last executing test programs: 2m43.349582204s ago: executing program 0 (id=1): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x44000290) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x58) 2m43.293408229s ago: executing program 0 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='./file1\x00', 0x44000268) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2m43.262461583s ago: executing program 0 (id=11): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000880)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@uni_xlate}, {@utf8no}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x371, &(0x7f0000000980)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x30) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x60142, 0x0) fallocate(r0, 0x11, 0x0, 0x2000) 2m42.833912184s ago: executing program 0 (id=27): r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$selinux_create(r0, &(0x7f0000000500)=@access={'system_u:object_r:udev_tbl_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0xb05}, 0x63) 2m42.688706378s ago: executing program 0 (id=30): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2m42.642461522s ago: executing program 32 (id=30): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 17.129822823s ago: executing program 5 (id=3362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 17.118301564s ago: executing program 2 (id=3363): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) 17.114065175s ago: executing program 5 (id=3364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 17.103340976s ago: executing program 5 (id=3365): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, 0x0) 17.081890908s ago: executing program 2 (id=3367): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_macvtap\x00', 0xfdaf) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 17.073951428s ago: executing program 2 (id=3368): unshare(0x30030600) fsopen(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000c80)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@shortname_win95}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@uni_xlate}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f0000000900)="$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") bind$xdp(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) 17.070462849s ago: executing program 5 (id=3369): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x20) 16.84370695s ago: executing program 5 (id=3374): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x1f, 0x28, 0x66, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @broadcast}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x80}}}}}}, 0x0) 16.793201846s ago: executing program 2 (id=3379): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@discard_unit_segment}, {@jqfmt_vfsold}, {@disable_ext_identify}, {@compress_cache}, {@inline_xattr}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '7\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {@nogc_merge}, {@noheap}, {@test_dummy_encryption_v1}, {}, {@background_gc_on}, {@lfs_mode}, {@discard}]}, 0xfd, 0x5529, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4068, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) fsync(r0) 16.731077051s ago: executing program 5 (id=3382): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16.657341869s ago: executing program 33 (id=3382): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 16.312676602s ago: executing program 2 (id=3399): mkdirat(0xffffffffffffff9c, &(0x7f0000002dc0)='./file0\x00', 0x108) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000380)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x8, 0x4000, 0x4000) 16.088544923s ago: executing program 2 (id=3403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000008c0)={{0x2, 0x0, 0xffffffffffffffc3, {0x1000, 0x2000}}, "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", "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"}) 16.061766606s ago: executing program 34 (id=3403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000008c0)={{0x2, 0x0, 0xffffffffffffffc3, {0x1000, 0x2000}}, "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", "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"}) 15.033917783s ago: executing program 7 (id=3428): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_key={0x3, 0x9, 0x80, 0x0, "01d78771b90bd8a3b4914783c5877700"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}]}, 0x50}, 0x1, 0x7}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1) 12.013636113s ago: executing program 7 (id=3536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x20000014}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0xa, 0x0, 0x0) 11.998082954s ago: executing program 7 (id=3537): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x15, 0x1f, {0x1f, 0x22, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.612908322s ago: executing program 7 (id=3628): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@discard_unit_segment}, {@jqfmt_vfsold}, {@disable_ext_identify}, {@compress_cache}, {@inline_xattr}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '7\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {@nogc_merge}, {@noheap}, {@test_dummy_encryption_v1}, {}, {@background_gc_on}, {@lfs_mode}, {@discard}]}, 0xfd, 0x5529, &(0x7f0000000600)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4068, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121542, 0x60) fsync(r0) 9.42036253s ago: executing program 7 (id=3629): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) 9.220762419s ago: executing program 7 (id=3631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 9.22054817s ago: executing program 35 (id=3631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 8.496130759s ago: executing program 8 (id=3660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000240)='io_uring_submit_sqe\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x954, &(0x7f0000000480)={0x0, 0x1, 0x400, 0x0, 0x193}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 8.444598094s ago: executing program 8 (id=3661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000500)={[0xfffffffffffffff9]}, 0x0, 0x8) 8.400658728s ago: executing program 8 (id=3662): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xffffbffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) poll(&(0x7f00000000c0)=[{r0, 0x20}], 0x1, 0x7981) r1 = syz_open_pts(r0, 0x400) ioctl$TCFLSH(r1, 0x540b, 0x2) 7.556707859s ago: executing program 8 (id=3672): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x0, 0x0, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) 7.279247315s ago: executing program 8 (id=3675): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c250000000000202c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 6.516705878s ago: executing program 8 (id=3684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='rss_stat\x00', r0}, 0x18) syz_clone(0x62005000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 6.501435359s ago: executing program 36 (id=3684): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='rss_stat\x00', r0}, 0x18) syz_clone(0x62005000, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 2.648311147s ago: executing program 4 (id=3811): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0xc) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c80)="e6", 0x1}], 0x1}}], 0x2, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 2.62378397s ago: executing program 4 (id=3813): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003680)=@newtfilter={0xa4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0xd, 0x7}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x11, 0xef, 0x6, 0x8, 0x5, 0x5, 0x7, 0x0, [{0x1000, 0x5, 0x8001, 0x6}, {0xb, 0x3, 0x9, 0x3}, {0xfffffff9, 0x43, 0x8001, 0x4}, {0x7fde, 0x8, 0x51, 0x3ff}, {0x5, 0x1000b, 0x2002, 0x42}, {0x5, 0x4, 0x8, 0x8}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x40) write(r0, &(0x7f0000000280)="217fbea1098e21673cad7acfa217f00d11c7ba4f405e11c2e94f0c37e9ddf0ea7d8c5024b6aa37e65d501f77a52500d963d32a43541481d36e6f71652bc75729c04fd55dcfd7423a2eb85b970181a9c4c01a3f1d0b514a9d41b40ff1d1e797958b4637ca1353b2fa200ce17b9118bf22055c67bd879d8206ae7dc8abe4a3e13ecbf65d12ffa85cf9bca85c021a77d72a5e7c2220bca5c843b2fd79bcb1af2087be69a6ec32ed6063732840a7c5188b71fea5e1451856fbb7581175a21fc6cf56b1b7601352fe9556de7b29150587e7dd8cf19292b5faa1a2cc5d0098f92a0fa0d10e7ab782e7de758566ce6b590d", 0xee) 2.62316858s ago: executing program 4 (id=3815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) 2.601318942s ago: executing program 4 (id=3817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 2.600117512s ago: executing program 4 (id=3819): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x24, 0x6, {0x6, 0xc, "fbeb4797"}}, 0x0}, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 757.398838ms ago: executing program 4 (id=3885): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tkill(r0, 0x6) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000280)=[{}]) 573.361796ms ago: executing program 3 (id=3893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x0, 0x1}}], 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x2c, 0x11, 0x839, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x1, 0x10}, {0x4, 0xa}, {0x1, 0x1d}}, [{0x8, 0xb, 0x6}]}, 0x2c}}, 0x80) 511.831122ms ago: executing program 3 (id=3896): io_setup(0x1, &(0x7f00000004c0)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 471.768686ms ago: executing program 1 (id=3899): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x5000000, 0x0) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 460.076807ms ago: executing program 1 (id=3900): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) alarm(0x4) 448.807548ms ago: executing program 1 (id=3901): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 425.54156ms ago: executing program 3 (id=3902): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 411.651072ms ago: executing program 9 (id=3903): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x3}, 0x20) 411.195801ms ago: executing program 3 (id=3904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000000)={0xcc, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0xff, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x1, 0x1000, 0xc, 0x9, 0x4, 0xc4, 0x0, 0x5, 0x6a, 0x3, 0x0, 0xfb}, {0x1, 0xd000, 0x6, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x4, 0x4}, {0x6000, 0x100000, 0xf, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3e}, {0xeefe0000, 0x0, 0x0, 0x78, 0x8, 0x0, 0x2, 0x0, 0x40, 0xfe, 0x5}, {0x0, 0xeeee8000, 0x0, 0x4, 0x4, 0x2, 0xa1, 0x20}, {0xf000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x8}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8ffcf, 0x0, 0x0, 0x122, 0x0, 0x800, 0x0, [0x80000001, 0x0, 0x1]}) 398.956382ms ago: executing program 9 (id=3905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 303.861542ms ago: executing program 6 (id=3911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 303.521872ms ago: executing program 3 (id=3912): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 294.289263ms ago: executing program 6 (id=3913): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 293.764063ms ago: executing program 1 (id=3914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 276.836944ms ago: executing program 6 (id=3915): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 276.176004ms ago: executing program 1 (id=3916): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200880, &(0x7f0000000280)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@nogrpid}, {@grpquota}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@barrier}, {@stripe}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 262.603806ms ago: executing program 6 (id=3917): memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccN\xbdg4\xee\x8c\xd7\x19jz\x05\x8ez\x97\x93D\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbe\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5Dz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xff], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @loopback, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x68}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 260.055386ms ago: executing program 9 (id=3918): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008085}, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r0, 0x1, &(0x7f0000000140)={0x1b, 0x7, 0x7}) 231.474229ms ago: executing program 6 (id=3919): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190da) 231.116429ms ago: executing program 1 (id=3920): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x406, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x811008, 0xffffffffffffffff, 0x1, 0x0, 0x0) 230.846619ms ago: executing program 9 (id=3921): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x3f, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550c, 0x0) 120.302709ms ago: executing program 3 (id=3922): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8002}, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4) 68.216094ms ago: executing program 6 (id=3923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x41, 0xdc, 0x32, 0x8, 0xb57, 0x2a8d, 0x3374, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x3, 0x1, 0x3, 0x1, 0x2, 0x0, [], [{{0x9, 0x5, 0x88, 0x3, 0x400, 0xfe, 0xfa, 0x1}}]}}]}}]}}, 0x0) 260.44µs ago: executing program 9 (id=3924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4082, 0xff2, 0x0, 0x0}, &(0x7f0000000300)=0x40) 0s ago: executing program 9 (id=3925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048051}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) kernel console output (not intermixed with test programs): =file permissive=1 [ 141.155632][ T287] EXT4-fs (loop2): unmounting filesystem. [ 141.163546][ T24] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x2 [ 141.171498][ T24] hid-generic 0000:3000000:0000.0035: unknown main item tag 0x3 [ 141.179499][ T28] audit: type=1400 audit(1766659146.996:1061): avc: denied { bind } for pid=7275 comm="syz.3.