerate USB device [ 90.980305][ T292] EXT4-fs (loop2): unmounting filesystem. [ 91.032190][ T4106] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1561'. [ 91.226826][ T40] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 91.233761][ T40] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 91.240586][ T40] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 91.247396][ T40] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 91.254271][ T40] elecom 0003:056E:00FE.0015: unknown main item tag 0x0 [ 91.262860][ T40] elecom 0003:056E:00FE.0015: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.6-1/input0 [ 91.371143][ T295] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 91.401181][ T6] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 91.427361][ T40] usb 7-1: USB disconnect, device number 8 [ 91.552289][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.563419][ T295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.573046][ T295] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 91.581949][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.590619][ T295] usb 3-1: config 0 descriptor?? [ 91.593605][ T6] usb 9-1: Using ep0 maxpacket: 8 [ 91.601403][ T6] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 91.610396][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.619049][ T6] usb 9-1: config 0 descriptor?? [ 91.945469][ T4126] loop6: detected capacity change from 0 to 256 [ 91.951977][ T4126] exfat: Deprecated parameter 'namecase' [ 91.958652][ T4126] exfat: Deprecated parameter 'utf8' [ 91.969764][ T4126] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 91.999110][ T295] hid-led 0003:0FC5:B080.0016: unknown main item tag 0x0 [ 92.409809][ T295] hid-led: probe of 0003:0FC5:B080.0016 failed with error -32 [ 92.418808][ T295] usb 3-1: USB disconnect, device number 16 [ 92.440924][ T4170] loop6: detected capacity change from 0 to 512 [ 92.451554][ T4170] EXT4-fs (loop6): 1 truncate cleaned up [ 92.457024][ T4170] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 92.489456][ T4175] loop7: detected capacity change from 0 to 256 [ 92.517784][ T2138] EXT4-fs (loop6): unmounting filesystem. [ 92.530472][ T4175] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.558812][ T4175] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 92.569503][ T4175] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 92.571778][ T4181] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 92.590748][ T4181] SELinux: failed to load policy [ 92.627339][ T6] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.657191][ T6] asix: probe of 9-1:0.0 failed with error -71 [ 92.671852][ T6] usb 9-1: USB disconnect, device number 4 [ 92.703037][ T4192] syz.6.1591[4192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.703116][ T4192] syz.6.1591[4192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.782077][ T4200] loop5: detected capacity change from 0 to 2048 [ 92.790651][ T4203] random: crng reseeded on system resumption [ 92.823092][ T4200] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 92.840445][ T10] tipc: Subscription rejected, illegal request [ 92.848401][ T1785] EXT4-fs (loop5): unmounting filesystem. [ 92.956883][ T4221] loop2: detected capacity change from 0 to 1024 [ 92.983767][ T4221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.004371][ T292] EXT4-fs (loop2): unmounting filesystem. [ 93.043974][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 93.043991][ T28] audit: type=1400 audit(1743223516.079:847): avc: denied { append } for pid=4229 comm="syz.7.1607" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 93.135383][ T4239] loop2: detected capacity change from 0 to 256 [ 93.152015][ T496] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.175447][ T4244] syz.7.1613 uses obsolete (PF_INET,SOCK_PACKET) [ 93.219391][ T28] audit: