last executing test programs: 2m56.681493606s ago: executing program 32 (id=190): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) 2m47.112221187s ago: executing program 2 (id=353): unshare(0x2040400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x20002, 0x4) close_range(r0, 0xffffffffffffffff, 0x2) 2m47.085080817s ago: executing program 2 (id=354): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 2m47.072204858s ago: executing program 2 (id=356): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) tgkill(r0, r0, 0x8) 2m47.031221418s ago: executing program 2 (id=358): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000340), 0x0, 0x4fc, &(0x7f0000003680)="$eJzs3cFvI1cZAPBvZtebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Wx4yh2ShNWavI/IFGJA4ITZw5IHCr1xBHBDW69lANSgRWoQeJgNPY4m93YSdh1bNX+/aQnz5s3me+9teY977cbvwAm1vWIOIiIaxHxVkTM5eeTvMRrnZJd98m9u6tH9+6uJtFqvfmPpN2enYsTP5N5Mr/ndER8/zsRP0pOx23s7W+uVKuVnbxeata2S429/VsbtZX1ynplq1xeWlxaeOX2y+WBjfX52m8+/vbG6z94/3df+uhPB9/8Sdat2bzt5DgGqTP0wnGczNWIeP0ygo3AlXw810bdER5JGhGfiYgX2s//XFxpv5sX0+OxBgA+BVqtuWjNnawDAOMubefAkrSY5wJmI02LxU4O79mYSav1RvPmnfru1lonVzYfhfTORrWykOcK56OQZPXFd7Pj+/VyPFi/HRHPRMRPp55o14urF88zAACD9eRD6/+/pzrrPwAw5qbPu2B5OP0AAIbn3PUfABg71n8AmDzWfwCYPNZ/AJg81n8AmDQfdtf/K6PuCQAwFN97442stI7y779ee3tvd7P+9q21SmOzWNtdLa7Wd7aL6/X6erVSXK3XzrtftV7fXnwpdt8pNSuNZqmxt79cq+9uNZfb3+u9XCkMZVQAwFmeef6DvyQRcfDqE+0SJ/ZysFbDeEtH3QFgZOT8YXL5Fm6YXP6OD5y3l2ff/yL83iMEa737CD8EDNqNz8v/w6SS/4fJJf8Pk6t//v/aUPsBDF+rlfTb8z89vgQAGCty/MBQ//0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxsRsu8yfqKdpsRjxVETMRyG5s1GtLETE0xHx56nCVFZfHGmPAYDHl/4tyff/ujH34uzDrdeS/0xFvhv4j3/+5s/eWWk2dxaz8/88Pt98Lz9fHkX/AYDzdNfp7jre9cm9u6vdMsz+fPytzuaiWdyjvHRarsbV7OWP01GIiJl/JZ16Lvu8cmUA8Q8OI+JzvcaftHMj8/nOpw/Hz2I/NdT46QPx03Zb5zX7s/jsqTtP9Y153l6vMCk+yOaf13o9f2lcb79O99z8eLo9Qz2+7vx3dGr+6z7v0+25ptf8d/2iMV76/Xf7th1GfOFqr/jJcfykT/wXLxj/wy9++YV+ba1fRtyI3vFPxio1a9ulxt7+rY3aynplvbJVLi8tLi28cvvlcqmdoy51M9Wn/f3Vm0/3Hf+vI2b6xJ8+Z/xfO3PUreMJ+Ff/feuHX+kX/zDiG1/t/f4/e0b8bE38+pnx71uZ+W3f7buz+Gud8R/+v+//zQvG/+iv+2sXvBQAGILG3v7mSrVa2RnoQSEGfMMTB8kl9dnBmB9kn8cf9z7P5Smzntf84RfvP5c1jnykAzkY8cQEXLr7D/2oewIAAAAAAAAAAAAAAPRz6b9OlI56hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyz/wUAAP//9KDLNQ==") r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0xa0000, 0x0) r1 = dup(r0) ioctl$GIO_UNISCRNMAP(r1, 0x43403d0e, &(0x7f0000000080)=""/96) 2m46.744039093s ago: executing program 2 (id=365): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m46.689313934s ago: executing program 2 (id=367): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) 2m35.194389943s ago: executing program 33 (id=720): unshare(0x2c020400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) 2m31.493874568s ago: executing program 34 (id=367): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000000000)=""/104}, 0x20) 2m17.176327449s ago: executing program 5 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m17.121644959s ago: executing program 5 (id=1025): syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200ec00aaaaaaaaaa00865d60f5509b00403a00fe800000000000000000bdefd00000000000bbff020000000000000000000000000001020090787fffffff6050835900000000fc000000000000000000000000000000fe8000000000000000000000000000223a00"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) 2m17.09474367s ago: executing program 5 (id=1027): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=lower,shortname=winnt,shortname=win95,iocharset=macinuit,shortname=mixed,codepage=1255,nocase,fmask=00000000000000000000001,rodir,shortname=winnt,iocharset=maciceland,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',@'], 0x1, 0x29f, &(0x7f0000000180)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000002000000480000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44ae8a3a3641110bfc4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd5821124dcecb0c005d2a1bcf9436e101040000f73902ebcfcf49822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2ba7f1521b3ebb0cc52f49129b9b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e5efdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3a9a7d85832f9acee4f1b56e9623128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcb02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184e5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8eae87691e6e365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca7a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c05000000000000000c4736c81936315418f26770cca4e2f89800d18c2a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41fa7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea0000000000000080ca02ee3686da707b56d8db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09832d4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e4acd27dfa82cafc6b64b1f4659834aecbed6d44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c20680c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea2417952cf6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0fb5bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905906e611be56e9eb0cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b7cbe066c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b4907c49f604e5a92e3f9de595d31dd084adfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1ac225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf667fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b133b249b800a34b0942d97b55d808c41ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d947ffff0000eb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57bdf4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70c0860c1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd5d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e666e80f34d0adad1e2116bc385f888405d48f0d386da0cc6068018e45772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8957176578f44ffb8895fbd4e2a757a4249a855632ca30e09789811bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000400008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3bfb41cb630343b32ee5f9329dcaf33be8c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d934927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e006f09f5173e260b82f80ae10adebbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded1ca0fbea5cbe54ee42fb6809317dc0b7587d9322f8cd09e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e64420f2f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b4306301855c89afe795d881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8b57a2a35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406ba14bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da8646dc1379d1aceb72fd929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b0755d6be5afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c4468a4808ae562a6bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0fa3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb70042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b576af95820540e1ac91a43954f0b1260fa3b351b5a424d2b2944866aff582486308aca33c9571d1928175737473eaba14c9818c05d57de4df75f08206c24f781a72f26159b0abf05a90364414c4be434323c0f1050494aed7d791966edcb89d555e9907222e9af2546f0d6f9e51d40e30c85bb10cef93aacbb2d1278ddfcb9c65fd6d55239b1b7097c262740c13c53937b6f11ca6d544789ad36df5721e198f3d7f3a70d987c534cd7ac8da762e6d8752637405ffc1399a79f6c266dda1593f18ea2fb93111c1416f5a07fd7d74f956b2f4f4f3e9bcc03613cfb2b89b42babeb5756a21af5d2f980f1eb505cee397fd4e2cf068804b31b8be623a04c103e0dd4f0c3626f6bffa8f9d597123da046692211f7ad0711469f4839d394ed227336c2394b9ba1c299e88bca4fd70723dcab03ed8de938a69c31cdb5dcc77df25bcae53d9f35125c9d19d6f948f29ed4cab2cff308f3d6230c0e1442f21163ed895e869bd37653abbf7ab3d48c15d8f4a99a1c84bfe7b76c0bb42cf72a1b871b6edf1ce441c720054ab2aaa9f1d7ce20f8827c967f61a4acffb1ffbe54dbf4b65f23f1e740412a6e90dbeaee4d177f7bd016ebf7aec4a80671f193d28eaf71043ca144f9dbdc8743d9dd16d17f87c8a84f66053460fa6de2a29c2ba81e4780689b03bb02c0249a645cb6282b91f7d0f412a823b81c8d6c39a4483efeaf68e6920255a38f3459b89eb3c1ebba6a1507dadd4e7bcbec4d5c6be67f2760ac557c71e79b79939d0f41ae12241b464390d2ff9c60d49c3cfb455ffa1a8cbe9df811bc8a917f2199884edcd83ff6978f9d1ddf702864330e896ef31c914685f74a4198d71b35fb3b6fe08d0bf6ede50ae5eea1633621f5b4ca1829d5525ff4e0b357e8dcc9026206d6ff395db6b034d6bdf697d0d05d79917684b1ba7153caee53f8769b72c566d8bf9545d857d6db6a9ad9f0d36d3bea290d73cbfd15044d245db5a8624a94555777cad157b12b98bbb1e4a71a3ca616c652fcf6c0354b96f20effea6bbbabe9287becc537db31fcca6216e63ac479f383a7de333167c0179b146806b71cbf473f05320a51373bcbf7cc2cde3e108bb8e2229ddb771c1bd8a0982cf85d01efcc572276f8dac8ce8cab40b409c8e9f9dc086ce70645d411be8563236eb1a5db6337e9d03c5cf3012eb1fe916038236df9cc3327fd0b4342f630e58d35fb5f635adcc92338f4d68ef91886b4392fd5b384600000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f00800", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m17.052503101s ago: executing program 5 (id=1028): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m15.377818745s ago: executing program 5 (id=1034): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m15.162287318s ago: executing program 5 (id=1049): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x82, 0xbd2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x1000, 0x29) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x161f00, 0x48) 2m0.106318751s ago: executing program 35 (id=1049): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000180), 0x82, 0xbd2, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x1000, 0x29) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x161f00, 0x48) 1m25.122184884s ago: executing program 7 (id=2412): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x10800, 0x22) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x58) 1m24.888014857s ago: executing program 7 (id=2424): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x10000, 0x1, 0x0, 0x4}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) 1m23.212798771s ago: executing program 7 (id=2501): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[], 0xff, 0x2e7, &(0x7f0000000580)="$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") r0 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 1m23.159014141s ago: executing program 7 (id=2505): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRES32], 0xfd, 0x296, &(0x7f0000001080)="$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") readv(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) 1m23.083566102s ago: executing program 7 (id=2509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x1ed8, 0x4) 1m22.867524385s ago: executing program 7 (id=2519): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) 1m22.843026175s ago: executing program 36 (id=2519): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) 1m21.492083834s ago: executing program 9 (id=2575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0xc2164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.183773298s ago: executing program 9 (id=2585): r0 = epoll_create(0x4c4) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)={0x80000000}) 1m21.160961329s ago: executing program 9 (id=2587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f00)={0x24, 0x0, &(0x7f0000000e40)=[@clear_death, @acquire_done={0x40106309, 0x2}], 0x0, 0x0, 0x0}) 1m21.116027269s ago: executing program 9 (id=2589): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000940)=""/28, 0x1c) 1m20.734235074s ago: executing program 9 (id=2600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 1m20.256190771s ago: executing program 9 (id=2614): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1m20.225880691s ago: executing program 37 (id=2614): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1.637372217s ago: executing program 8 (id=4518): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat(r1, &(0x7f0000000280)='./file0\x00', 0x40001, 0x52abe154ad664e6c) 1.555931109s ago: executing program 1 (id=4522): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f786174747200000000653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887836f23dbf8ad3dd5931c08b46ea5952a332ad207000c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d9bb55bb77bcadfdf75143289938f8d282688c10f0ffcefa57ff27c893414af5266072d92b4513d8d2a3d9419501652a3ce7230a00"/257], 0x1, 0x54fe, &(0x7f000000ad00)="$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") clock_gettime(0x0, 0x0) socket(0xbab9fa9b55b2b379, 0x80000, 0x7ff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x2000000, 0x200002000000, 0x18f000, 0x0, 0x0, 0x2, 0x2401}) 1.555352689s ago: executing program 8 (id=4523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x18) alarm(0x0) 1.554780789s ago: executing program 8 (id=4524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.515294229s ago: executing program 8 (id=4525): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xdd, 0x11ff, &(0x7f0000003300)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0xa) 1.350782241s ago: executing program 8 (id=4529): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r1, 0x267a4e37}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000000c0)=0xb, 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e23, 0x9, @loopback, 0x401}, {0xa, 0x4e24, 0x400, @local, 0x9bdf}, 0xffffffffffffffff, {[0x7, 0xa, 0x40, 0x5, 0x1, 0xfffffb83, 0x7fff, 0x1f12]}}, 0x5c) 1.252097083s ago: executing program 8 (id=4531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 1.221518123s ago: executing program 38 (id=4531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 1.217524343s ago: executing program 1 (id=4533): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x20008c0, &(0x7f0000000900)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303337372c757466383d302c696f636861727365743d6a6e86252a5ed6dc6b6f69382d752c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c696f636861727365743d6370313235312c636f6465706167653d3836342c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d312c00"], 0x83, 0x350, &(0x7f0000000580)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103042, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.196232174s ago: executing program 1 (id=4536): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 691.28617ms ago: executing program 0 (id=4532): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) io_setup(0x9, &(0x7f00000001c0)) 690.506741ms ago: executing program 1 (id=4546): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, "cca1c1d6"}, @main=@item_4={0x3, 0x0, 0x9, "7e49ed50"}, @global=@item_012={0x1, 0x1, 0x4, "b8"}, @local=@item_012={0x2, 0x2, 0x4, 'uQ'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0xc124}], 0x1, 0x4e) 504.133833ms ago: executing program 0 (id=4537): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 419.925004ms ago: executing program 4 (id=4540): r0 = epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 386.512185ms ago: executing program 6 (id=4541): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0), 0x2, 0x46b, &(0x7f0000000580)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0x40, 0x1000fffff, 0x9}) 353.995205ms ago: executing program 4 (id=4542): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000003], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) 300.032056ms ago: executing program 4 (id=4544): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 299.827076ms ago: executing program 4 (id=4545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) pivot_root(0x0, 0x0) 278.137046ms ago: executing program 4 (id=4551): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 208.171427ms ago: executing program 6 (id=4553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) io_setup(0x9, &(0x7f00000001c0)) 207.948807ms ago: executing program 3 (id=4554): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff9}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x30}}, 0x0) 207.758607ms ago: executing program 0 (id=4555): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00001a"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000000008"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="06"], 0x48}}, 0x0) 197.687257ms ago: executing program 0 (id=4556): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8010) 189.882287ms ago: executing program 3 (id=4557): chdir(&(0x7f0000000480)='./cgroup\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 166.546347ms ago: executing program 0 (id=4558): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 116.187428ms ago: executing program 3 (id=4559): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @empty, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001800)=0x8000, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 115.839588ms ago: executing program 0 (id=4560): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505c3a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 115.564158ms ago: executing program 3 (id=4561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) ustat(0x3, 0x0) 115.348858ms ago: executing program 3 (id=4562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='hrtimer_init\x00', r1}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 101.954988ms ago: executing program 3 (id=4563): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 97.362389ms ago: executing program 6 (id=4564): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='\x04\x00\x00\x00\x00^\xf6jAc') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000500)={0x1, 0x0, 0xb, 0xc, 0x1b8, 0x0}) 47.587549ms ago: executing program 6 (id=4565): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0xff, 0x7ffc0001}]}) 47.188709ms ago: executing program 6 (id=4566): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/212, 0xd4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="154e011a010d62002c0012800b0001006d616373656300001c000280080005000300000005000c000600000005000c000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) 46.752329ms ago: executing program 4 (id=4567): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1000, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) 23.773259ms ago: executing program 6 (id=4568): r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) pselect6(0x40, &(0x7f0000000000)={0x10, 0xcb5, 0x8, 0x5, 0xffffffff, 0x4, 0x7f, 0x7}, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x394, 0x9, 0x0, 0x95, 0x100}, 0x0, 0x0, 0x0) 23.308189ms ago: executing program 1 (id=4569): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r0], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8010) 0s ago: executing program 1 (id=4570): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) read(r0, &(0x7f0000000180)=""/187, 0xbb) 0s ago: executing program 6 (id=4571): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) kernel console output (not intermixed with test programs): p4: detected capacity change from 0 to 512 [ 153.922288][ T6364] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 153.943773][ T6364] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.019578][ T8105] fido_id[8105]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 154.070613][ T8117] SELinux: Context Ž is not valid (left unmapped). [ 154.146710][ T28] audit: type=1400 audit(411.156:3043): avc: denied { remount } for pid=8127 comm="syz.3.3414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 154.245241][ T8138] overlayfs: missing 'lowerdir' [ 154.270950][ T39] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 154.296855][ T8140] syz.8.3421[8140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.296939][ T8140] syz.8.3421[8140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.505080][ T39] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.558362][ T39] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.580111][ T39] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.612057][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.637107][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.659242][ T39] usb 7-1: Product: syz [ 154.666124][ T39] usb 7-1: Manufacturer: syz [ 154.679588][ T39] usb 7-1: SerialNumber: syz [ 154.899675][ T39] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.956622][ T8189] loop3: detected capacity change from 0 to 40427 [ 154.977172][ T8189] F2FS-fs (loop3): fault_injection options not supported [ 154.985073][ T8189] F2FS-fs (loop3): Image doesn't support compression [ 154.994471][ T8189] F2FS-fs (loop3): Image doesn't support compression [ 155.003715][ T8189] F2FS-fs (loop3): fault_type options not supported [ 155.023670][ T8189] F2FS-fs (loop3): invalid crc value [ 155.035168][ T8189] F2FS-fs (loop3): Found nat_bits in checkpoint [ 155.075121][ T8189] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.093476][ T8205] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3449'. [ 155.108817][ T6364] usb 7-1: USB disconnect, device number 20 [ 155.120238][ T6364] usblp0: removed [ 155.139786][ T8189] F2FS-fs (loop3): access invalid blkaddr:3 [ 155.146672][ T8189] CPU: 0 PID: 8189 Comm: syz.3.3442 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 155.158499][ T8189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.171341][ T8189] Call Trace: [ 155.174881][ T8189] [ 155.179944][ T8189] __dump_stack+0x21/0x24 [ 155.184563][ T8189] dump_stack_lvl+0xee/0x150 [ 155.192808][ T8189] ? __cfi_dump_stack_lvl+0x8/0x8 [ 155.198311][ T8189] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 155.204597][ T8189] dump_stack+0x15/0x24 [ 155.209722][ T8189] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 155.215981][ T8189] f2fs_is_valid_blkaddr+0x23/0x30 [ 155.221458][ T8189] f2fs_map_blocks+0xc93/0x3a60 [ 155.227682][ T8189] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 155.233675][ T8189] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 155.240653][ T8189] ? rwsem_write_trylock+0x130/0x300 [ 155.246961][ T8189] ? __cfi___wake_up+0x10/0x10 [ 155.252911][ T8189] f2fs_precache_extents+0x18c/0x260 [ 155.258937][ T8189] ? __cfi_f2fs_precache_extents+0x10/0x10 [ 155.265455][ T8189] ? save_fpregs_to_fpstate+0x192/0x220 [ 155.271792][ T8189] ? __kasan_check_write+0x14/0x20 [ 155.277615][ T8189] ? __switch_to+0x51f/0xe30 [ 155.283122][ T8189] f2fs_fiemap+0x136/0x1940 [ 155.287972][ T8189] ? __cfi_f2fs_fiemap+0x10/0x10 [ 155.293348][ T8189] ? avc_has_extended_perms+0x95f/0xdc0 [ 155.299952][ T8189] ? __kasan_check_write+0x14/0x20 [ 155.305552][ T8189] do_vfs_ioctl+0x13c2/0x1c80 [ 155.313430][ T8189] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 155.319154][ T8189] ? futex_unqueue+0x132/0x160 [ 155.323929][ T8189] ? wake_up_q+0x105/0x1b0 [ 155.328751][ T8189] ? __cfi_futex_wait+0x10/0x10 [ 155.335066][ T8189] ? ioctl_has_perm+0x391/0x4c0 [ 155.341331][ T8189] ? has_cap_mac_admin+0x330/0x330 [ 155.346620][ T8189] ? slab_free_freelist_hook+0xc2/0x190 [ 155.353026][ T8189] ? do_futex+0x2dc/0x420 [ 155.358347][ T8189] ? selinux_file_ioctl+0x377/0x480 [ 155.363758][ T8189] ? __cfi_do_futex+0x10/0x10 [ 155.369005][ T8189] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 155.376680][ T8189] ? __fget_files+0x2d5/0x330 [ 155.382274][ T8189] ? security_file_ioctl+0x95/0xc0 [ 155.388180][ T8189] __se_sys_ioctl+0x9f/0x1b0 [ 155.393429][ T8189] __x64_sys_ioctl+0x7b/0x90 [ 155.398672][ T8189] x64_sys_call+0x58b/0x9a0 [ 155.403258][ T8189] do_syscall_64+0x4c/0xa0 [ 155.408771][ T8189] ? clear_bhb_loop+0x15/0x70 [ 155.413796][ T8189] ? clear_bhb_loop+0x15/0x70 [ 155.419220][ T8189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.426123][ T8189] RIP: 0033:0x7f5be998e969 [ 155.431180][ T8189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.455033][ T8189] RSP: 002b:00007f5bea78c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.463798][ T8189] RAX: ffffffffffffffda RBX: 00007f5be9bb5fa0 RCX: 00007f5be998e969 [ 155.472596][ T8189] RDX: 0000200000000880 RSI: 00000000c020660b RDI: 0000000000000004 [ 155.481352][ T8189] RBP: 00007f5be9a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 155.490967][ T8189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.499951][ T8189] R13: 0000000000000000 R14: 00007f5be9bb5fa0 R15: 00007ffd0f7b76c8 [ 155.510148][ T8189] [ 155.561090][ T8211] loop8: detected capacity change from 0 to 1024 [ 155.574444][ T8211] EXT4-fs: dax option not supported [ 155.619059][ T288] syz-executor: attempt to access beyond end of device [ 155.619059][ T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.746670][ T8228] tipc: Enabling of bearer rejected, media not registered [ 156.288034][ T28] audit: type=1400 audit(413.296:3044): avc: denied { setattr } for pid=8257 comm="syz.3.3474" name="vsock" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 156.363980][ T8245] loop8: detected capacity change from 0 to 40427 [ 156.393698][ T8245] F2FS-fs (loop8): fault_injection options not supported [ 156.411026][ T8245] F2FS-fs (loop8): Image doesn't support compression [ 156.428472][ T8245] F2FS-fs (loop8): Image doesn't support compression [ 156.436939][ T8245] F2FS-fs (loop8): fault_type options not supported [ 156.457003][ T8245] F2FS-fs (loop8): invalid crc value [ 156.472068][ T8245] F2FS-fs (loop8): Found nat_bits in checkpoint [ 156.483288][ T8222] loop4: detected capacity change from 0 to 131072 [ 156.510060][ T8276] syz.1.3482[8276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.510152][ T8276] syz.1.3482[8276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.517944][ T8222] F2FS-fs (loop4): invalid crc value [ 156.563060][ T8245] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 156.574327][ T8280] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 156.593464][ T8222] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.594092][ T8280] SELinux: failed to load policy [ 156.632256][ T8245] F2FS-fs (loop8): access invalid blkaddr:3 [ 156.638651][ T8245] CPU: 0 PID: 8245 Comm: syz.8.3468 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 156.648849][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.659791][ T8245] Call Trace: [ 156.664641][ T8245] [ 156.667880][ T8245] __dump_stack+0x21/0x24 [ 156.672796][ T8245] dump_stack_lvl+0xee/0x150 [ 156.678910][ T8245] ? __cfi_dump_stack_lvl+0x8/0x8 [ 156.684573][ T8245] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 156.692413][ T8245] dump_stack+0x15/0x24 [ 156.698753][ T8245] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 156.704930][ T8245] f2fs_is_valid_blkaddr+0x23/0x30 [ 156.710788][ T8245] f2fs_map_blocks+0xc93/0x3a60 [ 156.716205][ T8245] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 156.721869][ T8245] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 156.728862][ T8245] ? rwsem_write_trylock+0x130/0x300 [ 156.734968][ T8245] ? __cfi___wake_up+0x10/0x10 [ 156.740594][ T8245] f2fs_precache_extents+0x18c/0x260 [ 156.746017][ T8245] ? __cfi_f2fs_precache_extents+0x10/0x10 [ 156.752288][ T8245] ? save_fpregs_to_fpstate+0x192/0x220 [ 156.757949][ T8245] ? __kasan_check_write+0x14/0x20 [ 156.764048][ T8245] ? __switch_to+0x51f/0xe30 [ 156.769432][ T8245] f2fs_fiemap+0x136/0x1940 [ 156.774770][ T8245] ? __cfi_f2fs_fiemap+0x10/0x10 [ 156.780040][ T8245] ? avc_has_extended_perms+0x95f/0xdc0 [ 156.786048][ T8245] ? __kasan_check_write+0x14/0x20 [ 156.791710][ T8245] do_vfs_ioctl+0x13c2/0x1c80 [ 156.796789][ T8245] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 156.802982][ T8245] ? futex_unqueue+0x132/0x160 [ 156.808816][ T8245] ? __cfi_futex_wait+0x10/0x10 [ 156.813997][ T8245] ? ioctl_has_perm+0x391/0x4c0 [ 156.819984][ T8245] ? has_cap_mac_admin+0x330/0x330 [ 156.825987][ T8245] ? slab_free_freelist_hook+0xc2/0x190 [ 156.833113][ T8245] ? do_futex+0x2dc/0x420 [ 156.837652][ T8245] ? selinux_file_ioctl+0x377/0x480 [ 156.843173][ T8245] ? __cfi_do_futex+0x10/0x10 [ 156.849105][ T8245] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 156.855024][ T8245] ? __fget_files+0x2d5/0x330 [ 156.859745][ T8245] ? security_file_ioctl+0x95/0xc0 [ 156.866715][ T8245] __se_sys_ioctl+0x9f/0x1b0 [ 156.872282][ T8245] __x64_sys_ioctl+0x7b/0x90 [ 156.877515][ T8245] x64_sys_call+0x58b/0x9a0 [ 156.882732][ T8245] do_syscall_64+0x4c/0xa0 [ 156.888384][ T8245] ? clear_bhb_loop+0x15/0x70 [ 156.893793][ T8245] ? clear_bhb_loop+0x15/0x70 [ 156.900442][ T8245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.908032][ T8245] RIP: 0033:0x7f3db5d8e969 [ 156.913167][ T8245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.936579][ T8245] RSP: 002b:00007f3db6c46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.946362][ T8245] RAX: ffffffffffffffda RBX: 00007f3db5fb5fa0 RCX: 00007f3db5d8e969 [ 156.955077][ T8245] RDX: 0000200000000880 RSI: 00000000c020660b RDI: 0000000000000004 [ 156.964328][ T8245] RBP: 00007f3db5e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 156.974611][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.985419][ T8245] R13: 0000000000000000 R14: 00007f3db5fb5fa0 R15: 00007fff3df40538 [ 156.994412][ T8245] [ 157.023374][ T8222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 157.086413][ T3333] syz-executor: attempt to access beyond end of device [ 157.086413][ T3333] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.139781][ T28] audit: type=1400 audit(414.146:3045): avc: denied { create } for pid=8295 comm="syz.1.