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.205206][ T24] hid-generic 0000:3000000:0000.0035: hidraw0: HID v0.00 Device [sy] on syz0 [ 141.279496][ T7292] fido_id[7292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 141.298121][ T765] tipc: Subscription rejected, illegal request [ 141.397757][ T28] audit: type=1400 audit(1766659147.236:1062): avc: denied { mount } for pid=7305 comm="syz.3.2692" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 141.461480][ T7316] SELinux: failed to load policy [ 141.502477][ T7325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.509716][ T7325] IPv6: NLM_F_CREATE should be set when creating new route [ 141.545435][ T7333] loop4: detected capacity change from 0 to 512 [ 141.601355][ T7333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.611060][ T7333] ext4 filesystem being mounted at /604/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.689754][ T24] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 141.828290][ T286] EXT4-fs (loop4): unmounting filesystem. [ 141.859772][ T297] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 141.879751][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 141.885858][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 141.907508][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.917389][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.927242][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 141.937397][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 141.947229][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 141.956673][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.966025][ T7369] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2718'. [ 141.975205][ T24] usb 6-1: config 0 descriptor?? [ 142.051131][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.065630][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.080189][ T297] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 142.091685][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.112953][ T297] usb 3-1: config 0 descriptor?? [ 142.200092][ T24] usb 6-1: USB disconnect, device number 24 [ 142.213365][ T7398] loop4: detected capacity change from 0 to 512 [ 142.265534][ T2881] printk: udevd: 1 output lines suppressed due to ratelimiting [ 142.274241][ T7398] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 142.299841][ T7398] ext4 filesystem being mounted at /609/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.347748][ T286] EXT4-fs (loop4): unmounting filesystem. [ 142.507125][ T7424] loop3: detected capacity change from 0 to 128 [ 142.524348][ T297] hid-rmi 0003:1532:011D.0036: hidraw0: USB HID v0.08 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0 [ 142.529409][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 142.529422][ T28] audit: type=1400 audit(1766659148.366:1064): avc: denied { remount } for pid=7423 comm="syz.3.2741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 142.574184][ T7429] loop3: detected capacity change from 0 to 512 [ 142.592671][ T7429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.601672][ T7429] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.606404][ T28] audit: type=1400 audit(1766659148.446:1065): avc: denied { ioctl } for pid=7432 comm="syz.4.2744" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 142.659868][ T7437] loop4: detected capacity change from 0 to 1024 [ 142.672728][ T7437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.684820][ T28] audit: type=1400 audit(1766659148.526:1066): avc: denied { mounton } for pid=7436 comm="syz.4.2746" path="/615/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 142.708017][ T28] audit: type=1400 audit(1766659148.526:1067): avc: denied { write } for pid=7436 comm="syz.4.2746" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.730749][ T28] audit: type=1400 audit(1766659148.526:1068): avc: denied { add_name } for pid=7436 comm="syz.4.2746" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.734677][ T24] usb 3-1: USB disconnect, device number 23 [ 142.751887][ T28] audit: type=1400 audit(1766659148.526:1069): avc: denied { read write } for pid=7436 comm="syz.4.2746" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.763090][ T7441] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2747'. [ 142.780238][ T28] audit: type=1400 audit(1766659148.526:1070): avc: denied { open } for pid=7436 comm="syz.4.2746" path="/615/file1/bus/file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.812760][ T28] audit: type=1400 audit(1766659148.526:1071): avc: denied { setattr } for pid=7436 comm="syz.4.2746" name="#20" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.835301][ T28] audit: type=1400 audit(1766659148.526:1072): avc: denied { link } for pid=7436 comm="syz.4.2746" name="#20" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.836918][ T286] EXT4-fs (loop4): unmounting filesystem. [ 142.857285][ T28] audit: type=1400 audit(1766659148.556:1073): avc: denied { unlink } for pid=286 comm="syz-executor" name="file2" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 142.859799][ T1717] EXT4-fs (loop3): unmounting filesystem. [ 142.929046][ T7452] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2752'. [ 142.949976][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2755'. [ 142.959043][ T7458] device bridge_slave_1 left promiscuous mode [ 142.965618][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.973493][ T7458] device bridge_slave_0 left promiscuous mode [ 142.979679][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.117461][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2768'. [ 143.174816][ T7497] loop4: detected capacity change from 0 to 16 [ 143.181535][ T7497] erofs: (device loop4): mounted with root inode @ nid 36. [ 143.282883][ T7511] loop2: detected capacity change from 0 to 512 [ 143.290880][ T7511] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 143.318681][ T7514] netlink: 'syz.1.2780': attribute type 1 has an invalid length. [ 143.381664][ T835] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 143.411138][ T7524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.421813][ T7524] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.461460][ T7537] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 143.468102][ T7537] dvmrp1: linktype set to 4 [ 143.469235][ T7540] syz.1.2793[7540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.472721][ T7540] syz.1.2793[7540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.520875][ T835] Bluetooth: hci0: Frame reassembly failed (-84) [ 143.540121][ T335] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 143.616911][ T7549] loop2: detected capacity change from 0 to 512 [ 143.623494][ T7549] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.719751][ T335] usb 6-1: Using ep0 maxpacket: 8 [ 143.725950][ T335] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 143.734862][ T335] usb 6-1: config 0 has no interface number 0 [ 143.742853][ T335] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 143.752422][ T335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.760462][ T335] usb 6-1: Product: syz [ 143.764709][ T335] usb 6-1: Manufacturer: syz [ 143.769300][ T335] usb 6-1: SerialNumber: syz [ 143.770841][ T7567] loop2: detected capacity change from 0 to 128 [ 143.779784][ T297] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.782184][ T7567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 143.787874][ T335] usb 6-1: config 0 descriptor?? [ 143.817480][ T287] EXT4-fs (loop2): unmounting filesystem. [ 143.979759][ T297] usb 2-1: Using ep0 maxpacket: 16 [ 143.986122][ T297] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 143.996903][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.007183][ T297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 144.020139][ T335] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 144.026490][ T335] usb 6-1: No valid video chain found. [ 144.031963][ T297] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 144.036740][ T7570] binder: 7569:7570 ioctl c0306201 200000001a80 returned -14 [ 144.042303][ T335] usb 6-1: USB disconnect, device number 25 [ 144.054372][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.063090][ T297] usb 2-1: config 0 descriptor?? [ 144.469879][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.469908][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.469936][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.469958][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.469978][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.505114][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.512263][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.512287][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.512306][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.512326][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.512344][ T297] samsung 0003:0419:0001.0037: unknown main item tag 0x0 [ 144.520132][ T297] samsung 0003:0419:0001.0037: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 144.644031][ T7592] bridge0: port 3(gretap0) entered blocking state [ 144.644053][ T7592] bridge0: port 3(gretap0) entered disabled state [ 144.644650][ T7592] bridge0: port 3(gretap0) entered blocking state [ 144.663460][ T7592] bridge0: port 3(gretap0) entered forwarding state [ 144.673226][ T7592] bridge0: port 3(gretap0) entered disabled state [ 144.681162][ T24] usb 2-1: USB disconnect, device number 21 [ 144.930516][ T7596] loop2: detected capacity change from 0 to 2048 [ 144.950766][ T7596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.974691][ T287] EXT4-fs (loop2): unmounting filesystem. [ 145.475356][ T7641] loop2: detected capacity change from 0 to 1024 [ 145.491689][ T7641] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 145.493069][ T7644] input: syz0 as /devices/virtual/input/input37 [ 145.507683][ T7641] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 145.521030][ T7641] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.537645][ T7641] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.2834: Inode bitmap for bg 0 marked uninitialized [ 145.554210][ T7641] EXT4-fs (loop2): Remounting filesystem read-only [ 145.561153][ T7641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.570213][ T460] Bluetooth: hci0: command 0x1003 tx timeout [ 145.576352][ T545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 145.590286][ T7641] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.2834: Block bitmap for bg 0 marked uninitialized [ 145.610537][ T287] EXT4-fs (loop2): unmounting filesystem. [ 145.779774][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 145.869755][ T19] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 145.889799][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.969743][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 145.976259][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 145.992309][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 146.003844][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.019060][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.028299][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.036367][ T24] usb 2-1: SerialNumber: syz [ 146.041993][ T7622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.062274][ T19] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 146.071428][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.079440][ T19] usb 6-1: Product: syz [ 146.083928][ T19] usb 6-1: Manufacturer: syz [ 146.088530][ T19] usb 6-1: SerialNumber: syz [ 146.099479][ T19] usb 6-1: config 0 descriptor?? [ 146.118244][ T7693] syz.3.2856[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.118334][ T7693] syz.3.2856[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.131317][ T7693] syz.3.2856[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.143606][ T7693] syz.3.2856[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.238557][ T7701] loop3: detected capacity change from 0 to 512 [ 146.278908][ T24] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 146.286645][ T24] usb 2-1: USB disconnect, device number 22 [ 146.294451][ T7701] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.305315][ T7701] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 146.313622][ T7701] System zones: 1-12 [ 146.318466][ T7701] EXT4-fs (loop3): 1 truncate cleaned up [ 146.324614][ T7701] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.385188][ T1717] EXT4-fs (loop3): unmounting filesystem. [ 146.507481][ T7711] 9pnet: p9_errstr2errno: server reported unknown error 6G)Do')=0O]|[ [ 146.591269][ T7707] loop3: detected capacity change from 0 to 40427 [ 146.598310][ T7707] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 146.618406][ T7707] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.627108][ T7707] F2FS-fs (loop3): fault_type options not supported [ 146.633900][ T7707] F2FS-fs (loop3): fault_injection options not supported [ 146.641100][ T7707] F2FS-fs (loop3): Image doesn't support compression [ 146.648473][ T7707] F2FS-fs (loop3): invalid crc value [ 146.658004][ T7707] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.699013][ T7707] F2FS-fs (loop3): Start checkpoint disabled! [ 146.703435][ T7719] loop2: detected capacity change from 0 to 256 [ 146.714185][ T7719] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 146.719299][ T7707] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.727692][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 146.733510][ T7707] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 146.747296][ T7719] exFAT-fs (loop2): hint_cluster is invalid (17) [ 146.788518][ T7707] F2FS-fs (loop3): switch extent_cache option is not allowed [ 146.904631][ T7733] loop3: detected capacity change from 0 to 1024 [ 146.922136][ T7733] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 146.942037][ T1717] EXT4-fs (loop3): unmounting filesystem. [ 146.959345][ T7737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7737 comm=syz.3.2873 [ 146.987396][ T7740] loop3: detected capacity change from 0 to 128 [ 146.994759][ T7740] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.017358][ T2285] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 147.134066][ T19] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 147.162856][ T7756] loop3: detected capacity change from 0 to 1024 [ 147.189849][ T6] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 147.191792][ T7756] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.222696][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 147.233621][ T7760] device bridge0 entered promiscuous mode [ 147.240253][ T7760] bridge0: port 3(macsec1) entered blocking state [ 147.240342][ T1717] EXT4-fs (loop3): unmounting filesystem. [ 147.246770][ T7760] bridge0: port 3(macsec1) entered disabled state [ 147.260298][ T7760] device bridge0 left promiscuous mode [ 147.344258][ T19] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 147.354352][ T19] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 147.364700][ T19] asix: probe of 6-1:0.0 failed with error -71 [ 147.371950][ T19] usb 6-1: USB disconnect, device number 26 [ 147.399780][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 147.407465][ T6] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 147.416856][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.425130][ T6] usb 3-1: Product: syz [ 147.429382][ T6] usb 3-1: Manufacturer: syz [ 147.438416][ T6] usb 3-1: SerialNumber: syz [ 147.443810][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 147.462044][ T7771] kvm [7770]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 147.470195][ T7771] kvm [7770]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 147.539839][ T335] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 147.658458][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 147.697119][ T7783] kvm [7782]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000057) = 0x5 [ 147.719767][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 147.726062][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.737075][ T335] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 147.746298][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.755135][ T335] usb 4-1: config 0 descriptor?? [ 147.862014][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 147.868360][ T6] r8152-cfgselector 3-1: bad CDC descriptors [ 147.876368][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 147.889273][ T6] r8152-cfgselector 3-1: USB disconnect, device number 24 [ 148.103214][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 148.103229][ T28] audit: type=1400 audit(148.087:1084): avc: denied { remount } for pid=7813 comm="syz.5.2904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 148.109222][ T7816] loop4: detected capacity change from 0 to 128 [ 148.112076][ T7814] overlayfs: upper fs does not support tmpfile. [ 148.150820][ T7816] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.165582][ T335] usbhid 4-1:0.0: can't add hid device: -71 [ 148.171662][ T335] usbhid: probe of 4-1:0.0 failed with error -71 [ 148.185708][ T335] usb 4-1: USB disconnect, device number 29 [ 148.197096][ T2285] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.198935][ T28] audit: type=1400 audit(148.177:1085): avc: denied { unmount } for pid=1803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 148.236605][ T28] audit: type=1400 audit(148.217:1086): avc: denied { listen } for pid=7824 comm="syz.5.