type=1400 audit(1743223516.249:848): avc: denied { write } for pid=4249 comm="syz.2.1616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 93.254771][ T4250] loop2: detected capacity change from 0 to 1024 [ 93.257611][ T4254] loop8: detected capacity change from 0 to 1024 [ 93.267623][ T4254] EXT4-fs: Ignoring removed nobh option [ 93.276530][ T4254] EXT4-fs: Ignoring removed bh option [ 93.282608][ T4254] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 93.294720][ T4250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.312675][ T4254] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 93.322830][ T292] EXT4-fs (loop2): unmounting filesystem. [ 93.345931][ T3738] EXT4-fs (loop8): unmounting filesystem. [ 93.391362][ T295] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 93.459620][ T28] audit: type=1400 audit(1743223516.489:849): avc: denied { write } for pid=24 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35961 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.497114][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 93.541546][ T4283] loop2: detected capacity change from 0 to 128 [ 93.552893][ T4283] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.579568][ T4287] loop2: detected capacity change from 0 to 256 [ 93.591181][ T295] usb 6-1: Using ep0 maxpacket: 16 [ 93.598666][ T295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.614364][ T295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.624053][ T295] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.637160][ T295] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.646054][ T295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.654663][ T295] usb 6-1: config 0 descriptor?? [ 93.680100][ T4292] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 93.687821][ T4292] #PF: supervisor instruction fetch in kernel mode [ 93.694158][ T4292] #PF: error_code(0x0010) - not-present page [ 93.699972][ T4292] PGD 128876067 P4D 128876067 PUD 0 [ 93.705094][ T4292] Oops: 0010 [#1] PREEMPT SMP KASAN [ 93.710123][ T4292] CPU: 0 PID: 4292 Comm: syz.2.1633 Not tainted 6.1.129-syzkaller-00051-gc1fd50266bd6 #0 [ 93.719756][ T4292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.729671][ T4292] RIP: 0010:0x0 [ 93.732963][ T4292] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 93.740156][ T4292] RSP: 0018:ffffc90000d26ff8 EFLAGS: 00010246 [ 93.746054][ T4292] RAX: 1ffff920001a4eb8 RBX: dffffc0000000000 RCX: 0000000000080000 [ 93.753876][ T4292] RDX: ffffc90002a9f000 RSI: ffffea0004d79200 RDI: ffff88811198f980 [ 93.761672][ T4292] RBP: ffffc90000d27150 R08: ffffffff81a49318 R09: fffff940009af247 [ 93.769486][ T4292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000d275c0 [ 93.777297][ T4292] R13: ffffea0004d79200 R14: ffffc90000d275d8 R15: 0000000000000000 [ 93.785106][ T4292] FS: 00007f8d4a19c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 93.793877][ T4292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.800300][ T4292] CR2: ffffffffffffffd6 CR3: 0000000121cd9000 CR4: 00000000003506b0 [ 93.808113][ T4292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.815919][ T4292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.823734][ T4292] Call Trace: [ 93.826858][ T4292] [ 93.829640][ T4292] ? __die_body+0x62/0xb0 [ 93.833922][ T4292] ? __die+0x7e/0x90 [ 93.837654][ T4292] ? page_fault_oops+0x7f9/0xa90 [ 93.842421][ T4292] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 93.847808][ T4292] ? cgroup_rstat_updated+0xe5/0x370 [ 93.852928][ T4292] ? is_errata93+0xc7/0x240 [ 93.857350][ T4292] ? exc_page_fault+0x529/0x6d0 [ 93.862565][ T4292] ? asm_exc_page_fault+0x27/0x30 [ 93.867501][ T4292] ? read_pages+0x838/0xd40 [ 93.871844][ T4292] read_pages+0x89c/0xd40 [ 93.876005][ T4292] ? workingset_activation+0x430/0x430 [ 93.881402][ T4292] ? folio_add_lru+0x280/0x3f0 [ 93.886002][ T4292] ? page_cache_ra_unbounded+0x800/0x800 [ 93.891467][ T4292] ? filemap_add_folio+0x18f/0x200 [ 93.896427][ T4292] ? __filemap_add_folio+0xdb0/0xdb0 [ 93.901537][ T4292] page_cache_ra_order+0x822/0xc40 [ 93.906488][ T4292] ? do_page_cache_ra+0x110/0x110 [ 93.911343][ T4292] ? xas_create+0xf3a/0x1630 [ 93.915770][ T4292] ondemand_readahead+0x925/0xef0 [ 93.920629][ T4292] ? cgroup_rstat_updated+0xe5/0x370 [ 93.925758][ T4292] ? page_cache_sync_ra+0x450/0x450 [ 93.930785][ T4292] ? blk_cgroup_congested+0x132/0x150 [ 93.935992][ T4292] page_cache_sync_ra+0x3d6/0x450 [ 93.940862][ T4292] hpage_collapse_scan_file+0x196e/0x48c0 [ 93.946414][ T4292] ? hugepage_vma_revalidate+0x310/0x310 [ 93.951879][ T4292] ? mutex_unlock+0xb2/0x260 [ 93.956307][ T4292] ? __lru_add_drain_all+0x70f/0x770 [ 93.961432][ T4292] madvise_collapse+0x639/0xcf0 [ 93.966112][ T4292] ? khugepaged_min_free_kbytes_update+0x90/0x90 [ 93.972271][ T4292] ? memset+0x35/0x40 [ 93.976089][ T4292] ? blk_start_plug+0x9c/0x130 [ 93.980722][ T4292] do_madvise+0x1604/0x40b0 [ 93.985030][ T4292] ? __kasan_check_write+0x14/0x20 [ 93.989988][ T4292] ? madvise_set_anon_name+0x4c0/0x4c0 [ 93.995273][ T4292] ? __kasan_check_read+0x11/0x20 [ 94.000136][ T4292] ? schedule+0xda/0x180 [ 94.004211][ T4292] ? futex_unqueue+0x110/0x140 [ 94.008814][ T4292] ? futex_wait+0x4b7/0x7e0 [ 94.013151][ T4292] ? futex_wait_setup+0x330/0x330 [ 94.018106][ T4292] ? handle_mm_fault+0x2b2d/0x30e0 [ 94.023047][ T4292] ? do_futex+0x55a/0x9a0 [ 94.027212][ T4292] ? __ia32_sys_get_robust_list+0x90/0x90 [ 94.032768][ T4292] ? xfd_validate_state+0x6f/0x170 [ 94.037717][ T4292] ? fpregs_restore_userregs+0x130/0x290 [ 94.043183][ T4292] __x64_sys_madvise+0xa8/0xc0 [ 94.047791][ T4292] x64_sys_call+0xec/0x9a0 [ 94.052037][ T4292] do_syscall_64+0x3b/0xb0 [ 94.056306][ T4292] ? clear_bhb_loop+0x55/0xb0 [ 94.060799][ T4292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.066531][ T4292] RIP: 0033:0x7f8d4938d169 [ 94.070784][ T4292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.090224][ T4292] RSP: 002b:00007f8d4a19c038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 94.098468][ T4292] RAX: ffffffffffffffda RBX: 00007f8d495a5fa0 RCX: 00007f8d4938d169 [ 94.106285][ T4292] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 94.114092][ T4292] RBP: 00007f8d4940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.121906][ T4292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.129717][ T4292] R13: 0000000000000000 R14: 00007f8d495a5fa0 R15: 00007ffe5ca32fb8 [ 94.137530][ T4292] [ 94.140389][ T4292] Modules linked in: [ 94.144137][ T4292] CR2: 0000000000000000 [ 94.148122][ T4292] ---[ end trace 0000000000000000 ]--- [ 94.153409][ T4292] RIP: 0010:0x0 [ 94.156710][ T4292] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 94.163911][ T4292] RSP: 0018:ffffc90000d26ff8 EFLAGS: 00010246 [ 94.169812][ T4292] RAX: 1ffff920001a4eb8 RBX: dffffc0000000000 RCX: 0000000000080000 [ 94.177625][ T4292] RDX: ffffc90002a9f000 RSI: ffffea0004d79200 RDI: ffff88811198f980 [ 94.185606][ T4292] RBP: ffffc90000d27150 R08: ffffffff81a49318 R09: fffff940009af247 [ 94.193418][ T4292] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000d275c0 [ 94.201316][ T4292] R13: ffffea0004d79200 R14: ffffc90000d275d8 R15: 0000000000000000 [ 94.209130][ T4292] FS: 00007f8d4a19c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 94.217892][ T4292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.224315][ T4292] CR2: ffffffffffffffd6 CR3: 0000000121cd9000 CR4: 00000000003506b0 [ 94.232130][ T4292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.239939][ T4292] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.247750][ T4292] Kernel panic - not syncing: Fatal exception [ 94.253982][ T4292] Kernel Offset: disabled [ 94.258116][ T4292] Rebooting in 86400 seconds..