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 157.223879][ T8298] IPv6: sit1: Disabled Multicast RS [ 157.695696][ T8314] loop3: detected capacity change from 0 to 40427 [ 157.723486][ T8314] F2FS-fs (loop3): invalid crc value [ 157.731259][ T8314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.772385][ T8314] F2FS-fs (loop3): Start checkpoint disabled! [ 157.780054][ T8314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 157.821767][ T8314] syz.3.3498: attempt to access beyond end of device [ 157.821767][ T8314] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 157.867690][ T8314] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 157.890943][ T6364] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 157.933674][ T311] kworker/u4:4: attempt to access beyond end of device [ 157.933674][ T311] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 158.082317][ T6364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.105800][ T6364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.118578][ T6364] usb 5-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 158.129532][ T6364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.143593][ T6364] usb 5-1: config 0 descriptor?? [ 158.173590][ T8326] loop6: detected capacity change from 0 to 131072 [ 158.182395][ T8326] F2FS-fs (loop6): invalid crc value [ 158.190142][ T8326] F2FS-fs (loop6): Found nat_bits in checkpoint [ 158.226476][ T8326] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 158.295250][ T8340] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 158.553626][ T6364] hid-generic 0003:0416:C168.0021: unknown main item tag 0x0 [ 158.563714][ T8357] loop8: detected capacity change from 0 to 8192 [ 158.581809][ T6364] hid-generic 0003:0416:C168.0021: hidraw0: USB HID v0.00 Device [HID 0416:c168] on usb-dummy_hcd.4-1/input0 [ 158.775196][ T1336] usb 5-1: USB disconnect, device number 7 [ 158.784044][ T311] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.868162][ T8388] loop6: detected capacity change from 0 to 16 [ 158.881476][ T8388] erofs: (device loop6): mounted with root inode @ nid 36. [ 158.958149][ T8392] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Qÿ0x0000000000000004 [ 159.091699][ T8366] loop3: detected capacity change from 0 to 131072 [ 159.100525][ T8366] F2FS-fs (loop3): invalid crc value [ 159.110446][ T8366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.142345][ T8366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 159.359429][ T28] audit: type=1400 audit(416.366:3046): avc: denied { write } for pid=8409 comm="syz.6.3540" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.393984][ T8411] loop3: detected capacity change from 0 to 1024 [ 159.401716][ T8411] EXT4-fs: dax option not supported [ 159.408516][ C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2 [ 159.598598][ T8422] SELinux: policydb version 0 does not match my version range 15-33 [ 159.609200][ T8422] SELinux: failed to load policy [ 159.631015][ T39] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 159.651041][ T60] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 159.716485][ T8424] loop3: detected capacity change from 0 to 40427 [ 159.726329][ T8424] F2FS-fs (loop3): fault_injection options not supported [ 159.738429][ T8424] F2FS-fs (loop3): Image doesn't support compression [ 159.747991][ T8424] F2FS-fs (loop3): Image doesn't support compression [ 159.762903][ T8424] F2FS-fs (loop3): invalid crc value [ 159.770774][ T8424] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.804445][ T8424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.821178][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 159.831560][ T39] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.841914][ T39] usb 7-1: config 179 has no interface number 0 [ 159.849424][ T39] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.862604][ T39] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.862683][ T288] syz-executor: attempt to access beyond end of device [ 159.862683][ T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.876232][ T39] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.904488][ T60] usb 5-1: config 0 has no interfaces? [ 159.911478][ T39] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.924585][ T39] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.939081][ T39] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.949460][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.959140][ T60] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 159.970511][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.981284][ T8410] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 159.994662][ T60] usb 5-1: Product: syz [ 160.001531][ T60] usb 5-1: Manufacturer: syz [ 160.007299][ T60] usb 5-1: SerialNumber: syz [ 160.014000][ T60] r8152-cfgselector 5-1: config 0 descriptor?? [ 160.070470][ T28] audit: type=1400 audit(417.076:3047): avc: denied { getopt } for pid=8435 comm="syz.3.3549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 160.139398][ T8442] loop3: detected capacity change from 0 to 512 [ 160.150497][ T8442] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.162007][ T8442] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 160.172876][ T8442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 160.183779][ T8442] System zones: 0-2, 18-18, 34-34 [ 160.191369][ T8442] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 160.221932][ T8442] EXT4-fs (loop3): 1 truncate cleaned up [ 160.235320][ T8442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.283204][ T288] EXT4-fs (loop3): unmounting filesystem. [ 160.284261][ T6364] usb 7-1: USB disconnect, device number 21 [ 160.289628][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 160.308213][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 160.370699][ T8453] loop3: detected capacity change from 0 to 512 [ 160.385943][ T8453] EXT4-fs: Ignoring removed orlov option [ 160.395388][ T8453] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.409661][ T8453] EXT4-fs (loop3): 1 orphan inode deleted [ 160.416569][ T8453] EXT4-fs (loop3): 1 truncate cleaned up [ 160.423021][ T8453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 160.437103][ T60] usb 5-1: USB disconnect, device number 8 [ 160.444777][ T8453] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.3556: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 160.467697][ T8453] EXT4-fs (loop3): Remounting filesystem read-only [ 160.478033][ T8453] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.3556: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 160.502010][ T8453] EXT4-fs (loop3): Remounting filesystem read-only [ 160.509309][ T8453] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1804: Corrupt filesystem [ 160.521345][ T8453] EXT4-fs (loop3): Remounting filesystem read-only [ 160.534998][ T288] EXT4-fs (loop3): unmounting filesystem. [ 160.851030][ T8378] Bluetooth: hci0: command 0x1003 tx timeout [ 160.851032][ T7913] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.864945][ T8377] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 161.034912][ T8478] loop4: detected capacity change from 0 to 256 [ 161.078920][ T8478] FAT-fs (loop4): Directory bread(block 64) failed [ 161.093925][ T8478] FAT-fs (loop4): Directory bread(block 65) failed [ 161.123484][ T8478] FAT-fs (loop4): Directory bread(block 66) failed [ 161.132101][ T8478] FAT-fs (loop4): Directory bread(block 67) failed [ 161.142524][ T8478] FAT-fs (loop4): Directory bread(block 68) failed [ 161.153678][ T8478] FAT-fs (loop4): Directory bread(block 69) failed [ 161.164878][ T8478] FAT-fs (loop4): Directory bread(block 70) failed [ 161.174748][ T8478] FAT-fs (loop4): Directory bread(block 71) failed [ 161.184193][ T8478] FAT-fs (loop4): Directory bread(block 72) failed [ 161.209757][ T8478] FAT-fs (loop4): Directory bread(block 73) failed [ 161.591018][ T6364] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 161.792085][ T6364] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 161.804027][ T6364] usb 5-1: config 0 has no interface number 0 [ 161.810254][ T6364] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 161.851209][ T6364] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 161.880197][ T6364] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 161.900823][ T6364] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 161.920757][ T6364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.935896][ T6364] usb 5-1: config 0 descriptor?? [ 161.966284][ T6364] usb 5-1: MIDIStreaming interface descriptor not found [ 161.998106][ T6364] snd-usb-audio: probe of 5-1:0.156 failed with error -12 [ 162.028917][ T3113] udevd[3113]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 162.178046][ T6364] usb 5-1: USB disconnect, device number 9 [ 162.332393][ T8547] loop6: detected capacity change from 0 to 40427 [ 162.350150][ T8547] F2FS-fs (loop6): invalid crc value [ 162.371533][ T8547] F2FS-fs (loop6): Found nat_bits in checkpoint [ 162.422815][ T8547] F2FS-fs (loop6): Start checkpoint disabled! [ 162.448115][ T8547] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 162.556835][ T8547] syz.6.3597: attempt to access beyond end of device [ 162.556835][ T8547] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 162.651323][ T8559] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 162.764887][ T8568] x_tables: duplicate underflow at hook 4 [ 162.811426][ T10] kworker/u4:1: attempt to access beyond end of device [ 162.811426][ T10] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 162.822304][ T8571] loop3: detected capacity change from 0 to 2048 [ 162.841693][ T8571] EXT4-fs: Ignoring removed nobh option [ 162.886230][ T8571] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.932599][ T288] EXT4-fs (loop3): unmounting filesystem. [ 163.084676][ T8545] loop8: detected capacity change from 0 to 131072 [ 163.102696][ T8545] F2FS-fs (loop8): invalid crc value [ 163.148423][ T8545] F2FS-fs (loop8): Found nat_bits in checkpoint [ 163.219863][ T8602] loop4: detected capacity change from 0 to 512 [ 163.276044][ T8545] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 163.310367][ T8602] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.377624][ T28] audit: type=1400 audit(420.386:3048): avc: denied { append } for pid=8601 comm="syz.4.3617" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.404456][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 163.452140][ T8619] loop4: detected capacity change from 0 to 256 [ 163.501025][ T60] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 163.701011][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 163.708217][ T60] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.723052][ T60] usb 4-1: config 0 has no interfaces? [ 163.756885][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 163.758631][ T8633] loop6: detected capacity change from 0 to 512 [ 163.769796][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.787398][ T60] usb 4-1: Product: syz [ 163.791924][ T60] usb 4-1: Manufacturer: syz [ 163.799270][ T8633] EXT4-fs: Ignoring removed i_version option [ 163.809154][ T8633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 163.815243][ T60] usb 4-1: SerialNumber: syz [ 163.820724][ T304] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.837157][ T28] audit: type=1400 audit(420.846:3049): avc: denied { remove_name } for pid=8632 comm="syz.6.3630" name="#9" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 163.844969][ T60] usb 4-1: config 0 descriptor?? [ 163.861099][ T28] audit: type=1400 audit(420.846:3050): avc: denied { unlink } for pid=8632 comm="syz.6.3630" name="#9" dev="loop6" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 163.871236][ T8633] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.3630: corrupted in-inode xattr [ 163.890067][ T28] audit: type=1400 audit(420.886:3051): avc: denied { write } for pid=8632 comm="syz.6.3630" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.932568][ T28] audit: type=1400 audit(420.886:3052): avc: denied { remove_name } for pid=8632 comm="syz.6.3630" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.959727][ T28] audit: type=1400 audit(420.886:3053): avc: denied { unlink } for pid=8632 comm="syz.6.3630" name="file1" dev="overlay" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 163.987194][ T28] audit: type=1400 audit(420.966:3054): avc: denied { create } for pid=8632 comm="syz.6.3630" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.011094][ T28] audit: type=1400 audit(420.966:3055): avc: denied { link } for pid=8632 comm="syz.6.3630" name="#b" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.039512][ T1983] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 164.058543][ T1983] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz-executor: corrupted in-inode xattr [ 164.080726][ T3102] EXT4-fs (loop6): unmounting filesystem. [ 164.082824][ T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.099524][ T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.111357][ T304] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.129159][ T304] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.142619][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.153869][ T304] usb 5-1: config 0 descriptor?? [ 164.188189][ T39] usb 4-1: USB disconnect, device number 17 [ 164.280956][ T60] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 164.461978][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.470336][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.479212][ T8642] device bridge_slave_0 entered promiscuous mode [ 164.482016][ T60] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.488188][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.509659][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.519030][ T8642] device bridge_slave_1 entered promiscuous mode [ 164.520964][ T60] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 55360, setting to 64 [ 164.551372][ T60] usb 9-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 164.562463][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.564091][ T304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 164.574233][ T60] usb 9-1: Product: syz [ 164.590025][ T60] usb 9-1: Manufacturer: syz [ 164.596574][ T60] usb 9-1: SerialNumber: syz [ 164.603263][ T304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 164.615495][ T304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 164.624537][ T60] cdc_ncm 9-1:1.0: skipping garbage [ 164.625560][ T304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 164.644663][ T304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 164.654987][ T304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 164.670598][ T304] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 164.691881][ T304] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 164.845021][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.852803][ T8642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.865515][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.874141][ T8642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.929850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.941777][ T304] usb 5-1: USB disconnect, device number 10 [ 164.961632][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.991315][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.012234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.024078][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.032059][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.046126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.056648][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.063953][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.107425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.121816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.156966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 165.182060][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 165.199202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 165.221611][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.244857][ T8642] device veth0_vlan entered promiscuous mode [ 165.268926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 165.285226][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 165.299590][ T8642] device veth1_macvtap entered promiscuous mode [ 165.323281][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.351374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.372247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.372373][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 165.372386][ T28] audit: type=1400 audit(422.386:3057): avc: denied { mounton } for pid=8659 comm="syz.6.3634" path="/0/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 165.391358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.431216][ T28] audit: type=1400 audit(422.446:3058): avc: denied { unmount } for pid=8642 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 165.507237][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.534638][ T8673] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3645'. [ 165.579893][ T8679] input: syz1 as /devices/virtual/input/input12 [ 165.631904][ T60] cdc_ncm 9-1:1.0: bind() failure [ 165.647449][ T60] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 165.658426][ T8687] device bridge0 entered promiscuous mode [ 165.673400][ T60] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 165.684870][ T60] usb 9-1: USB disconnect, device number 16 [ 165.692747][ T8684] device bridge0 left promiscuous mode [ 165.793920][ T8668] loop4: detected capacity change from 0 to 40427 [ 165.804636][ T8668] F2FS-fs (loop4): fault_type options not supported [ 165.814578][ T8668] F2FS-fs (loop4): invalid crc value [ 165.823142][ T8668] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.861242][ T8668] F2FS-fs (loop4): Start checkpoint disabled! [ 165.869243][ T8668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 166.014694][ T8707] loop4: detected capacity change from 0 to 8192 [ 166.061224][ T8707] loop4: p2 p3 p4[EZD] [ 166.066743][ T8707] loop4: p3 start 458783 is beyond EOD, truncated [ 166.073828][ T8707] loop4: p4 size 65536 extends beyond EOD, truncated [ 166.086799][ T28] audit: type=1400 audit(423.096:3059): avc: denied { name_bind } for pid=8706 comm="syz.4.3661" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 166.145855][ T306] udevd[306]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 166.158906][ T3113] udevd[3113]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 166.170991][ T60] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 166.231968][ T28] audit: type=1400 audit(423.246:3060): avc: denied { mounton } for pid=8715 comm="syz.4.3665" path="/191/file0" dev="tmpfs" ino=1031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 166.232842][ T8718] loop8: detected capacity change from 0 to 16 [ 166.282366][ T8718] erofs: (device loop8): mounted with root inode @ nid 36. [ 166.362671][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.375506][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.403793][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.420728][ T8733] loop8: detected capacity change from 0 to 128 [ 166.428624][ T60] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.440278][ T8733] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 166.452196][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.463538][ T306] udevd[306]: incorrect ext4 checksum on /dev/loop8 [ 166.473015][ T60] usb 7-1: config 0 descriptor?? [ 166.718140][ T28] audit: type=1400 audit(423.726:3061): avc: denied { shutdown } for pid=8745 comm="syz.8.