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.395401][ T7853] loop2: detected capacity change from 0 to 128 [ 148.410138][ T7853] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.444813][ T7856] netlink: 'syz.1.2922': attribute type 4 has an invalid length. [ 148.455285][ T835] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.478295][ T7856] netlink: 'syz.1.2922': attribute type 4 has an invalid length. [ 148.531234][ T7864] loop2: detected capacity change from 0 to 1024 [ 148.559450][ T7864] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 148.560622][ T7870] device ip6gre1 entered promiscuous mode [ 148.591356][ T287] EXT4-fs (loop2): unmounting filesystem. [ 148.663628][ T7875] kvm [7874]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 148.784572][ T7881] loop5: detected capacity change from 0 to 8192 [ 148.808329][ T7881] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.910079][ T7893] input: syz1 as /devices/virtual/input/input39 [ 148.979781][ T6] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 149.064526][ T7906] loop4: detected capacity change from 0 to 512 [ 149.071673][ T7906] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.081345][ T7906] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 149.095207][ T7906] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 149.103323][ T335] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 149.110991][ T7906] EXT4-fs (loop4): failed to initialize system zone (-117) [ 149.118339][ T7906] EXT4-fs (loop4): mount failed [ 149.141149][ T7909] loop3: detected capacity change from 0 to 256 [ 149.162948][ T7906] SELinux: ebitmap: map size 1734634335 does not match my size 64 (high bit was -403701735) [ 149.176469][ T7906] SELinux: failed to load policy [ 149.179818][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 149.189595][ T6] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.195645][ T7913] loop4: detected capacity change from 0 to 512 [ 149.205993][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.214189][ T6] usb 2-1: Product: syz [ 149.218399][ T6] usb 2-1: Manufacturer: syz [ 149.223043][ T6] usb 2-1: SerialNumber: syz [ 149.229394][ T7913] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.231739][ T6] r8152-cfgselector 2-1: config 0 descriptor?? [ 149.260194][ T286] EXT4-fs (loop4): unmounting filesystem. [ 149.270874][ T7921] loop5: detected capacity change from 0 to 128 [ 149.281401][ T7921] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.291983][ T7924] input: syz1 as /devices/virtual/input/input40 [ 152.568487][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 152.574062][ T6] r8152-cfgselector 2-1: Unknown version 0x0000 [ 152.583695][ T335] usb 3-1: device descriptor read/all, error -71 [ 152.591424][ T6] r8152-cfgselector 2-1: Unknown version 0x0000 [ 152.593960][ T7929] loop2: detected capacity change from 0 to 16 [ 152.597928][ T6] r8152-cfgselector 2-1: bad CDC descriptors [ 152.610583][ T2301] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.615054][ T7929] erofs: (device loop2): mounted with root inode @ nid 36. [ 152.628448][ T6] r8152-cfgselector 2-1: Unknown version 0x0000 [ 152.636210][ T6] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 152.688250][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2955'. [ 152.708629][ T7936] device bridge_slave_1 left promiscuous mode [ 152.720318][ T1007] kernel write not supported for file bpf-prog (pid: 1007 comm: kworker/1:4) [ 152.723194][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.763727][ T7936] device bridge_slave_0 left promiscuous mode [ 152.797866][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.445380][ T28] audit: type=1400 audit(153.427:1087): avc: denied { attach_queue } for pid=7981 comm="syz.4.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 153.671962][ T8002] loop5: detected capacity change from 0 to 128 [ 153.681616][ T8002] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 153.698585][ T1803] EXT4-fs (loop5): unmounting filesystem. [ 153.916459][ T8023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2993'. [ 154.022418][ T8015] loop4: detected capacity change from 0 to 40427 [ 154.035385][ T8035] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 154.042975][ T8015] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 154.057289][ T8015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 154.079789][ T8015] F2FS-fs (loop4): invalid crc value [ 154.099918][ T8015] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.171039][ T8015] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 154.179214][ T8015] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.194689][ T8046] loop3: detected capacity change from 0 to 256 [ 154.203417][ T8046] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 154.217908][ T28] audit: type=1400 audit(154.197:1088): avc: denied { setattr } for pid=8045 comm="syz.3.3001" name="file0" dev="loop3" ino=1048712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.244769][ T28] audit: type=1400 audit(154.197:1089): avc: denied { watch_reads } for pid=8014 comm="syz.4.2990" path="/693/bus" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.335011][ T8048] kvm [8047]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 154.439605][ T28] audit: type=1326 audit(154.417:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd798f749 code=0x7ffc0000 [ 154.462663][ T28] audit: type=1326 audit(154.417:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd798f749 code=0x7ffc0000 [ 154.487030][ T28] audit: type=1326 audit(154.417:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcdd798f749 code=0x7ffc0000 [ 154.511453][ T28] audit: type=1326 audit(154.417:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd798f749 code=0x7ffc0000 [ 154.534470][ T28] audit: type=1326 audit(154.417:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8062 comm="syz.1.3007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd798f749 code=0x7ffc0000 [ 154.565284][ T28] audit: type=1326 audit(154.447:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdd798f749 code=0x7ffc0000 [ 154.588240][ T28] audit: type=1326 audit(154.447:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.1.3008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fcdd798f749 code=0x7ffc0000 [ 154.789766][ T1007] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 154.909221][ T8081] loop2: detected capacity change from 0 to 40427 [ 154.916094][ T8081] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 154.928111][ T8081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 154.937321][ T8081] F2FS-fs (loop2): invalid crc value [ 154.943931][ T8081] F2FS-fs (loop2): Found nat_bits in checkpoint [ 154.970568][ T8081] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 154.977601][ T8081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 154.990864][ T1007] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 155.000113][ T1007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.008745][ T1007] usb 2-1: config 0 descriptor?? [ 155.184759][ T8095] kvm [8093]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 155.314977][ T8100] kvm: MONITOR instruction emulated as NOP! [ 155.354544][ T8110] loop3: detected capacity change from 0 to 512 [ 155.482239][ T8118] netlink: 'syz.3.3028': attribute type 4 has an invalid length. [ 155.498889][ T8118] netlink: 'syz.3.3028': attribute type 4 has an invalid length. [ 156.073107][ T8128] loop3: detected capacity change from 0 to 40427 [ 156.080792][ T8128] F2FS-fs (loop3): invalid crc value [ 156.086948][ T8128] F2FS-fs (loop3): Found nat_bits in checkpoint [ 156.108668][ T8128] F2FS-fs (loop3): Start checkpoint disabled! [ 156.115432][ T8128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 156.158032][ T835] kworker/u4:106: attempt to access beyond end of device [ 156.158032][ T835] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 156.217912][ T1007] usb 2-1: Cannot set autoneg [ 156.222770][ T1007] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 156.231804][ T1007] usb 2-1: USB disconnect, device number 24 [ 156.265009][ T8138] kvm [8137]: vcpu2, guest rIP: 0x9133 Unhandled WRMSR(0x11e) = 0xbe702111 [ 156.456299][ T8167] loop4: detected capacity change from 0 to 512 [ 156.463378][ T8167] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 156.496958][ T8171] netlink: 'syz.3.3050': attribute type 3 has an invalid length. [ 156.528604][ T8177] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3053'. [ 156.545982][ T8179] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3054'. [ 156.560657][ T8179] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 156.576490][ T335] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 156.759762][ T335] usb 6-1: Using ep0 maxpacket: 16 [ 156.765945][ T335] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.776322][ T335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.786611][ T335] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.795770][ T335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.803920][ T335] usb 6-1: Product: syz [ 156.808109][ T335] usb 6-1: Manufacturer: syz [ 156.812768][ T335] usb 6-1: SerialNumber: syz [ 156.870198][ T8216] device pim6reg1 entered promiscuous mode [ 156.899794][ T3759] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 157.020397][ T335] usb 6-1: 0:2 : does not exist [ 157.027469][ T335] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 157.038440][ T335] usb 6-1: USB disconnect, device number 27 [ 157.060511][ T8223] loop2: detected capacity change from 0 to 40427 [ 157.068220][ T8223] F2FS-fs (loop2): invalid crc value [ 157.074376][ T8223] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.079784][ T3759] usb 4-1: Using ep0 maxpacket: 8 [ 157.086865][ T3759] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 157.095295][ T3759] usb 4-1: config 0 has no interface number 0 [ 157.103129][ T3759] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 157.110806][ T8223] F2FS-fs (loop2): Start checkpoint disabled! [ 157.112466][ T3759] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.118849][ T8223] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 157.134072][ T3759] usb 4-1: Product: syz [ 157.138339][ T3759] usb 4-1: Manufacturer: syz [ 157.143248][ T3759] usb 4-1: SerialNumber: syz [ 157.148583][ T3759] usb 4-1: config 0 descriptor?? [ 157.170608][ T2285] kworker/u4:270: attempt to access beyond end of device [ 157.170608][ T2285] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 157.355230][ T3759] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 157.361684][ T3759] usb 4-1: No valid video chain found. [ 157.368058][ T3759] usb 4-1: USB disconnect, device number 30 [ 157.409941][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 157.490706][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3074'. [ 157.493569][ T8229] loop2: detected capacity change from 0 to 1024 [ 157.499715][ T8228] device bridge_slave_1 left promiscuous mode [ 157.506456][ T8229] EXT4-fs: Ignoring removed nobh option [ 157.512333][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.517883][ T8229] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.531485][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.531531][ T8229] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.561335][ T8229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.588642][ T287] EXT4-fs (loop2): unmounting filesystem. [ 157.929763][ T3759] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 157.949267][ T8262] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3085'. [ 157.994873][ T8257] loop3: detected capacity change from 0 to 40427 [ 158.001754][ T8257] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 158.009534][ T8257] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 158.018549][ T8257] F2FS-fs (loop3): invalid crc value [ 158.024936][ T8257] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.046617][ T8257] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 158.053718][ T8257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.110801][ T3759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.121941][ T3759] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.131834][ T3759] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 158.140924][ T3759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.149811][ T3759] usb 5-1: config 0 descriptor?? [ 158.464483][ T2301] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.472283][ T8291] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 158.558015][ T8294] incfs: Options parsing error. -22 [ 158.563465][ T8294] incfs: mount failed -22 [ 158.573336][ T3759] hid-rmi 0003:1532:011D.0038: hidraw0: USB HID v0.08 Device [HID 1532:011d] on usb-dummy_hcd.4-1/input0 [ 158.641924][ T8302] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 158.651605][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 158.651617][ T28] audit: type=1400 audit(158.637:1109): avc: denied { relabelto } for pid=8301 comm="syz.1.3103" name="file0" dev="tmpfs" ino=3468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 158.684095][ T28] audit: type=1400 audit(158.637:1110): avc: denied { associate } for pid=8301 comm="syz.1.3103" name="file0" dev="tmpfs" ino=3468 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 158.716105][ T28] audit: type=1400 audit(158.697:1111): avc: denied { rmdir } for pid=283 comm="syz-executor" name="file0" dev="tmpfs" ino=3468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 158.729513][ T8306] netlink: 'syz.5.3105': attribute type 1 has an invalid length. [ 158.749787][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3105'. [ 158.782776][ T3759] usb 5-1: USB disconnect, device number 18 [ 158.973176][ T8325] loop5: detected capacity change from 0 to 512 [ 158.991718][ T8325] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 159.001568][ T8325] EXT4-fs (loop5): unmounting filesystem. [ 159.068223][ T8329] loop5: detected capacity change from 0 to 256 [ 159.086986][ T8329] FAT-fs (loop5): error, clusters badly computed (0 != 128) [ 159.097043][ T8329] FAT-fs (loop5): Filesystem has been set read-only [ 159.105613][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.116210][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.125100][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.134027][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.146363][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.155346][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.164831][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.178962][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.199758][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.211232][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.220283][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.231772][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.240672][ T8329] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 159.290604][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'. [ 159.344597][ T8352] loop4: detected capacity change from 0 to 1024 [ 159.347447][ T28] audit: type=1400 audit(159.327:1112): avc: denied { write } for pid=8353 comm="syz.1.3126" path="socket:[54722]" dev="sockfs" ino=54722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.351257][ T8352] EXT4-fs: Ignoring removed orlov option [ 159.399349][ T8352] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.455025][ T28] audit: type=1400 audit(159.437:1113): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.474078][ T28] audit: type=1400 audit(159.447:1114): avc: denied { read write } for pid=1803 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.475051][ T286] EXT4-fs (loop4): unmounting filesystem. [ 159.498256][ T28] audit: type=1400 audit(159.447:1115): avc: denied { open } for pid=1803 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.527518][ T28] audit: type=1400 audit(159.447:1116): avc: denied { ioctl } for pid=1803 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.553839][ T28] audit: type=1400 audit(159.447:1117): avc: denied { read write } for pid=8368 comm="syz.5.3134" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.578199][ T28] audit: type=1400 audit(159.447:1118): avc: denied { open } for pid=8368 comm="syz.5.3134" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 159.605410][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3133'. [ 159.683229][ T8370] loop2: detected capacity change from 0 to 32768 [ 159.740179][ T8370] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 159.745576][ T8370] loop2: p1 start 460800 is beyond EOD, truncated [ 159.752272][ T8370] loop2: p2 size 83886080 extends beyond EOD, truncated [ 159.761200][ T8370] loop2: p5 start 460800 is beyond EOD, truncated [ 159.767694][ T8370] loop2: p6 size 83886080 extends beyond EOD, truncated [ 159.791010][ T8387] loop4: detected capacity change from 0 to 32768 [ 159.830370][ T8387] loop4: p1 p3 < > [ 159.929842][ T3759] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 160.066795][ T8414] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3153'. [ 160.136823][ T3759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.149633][ T3759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.159617][ T3759] usb 2-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 160.162912][ T8420] loop4: detected capacity change from 0 to 512 [ 160.168834][ T3759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.183945][ T3759] usb 2-1: config 0 descriptor?? [ 160.189597][ T8420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.203269][ T8420] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 160.211800][ T8420] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.3156: invalid block [ 160.223710][ T8420] EXT4-fs (loop4): Remounting filesystem read-only [ 160.227712][ T8423] loop2: detected capacity change from 0 to 256 [ 160.230598][ T8420] EXT4-fs (loop4): 1 truncate cleaned up [ 160.237090][ T8423] FAT-fs (loop2): bogus number of FAT sectors [ 160.242223][ T8420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.248483][ T8423] FAT-fs (loop2): Can't find a valid FAT filesystem [ 160.270123][ T286] EXT4-fs (loop4): unmounting filesystem. [ 160.311964][ T8429] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3160'. [ 160.321977][ T8429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.329192][ T8429] IPv6: NLM_F_CREATE should be set when creating new route [ 160.336438][ T8429] IPv6: NLM_F_CREATE should be set when creating new route [ 160.529736][ T460] Bluetooth: hci0: command 0x1003 tx timeout [ 160.535768][ T545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.585445][ T8458] syz.3.3173[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.585515][ T8458] syz.3.3173[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.597603][ T8458] syz.3.3173[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.609169][ T8458] syz.3.3173[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.639993][ T6] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 160.684535][ T3759] hid-rmi 0003:1532:011D.0039: hidraw0: USB HID v0.08 Device [HID 1532:011d] on usb-dummy_hcd.1-1/input0 [ 160.828202][ T8478] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 160.879810][ T6] usb 6-1: Using ep0 maxpacket: 8 [ 160.887001][ T6] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 160.915387][ T6] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.935812][ T6] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 160.955990][ T6] usb 6-1: config 0 has no interface number 1 [ 160.966627][ T335] usb 2-1: USB disconnect, device number 25 [ 160.974010][ T6] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 160.993290][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.009736][ T6] usb 6-1: Product: syz [ 161.019965][ T6] usb 6-1: Manufacturer: syz [ 161.028330][ T6] usb 6-1: SerialNumber: syz [ 161.045515][ T6] usb 6-1: config 0 descriptor?? [ 161.046942][ T8486] loop4: detected capacity change from 0 to 512 [ 161.057083][ T8486] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.086153][ T8486] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.3184: invalid block [ 161.093655][ T8494] loop2: detected capacity change from 0 to 1024 [ 161.104720][ T8486] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3184: invalid indirect mapped block 10 (level 1) [ 161.119399][ T8486] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3184: invalid indirect mapped block 8 (level 1) [ 161.133622][ T8494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 161.142619][ T8486] EXT4-fs (loop4): 1 truncate cleaned up [ 161.148307][ T8486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 161.158465][ T8494] EXT4-fs (loop2): shut down requested (1) [ 161.169973][ T287] EXT4-fs (loop2): unmounting filesystem. [ 161.179979][ T286] EXT4-fs (loop4): unmounting filesystem. [ 161.202558][ T8504] loop4: detected capacity change from 0 to 256 [ 161.209055][ T8504] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.259499][ T60] usb 6-1: USB disconnect, device number 28 [ 161.406037][ T8522] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 161.438684][ T8525] syz.1.3201[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.438761][ T8525] syz.1.3201[8525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.539742][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 161.760769][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.768789][ T24] usb 5-1: config 0 has no interface number 0 [ 161.777647][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.789054][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.806281][ T24] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.819461][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 161.831368][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.849949][ T24] usb 5-1: config 0 descriptor?? [ 161.889827][ T1007] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 162.970681][ T24] usb 5-1: can't set config #0, error -71 [ 162.999807][ T24] usb 5-1: USB disconnect, device number 19 [ 163.180960][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'. [ 163.219314][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 163.299759][ T335] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 163.421630][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 163.489736][ T335] usb 6-1: Using ep0 maxpacket: 16 [ 163.497555][ T335] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.506726][ T335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.514757][ T335] usb 6-1: Product: syz [ 163.518984][ T335] usb 6-1: Manufacturer: syz [ 163.525799][ T335] usb 6-1: SerialNumber: syz [ 163.531217][ T335] r8152-cfgselector 6-1: config 0 descriptor?? [ 163.738730][ T335] r8152-cfgselector 6-1: Unknown version 0x0000 [ 163.794154][ T8638] loop4: detected capacity change from 0 to 40427 [ 163.801845][ T8638] F2FS-fs (loop4): invalid crc value [ 163.808670][ T8638] F2FS-fs (loop4): Found nat_bits in checkpoint [ 163.831839][ T8638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 163.856902][ T28] kauditd_printk_skb: 96 callbacks suppressed [ 163.856917][ T28] audit: type=1400 audit(163.837:1215): avc: denied { write } for pid=8637 comm="syz.4.3250" path="/746/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 163.858270][ T8638] syz.4.3250: attempt to access beyond end of device [ 163.858270][ T8638] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.905414][ T28] audit: type=1400 audit(163.887:1216): avc: denied { create } for pid=8637 comm="syz.4.3250" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 163.907039][ T8638] overlayfs: Cannot mount volatile when upperdir has an unseen error. Sync upperdir fs to clear state. [ 163.925133][ T28] audit: type=1400 audit(163.887:1217): avc: denied { mounton } for pid=8637 comm="syz.4.3250" path="/746/file1/file0" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 163.958348][ T335] r8152-cfgselector 6-1: Unknown version 0x0000 [ 163.964822][ T335] r8152-cfgselector 6-1: bad CDC descriptors [ 163.979761][ T335] r8152-cfgselector 6-1: Unknown version 0x0000 [ 163.987053][ T335] r8152-cfgselector 6-1: USB disconnect, device number 29 [ 163.994607][ T286] syz-executor: attempt to access beyond end of device [ 163.994607][ T286] loop4: rw=2049, sector=45104, nr_sectors = 24 limit=40427 [ 164.029936][ T1007] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 164.115740][ T8649] loop4: detected capacity change from 0 to 512 [ 164.136506][ T8649] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.3251: corrupted inode contents [ 164.148812][ T8649] EXT4-fs error (device loop4): ext4_dirty_inode:6135: inode #16: comm syz.4.3251: mark_inode_dirty error [ 164.160414][ T8649] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.3251: corrupted inode contents [ 164.172493][ T8649] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.3251: mark_inode_dirty error [ 164.184012][ T28] audit: type=1400 audit(164.167:1218): avc: denied { read write } for pid=8646 comm="syz.2.3252" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 164.184329][ T8649] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.3251: corrupted inode contents [ 164.211083][ T1007] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.219126][ T8649] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 164.235079][ T8649] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.3251: corrupted inode contents [ 164.235861][ T1007] usb 4-1: not running at top speed; connect to a high speed hub [ 164.247138][ T8649] EXT4-fs error (device loop4): ext4_truncate:4320: inode #16: comm syz.4.3251: mark_inode_dirty error [ 164.255813][ T28] audit: type=1400 audit(164.167:1219): avc: denied { open } for pid=8646 comm="syz.2.3252" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 164.265960][ T8649] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 164.297725][ T8649] EXT4-fs (loop4): 1 truncate cleaned up [ 164.303418][ T8649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.308470][ T1007] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.319913][ T835] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 164.332136][ T1007] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.341417][ T835] EXT4-fs error (device loop4): ext4_release_dquot:6832: comm kworker/u4:106: Failed to release dquot type 1 [ 164.355642][ T1007] usb 4-1: string descriptor 0 read error: -22 [ 164.368878][ T1007] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.374639][ T286] EXT4-fs (loop4): unmounting filesystem. [ 164.378226][ T1007] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.402439][ T1007] usb 4-1: 0:2 : does not exist [ 164.610463][ T8662] loop5: detected capacity change from 0 to 512 [ 164.617404][ T8662] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 164.629628][ T8662] EXT4-fs (loop5): 1 orphan inode deleted [ 164.635558][ T8662] EXT4-fs (loop5): 1 truncate cleaned up [ 164.641466][ T8662] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 164.651661][ T8662] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1440: inode #12: block 7: comm syz.5.3256: path /437/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 164.673267][ T8662] EXT4-fs (loop5): Remounting filesystem read-only [ 164.685051][ T1803] EXT4-fs (loop5): unmounting filesystem. [ 164.845670][ T28] audit: type=1400 audit(164.827:1220): avc: denied { mount } for pid=8669 comm="syz.1.3259" name="/" dev="ramfs" ino=56369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 164.962141][ T8678] loop2: detected capacity change from 0 to 256 [ 164.969280][ T8678] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.149798][ T3759] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 165.157443][ T335] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 165.249737][ T6] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 165.317729][ T28] audit: type=1400 audit(165.297:1221): avc: denied { read } for pid=8689 comm="syz.4.3270" dev="nsfs" ino=4026532474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.338502][ T28] audit: type=1400 audit(165.297:1222): avc: denied { open } for pid=8689 comm="syz.4.3270" path="net:[4026532474]" dev="nsfs" ino=4026532474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 165.361318][ T335] usb 6-1: Using ep0 maxpacket: 16 [ 165.364189][ T28] audit: type=1400 audit(165.297:1223): avc: denied { create } for pid=8689 comm="syz.4.3270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 165.386549][ T3759] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 165.395021][ T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.406075][ T3759] usb 2-1: config 7 has no interface number 0 [ 165.412269][ T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.422111][ T335] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.435017][ T335] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.444270][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 165.449539][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.458319][ T3759] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 165.467493][ T6] usb 3-1: config 0 has no interfaces? [ 165.473615][ T335] usb 6-1: config 0 descriptor?? [ 165.478641][ T3759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.486774][ T3759] usb 2-1: Product: syz [ 165.491061][ T3759] usb 2-1: Manufacturer: syz [ 165.496372][ T6] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 165.505524][ T3759] usb 2-1: SerialNumber: syz [ 165.510430][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.518420][ T6] usb 3-1: Product: syz [ 165.522900][ T6] usb 3-1: Manufacturer: syz [ 165.527523][ T6] usb 3-1: SerialNumber: syz [ 165.533796][ T6] usb 3-1: config 0 descriptor?? [ 165.612506][ T1007] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 165.623644][ T1007] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 165.633280][ T1007] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 165.645898][ T1007] usb 4-1: USB disconnect, device number 32 [ 165.739135][ T3759] usb 2-1: USB disconnect, device number 26 [ 165.860405][ T6] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 165.897574][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.904874][ T335] microsoft 0003:045E:07DA.003A: ignoring exceeding usage max [ 