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.758530][ T8734] loop3: detected capacity change from 0 to 40427 [ 166.765724][ T28] audit: type=1400 audit(423.746:3062): avc: denied { write } for pid=8745 comm="syz.8.3678" path="socket:[46884]" dev="sockfs" ino=46884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.795329][ T8734] F2FS-fs (loop3): fault_injection options not supported [ 166.807706][ T8734] F2FS-fs (loop3): invalid crc value [ 166.825260][ T8752] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 166.839124][ T8734] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.853278][ T28] audit: type=1400 audit(423.866:3063): avc: denied { relabelto } for pid=8751 comm="syz.8.3680" name="329" dev="tmpfs" ino=1725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 166.891886][ T60] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 166.905139][ T8734] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.907756][ T60] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 166.922317][ T28] audit: type=1400 audit(423.866:3064): avc: denied { associate } for pid=8751 comm="syz.8.3680" name="329" dev="tmpfs" ino=1725 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 166.974212][ T60] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 166.984162][ T60] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 166.992783][ T60] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 167.012493][ T60] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 167.026493][ T28] audit: type=1400 audit(424.026:3065): avc: denied { write } for pid=3333 comm="syz-executor" name="329" dev="tmpfs" ino=1725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 167.048027][ T60] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 167.075618][ T8759] loop8: detected capacity change from 0 to 256 [ 167.107170][ T28] audit: type=1400 audit(424.026:3066): avc: denied { remove_name } for pid=3333 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 167.140674][ T60] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 167.185987][ T60] usb 7-1: USB disconnect, device number 22 [ 167.192830][ T8767] loop8: detected capacity change from 0 to 1024 [ 167.208659][ T8767] EXT4-fs: Ignoring removed orlov option [ 167.220859][ T8767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.251745][ T8766] fido_id[8766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 167.255882][ T8763] loop4: detected capacity change from 0 to 8192 [ 167.290554][ T8767] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 167.302226][ T8763] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.410605][ T8776] netlink: 'syz.3.3690': attribute type 2 has an invalid length. [ 167.438888][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 167.487279][ T8786] incfs: Backing dir is not set, filesystem can't be mounted. [ 167.496101][ T8786] incfs: mount failed -2 [ 167.720299][ T8803] loop8: detected capacity change from 0 to 1024 [ 167.733987][ T8803] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.760989][ T8803] EXT4-fs (loop8): Test dummy encryption mode enabled [ 167.791067][ T6364] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 167.792514][ T8803] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 167.850600][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 167.971169][ T6364] usb 5-1: Using ep0 maxpacket: 32 [ 167.984470][ T6364] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.022054][ T6364] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.040608][ T6364] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 168.072107][ T6364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.104215][ T6364] usb 5-1: config 0 descriptor?? [ 168.367594][ T8813] loop8: detected capacity change from 0 to 40427 [ 168.408877][ T8813] F2FS-fs (loop8): invalid crc value [ 168.431858][ T8813] F2FS-fs (loop8): Found nat_bits in checkpoint [ 168.492104][ T8813] F2FS-fs (loop8): Start checkpoint disabled! [ 168.522425][ T8813] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 168.531307][ T6364] uclogic 0003:5543:0781.0024: item fetching failed at offset 5/7 [ 168.549896][ T6364] uclogic 0003:5543:0781.0024: parse failed [ 168.570985][ T6364] uclogic: probe of 0003:5543:0781.0024 failed with error -22 [ 168.602258][ T8813] syz.8.3705: attempt to access beyond end of device [ 168.602258][ T8813] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 168.701935][ T8813] F2FS-fs (loop8): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 168.741715][ T1336] usb 5-1: USB disconnect, device number 11 [ 168.827909][ T43] kworker/u4:2: attempt to access beyond end of device [ 168.827909][ T43] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 168.870999][ T304] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 169.062042][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 169.084259][ T304] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 169.114734][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.135252][ T304] usb 4-1: config 0 descriptor?? [ 169.151255][ T8832] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 169.282151][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.478131][ T8861] netlink: 'syz.6.3728': attribute type 6 has an invalid length. [ 169.577023][ T304] hid-generic 0003:04F3:0755.0025: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 169.848111][ T8897] loop8: detected capacity change from 0 to 4096 [ 169.889750][ T8897] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 169.926212][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 170.380962][ T327] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 170.401360][ T8925] incfs: Backing dir is not set, filesystem can't be mounted. [ 170.410154][ T8925] incfs: mount failed -2 [ 170.418540][ T1336] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0 [ 170.427642][ T1336] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0 [ 170.436817][ T1336] hid-generic 0000:0004:0000.0026: unknown main item tag 0x0 [ 170.534545][ T28] kauditd_printk_skb: 3989 callbacks suppressed [ 170.534562][ T28] audit: type=1400 audit(427.546:7056): avc: denied { mount } for pid=8938 comm="syz.1.3763" name="/" dev="ramfs" ino=49215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 170.572335][ T327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.586872][ T327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.601109][ T327] usb 7-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 170.612314][ T327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.624964][ T327] usb 7-1: config 0 descriptor?? [ 170.681700][ T1336] hid-generic 0000:0004:0000.0026: hidraw1: HID v0.00 Device [syz0] on syz1 [ 170.715252][ T8942] fido_id[8942]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.848178][ T8950] loop8: detected capacity change from 0 to 128 [ 170.858774][ T8950] EXT4-fs: Ignoring removed nobh option [ 170.873596][ T8950] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 170.898374][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 170.924989][ T8953] incfs: Backing dir is not set, filesystem can't be mounted. [ 170.935599][ T8953] incfs: mount failed -2 [ 171.038978][ T327] hid-generic 0003:0416:C168.0027: unknown main item tag 0x0 [ 171.048473][ T327] hid-generic 0003:0416:C168.0027: hidraw1: USB HID v0.00 Device [HID 0416:c168] on usb-dummy_hcd.6-1/input0 [ 171.251625][ T6364] usb 7-1: USB disconnect, device number 23 [ 171.331319][ T7913] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.331350][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 171.404494][ T8988] loop4: detected capacity change from 0 to 4096 [ 171.418416][ T8986] loop8: detected capacity change from 0 to 8192 [ 171.432946][ T8986] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.454414][ T8988] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.501324][ T24] usb 4-1: USB disconnect, device number 18 [ 171.549736][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 171.729797][ T9001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3791'. [ 171.780113][ T9003] overlayfs: failed to clone upperpath [ 171.781115][ T304] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 171.843026][ T9005] loop6: detected capacity change from 0 to 4096 [ 171.874470][ T9005] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 171.958777][ T8642] EXT4-fs (loop6): unmounting filesystem. [ 171.962049][ T304] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 171.982048][ T304] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 171.982080][ T304] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.982872][ T304] usb 9-1: config 0 descriptor?? [ 172.009340][ T8994] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 172.424769][ T304] hid-generic 0003:04F3:0755.0028: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 172.450946][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.640951][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 172.649189][ T39] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 172.669306][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.678955][ T39] usb 5-1: Product: syz [ 172.683732][ T39] usb 5-1: Manufacturer: syz [ 172.689380][ T39] usb 5-1: SerialNumber: syz [ 172.705309][ T39] usb 5-1: config 0 descriptor?? [ 172.714796][ T39] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 172.725685][ T39] usb 5-1: Detected FT-X [ 172.826296][ T9060] loop3: detected capacity change from 0 to 2048 [ 172.845594][ T28] audit: type=1400 audit(429.856:7057): avc: denied { create } for pid=9063 comm="syz.6.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 172.914476][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 173.107268][ T28] audit: type=1400 audit(430.116:7058): avc: denied { watch watch_reads } for pid=9089 comm="syz.6.3830" path="/44/file0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.340283][ T39] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 173.359416][ T9103] overlayfs: failed to clone upperpath [ 173.360791][ T9105] loop3: detected capacity change from 0 to 512 [ 173.384587][ T9105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.430765][ T288] EXT4-fs (loop3): unmounting filesystem. [ 173.541405][ T39] usb 5-1: USB disconnect, device number 12 [ 173.550184][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 173.560604][ T39] ftdi_sio 5-1:0.0: device disconnected [ 174.101650][ T9131] overlayfs: failed to clone upperpath [ 174.411508][ T6] usb 9-1: USB disconnect, device number 17 [ 174.500962][ T6364] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 174.571003][ T6] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 174.692281][ T6364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 174.704970][ T6364] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 174.714577][ T6364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.724726][ T6364] usb 5-1: config 0 descriptor?? [ 174.730436][ T9150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 174.761222][ T6] usb 9-1: Using ep0 maxpacket: 32 [ 174.768771][ T6] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.780556][ T6] usb 9-1: config 0 interface 0 has no altsetting 0 [ 174.787993][ T6] usb 9-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 174.797386][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.807188][ T6] usb 9-1: config 0 descriptor?? [ 174.957254][ T28] audit: type=1326 audit(431.966:7059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be998e969 code=0x7ffc0000 [ 174.999510][ T28] audit: type=1326 audit(431.966:7060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5be998e969 code=0x7ffc0000 [ 175.033561][ T28] audit: type=1326 audit(431.966:7061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be998e969 code=0x7ffc0000 [ 175.059379][ T28] audit: type=1326 audit(431.966:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be998e969 code=0x7ffc0000 [ 175.084556][ T28] audit: type=1326 audit(431.966:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5be998e969 code=0x7ffc0000 [ 175.110961][ T28] audit: type=1326 audit(431.966:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be998e969 code=0x7ffc0000 [ 175.135445][ T28] audit: type=1326 audit(431.966:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be998e969 code=0x7ffc0000 [ 175.164094][ T6364] hid-generic 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 175.235341][ T6] wacom 0003:056A:00F4.002A: unknown main item tag 0x0 [ 175.244986][ T6] wacom 0003:056A:00F4.002A: hidraw1: USB HID ve.52 Device [HID 056a:00f4] on usb-dummy_hcd.8-1/input0 [ 175.302982][ T39] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 175.437991][ T6] usb 9-1: USB disconnect, device number 18 [ 175.492039][ T39] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.520923][ T39] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 55360, setting to 64 [ 175.557317][ T39] usb 7-1: New USB device found, idVendor=0125, idProduct=a4a1, bcdDevice= 0.40 [ 175.577360][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.596288][ T39] usb 7-1: Product: syz [ 175.601089][ T39] usb 7-1: Manufacturer: syz [ 175.611185][ T39] usb 7-1: SerialNumber: syz [ 175.620097][ T39] cdc_ncm 7-1:1.0: skipping garbage [ 175.979208][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3886'. [ 176.071058][ T327] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 176.253221][ T327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.276239][ T327] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 176.313242][ T327] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.317551][ T9221] loop8: detected capacity change from 0 to 40427 [ 176.325952][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.336253][ T9221] F2FS-fs (loop8): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 176.352579][ T9221] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 176.354444][ T327] usb 4-1: config 0 descriptor?? [ 176.370105][ T9221] F2FS-fs (loop8): Found nat_bits in checkpoint [ 176.382346][ T327] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 176.406216][ T9221] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 176.413805][ T9221] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 176.460760][ T3333] syz-executor: attempt to access beyond end of device [ 176.460760][ T3333] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.621515][ T9213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.631792][ T39] cdc_ncm 7-1:1.0: bind() failure [ 176.638401][ T9213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.640190][ T39] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 176.691480][ T39] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 176.709896][ T39] usb 7-1: USB disconnect, device number 24 [ 176.730214][ T327] usb 4-1: USB disconnect, device number 19 [ 176.832033][ T9238] loop8: detected capacity change from 0 to 512 [ 176.860792][ T9238] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 176.892659][ T9238] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.3894: Unimplemented hash flags: 0x0001 [ 176.906014][ T9238] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.3894: Corrupt directory, running e2fsck is recommended [ 176.920543][ T9238] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 3: comm syz.8.3894: path /378/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 176.996411][ T9247] loop4: detected capacity change from 0 to 256 [ 177.101152][ T1761] usb 5-1: USB disconnect, device number 13 [ 177.176801][ T9255] loop4: detected capacity change from 0 to 128 [ 177.184337][ T9255] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.197935][ T9255] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.220523][ T10] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.275893][ T9262] loop3: detected capacity change from 0 to 2048 [ 177.299039][ T9262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.324622][ T28] kauditd_printk_skb: 1845 callbacks suppressed [ 177.324639][ T28] audit: type=1400 audit(435.340:8911): avc: denied { map } for pid=9261 comm="syz.3.3904" path="/740/file2/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.334644][ T9262] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3904: bg 0: block 408: padding at end of block bitmap is not set [ 177.384894][ T9262] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 177.439311][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 177.461402][ T10] EXT4-fs (loop3): This should not happen!! Data will be lost [ 177.461402][ T10] [ 177.483425][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 177.488264][ T10] EXT4-fs (loop3): Total free blocks count 0 [ 177.497157][ T10] EXT4-fs (loop3): Free/Dirty block details [ 177.503915][ T10] EXT4-fs (loop3): free_blocks=16 [ 177.509796][ T10] EXT4-fs (loop3): dirty_blocks=16 [ 177.516304][ T10] EXT4-fs (loop3): Block reservation details [ 177.523148][ T10] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 177.532115][ T288] EXT4-fs (loop3): unmounting filesystem. [ 177.627147][ T28] audit: type=1400 audit(435.640:8912): avc: denied { read write } for pid=288 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.679556][ T28] audit: type=1400 audit(435.680:8913): avc: denied { open } for pid=288 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.728350][ T28] audit: type=1400 audit(435.680:8914): avc: denied { ioctl } for pid=288 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.757374][ T28] audit: type=1400 audit(435.680:8916): avc: denied { prog_load } for pid=9286 comm="syz.3.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.786797][ T28] audit: type=1400 audit(435.690:8917): avc: denied { perfmon } for pid=9286 comm="syz.3.3913" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.813325][ T28] audit: type=1400 audit(435.690:8918): avc: denied { prog_run } for pid=9286 comm="syz.3.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 177.834809][ T28] audit: type=1400 audit(435.680:8915): avc: denied { bpf } for pid=9284 comm="syz.1.3914" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 177.857694][ T28] audit: type=1400 audit(435.730:8919): avc: denied { read } for pid=9286 comm="syz.3.3913" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 177.906257][ T28] audit: type=1400 audit(435.730:8920): avc: denied { open } for pid=9286 comm="syz.3.3913" path="net:[4026532670]" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 178.065225][ T9327] tmpfs: Bad value for 'context' [ 178.260715][ T9356] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3945'. [ 178.360938][ T1336] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 178.526710][ T9360] loop6: detected capacity change from 0 to 40427 [ 178.540988][ T9360] F2FS-fs (loop6): fault_injection options not supported [ 178.551466][ T1336] usb 9-1: Using ep0 maxpacket: 16 [ 178.560160][ T1336] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.572996][ T9360] F2FS-fs (loop6): invalid crc value [ 178.578805][ T1336] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 178.596531][ T1336] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.612644][ T9360] F2FS-fs (loop6): Found nat_bits in checkpoint [ 178.632208][ T1336] usb 9-1: config 0 descriptor?? [ 178.671200][ T9360] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 178.740677][ T8642] syz-executor: attempt to access beyond end of device [ 178.740677][ T8642] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.162485][ T1336] kye 0003:0458:5010.002B: unknown main item tag 0x0 [ 179.169824][ T1336] kye 0003:0458:5010.002B: unknown main item tag 0x0 [ 179.177825][ T1336] kye 0003:0458:5010.002B: unknown main item tag 0x0 [ 179.191027][ T1336] kye 0003:0458:5010.002B: unknown main item tag 0x0 [ 179.208851][ T1336] kye 0003:0458:5010.002B: unknown main item tag 0x0 [ 179.216956][ T1336] kye 0003:0458:5010.002B: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0 [ 179.239086][ T1336] kye 0003:0458:5010.002B: tablet-enabling feature report not found [ 179.259293][ T1336] kye 0003:0458:5010.002B: tablet enabling failed [ 179.321000][ T327] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 179.423769][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3970'. [ 179.485365][ T311] tipc: Subscription rejected, illegal request [ 179.507260][ T39] usb 9-1: USB disconnect, device number 19 [ 179.513970][ T327] usb 4-1: Using ep0 maxpacket: 32 [ 179.523126][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.552938][ T327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.574352][ T327] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 179.591917][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.611921][ T327] usb 4-1: config 0 descriptor?? [ 179.661963][ T9412] loop6: detected capacity change from 0 to 40427 [ 179.685018][ T9412] F2FS-fs (loop6): fault_injection options not supported [ 179.720692][ T9412] F2FS-fs (loop6): invalid crc value [ 179.735257][ T9412] F2FS-fs (loop6): Found nat_bits in checkpoint [ 179.824792][ T9412] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 179.878429][ T9412] syz.6.3968: attempt to access beyond end of device [ 179.878429][ T9412] loop6: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 179.901440][ T8642] syz-executor: attempt to access beyond end of device [ 179.901440][ T8642] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 180.022869][ T327] savu 0003:1E7D:2D5A.002C: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 180.296717][ T304] usb 4-1: USB disconnect, device number 20 [ 180.394673][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3999'. [ 180.426048][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3999'. [ 180.474162][ T9488] loop4: detected capacity change from 0 to 8192 [ 180.508730][ T9488] syz.4.4000: attempt to access beyond end of device [ 180.508730][ T9488] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 180.522917][ T9488] Buffer I/O error on dev loop4, logical block 57847, async page read [ 180.532931][ T9488] syz.4.4000: attempt to access beyond end of device [ 180.532931][ T9488] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 180.547930][ T9488] Buffer I/O error on dev loop4, logical block 57847, async page read [ 180.557443][ T9492] syz.4.4000: attempt to access beyond end of device [ 180.557443][ T9492] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 180.572560][ T9492] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 180.581084][ T9492] FAT-fs (loop4): Filesystem has been set read-only [ 180.588392][ T9488] syz.4.4000: attempt to access beyond end of device [ 180.588392][ T9488] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 180.603280][ T9488] Buffer I/O error on dev loop4, logical block 57847, async page read [ 180.612685][ T9492] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 180.621342][ T9492] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 181.141438][ T9536] loop8: detected capacity change from 0 to 1024 [ 181.149691][ T9536] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.172937][ T9536] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 181.184644][ T9536] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: inode #11: comm syz.8.4021: missing EA_INODE flag [ 181.197245][ T9536] EXT4-fs (loop8): Remounting filesystem read-only [ 181.204589][ T9536] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4021: error while reading EA inode 11 err=-117 [ 181.218420][ T9536] EXT4-fs (loop8): Remounting filesystem read-only [ 181.220951][ T1761] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 181.225909][ T9536] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: inode #11: comm syz.8.4021: missing EA_INODE flag [ 181.247372][ T9536] EXT4-fs (loop8): Remounting filesystem read-only [ 181.254931][ T9536] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.4021: error while reading EA inode 11 err=-117 [ 181.270096][ T9536] EXT4-fs (loop8): Remounting filesystem read-only [ 181.284224][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 181.352587][ T39] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.412379][ T1761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.424281][ T1761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.435305][ T1761] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 181.446007][ T1761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.461275][ T1761] usb 4-1: config 0 descriptor?? [ 181.540923][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 181.548702][ T39] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 181.559192][ T39] usb 5-1: config 4 has no interface number 0 [ 181.567016][ T39] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.580999][ T39] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.592415][ T39] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 181.602970][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.622511][ T39] hub 5-1:4.128: USB hub found [ 181.822750][ T39] hub 5-1:4.128: 2 ports detected [ 181.828375][ T39] hub 5-1:4.128: Using single TT (err -22) [ 181.871509][ T1761] lg-g15 0003:046D:C222.002D: unknown main item tag 0x0 [ 181.880516][ T1761] lg-g15 0003:046D:C222.002D: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 182.029310][ T39] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 182.037422][ T39] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 182.071327][ T39] usb 5-1: USB disconnect, device number 14 [ 182.081161][ T24] usb 4-1: USB disconnect, device number 21 [ 182.182771][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.551395][ T327] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 182.616830][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 182.616847][ T28] audit: type=1400 audit(440.630:8994): avc: denied { write } for pid=9588 comm="syz.3.4042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.616869][ T9590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4042'. [ 182.761006][ T327] usb 7-1: Using ep0 maxpacket: 16 [ 182.769196][ T327] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 182.778667][ T327] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.800162][ T327] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.824942][ T327] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.840380][ T327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.860277][ T327] usb 7-1: Product: syz [ 182.865033][ T327] usb 7-1: Manufacturer: syz [ 182.869922][ T327] usb 7-1: SerialNumber: syz [ 182.904400][ T28] audit: type=1400 audit(440.920:8995): avc: denied { create } for pid=9606 comm="syz.1.4048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 182.941929][ T28] audit: type=1400 audit(440.940:8996): avc: denied { sys_admin } for pid=9606 comm="syz.1.4048" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 183.027250][ T28] audit: type=1400 audit(441.040:8997): avc: denied { read write } for pid=9613 comm="syz.3.4051" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.053534][ T28] audit: type=1400 audit(441.040:8998): avc: denied { open } for pid=9613 comm="syz.3.4051" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 183.303138][ T327] usb 7-1: 0:2 : does not exist [ 183.443696][ T28] audit: type=1400 audit(441.460:8999): avc: denied { create } for pid=9626 comm="syz.3.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.463184][ T28] audit: type=1400 audit(441.460:9000): avc: denied { write } for pid=9626 comm="syz.3.4057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 183.498640][ T28] audit: type=1400 audit(441.510:9001): avc: denied { mount } for pid=9628 comm="syz.3.4058" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.528022][ T28] audit: type=1400 audit(441.540:9002): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.562313][ T28] audit: type=1400 audit(441.550:9003): avc: denied { setopt } for pid=9630 comm="syz.1.