165.913370][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.920604][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.927793][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.934998][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.942384][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.945683][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.949591][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.949616][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.958503][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.965183][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 165.976625][ T1007] usb 3-1: USB disconnect, device number 27 [ 165.980091][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 166.000674][ T335] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 166.050999][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.061939][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.071714][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.084540][ T6] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 166.093587][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.101833][ T335] microsoft 0003:045E:07DA.003A: No inputs registered, leaving [ 166.110148][ T335] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 166.121761][ T6] usb 5-1: config 0 descriptor?? [ 166.126755][ T335] microsoft 0003:045E:07DA.003A: no inputs found [ 166.133224][ T335] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway [ 166.249805][ T3759] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 166.338095][ T1007] usb 6-1: USB disconnect, device number 30 [ 166.430687][ T3759] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 166.440587][ T3759] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 166.451827][ T3759] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 166.460897][ T3759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.468875][ T3759] usb 2-1: Product: syz [ 166.473058][ T3759] usb 2-1: Manufacturer: syz [ 166.477643][ T3759] usb 2-1: SerialNumber: syz [ 166.482757][ T3759] usb 2-1: config 0 descriptor?? [ 166.488317][ T8713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.495655][ T8713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.609603][ T6] cypress 0003:04B4:DE64.003B: unknown main item tag 0x0 [ 166.616690][ T6] cypress 0003:04B4:DE64.003B: unknown main item tag 0x4 [ 166.623925][ T6] cypress 0003:04B4:DE64.003B: global environment stack underflow [ 166.631780][ T6] cypress 0003:04B4:DE64.003B: item 0 0 1 11 parsing failed [ 166.639216][ T6] cypress 0003:04B4:DE64.003B: parse failed [ 166.645496][ T6] cypress: probe of 0003:04B4:DE64.003B failed with error -22 [ 166.669753][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 166.705482][ T8713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.712876][ T8713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.812256][ T6] usb 5-1: USB disconnect, device number 20 [ 166.849796][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 166.865726][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 166.879783][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 166.899727][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 166.913179][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.924022][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.936480][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.950045][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.959147][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.967970][ T24] usb 4-1: config 0 descriptor?? [ 167.111404][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3299'. [ 167.182382][ T24] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.391377][ T297] usb 4-1: USB disconnect, device number 33 [ 167.409941][ T297] usblp0: removed [ 167.526138][ T3759] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 167.536061][ T3759] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 167.549047][ T3759] usb 2-1: USB disconnect, device number 27 [ 167.555203][ T3759] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 167.580301][ T8772] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 167.650520][ T6] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 167.804110][ T8779] loop2: detected capacity change from 0 to 256 [ 167.812695][ T8779] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 167.830782][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.840557][ T6] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 167.849578][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.858148][ T6] usb 5-1: config 0 descriptor?? [ 168.266553][ T6] lenovo 0003:17EF:6047.003C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 168.281850][ T8805] loop5: detected capacity change from 0 to 512 [ 168.288882][ T8805] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 168.299012][ T8805] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 168.308780][ T8805] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 168.318945][ T8805] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 168.326875][ T8805] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 168.334784][ T8805] EXT4-fs (loop5): failed to initialize system zone (-117) [ 168.342480][ T8805] EXT4-fs (loop5): mount failed [ 168.349944][ T8808] netlink: 'syz.2.3320': attribute type 6 has an invalid length. [ 168.359814][ T3759] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 168.379769][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 168.420975][ T8819] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3325'. [ 168.459651][ T8825] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3328'. [ 168.539961][ T3759] usb 2-1: Using ep0 maxpacket: 32 [ 168.546246][ T3759] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 168.559745][ T3759] usb 2-1: config 0 has no interface number 0 [ 168.559832][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 168.571342][ T3759] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 168.580772][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.581468][ T3759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.609718][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.619726][ T3759] usb 2-1: Product: syz [ 168.623994][ T3759] usb 2-1: Manufacturer: syz [ 168.628609][ T3759] usb 2-1: SerialNumber: syz [ 168.629654][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 168.646460][ T3759] usb 2-1: config 0 descriptor?? [ 168.646517][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 168.654959][ T3759] smsc95xx v2.0.0 [ 168.664399][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.673503][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3331'. [ 168.673952][ T24] usb 4-1: config 0 descriptor?? [ 168.721058][ T8829] loop2: detected capacity change from 0 to 40427 [ 168.728480][ T8829] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 168.736639][ T8829] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 168.747797][ T8829] F2FS-fs (loop2): Found nat_bits in checkpoint [ 168.776927][ T8829] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 168.784040][ T8829] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.860036][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 168.860052][ T28] audit: type=1400 audit(168.847:1247): avc: denied { create } for pid=8828 comm="syz.2.3330" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 169.070365][ T6] lenovo 0003:17EF:6047.003C: Sensitivity setting failed: -71 [ 169.078725][ T6] usb 5-1: USB disconnect, device number 21 [ 169.110521][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.003D/input/input42 [ 169.154759][ T28] audit: type=1400 audit(169.137:1248): avc: denied { append } for pid=8850 comm="syz.2.3338" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 169.191668][ T24] appleir 0003:05AC:8241.003D: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 169.191931][ T28] audit: type=1400 audit(169.177:1249): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1672 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.226213][ T28] audit: type=1400 audit(169.177:1250): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1672 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.249083][ T28] audit: type=1400 audit(169.177:1251): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1672 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 169.347736][ T1007] usb 4-1: USB disconnect, device number 34 [ 169.473797][ T3759] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 169.542053][ T28] audit: type=1400 audit(169.527:1252): avc: denied { block_suspend } for pid=8866 comm="syz.2.3345" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 169.638660][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3350'. [ 169.668972][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.682953][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 169.694733][ T3759] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 169.695755][ T1007] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 169.720142][ T3759] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 169.728338][ T3759] usb 2-1: USB disconnect, device number 28 [ 169.878427][ T28] audit: type=1400 audit(169.857:1253): avc: denied { sqpoll } for pid=8897 comm="syz.3.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 169.996243][ T28] audit: type=1400 audit(169.977:1254): avc: denied { setopt } for pid=8919 comm="syz.4.3366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 170.024992][ T8925] loop2: detected capacity change from 0 to 256 [ 170.035410][ T8929] loop5: detected capacity change from 0 to 512 [ 170.037463][ T8928] loop4: detected capacity change from 0 to 512 [ 170.049316][ T8928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.057301][ T8929] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.059220][ T8925] FAT-fs (loop2): Directory bread(block 64) failed [ 170.069884][ T8929] EXT4-fs (loop5): 1 truncate cleaned up [ 170.074526][ T8925] FAT-fs (loop2): Directory bread(block 65) failed [ 170.081557][ T8928] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.087799][ T8925] FAT-fs (loop2): Directory bread(block 66) failed [ 170.096131][ T8929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 170.110580][ T8925] FAT-fs (loop2): Directory bread(block 67) failed [ 170.117279][ T8925] FAT-fs (loop2): Directory bread(block 68) failed [ 170.123919][ T8925] FAT-fs (loop2): Directory bread(block 69) failed [ 170.130652][ T8925] FAT-fs (loop2): Directory bread(block 70) failed [ 170.137274][ T8925] FAT-fs (loop2): Directory bread(block 71) failed [ 170.139231][ T28] audit: type=1400 audit(170.117:1255): avc: denied { read append } for pid=8927 comm="syz.4.3370" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.144240][ T8925] FAT-fs (loop2): Directory bread(block 72) failed [ 170.173453][ T8925] FAT-fs (loop2): Directory bread(block 73) failed [ 170.182804][ T28] audit: type=1400 audit(170.167:1256): avc: denied { open } for pid=8927 comm="syz.4.3370" path="/767/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.208415][ T286] EXT4-fs (loop4): unmounting filesystem. [ 170.210670][ T8929] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.5.3369: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 170.246733][ T1803] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 170.309670][ T8944] serio: Serial port ttyS3 [ 170.342409][ T2488] EXT4-fs (loop5): unmounting filesystem. [ 170.547673][ T8980] syz.3.3394[8980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.547748][ T8980] syz.3.3394[8980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.571084][ T8949] loop2: detected capacity change from 0 to 40427 [ 170.590823][ T8949] F2FS-fs (loop2): Image doesn't support compression [ 170.609496][ T8949] F2FS-fs (loop2): invalid crc value [ 170.619490][ T8949] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 170.671561][ T8949] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.688560][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.695918][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.697939][ T8989] f2fs_ckpt-7:2: attempt to access beyond end of device [ 170.697939][ T8989] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.703678][ T8983] device bridge_slave_0 entered promiscuous mode [ 170.727461][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.728326][ T287] syz-executor: attempt to access beyond end of device [ 170.728326][ T287] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 170.734761][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.749222][ T287] syz-executor: attempt to access beyond end of device [ 170.749222][ T287] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 170.772014][ T8983] device bridge_slave_1 entered promiscuous mode [ 170.853544][ T8983] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.860592][ T8983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.867820][ T8983] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.874848][ T8983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.898044][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.906253][ T2285] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.923220][ T2285] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.937616][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 170.960449][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.967504][ T2285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.979939][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 170.988227][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.995280][ T2285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.012250][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.020347][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.039063][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.054633][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.068118][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.078577][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.090686][ T8983] device veth0_vlan entered promiscuous mode [ 171.107257][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.116907][ T8983] device veth1_macvtap entered promiscuous mode [ 171.133114][ T765] device bridge_slave_1 left promiscuous mode [ 171.139248][ T765] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.147127][ T765] device bridge_slave_0 left promiscuous mode [ 171.153523][ T765] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.161664][ T765] device veth1_macvtap left promiscuous mode [ 171.168104][ T765] device veth0_vlan left promiscuous mode [ 171.264796][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.275002][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.323683][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.331620][ T9022] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.338990][ T9022] device bridge_slave_0 entered promiscuous mode [ 171.346219][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.353406][ T9022] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.361136][ T9022] device bridge_slave_1 entered promiscuous mode [ 171.469585][ T9022] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.476647][ T9022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.483927][ T9022] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.490971][ T9022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.518369][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.530524][ T835] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.537874][ T835] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.555782][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.564430][ T835] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.571512][ T835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.586872][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.595302][ T835] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.602376][ T835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.624798][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.633097][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.643605][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.651747][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.659605][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.667973][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.681635][ T9022] device veth0_vlan entered promiscuous mode [ 171.694506][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3421'. [ 171.705000][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.713944][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.749795][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.757546][ T9077] loop4: detected capacity change from 0 to 16 [ 171.761533][ T2285] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.770516][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.780910][ T9077] erofs: (device loop4): mounted with root inode @ nid 36. [ 171.791109][ T9077] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 171.800760][ T9077] syz.4.3425: attempt to access beyond end of device [ 171.800760][ T9077] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 171.808172][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.820370][ T9077] syz.4.3425: attempt to access beyond end of device [ 171.820370][ T9077] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 171.836242][ T9077] syz.4.3425: attempt to access beyond end of device [ 171.836242][ T9077] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 171.850594][ T9077] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 171.860038][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.861773][ T9077] syz.4.3425: attempt to access beyond end of device [ 171.861773][ T9077] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 171.883213][ T9077] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 171.883401][ T9022] device veth1_macvtap entered promiscuous mode [ 171.894534][ T9077] syz.4.3425: attempt to access beyond end of device [ 171.894534][ T9077] loop4: rw=0, sector=524296, nr_sectors = 8 limit=16 [ 171.914212][ T9077] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 171.938564][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.946656][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.965503][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.996627][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.009990][ T1007] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 172.022897][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.211445][ T1007] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 172.226396][ T1007] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.235169][ T1007] usb 4-1: config 0 descriptor?? [ 172.267307][ T60] kernel write not supported for file bpf-prog (pid: 60 comm: kworker/1:2) [ 172.274673][ T9117] loop4: detected capacity change from 0 to 1024 [ 172.294864][ T9117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 172.319948][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 172.372209][ T9117] EXT4-fs error (device loop4): ext4_free_blocks:6205: comm syz.4.3443: Freeing blocks not in datazone - block = 0, count = 16 [ 172.412735][ T286] EXT4-fs (loop4): unmounting filesystem. [ 172.499766][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 172.511242][ T24] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 172.522978][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.533613][ T24] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.544868][ T24] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.567195][ T9142] loop4: detected capacity change from 0 to 40427 [ 172.567772][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.576480][ T9142] F2FS-fs (loop4): invalid crc value [ 172.583454][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.590370][ T9142] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.622090][ T9142] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 172.635338][ T9142] syz.4.3453: attempt to access beyond end of device [ 172.635338][ T9142] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.657527][ T286] syz-executor: attempt to access beyond end of device [ 172.657527][ T286] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 173.451496][ T1007] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.461687][ T1007] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 173.472355][ T1007] asix: probe of 4-1:0.0 failed with error -71 [ 173.479192][ T1007] usb 4-1: USB disconnect, device number 35 [ 173.489796][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 173.809782][ T460] Bluetooth: hci0: command 0x1003 tx timeout [ 173.811203][ T545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.831877][ T9208] netlink: 'syz.6.3479': attribute type 2 has an invalid length. [ 173.956935][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 173.956949][ T28] audit: type=1400 audit(173.937:1301): avc: denied { bind } for pid=9224 comm="syz.1.3487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 174.006564][ T9235] bridge0: port 3(vlan0) entered blocking state [ 174.012894][ T9235] bridge0: port 3(vlan0) entered disabled state [ 174.044800][ T28] audit: type=1400 audit(174.027:1302): avc: denied { write } for pid=9237 comm="syz.3.3493" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 174.090103][ T9242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9242 comm=syz.3.3495 [ 174.120097][ T3759] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 174.140238][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 174.173578][ T28] audit: type=1400 audit(174.157:1303): avc: denied { mounton } for pid=9254 comm="syz.3.3502" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 174.198348][ T9256] 9pnet_fd: p9_fd_create_tcp (9256): problem binding to privport [ 174.299844][ T3759] usb 7-1: Using ep0 maxpacket: 8 [ 174.318086][ T3759] usb 7-1: config 0 has no interfaces? [ 174.327351][ T28] audit: type=1400 audit(174.307:1304): avc: denied { map } for pid=9272 comm="syz.3.3511" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.329916][ T3759] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 174.361952][ T3759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.376484][ T3759] usb 7-1: config 0 descriptor?? [ 174.618159][ T3759] usb 7-1: USB disconnect, device number 2 [ 174.677662][ T9309] xt_hashlimit: size too large, truncated to 1048576 [ 174.749742][ T24] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 174.941119][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 174.949629][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 174.952051][ T9323] loop3: detected capacity change from 0 to 512 [ 174.958414][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.964083][ T9323] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.985702][ T24] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 175.000254][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.009380][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.017741][ T24] usb 2-1: Product: syz [ 175.022102][ T24] usb 2-1: Manufacturer: syz [ 175.026760][ T24] usb 2-1: SerialNumber: syz [ 175.032938][ T24] usb 2-1: selecting invalid altsetting 1 [ 175.047431][ T28] audit: type=1400 audit(175.027:1305): avc: denied { bind } for pid=9326 comm="syz.3.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.070091][ T1007] usb 8-1: USB disconnect, device number 2 [ 175.230414][ T9347] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3543'. [ 175.430458][ T9368] loop6: detected capacity change from 0 to 128 [ 175.500024][ T1007] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 175.572566][ T28] audit: type=1400 audit(175.557:1306): avc: denied { unmount } for pid=9374 comm="syz.6.3565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 175.635860][ T9379] loop6: detected capacity change from 0 to 256 [ 175.642229][ T24] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 175.660769][ T24] usb 2-1: selecting invalid altsetting 1 [ 175.666547][ T24] cdc_ncm 2-1:1.0: bind() failure [ 175.672903][ T24] cdc_ncm 2-1:1.1: invalid descriptor buffer length [ 175.679484][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 175.681986][ T9379] input: syz1 as /devices/virtual/input/input44 [ 175.686395][ T24] cdc_ncm 2-1:1.1: bind() failure [ 175.699782][ T24] usb 2-1: USB disconnect, device number 29 [ 175.706593][ T1007] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.716412][ T1007] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 175.726438][ T1007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.735445][ T1007] usb 8-1: config 0 descriptor?? [ 175.774313][ T28] audit: type=1400 audit(175.757:1307): avc: denied { read } for pid=9384 comm="syz.6.3558" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.775826][ T9385] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3558'. [ 175.805703][ T9385] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3558'. [ 175.809301][ T28] audit: type=1400 audit(175.757:1308): avc: denied { open } for pid=9384 comm="syz.6.3558" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 175.895850][ T9389] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3560'. [ 176.143526][ T28] audit: type=1400 audit(176.127:1309): avc: denied { bind } for pid=9405 comm="syz.3.3570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 176.164734][ T1007] lenovo 0003:17EF:6047.003E: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.7-1/input0 [ 176.250452][ T9420] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.257172][ T28] audit: type=1400 audit(176.237:1310): avc: denied { mounton } for pid=9419 comm="syz.1.3577" path="/739/file0" dev="tmpfs" ino=3894 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 176.259914][ T9420] FAT-fs (loop3): unable to read boot sector [ 176.381400][ T3759] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 176.569764][ T3759] usb 7-1: Using ep0 maxpacket: 16 [ 176.587237][ T3759] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.608881][ T3759] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.618910][ T3759] usb 7-1: config 0 interface 0 has no altsetting 0 [ 176.625628][ T3759] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 176.634732][ T3759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.645915][ T9472] user requested TSC rate below hardware speed [ 176.646926][ T3759] usb 7-1: config 0 descriptor?? [ 176.660683][ T9472] user requested TSC rate below hardware speed [ 176.753266][ T9486] SELinux: failed to load policy [ 176.962712][ T580] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.969162][ T1007] lenovo 0003:17EF:6047.003E: Sensitivity setting failed: -71 [ 176.977660][ T1007] usb 8-1: USB disconnect, device number 3 [ 177.077997][ T3759] hid (null): global environment stack underflow [ 177.084410][ T3759] hid (null): global environment stack underflow [ 177.091063][ T3759] hid (null): report_id 0 is invalid [ 177.096476][ T3759] hid (null): global environment stack underflow [ 177.102868][ T3759] hid (null): report_id 0 is invalid [ 177.108165][ T3759] hid (null): report_id 0 is invalid [ 177.113512][ T3759] hid (null): global environment stack underflow [ 177.129865][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 177.278196][ T3759] usb 7-1: USB disconnect, device number 3 [ 177.310910][ T24] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 177.322108][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 177.328707][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 177.338044][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.346536][ T24] usb 2-1: config 0 descriptor?? [ 177.581499][ T9534] loop7: detected capacity change from 0 to 40427 [ 177.588800][ T9534] F2FS-fs (loop7): Image doesn't support compression [ 177.596190][ T9534] F2FS-fs (loop7): invalid crc value [ 177.602800][ T9534] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 177.626047][ T9534] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 177.651423][ T9535] f2fs_ckpt-7:7: attempt to access beyond end of device [ 177.651423][ T9535] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.669235][ T9022] syz-executor: attempt to access beyond end of device [ 177.669235][ T9022] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 177.683462][ T9022] syz-executor: attempt to access beyond end of device [ 177.683462][ T9022] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 177.753423][ T24] wacom 0003:056A:0094.0040: Using device in hidraw-only mode [ 177.761754][ T24] wacom 0003:056A:0094.0040: hidraw0: USB HID v8.00 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 177.880773][ T9546] loop3: detected capacity change from 0 to 256 [ 177.924064][ T9551] SELinux: failed to load policy [ 177.955090][ T3759] usb 2-1: USB disconnect, device number 30 [ 177.984896][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.992077][ T9550] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.003078][ T9550] device bridge_slave_0 entered promiscuous mode [ 178.011643][ T9550] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.018766][ T9550] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.030006][ T9550] device bridge_slave_1 entered promiscuous mode [ 178.053389][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'. [ 178.122589][ T9550] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.129648][ T9550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.136907][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.143935][ T9550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.162573][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.170256][ T580] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.177453][ T580] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.186663][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.195113][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.202165][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.212156][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.220405][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.227432][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.242728][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.250838][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.267982][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.284818][ T9550] device veth0_vlan entered promiscuous mode [ 178.291977][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.300250][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.307720][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.323491][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.332052][ T9550] device veth1_macvtap entered promiscuous mode [ 178.348592][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.364379][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.583344][ T9616] SELinux: failed to load policy [ 178.739771][ T6] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 178.921235][ T6] usb 7-1: unable to get BOS descriptor or descriptor too short [ 178.929620][ T6] usb 7-1: config 6 has an invalid interface number: 158 but max is 0 [ 178.937883][ T6] usb 7-1: config 6 has no interface number 0 [ 178.944192][ T6] usb 7-1: config 6 interface 158 has no altsetting 0 [ 178.952523][ T6] usb 7-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 178.961653][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.969624][ T6] usb 7-1: Product: syz [ 178.973890][ T6] usb 7-1: Manufacturer: syz [ 178.978614][ T6] usb 7-1: SerialNumber: syz [ 179.009888][ T460] Bluetooth: hci0: command 0x1003 tx timeout [ 179.009940][ T545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 179.507738][ T9648] loop8: detected capacity change from 0 to 1024 [ 179.514849][ T9648] EXT4-fs: Ignoring removed bh option [ 179.580190][ T9648] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 179.611668][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 179.611682][ T28] audit: type=1400 audit(179.591:1330): avc: denied { setattr } for pid=9647 comm="syz.8.3672" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.653293][ T9648] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.3672: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 179.681654][ T28] audit: type=1400 audit(179.621:1331): avc: denied { setattr } for pid=9647 comm="syz.8.3672" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.706017][ T9648] EXT4-fs (loop8): Remounting filesystem read-only [ 179.720747][ T9657] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.3672: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 179.761322][ T9657] EXT4-fs (loop8): Remounting filesystem read-only [ 179.769067][ T28] audit: type=1400 audit(179.631:1332): avc: denied { write open } for pid=9647 comm="syz.8.3672" path=2F202864656C6574656429 dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.807298][ T28] audit: type=1400 audit(179.631:1333): avc: denied { link } for pid=9647 comm="syz.8.3672" name="#20" dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.810793][ T9550] EXT4-fs error (device loop8): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 179.831458][ T28] audit: type=1400 audit(179.691:1334): avc: denied { read } for pid=9647 comm="syz.8.3672" name="00fb1d0001000000000000000000000000000000000f0000009f08fa65" dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.877400][ T9550] EXT4-fs (loop8): Remounting filesystem read-only [ 179.879476][ T28] audit: type=1400 audit(179.781:1335): avc: denied { remove_name } for pid=9550 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.890604][ T9550] EXT4-fs error (device loop8): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 179.908371][ T28] audit: type=1400 audit(179.781:1336): avc: denied { rmdir } for pid=9550 comm="syz-executor" name="lost+found" dev="loop8" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.929947][ T9659] loop3: detected capacity change from 0 to 128 [ 179.950930][ T28] audit: type=1400 audit(179.871:1337): avc: denied { unlink } for pid=9550 comm="syz-executor" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.974308][ T9550] EXT4-fs (loop8): Remounting filesystem read-only [ 179.987604][ T9550] EXT4-fs error (device loop8): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 180.029924][ T9550] EXT4-fs (loop8): Remounting filesystem read-only [ 180.048678][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.065164][ T9550] EXT4-fs error (device loop8): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 180.088098][ T9550] EXT4-fs (loop8): Remounting filesystem read-only [ 180.094887][ T9550] EXT4-fs error (device loop8): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 180.118375][ T9550] EXT4-fs (loop8): Remounting filesystem read-only [ 180.125081][ T9550] EXT4-fs error (device loop8): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 180.145128][ T9550] EXT4-fs (loop8): Remounting filesystem read-only [ 180.151883][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.176896][ T9550] EXT4-fs error (device loop8): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 180.199093][ T9550] EXT4-fs (loop8): Remounting filesystem read-only [ 180.205735][ T9550] EXT4-fs error (device loop8): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /7/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 180.228917][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.254873][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.284941][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.314190][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.339085][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.366841][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.389130][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.412668][ T9550] EXT4-fs warning (device loop8): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 180.706029][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.713115][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.720776][ T9691] device bridge_slave_0 entered promiscuous mode [ 180.727546][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.734715][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.742207][ T9691] device bridge_slave_1 entered promiscuous mode [ 180.785345][ T9691] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.792393][ T9691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.799625][ T9691] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.806673][ T9691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.832184][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.840888][ T2285] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.848257][ T2285] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.864640][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.872940][ T2285] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.880083][ T2285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.887842][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.896480][ T2285] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.903529][ T2285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.920505][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.928518][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.936460][ T6] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 180.946251][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.957961][ T9691] device veth0_vlan entered promiscuous mode [ 180.969601][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.977665][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.985281][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.993149][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.002765][ T9691] device veth1_macvtap entered promiscuous mode [ 181.013896][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.027316][ T2285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.042229][ T28] audit: type=1400 audit(181.021:1338): avc: denied { ioctl } for pid=9706 comm="syz.1.3693" path="socket:[62169]" dev="sockfs" ino=62169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.112940][ T9717] xt_hashlimit: size too large, truncated to 1048576 [ 181.119818][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 181.125977][ T6] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 181.136845][ T28] audit: type=1400 audit(181.121:1339): avc: denied { relabelfrom } for pid=9718 comm="syz.4.3698" name="NETLINK" dev="sockfs" ino=62836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 181.141970][ T6] usb 4-1: config 179 has no interface number 0 [ 181.209745][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 181.232749][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 181.244567][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 181.271687][ T6] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 181.295161][ T6] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 181.315227][ T6] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 181.324604][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.342354][ T9690] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 181.414049][ T9737] loop9: detected capacity change from 0 to 512 [ 181.485075][ T60] usb 7-1: USB disconnect, device number 4 [ 181.601157][ T9690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.610450][ T9690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.629953][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 181.668888][ T9765] loop6: detected capacity change from 0 to 4096 [ 181.677580][ T9765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 181.693254][ T8983] EXT4-fs (loop6): unmounting filesystem. [ 181.729773][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 181.730290][ T6] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 181.738097][ T1007] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 181.793850][ T9776] loop6: detected capacity change from 0 to 512 [ 181.800370][ T9776] EXT4-fs: Ignoring removed bh option [ 181.811892][ T9776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 181.826752][ T346] usb 4-1: USB disconnect, device number 36 [ 181.826861][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 181.834297][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.841540][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 181.859575][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.871706][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.880511][ T24] usb 2-1: config 0 descriptor?? [ 181.880765][ T8983] EXT4-fs (loop6): unmounting filesystem. [ 181.911287][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.919271][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.926044][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.932789][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.939509][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.946263][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.951106][ T1007] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.952996][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.961372][ T1007] usb 5-1: not running at top speed; connect to a high speed hub [ 181.967291][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.976343][ T1007] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.981711][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 181.992094][ T1007] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 181.998454][ T9783] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 182.009707][ T1007] usb 5-1: string descriptor 0 read error: -22 [ 182.020524][ T1007] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.029604][ T1007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.039611][ T1007] usb 5-1: 0:2 : does not exist [ 182.185382][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.201527][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.212246][ T6] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 182.221416][ T6] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 182.229497][ T6] usb 10-1: Manufacturer: syz [ 182.243091][ T6] usb 10-1: config 0 descriptor?? [ 182.288180][ T24] keytouch 0003:0926:3333.0041: fixing up Keytouch IEC report descriptor [ 182.298320][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0041/input/input45 [ 182.317663][ T9798] overlayfs: failed to resolve './cgroup': -2 [ 182.336271][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3734'. [ 182.346603][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3734'. [ 182.369144][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 182.382687][ T24] keytouch 0003:0926:3333.0041: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 182.591248][ T9822] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1539 sclass=netlink_xfrm_socket pid=9822 comm=syz.3.3744 [ 182.706135][ T346] usb 2-1: USB disconnect, device number 31 [ 182.714719][ T9830] serio: Serial port ptm0 [ 182.796588][ T9838] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3751'. [ 182.820923][ T9840] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 182.862742][ T9845] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 182.862742][ T9845] [ 183.053283][ T6] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0042/input/input46 [ 183.069176][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3760'. [ 183.081840][ T6] input: syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0042/input/input47 [ 183.093522][ T6] input: syz Touch Strip as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0042/input/input48 [ 183.106423][ T6] input: syz Dial as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0042/input/input49 [ 183.119357][ T6] uclogic 0003:256C:006D.0042: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.9-1/input0 [ 183.255861][ T1007] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 183.277766][ T9873] loop3: detected capacity change from 0 to 4096 [ 183.279700][ T3759] usb 10-1: USB disconnect, device number 2 [ 183.288309][ T1007] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 183.298320][ T9873] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.306617][ T9873] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 183.315340][ T9873] System zones: 0-5 [ 183.319876][ T1007] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 183.327907][ T9873] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.342982][ T1007] usb 5-1: USB disconnect, device number 22 [ 183.400658][ T1717] EXT4-fs (loop3): unmounting filesystem. [ 183.440649][ T9893] loop3: detected capacity change from 0 to 512 [ 183.447114][ T9893] EXT4-fs: Ignoring removed oldalloc option [ 183.453929][ T6] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 183.462147][ T9893] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.472186][ T9893] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102] [ 183.480437][ T9893] System zones: 0-2, 18-18, 34-34 [ 183.485934][ T9893] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3776: iget: bad i_size value: 360287970189639680 [ 183.499262][ T9893] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3776: couldn't read orphan inode 15 (err -117) [ 183.511426][ T9893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.530423][ T1717] EXT4-fs (loop3): unmounting filesystem. [ 183.670965][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.681959][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.691781][ T6] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 183.700827][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.709227][ T6] usb 7-1: config 0 descriptor?? [ 183.739863][ T335] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 183.807080][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3779'. [ 183.844952][ T1007] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 183.853029][ T1007] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.920847][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.930904][ T335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.947705][ T335] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 183.956918][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.972856][ T335] usb 2-1: config 0 descriptor?? [ 184.105831][ T9929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3792'. [ 184.114943][ T9929] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3792'. [ 184.223732][ T9948] netem: change failed [ 184.301846][ T9957] SELinux: failed to load policy [ 184.392795][ T335] uclogic 0003:5543:0064.0044: item fetching failed at offset 0/1 [ 184.401139][ T335] uclogic 0003:5543:0064.0044: parse failed [ 184.407098][ T335] uclogic: probe of 0003:5543:0064.0044 failed with error -22 [ 184.414637][ T6] usbhid 7-1:0.0: can't add hid device: -71 [ 184.420629][ T6] usbhid: probe of 7-1:0.0 failed with error -71 [ 184.428496][ T6] usb 7-1: USB disconnect, device number 5 [ 184.605405][ T3759] usb 2-1: USB disconnect, device number 32 [ 184.611468][ T297] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 184.646463][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 184.646476][ T28] audit: type=1400 audit(184.621:1350): avc: denied { mount } for pid=9998 comm="syz.3.3824" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 184.676093][ T28] audit: type=1400 audit(184.651:1351): avc: denied { unmount } for pid=1717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 184.759732][ T1007] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.775116][ T28] audit: type=1400 audit(184.751:1352): avc: denied { mounton } for pid=10010 comm="syz.3.3830" path="/file0" dev="ramfs" ino=63852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 184.775175][T10011] overlayfs: missing 'lowerdir' [ 184.801510][ T297] usb 10-1: Using ep0 maxpacket: 16 [ 184.807853][ T297] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.819731][ T297] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.832657][ T297] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.841857][ T297] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.850864][ T297] usb 10-1: config 0 descriptor?? [ 184.950811][ T1007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.962057][ T1007] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.972041][ T1007] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 184.981268][ T1007] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.990054][ T1007] usb 5-1: config 0 descriptor?? [ 185.136715][ T28] audit: type=1400 audit(185.111:1353): avc: denied { bind } for pid=10031 comm="syz.1.