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 183.755147][ T9654] loop4: detected capacity change from 0 to 512 [ 183.778972][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 183.819545][ T9654] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 183.859161][ T9654] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.4070: corrupted inode contents [ 183.872131][ T9654] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #2: comm syz.4.4070: mark_inode_dirty error [ 183.886179][ T9654] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #2: comm syz.4.4070: corrupted inode contents [ 183.900362][ T9654] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.4070: mark_inode_dirty error [ 183.927366][ T327] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 183.948762][ T327] usb 7-1: USB disconnect, device number 25 [ 183.971112][ T9654] EXT4-fs error (device loop4): ext4_lookup:1855: inode #18: comm syz.4.4070: 'file0' linked to parent dir [ 183.992168][ T9673] loop3: detected capacity change from 0 to 128 [ 184.000793][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 184.013770][ T9673] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 184.041933][ T9673] FAT-fs (loop3): Filesystem has been set read-only [ 184.084116][ T9679] loop3: detected capacity change from 0 to 512 [ 184.104941][ T9679] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.124212][ T9679] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 184.141846][ T9679] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 184.150397][ T9679] System zones: 0-2, 18-18, 34-34 [ 184.156665][ T9679] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 184.174635][ T9679] EXT4-fs (loop3): 1 truncate cleaned up [ 184.181099][ T9679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.211219][ T8378] Bluetooth: hci0: command 0x1003 tx timeout [ 184.217957][ T7913] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.225597][ T9675] loop4: detected capacity change from 0 to 40427 [ 184.253045][ T9675] F2FS-fs (loop4): fault_injection options not supported [ 184.267387][ T288] EXT4-fs (loop3): unmounting filesystem. [ 184.279414][ T9675] F2FS-fs (loop4): invalid crc value [ 184.296366][ T9675] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.346729][ T9675] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 184.387862][ T9692] loop3: detected capacity change from 0 to 128 [ 184.398388][ T9692] EXT4-fs: Ignoring removed nobh option [ 184.426154][ T9692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.494643][ T288] EXT4-fs (loop3): unmounting filesystem. [ 184.549819][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4086'. [ 184.609257][ T6316] syz-executor: attempt to access beyond end of device [ 184.609257][ T6316] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 184.788562][ T9727] loop3: detected capacity change from 0 to 1024 [ 184.833915][ T9727] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.875150][ T9733] loop4: detected capacity change from 0 to 512 [ 184.890824][ T9733] EXT4-fs (loop4): Test dummy encryption mode enabled [ 184.908841][ T9733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.926069][ T9727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 184.942328][ T9733] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.4091: bad orphan inode 131083 [ 184.958551][ T9727] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.4101: missing EA_INODE flag [ 184.974734][ T9727] EXT4-fs (loop3): Remounting filesystem read-only [ 184.983345][ T9727] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4101: error while reading EA inode 11 err=-117 [ 184.983489][ T9733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 184.998277][ T9727] EXT4-fs (loop3): Remounting filesystem read-only [ 185.017716][ T9727] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.4101: missing EA_INODE flag [ 185.036036][ T9727] EXT4-fs (loop3): Remounting filesystem read-only [ 185.050984][ T9727] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4101: error while reading EA inode 11 err=-117 [ 185.065209][ T9727] EXT4-fs (loop3): Remounting filesystem read-only [ 185.100966][ T1336] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 185.124426][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 185.172098][ T288] EXT4-fs (loop3): unmounting filesystem. [ 185.254238][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 185.272756][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4109'. [ 185.302222][ T1336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.316747][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 185.316793][ T1336] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.343423][ T1336] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.359835][ T1336] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.370758][ T1336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.404218][ T1336] usb 7-1: config 0 descriptor?? [ 185.442669][ T9744] loop3: detected capacity change from 0 to 40427 [ 185.458899][ T9744] F2FS-fs (loop3): fault_injection options not supported [ 185.467572][ T9744] F2FS-fs (loop3): invalid crc value [ 185.503825][ T9744] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.543925][ T9770] loop8: detected capacity change from 0 to 512 [ 185.552036][ T9770] EXT4-fs: Ignoring removed oldalloc option [ 185.565627][ T9744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.574434][ T9770] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 185.633597][ T9770] EXT4-fs (loop8): 1 truncate cleaned up [ 185.641760][ T9770] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 185.734865][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 185.785246][ T288] syz-executor: attempt to access beyond end of device [ 185.785246][ T288] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 185.823660][ T1336] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 185.835594][ T9790] loop8: detected capacity change from 0 to 4096 [ 185.856323][ T1336] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 185.881133][ T9790] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 186.092830][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 186.165158][ T9817] loop3: detected capacity change from 0 to 512 [ 186.201355][ T6364] usb 7-1: USB disconnect, device number 26 [ 186.210380][ T9817] EXT4-fs (loop3): 1 orphan inode deleted [ 186.221267][ T10] EXT4-fs error (device loop3): ext4_release_dquot:6812: comm kworker/u4:1: Failed to release dquot type 1 [ 186.241197][ T9817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 186.431031][ T1336] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 186.550941][ T304] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 186.592923][ T9822] loop8: detected capacity change from 0 to 40427 [ 186.611218][ T9822] F2FS-fs (loop8): fault_injection options not supported [ 186.622362][ T1336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.631802][ T9822] F2FS-fs (loop8): invalid crc value [ 186.637865][ T1336] usb 5-1: not running at top speed; connect to a high speed hub [ 186.649431][ T9822] F2FS-fs (loop8): Found nat_bits in checkpoint [ 186.657339][ T1336] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 186.679321][ T1336] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 186.710718][ T1336] usb 5-1: config 4 has no interface number 0 [ 186.724956][ T1336] usb 5-1: string descriptor 0 read error: -22 [ 186.735536][ T1336] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 186.747384][ T1336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.751077][ T304] usb 4-1: Using ep0 maxpacket: 16 [ 186.766049][ T9822] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 186.779379][ T1336] usb 5-1: Found UVC 0.00 device (04f2:b746) [ 186.789448][ T1336] usb 5-1: No valid video chain found. [ 186.797029][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.809920][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.821724][ T304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.865055][ T304] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.877978][ T9832] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4141'. [ 186.891607][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.901792][ T304] usb 4-1: config 0 descriptor?? [ 186.981671][ T1336] usb 5-1: USB disconnect, device number 15 [ 186.996980][ T9838] loop6: detected capacity change from 0 to 2048 [ 187.040798][ T3333] syz-executor: attempt to access beyond end of device [ 187.040798][ T3333] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 187.065854][ T9838] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 187.106932][ T9838] fs-verity: sha512 using implementation "sha512-avx2" [ 187.144439][ T8642] EXT4-fs (loop6): unmounting filesystem. [ 187.314837][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x4 [ 187.331022][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.351321][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.359409][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.377365][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.387179][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.396121][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.404449][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.412602][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.420692][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.430620][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.443005][ T304] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0 [ 187.453817][ T304] microsoft 0003:045E:07DA.002F: No inputs registered, leaving [ 187.462634][ T304] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 187.474804][ T304] microsoft 0003:045E:07DA.002F: no inputs found [ 187.481854][ T304] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 187.552454][ T304] usb 4-1: USB disconnect, device number 22 [ 187.583697][ T9870] fido_id[9870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 187.685716][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 187.685736][ T28] audit: type=1326 audit(445.700:9027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9869 comm="syz.4.4158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4538e969 code=0x7fc00000 [ 187.866318][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4165'. [ 187.881456][ T28] audit: type=1400 audit(445.900:9028): avc: denied { mount } for pid=9887 comm="syz.8.4164" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 187.893614][ T9889] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 187.923088][ T28] audit: type=1400 audit(445.910:9029): avc: denied { mounton } for pid=9887 comm="syz.8.4164" path="/410/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 187.958481][ T28] audit: type=1400 audit(445.910:9030): avc: denied { unlink } for pid=9887 comm="syz.8.4164" name="#d" dev="tmpfs" ino=2161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.984188][ T28] audit: type=1400 audit(445.970:9031): avc: denied { unmount } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 188.013781][ T9892] futex_wake_op: syz.8.4167 tries to shift op by -1; fix this program [ 188.026375][ T28] audit: type=1400 audit(445.980:9032): avc: denied { name_bind } for pid=9893 comm="syz.1.4166" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 188.069295][ T9901] loop8: detected capacity change from 0 to 256 [ 188.080989][ T9901] exfat: Deprecated parameter 'namecase' [ 188.090623][ T9901] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 188.113780][ T28] audit: type=1400 audit(446.120:9033): avc: denied { write } for pid=9900 comm="syz.8.4170" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.125394][ T288] EXT4-fs (loop3): unmounting filesystem. [ 188.143325][ T28] audit: type=1400 audit(446.120:9034): avc: denied { add_name } for pid=9900 comm="syz.8.4170" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 188.168571][ T28] audit: type=1400 audit(446.120:9035): avc: denied { associate } for pid=9900 comm="syz.8.4170" name="blkio.bfq.io_service_time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 188.196228][ T28] audit: type=1400 audit(446.130:9036): avc: denied { read append open } for pid=9900 comm="syz.8.4170" path="/412/file0/blkio.bfq.io_service_time_recursive" dev="loop8" ino=1048734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 188.671052][ T1761] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 188.871006][ T1761] usb 7-1: Using ep0 maxpacket: 32 [ 188.877555][ T1761] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.893276][ T1761] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.900405][ T1761] usb 7-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 188.912238][ T1761] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.922717][ T1761] usb 7-1: config 0 descriptor?? [ 189.334841][ T1761] uclogic 0003:5543:0781.0030: item fetching failed at offset 5/7 [ 189.345723][ T1761] uclogic 0003:5543:0781.0030: parse failed [ 189.355948][ T1761] uclogic: probe of 0003:5543:0781.0030 failed with error -22 [ 189.540237][ T1761] usb 7-1: USB disconnect, device number 27 [ 190.061147][ T9927] netlink: 'syz.8.4183': attribute type 12 has an invalid length. [ 190.085496][ T9927] netlink: 'syz.8.4183': attribute type 29 has an invalid length. [ 190.100547][ T9927] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4183'. [ 190.111313][ T9927] netlink: 59 bytes leftover after parsing attributes in process `syz.8.4183'. [ 190.423291][ T9954] loop4: detected capacity change from 0 to 256 [ 190.439632][ T9954] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 190.474192][ T9928] loop6: detected capacity change from 0 to 40427 [ 190.487567][ T9928] F2FS-fs (loop6): fault_injection options not supported [ 190.507196][ T9928] F2FS-fs (loop6): invalid crc value [ 190.516818][ T9928] F2FS-fs (loop6): Found nat_bits in checkpoint [ 190.558996][ T9928] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 190.681010][ T327] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 190.700024][ T8642] syz-executor: attempt to access beyond end of device [ 190.700024][ T8642] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 190.870984][ T327] usb 4-1: Using ep0 maxpacket: 32 [ 190.882297][ T327] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.912135][ T327] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.920076][ T327] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 190.931455][ T327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.944770][ T327] usb 4-1: config 0 descriptor?? [ 191.033490][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4211'. [ 191.075783][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4213'. [ 191.185414][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 191.364434][ T327] uclogic 0003:5543:0781.0031: item fetching failed at offset 5/7 [ 191.378242][ T327] uclogic 0003:5543:0781.0031: parse failed [ 191.379416][T10015] loop4: detected capacity change from 0 to 512 [ 191.396201][ T327] uclogic: probe of 0003:5543:0781.0031 failed with error -22 [ 191.421801][T10015] EXT4-fs (loop4): Test dummy encryption mode enabled [ 191.436003][T10015] EXT4-fs error (device loop4): __ext4_iget:5057: inode #11: block 1: comm syz.4.4221: invalid block [ 191.452703][T10015] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.4221: couldn't read orphan inode 11 (err -117) [ 191.471452][T10015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.498583][T10015] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 191.523751][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 191.576367][ T1761] usb 4-1: USB disconnect, device number 23 [ 192.024130][T10049] loop4: detected capacity change from 0 to 256 [ 192.032394][T10049] exfat: Deprecated parameter 'namecase' [ 192.048287][T10049] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 192.071302][ T304] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 192.072736][ T103] udevd[103]: worker [306] terminated by signal 33 (Unknown signal 33) [ 192.085457][T10051] futex_wake_op: syz.1.4234 tries to shift op by -1; fix this program [ 192.089147][ T103] udevd[103]: worker [306] failed while handling '/devices/virtual/block/loop4' [ 192.136257][T10055] netlink: 'syz.3.4237': attribute type 12 has an invalid length. [ 192.155504][T10055] netlink: 'syz.3.4237': attribute type 29 has an invalid length. [ 192.170552][T10055] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4237'. [ 192.182894][T10055] netlink: 59 bytes leftover after parsing attributes in process `syz.3.4237'. [ 192.282918][ T304] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 192.292448][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 192.300323][ T7913] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.319887][ T304] usb 7-1: config 1 has no interface number 0 [ 192.327032][ T304] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.340273][ T304] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 192.351127][ T304] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 192.381812][ T304] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.405813][ T304] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=29 [ 192.416462][ T304] usb 7-1: Product: syz [ 192.428096][ T304] usb 7-1: Manufacturer: syz [ 192.440945][ T304] usb 7-1: SerialNumber: syz [ 192.466687][T10077] loop8: detected capacity change from 0 to 256 [ 192.485418][T10078] futex_wake_op: syz.4.4248 tries to shift op by -1; fix this program [ 192.506752][ T103] udevd[103]: worker [551] terminated by signal 33 (Unknown signal 33) [ 192.508889][T10077] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 