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.166845][ T28] audit: type=1400 audit(185.141:1354): avc: denied { listen } for pid=10031 comm="syz.1.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.218064][T10038] netlink: 'syz.6.3842': attribute type 12 has an invalid length. [ 185.247498][ T28] audit: type=1400 audit(185.221:1355): avc: denied { compute_member } for pid=10041 comm="syz.1.3844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 185.269262][ T297] HID 045e:07da: Invalid code 65791 type 1 [ 185.284675][ T297] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0045/input/input50 [ 185.299323][ T28] audit: type=1400 audit(185.271:1356): avc: denied { map } for pid=10044 comm="syz.6.3845" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 185.302513][ T297] microsoft 0003:045E:07DA.0045: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 185.379315][T10051] SELinux: ebitmap: truncated map [ 185.394605][T10051] SELinux: failed to load policy [ 185.487727][ T28] audit: type=1400 audit(185.461:1357): avc: denied { write } for pid=10058 comm="syz.6.3851" name="mcfilter" dev="proc" ino=4026532957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 185.601248][ T1007] hid-led 0003:1D34:000A.0046: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 185.617103][ T1007] hid-led 0003:1D34:000A.0046: Dream Cheeky Webmail Notifier initialized [ 185.634092][T10069] netem: incorrect gi model size [ 185.639047][T10069] netem: change failed [ 185.808983][ T60] usb 5-1: USB disconnect, device number 23 [ 186.075102][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3878'. [ 186.115195][T10120] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3879'. [ 186.128662][ T297] usb 10-1: USB disconnect, device number 3 [ 186.210579][T10085] loop6: detected capacity change from 0 to 131072 [ 186.214292][T10127] kvm [10125]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x5 [ 186.217678][T10085] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 150994945) [ 186.228051][T10127] kvm [10125]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x5 [ 186.233469][T10085] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 186.234035][T10085] F2FS-fs (loop6): invalid crc value [ 186.241833][T10127] kvm [10125]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x5 [ 186.263646][T10085] F2FS-fs (loop6): Found nat_bits in checkpoint [ 186.265166][T10127] kvm [10125]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x5 [ 186.306376][T10085] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 186.313578][T10085] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 186.344165][ T28] audit: type=1326 audit(186.321:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10137 comm="syz.4.3885" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdcb2b8f749 code=0x0 [ 186.345821][T10085] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 186.392401][ T28] audit: type=1400 audit(186.371:1359): avc: denied { read } for pid=10140 comm="syz.1.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 186.436981][ T297] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 186.477492][T10152] loop3: detected capacity change from 0 to 2048 [ 186.499603][T10152] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.517182][ T1717] EXT4-fs (loop3): unmounting filesystem. [ 186.584045][T10164] binder: 10163:10164 ioctl c0306201 2000000004c0 returned -14 [ 186.838096][ T283] ------------[ cut here ]------------ [ 186.843737][ T283] WARNING: CPU: 0 PID: 283 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 186.852066][ T283] Modules linked in: [ 186.855970][ T283] CPU: 0 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0 [ 186.865232][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.875403][ T283] RIP: 0010:drop_nlink+0xc5/0x110 [ 186.880579][ T283] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 83 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 60 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 186.900405][ T283] RSP: 0018:ffffc9000d2ffc38 EFLAGS: 00010293 [ 186.906470][ T283] RAX: ffffffff81c3c965 RBX: ffff88811e92f1a8 RCX: ffff88810e1d5100 [ 186.914579][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.922679][ T283] RBP: ffffc9000d2ffc60 R08: 0000000000000004 R09: 0000000000000003 [ 186.930711][ T283] R10: fffff52001a5ff78 R11: 1ffff92001a5ff78 R12: dffffc0000000000 [ 186.936788][T10217] SELinux: failed to load policy [ 186.938675][ T283] R13: 1ffff11023d25e3e R14: ffff88811e92f1f0 R15: 0000000000000000 [ 186.938692][ T283] FS: 0000555585776500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 186.960562][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.967151][ T283] CR2: ffffffffd88f0000 CR3: 000000012e5d6000 CR4: 00000000003506b0 [ 186.975178][ T283] DR0: 0000000000000045 DR1: 0000000000000400 DR2: 0000000000000000 [ 186.983191][ T283] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 186.991187][ T283] Call Trace: [ 186.994464][ T283] [ 186.997386][ T283] shmem_rmdir+0x5b/0x90 [ 187.001665][ T283] vfs_rmdir+0x393/0x500 [ 187.005909][ T283] incfs_kill_sb+0x105/0x220 [ 187.010623][ T283] deactivate_locked_super+0xb5/0x120 [ 187.015997][ T283] deactivate_super+0xaf/0xe0 [ 187.020862][ T283] cleanup_mnt+0x45f/0x4e0 [ 187.025295][ T283] __cleanup_mnt+0x19/0x20 [ 187.029750][ T283] task_work_run+0x1db/0x240 [ 187.034338][ T283] ? __cfi_task_work_run+0x10/0x10 [ 187.039434][ T283] ? __x64_sys_umount+0x125/0x160 [ 187.044487][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 187.049885][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 187.055094][ T283] exit_to_user_mode_prepare+0x87/0xd0 [ 187.060575][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 187.066179][ T283] do_syscall_64+0x58/0xa0 [ 187.070612][ T283] ? clear_bhb_loop+0x30/0x80 [ 187.075294][ T283] ? clear_bhb_loop+0x30/0x80 [ 187.079996][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.085889][ T283] RIP: 0033:0x7fcdd7990a77 [ 187.090331][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 187.109951][ T283] RSP: 002b:00007ffed9a76e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.118352][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcdd7990a77 [ 187.126340][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed9a76f30 [ 187.134322][ T283] RBP: 00007ffed9a76f30 R08: 0000000000000000 R09: 0000000000000000 [ 187.142301][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed9a77fc0 [ 187.150280][ T283] R13: 00007fcdd7a13d7d R14: 000000000002d9ac R15: 00007ffed9a78000 [ 187.158247][ T283] [ 187.161266][ T283] ---[ end trace 0000000000000000 ]--- [ 187.166842][ T283] ================================================================== [ 187.174902][ T283] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 187.181131][ T283] Write of size 4 at addr 0000000000000170 by task syz-executor/283 [ 187.189083][ T283] [ 187.191387][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0 [ 187.200299][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.210330][ T283] Call Trace: [ 187.213588][ T283] [ 187.216501][ T283] __dump_stack+0x21/0x24 [ 187.220815][ T283] dump_stack_lvl+0xee/0x150 [ 187.225389][ T283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 187.230393][ T283] ? ihold+0x20/0x60 [ 187.234269][ T283] ? ihold+0x20/0x60 [ 187.238145][ T283] print_report+0x3d/0x60 [ 187.242455][ T283] kasan_report+0x122/0x150 [ 187.246937][ T283] ? ihold+0x20/0x60 [ 187.250816][ T283] kasan_check_range+0x280/0x290 [ 187.255735][ T283] __kasan_check_write+0x14/0x20 [ 187.260656][ T283] ihold+0x20/0x60 [ 187.264356][ T283] vfs_rmdir+0x25f/0x500 [ 187.268580][ T283] incfs_kill_sb+0x105/0x220 [ 187.273155][ T283] deactivate_locked_super+0xb5/0x120 [ 187.278511][ T283] deactivate_super+0xaf/0xe0 [ 187.283170][ T283] cleanup_mnt+0x45f/0x4e0 [ 187.287564][ T283] __cleanup_mnt+0x19/0x20 [ 187.291958][ T283] task_work_run+0x1db/0x240 [ 187.296529][ T283] ? __cfi_task_work_run+0x10/0x10 [ 187.301618][ T283] ? __x64_sys_umount+0x125/0x160 [ 187.306635][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 187.311987][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 187.317169][ T283] exit_to_user_mode_prepare+0x87/0xd0 [ 187.322605][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 187.328041][ T283] do_syscall_64+0x58/0xa0 [ 187.332435][ T283] ? clear_bhb_loop+0x30/0x80 [ 187.337097][ T283] ? clear_bhb_loop+0x30/0x80 [ 187.341763][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.347638][ T283] RIP: 0033:0x7fcdd7990a77 [ 187.352032][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 187.371617][ T283] RSP: 002b:00007ffed9a76e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.380068][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcdd7990a77 [ 187.388020][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed9a76f30 [ 187.395977][ T283] RBP: 00007ffed9a76f30 R08: 0000000000000000 R09: 0000000000000000 [ 187.403931][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed9a77fc0 [ 187.411880][ T283] R13: 00007fcdd7a13d7d R14: 000000000002d9ac R15: 00007ffed9a78000 [ 187.419837][ T283] [ 187.422835][ T283] ================================================================== [ 187.431486][ T283] Disabling lock debugging due to kernel taint [ 187.437646][ T283] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 187.445436][ T283] #PF: supervisor write access in kernel mode [ 187.451480][ T283] #PF: error_code(0x0002) - not-present page [ 187.457444][ T283] PGD 132ac9067 P4D 132ac9067 PUD 0 [ 187.462715][ T283] Oops: 0002 [#1] PREEMPT SMP KASAN [ 187.467892][ T283] CPU: 0 PID: 283 Comm: syz-executor Tainted: G B W syzkaller #0 [ 187.476804][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.486835][ T283] RIP: 0010:ihold+0x26/0x60 [ 187.491322][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 58 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 187.510918][ T283] RSP: 0018:ffffc9000d2ffc78 EFLAGS: 00010246 [ 187.516971][ T283] RAX: ffff88810e1d5100 RBX: 0000000000000000 RCX: ffff88810e1d5100 [ 187.524934][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.532890][ T283] RBP: ffffc9000d2ffc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 187.540852][ T283] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811e92f1b4 [ 187.548813][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 187.556772][ T283] FS: 0000555585776500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 187.565683][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.572247][ T283] CR2: 0000000000000170 CR3: 000000012e5d6000 CR4: 00000000003506b0 [ 187.580204][ T283] DR0: 0000000000000045 DR1: 0000000000000400 DR2: 0000000000000000 [ 187.588154][ T283] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 187.596107][ T283] Call Trace: [ 187.599365][ T283] [ 187.602275][ T283] vfs_rmdir+0x25f/0x500 [ 187.606504][ T283] incfs_kill_sb+0x105/0x220 [ 187.611077][ T283] deactivate_locked_super+0xb5/0x120 [ 187.616434][ T283] deactivate_super+0xaf/0xe0 [ 187.621097][ T283] cleanup_mnt+0x45f/0x4e0 [ 187.625507][ T283] __cleanup_mnt+0x19/0x20 [ 187.629919][ T283] task_work_run+0x1db/0x240 [ 187.634498][ T283] ? __cfi_task_work_run+0x10/0x10 [ 187.639595][ T283] ? __x64_sys_umount+0x125/0x160 [ 187.644612][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 187.649979][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 187.655160][ T283] exit_to_user_mode_prepare+0x87/0xd0 [ 187.660598][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 187.666037][ T283] do_syscall_64+0x58/0xa0 [ 187.670446][ T283] ? clear_bhb_loop+0x30/0x80 [ 187.675107][ T283] ? clear_bhb_loop+0x30/0x80 [ 187.679809][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.685693][ T283] RIP: 0033:0x7fcdd7990a77 [ 187.690097][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 187.709684][ T283] RSP: 002b:00007ffed9a76e78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.718083][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fcdd7990a77 [ 187.726032][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed9a76f30 [ 187.733984][ T283] RBP: 00007ffed9a76f30 R08: 0000000000000000 R09: 0000000000000000 [ 187.741932][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffed9a77fc0 [ 187.749881][ T283] R13: 00007fcdd7a13d7d R14: 000000000002d9ac R15: 00007ffed9a78000 [ 187.757836][ T283] [ 187.760842][ T283] Modules linked in: [ 187.764725][ T283] CR2: 0000000000000170 [ 187.768855][ T283] ---[ end trace 0000000000000000 ]--- [ 187.774287][ T283] RIP: 0010:ihold+0x26/0x60 [ 187.778771][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 58 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 c0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 187.798355][ T283] RSP: 0018:ffffc9000d2ffc78 EFLAGS: 00010246 [ 187.804399][ T283] RAX: ffff88810e1d5100 RBX: 0000000000000000 RCX: ffff88810e1d5100 [ 187.812351][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.820297][ T283] RBP: ffffc9000d2ffc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 187.828248][ T283] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88811e92f1b4 [ 187.836200][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 187.844151][ T283] FS: 0000555585776500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 187.853060][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 187.859622][ T283] CR2: 0000000000000170 CR3: 000000012e5d6000 CR4: 00000000003506b0 [ 187.867575][ T283] DR0: 0000000000000045 DR1: 0000000000000400 DR2: 0000000000000000 [ 187.875524][ T283] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 187.883482][ T283] Kernel panic - not syncing: Fatal exception [ 187.889881][ T283] Kernel Offset: disabled [ 187.894190][ T283] Rebooting in 86400 seconds..