192.530278][ T103] udevd[103]: worker [551] failed while handling '/devices/virtual/block/loop8' [ 192.644803][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.663320][T10094] loop4: detected capacity change from 0 to 256 [ 192.851005][ T1336] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 192.940977][ T327] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 193.032089][ T1336] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.042579][ T1336] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 193.052814][ T1336] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.062957][ T1336] usb 9-1: config 0 descriptor?? [ 193.131029][ T327] usb 5-1: Using ep0 maxpacket: 16 [ 193.143247][ T327] usb 5-1: config 0 has an invalid interface number: 164 but max is 0 [ 193.152476][ T327] usb 5-1: config 0 has no interface number 0 [ 193.159721][ T327] usb 5-1: too many endpoints for config 0 interface 164 altsetting 34: 89, using maximum allowed: 30 [ 193.173874][ T327] usb 5-1: config 0 interface 164 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 193.188703][ T327] usb 5-1: config 0 interface 164 has no altsetting 0 [ 193.200124][ T327] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 193.210993][ T327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.220770][ T327] usb 5-1: Product: syz [ 193.226046][ T327] usb 5-1: Manufacturer: syz [ 193.231861][ T327] usb 5-1: SerialNumber: syz [ 193.238732][ T327] usb 5-1: config 0 descriptor?? [ 193.263722][ T304] cdc_ncm 7-1:1.1: bind() failure [ 193.449245][ T327] usb 5-1: USB disconnect, device number 16 [ 193.466246][ T304] usb 7-1: USB disconnect, device number 28 [ 193.473729][ T1336] holtek 0003:1241:5015.0032: invalid report_size 23041 [ 193.483517][ T1336] holtek 0003:1241:5015.0032: item 0 2 1 7 parsing failed [ 193.495790][ T1336] holtek 0003:1241:5015.0032: parse failed [ 193.503187][ T1336] holtek: probe of 0003:1241:5015.0032 failed with error -22 [ 193.678394][ T1336] usb 9-1: USB disconnect, device number 20 [ 193.964897][T10104] loop4: detected capacity change from 0 to 512 [ 194.021506][T10104] EXT4-fs (loop4): 1 orphan inode deleted [ 194.027925][T10104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.041066][ T308] __quota_error: 18 callbacks suppressed [ 194.041085][ T308] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 194.070083][ T308] EXT4-fs error (device loop4): ext4_release_dquot:6812: comm kworker/u4:3: Failed to release dquot type 1 [ 194.093917][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 194.134749][T10108] loop6: detected capacity change from 0 to 40427 [ 194.143968][T10108] F2FS-fs (loop6): fault_injection options not supported [ 194.152513][T10108] F2FS-fs (loop6): invalid crc value [ 194.159859][T10108] F2FS-fs (loop6): Found nat_bits in checkpoint [ 194.183758][T10108] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 194.247524][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4264'. [ 194.258765][ T8642] syz-executor: attempt to access beyond end of device [ 194.258765][ T8642] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 194.280431][T10122] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4267'. [ 194.303055][T10125] loop4: detected capacity change from 0 to 128 [ 194.341220][ T327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.401326][T10131] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 194.411448][ T327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.453047][T10137] futex_wake_op: syz.6.4263 tries to shift op by -1; fix this program [ 194.480255][ T28] audit: type=1400 audit(452.490:9055): avc: denied { create } for pid=10141 comm="syz.4.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.501036][ T327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.507788][T10140] loop8: detected capacity change from 0 to 512 [ 194.521910][ T28] audit: type=1400 audit(452.520:9056): avc: denied { connect } for pid=10141 comm="syz.4.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.544264][ T28] audit: type=1400 audit(452.520:9057): avc: denied { setopt } for pid=10141 comm="syz.4.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.568331][ T28] audit: type=1400 audit(452.560:9058): avc: denied { create } for pid=10146 comm="syz.4.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.575510][ T1761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.601307][ T28] audit: type=1400 audit(452.560:9059): avc: denied { write } for pid=10146 comm="syz.4.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.614060][T10152] loop4: detected capacity change from 0 to 512 [ 194.623882][ T28] audit: type=1400 audit(452.560:9060): avc: denied { nlmsg_write } for pid=10146 comm="syz.4.4278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.656870][T10140] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 194.678598][T10140] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #2: comm syz.8.4275: corrupted inode contents [ 194.691012][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 194.692799][ T1761] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.706226][ T7913] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.709931][T10152] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.722223][T10140] EXT4-fs error (device loop8): ext4_dirty_inode:6091: inode #2: comm syz.8.4275: mark_inode_dirty error [ 194.741776][T10140] EXT4-fs error (device loop8): ext4_do_update_inode:5226: inode #2: comm syz.8.4275: corrupted inode contents [ 194.742639][T10161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4282'. [ 194.769494][ T28] audit: type=1400 audit(452.780:9061): avc: denied { write } for pid=10151 comm="syz.4.4280" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 194.792446][T10162] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4281'. [ 194.792750][T10152] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.4280: directory missing '.' [ 194.817103][T10140] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.4275: mark_inode_dirty error [ 194.821284][T10152] EXT4-fs (loop4): Remounting filesystem read-only [ 194.829370][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.837423][ T28] audit: type=1400 audit(452.810:9062): avc: denied { rename } for pid=10151 comm="syz.4.4280" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.871555][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.883831][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 194.885852][ T28] audit: type=1400 audit(452.810:9063): avc: denied { reparent } for pid=10151 comm="syz.4.4280" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.891822][T10140] EXT4-fs error (device loop8): ext4_lookup:1855: inode #18: comm syz.8.4275: 'file0' linked to parent dir [ 194.937851][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 194.951252][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.981203][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 195.031883][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 195.265571][T10204] overlayfs: failed to set xattr on upper [ 195.284666][T10208] loop3: detected capacity change from 0 to 256 [ 195.326144][T10208] exfat: Deprecated parameter 'namecase' [ 195.339209][T10208] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 195.721082][ T1761] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 195.900991][ T1761] usb 4-1: Using ep0 maxpacket: 32 [ 195.908227][ T1761] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 195.917064][ T1761] usb 4-1: config 0 has no interface number 0 [ 195.923827][ T1761] usb 4-1: config 0 interface 184 has no altsetting 0 [ 195.935539][ T1761] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 195.945292][ T1761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.954256][ T1761] usb 4-1: Product: syz [ 195.960363][ T1761] usb 4-1: Manufacturer: syz [ 195.966933][ T1761] usb 4-1: SerialNumber: syz [ 195.972669][ T1761] usb 4-1: config 0 descriptor?? [ 195.981489][ T1761] smsc75xx v1.0.0 [ 196.583150][ T1761] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 196.594475][ T1761] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 196.805093][ T1761] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 196.816872][ T1761] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 196.827383][ T1761] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 196.838407][ T1761] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 196.849430][ T1761] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 196.857807][ T1761] usb 4-1: USB disconnect, device number 24 [ 197.343148][T10250] futex_wake_op: syz.3.4319 tries to shift op by -1; fix this program [ 197.453326][T10262] overlayfs: conflicting lowerdir path [ 197.472491][T10262] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 197.622529][T10291] loop8: detected capacity change from 0 to 128 [ 197.641926][T10291] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.666264][T10291] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.840919][ T1761] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 197.925704][T10309] netlink: 'syz.6.4350': attribute type 3 has an invalid length. [ 197.971706][T10315] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 197.985148][T10315] incfs: Can't find or create .index dir in ./file0 [ 197.995115][T10315] incfs: mount failed -30 [ 198.053134][ T1761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.072121][ T1761] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.094547][ T1761] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.127521][ T1761] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.138010][T10330] netlink: 'syz.8.4360': attribute type 13 has an invalid length. [ 198.151281][ T1761] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.161705][T10330] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 198.170843][ T1761] usb 4-1: config 0 descriptor?? [ 198.176622][T10330] device gretap1 entered promiscuous mode [ 198.191867][T10336] netlink: 'syz.6.4362': attribute type 4 has an invalid length. [ 198.319099][T10345] loop4: detected capacity change from 0 to 16 [ 198.351190][T10345] erofs: (device loop4): mounted with root inode @ nid 36. [ 198.373508][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.389372][T10345] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 198.402323][T10345] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 198.417943][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.430193][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.451924][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 198.466482][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.477289][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 198.487279][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.503519][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 198.515729][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 198.526286][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 198.532693][T10339] loop8: detected capacity change from 0 to 40427 [ 198.536656][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 198.555506][T10339] F2FS-fs (loop8): fault_injection options not supported [ 198.564026][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.574077][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 198.574292][T10339] F2FS-fs (loop8): invalid crc value [ 198.574372][T10355] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4372'. [ 198.600973][ T1761] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 198.610299][ T1761] plantronics 0003:047F:FFFF.0033: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 198.623490][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 198.625298][T10339] F2FS-fs (loop8): Found nat_bits in checkpoint [ 198.634151][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 198.671310][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 198.695777][T10345] syz.4.4367: attempt to access beyond end of device [ 198.695777][T10345] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 198.719819][T10345] syz.4.4367: attempt to access beyond end of device [ 198.719819][T10345] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 198.745447][T10345] syz.4.4367: attempt to access beyond end of device [ 198.745447][T10345] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 198.746403][T10364] loop6: detected capacity change from 0 to 512 [ 198.761490][T10345] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 198.779418][T10339] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 198.780043][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.788645][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 198.807624][T10345] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 198.817955][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 198.820412][T10364] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 198.849131][T10345] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 198.859990][T10345] syz.4.4367: attempt to access beyond end of device [ 198.859990][T10345] loop4: rw=524288, sector=24, nr_sectors = 8 limit=16 [ 198.873419][T10364] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 198.874738][T10345] syz.4.4367: attempt to access beyond end of device [ 198.874738][T10345] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 198.886135][T10339] syz.8.4364: attempt to access beyond end of device [ 198.886135][T10339] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 198.922185][T10345] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 198.922206][T10364] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4375: invalid indirect mapped block 2683928664 (level 1) [ 198.957072][ T1761] usb 4-1: USB disconnect, device number 25 [ 198.971403][T10364] EXT4-fs (loop6): Remounting filesystem read-only [ 198.979044][T10364] EXT4-fs (loop6): 1 truncate cleaned up [ 198.985584][T10364] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 199.000809][ T3333] syz-executor: attempt to access beyond end of device [ 199.000809][ T3333] loop8: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 199.042776][ T8642] EXT4-fs (loop6): unmounting filesystem. [ 199.054846][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 199.054876][ T28] audit: type=1400 audit(457.070:9085): avc: denied { mounton } for pid=10370 comm="syz.4.4378" path="/346/file0" dev="incremental-fs" ino=1847 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.474726][T10385] loop4: detected capacity change from 0 to 128 [ 199.481828][ T1761] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 199.502654][T10385] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.516287][T10385] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.555356][T10383] loop6: detected capacity change from 0 to 40427 [ 199.572203][T10383] F2FS-fs (loop6): fault_injection options not supported [ 199.596383][T10383] F2FS-fs (loop6): Image doesn't support compression [ 199.603641][ T28] audit: type=1400 audit(457.610:9086): avc: denied { read } for pid=10388 comm="syz.4.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.629183][T10383] F2FS-fs (loop6): invalid crc value [ 199.670922][ T1761] usb 9-1: Using ep0 maxpacket: 32 [ 199.679176][ T1761] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.693779][T10383] F2FS-fs (loop6): Found nat_bits in checkpoint [ 199.734278][ T1761] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.755642][ T1761] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 199.800321][ T1761] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.800610][T10383] F2FS-fs (loop6): Start checkpoint disabled! [ 199.818857][ T1761] usb 9-1: config 0 descriptor?? [ 199.841012][T10383] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 199.889829][T10383] F2FS-fs (loop6): access invalid blkaddr:4043309056 [ 199.897753][T10383] CPU: 0 PID: 10383 Comm: syz.6.4382 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 199.907865][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.918611][T10383] Call Trace: [ 199.922033][T10383] [ 199.924991][T10383] __dump_stack+0x21/0x24 [ 199.929455][T10383] dump_stack_lvl+0xee/0x150 [ 199.934447][T10383] ? __cfi_dump_stack_lvl+0x8/0x8 [ 199.939771][T10383] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 199.946326][T10383] ? sysvec_call_function_single+0x61/0xc0 [ 199.952743][T10383] dump_stack+0x15/0x24 [ 199.957438][T10383] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 199.963540][T10383] f2fs_is_valid_blkaddr+0x23/0x30 [ 199.969032][T10383] f2fs_map_blocks+0xc93/0x3a60 [ 199.976405][T10383] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 199.982246][T10383] ? asm_sysvec_call_function_single+0x1b/0x20 [ 199.989438][T10383] ? xas_start+0x317/0x3e0 [ 199.995078][T10383] ? xas_load+0x39e/0x3b0 [ 199.999782][T10383] ? xa_load+0xad/0xd0 [ 200.004393][T10383] f2fs_mpage_readpages+0xa3a/0x1b70 [ 200.010310][T10383] ? dquot_release_reservation_block+0xa0/0xa0 [ 200.019257][T10383] ? cgroup_rstat_updated+0xf5/0x370 [ 200.025756][T10383] ? xas_nomem+0x6b/0x1f0 [ 200.030546][T10383] f2fs_readahead+0xfc/0x240 [ 200.035523][T10383] ? __cfi_f2fs_readahead+0x10/0x10 [ 200.041016][T10383] read_pages+0x1b0/0xdd0 [ 200.045829][T10383] ? __cfi___filemap_add_folio+0x10/0x10 [ 200.052214][T10383] ? page_cache_ra_unbounded+0x720/0x720 [ 200.058651][T10383] ? folio_add_lru+0x260/0x390 [ 200.063927][T10383] ? filemap_add_folio+0x105/0x150 [ 200.069559][T10383] page_cache_ra_unbounded+0x5d1/0x720 [ 200.075175][T10383] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 200.082524][T10383] ? __switch_to+0x51f/0xe30 [ 200.087702][T10383] page_cache_ra_order+0x36a/0xb70 [ 200.092970][T10383] ? finish_task_switch+0x16b/0x7b0 [ 200.098637][T10383] ? __switch_to_asm+0x3a/0x60 [ 200.103919][T10383] ? __schedule+0xb8f/0x14e0 [ 200.108834][T10383] ? __cfi_page_cache_ra_order+0x10/0x10 [ 200.114569][T10383] ondemand_readahead+0x817/0xdb0 [ 200.119904][T10383] ? __kasan_check_read+0x11/0x20 [ 200.125284][T10383] ? page_cache_sync_ra+0x490/0x490 [ 200.130771][T10383] page_cache_sync_ra+0x41b/0x490 [ 200.135932][T10383] f2fs_readdir+0x444/0x940 [ 200.140733][T10383] ? __cfi_f2fs_readdir+0x10/0x10 [ 200.146140][T10383] ? down_read_killable+0xb6/0x100 [ 200.151373][T10383] ? __cfi_down_read_killable+0x10/0x10 [ 200.157278][T10383] ? fsnotify_perm+0x269/0x5b0 [ 200.162400][T10383] ? security_file_permission+0x94/0xb0 [ 200.167974][T10383] iterate_dir+0x271/0x610 [ 200.172407][T10383] ? __cfi_f2fs_readdir+0x10/0x10 [ 200.177821][T10383] __se_sys_getdents+0xe5/0x240 [ 200.183166][T10383] ? __x64_sys_getdents+0x90/0x90 [ 200.189482][T10383] ? xfd_validate_state+0x70/0x150 [ 200.195068][T10383] ? __cfi_filldir+0x10/0x10 [ 200.200169][T10383] ? fpregs_restore_userregs+0x128/0x260 [ 200.206368][T10383] __x64_sys_getdents+0x7b/0x90 [ 200.211832][T10383] x64_sys_call+0x212/0x9a0 [ 200.216592][T10383] do_syscall_64+0x4c/0xa0 [ 200.221303][T10383] ? clear_bhb_loop+0x15/0x70 [ 200.226285][T10383] ? clear_bhb_loop+0x15/0x70 [ 200.231660][T10383] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.237566][T10383] RIP: 0033:0x7f3db7d8e969 [ 200.242008][T10383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.262906][T10383] RSP: 002b:00007f3db8cac038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 200.271835][T10383] RAX: ffffffffffffffda RBX: 00007f3db7fb5fa0 RCX: 00007f3db7d8e969 [ 200.281573][T10383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 200.290554][T10383] RBP: 00007f3db7e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 200.300261][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.309491][T10383] R13: 0000000000000000 R14: 00007f3db7fb5fa0 R15: 00007ffc3333b5d8 [ 200.318711][T10383] [ 200.327593][T10383] syz.6.4382: attempt to access beyond end of device [ 200.327593][T10383] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 200.332092][T10402] F2FS-fs (loop6): Should run fsck to repair first. [ 200.342985][T10383] syz.6.4382: attempt to access beyond end of device [ 200.342985][T10383] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 200.421438][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4388'. [ 200.501839][ T43] kworker/u4:2: attempt to access beyond end of device [ 200.501839][ T43] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 200.535211][ T1761] savu 0003:1E7D:2D5A.0034: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 200.802830][ T1761] usb 9-1: USB disconnect, device number 21 [ 200.919490][T10423] loop6: detected capacity change from 0 to 128 [ 200.941452][T10423] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 200.964497][T10423] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.053498][T10435] loop6: detected capacity change from 0 to 4096 [ 201.072114][T10435] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 201.127461][T10438] loop3: detected capacity change from 0 to 256 [ 201.208972][ T8642] EXT4-fs (loop6): unmounting filesystem. [ 201.240968][ T304] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.274444][T10445] netlink: 'syz.3.4407': attribute type 13 has an invalid length. [ 201.287496][T10445] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.299958][T10445] device gretap2 entered promiscuous mode [ 201.330527][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4408'. [ 201.365140][T10454] netlink: 'syz.6.4421': attribute type 13 has an invalid length. [ 201.422911][T10454] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.433285][ T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.451730][ T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.467016][T10454] device gretap1 entered promiscuous mode [ 201.473975][ T304] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 201.484956][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.496089][ T304] usb 5-1: config 0 descriptor?? [ 201.704694][T10463] loop8: detected capacity change from 0 to 40427 [ 201.715102][T10463] F2FS-fs (loop8): fault_injection options not supported [ 201.723451][T10463] F2FS-fs (loop8): invalid crc value [ 201.731392][T10463] F2FS-fs (loop8): Found nat_bits in checkpoint [ 201.774325][T10463] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 201.836184][T10483] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4423'. [ 202.256382][T10504] SELinux: security_context_str_to_sid (ÿ) failed with errno=-22 [ 202.294134][T10507] loop3: detected capacity change from 0 to 256 [ 202.333362][ T3113] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 202.534089][ T304] usb 5-1: USB disconnect, device number 17 [ 202.600938][ T327] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 202.649485][T10535] loop8: detected capacity change from 0 to 4096 [ 202.670235][T10535] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 202.681849][T10542] syz.1.4445[10542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.681936][T10542] syz.1.4445[10542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.780976][ T327] usb 4-1: Using ep0 maxpacket: 16 [ 202.820322][ T327] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 202.837440][ T327] usb 4-1: config 0 has no interface number 0 [ 202.843962][ T327] usb 4-1: too many endpoints for config 0 interface 164 altsetting 34: 89, using maximum allowed: 30 [ 202.856656][ T327] usb 4-1: config 0 interface 164 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 89 [ 202.872196][ T327] usb 4-1: config 0 interface 164 has no altsetting 0 [ 202.882510][ T327] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 202.893169][ T3333] EXT4-fs (loop8): unmounting filesystem. [ 202.897689][ T327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.909356][ T327] usb 4-1: Product: syz [ 202.913781][ T327] usb 4-1: Manufacturer: syz [ 202.918796][ T327] usb 4-1: SerialNumber: syz [ 202.929711][ T327] usb 4-1: config 0 descriptor?? [ 203.144570][ T327] usb 4-1: USB disconnect, device number 26 [ 203.167683][ T28] audit: type=1400 audit(461.180:9087): avc: denied { setopt } for pid=10568 comm="syz.4.4458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.180200][T10571] binder: 10570:10571 ioctl c0306201 200000000480 returned -14 [ 203.200752][T10573] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4459'. [ 203.291011][T10579] loop4: detected capacity change from 0 to 4096 [ 203.303041][T10579] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 203.390994][ T304] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 203.401687][ T6316] EXT4-fs (loop4): unmounting filesystem. [ 203.486164][T10594] loop8: detected capacity change from 0 to 256 [ 203.515381][T10594] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 203.530714][T10594] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 203.572036][ T304] usb 7-1: Using ep0 maxpacket: 8 [ 203.578614][ T304] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.607881][ T304] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 203.624146][ T304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.650259][ T304] usb 7-1: config 0 descriptor?? [ 203.659296][ T304] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 203.674715][T10616] syz.8.4481[10616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.674844][T10616] syz.8.4481[10616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.814474][T10629] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 203.843980][T10629] incfs: Can't find or create .index dir in ./file0 [ 203.853699][T10629] incfs: mount failed -30 [ 204.150984][ T1336] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 204.200800][T10649] netlink: 'syz.1.4496': attribute type 3 has an invalid length. [ 204.342081][ T1336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.360115][ T1336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.371481][ T1336] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.387042][ T1336] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.398156][ T1336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.411583][ T1336] usb 5-1: config 0 descriptor?? [ 204.695673][T10684] loop8: detected capacity change from 0 to 1024 [ 204.711257][T10684] EXT4-fs: dax option not supported [ 204.732853][ T28] audit: type=1400 audit(462.750:9088): avc: denied { unmount } for pid=3333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 204.828252][ T1336] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 204.845253][ T1336] plantronics 0003:047F:FFFF.0036: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 205.090275][T10712] loop8: detected capacity change from 0 to 8192 [ 205.111569][T10712] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.149857][ T28] audit: type=1400 audit(463.160:9089): avc: denied { mounton } for pid=10711 comm="syz.8.4525" path="/473/file0/bus" dev="loop8" ino=1048747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 205.184028][ T327] usb 5-1: USB disconnect, device number 18 [ 205.227645][ T512] tipc: Left network mode [ 205.408006][ T28] audit: type=1400 audit(463.420:9090): avc: denied { mounton } for pid=10731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 205.445679][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.453153][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.461452][T10731] device bridge_slave_0 entered promiscuous mode [ 205.468455][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.475917][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.484905][T10731] device bridge_slave_1 entered promiscuous mode [ 205.530719][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.538232][T10731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.546010][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.555244][T10731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.576968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.585345][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.593307][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.602934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.611800][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.619206][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.629520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.638578][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.645849][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.657659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.670418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.684329][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.698776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.707899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.716306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.728290][T10731] device veth0_vlan entered promiscuous mode [ 205.739719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.750035][T10731] device veth1_macvtap entered promiscuous mode [ 205.759399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.771711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.787016][ T28] audit: type=1400 audit(463.800:9091): avc: denied { mounton } for pid=10731 comm="syz-executor" path="/root/syzkaller.84pLqD/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 205.812340][ T28] audit: type=1400 audit(463.800:9092): avc: denied { mount } for pid=10731 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 205.834595][ T28] audit: type=1400 audit(463.800:9093): avc: denied { mounton } for pid=10731 comm="syz-executor" path="/root/syzkaller.84pLqD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 205.865203][ T512] device bridge_slave_1 left promiscuous mode [ 205.871885][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.880053][ T28] audit: type=1400 audit(463.800:9094): avc: denied { mounton } for pid=10731 comm="syz-executor" path="/root/syzkaller.84pLqD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=55029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 205.908858][ T28] audit: type=1400 audit(463.830:9095): avc: denied { mounton } for pid=10731 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 205.931927][ T512] device bridge_slave_0 left promiscuous mode [ 205.938231][ T28] audit: type=1400 audit(463.830:9096): avc: denied { mounton } for pid=10731 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 205.939253][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.979978][ T512] device bridge0 left promiscuous mode [ 205.986236][ T512] device veth1_macvtap left promiscuous mode [ 205.992442][ T512] device veth0_vlan left promiscuous mode [ 206.126992][ T1761] usb 7-1: USB disconnect, device number 29 [ 206.154812][T10756] loop6: detected capacity change from 0 to 512 [ 206.206838][ T28] audit: type=1400 audit(464.220:9097): avc: denied { bind } for pid=10763 comm="syz.4.4544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 206.239006][T10756] EXT4-fs (loop6): 1 truncate cleaned up [ 206.245961][T10756] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 206.265299][T10756] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4541: invalid indirect mapped block 234881024 (level 0) [ 206.328896][ T8642] EXT4-fs (loop6): unmounting filesystem. [ 206.585168][T10813] BUG: unable to handle page fault for address: fffffffffffffffc [ 206.593291][T10813] #PF: supervisor read access in kernel mode [ 206.599541][T10813] #PF: error_code(0x0000) - not-present page [ 206.606043][T10813] PGD 6e12067 P4D 6e12067 PUD 6e14067 PMD 0 [ 206.612456][T10813] Oops: 0000 [#1] PREEMPT SMP KASAN [ 206.618087][T10813] CPU: 1 PID: 10813 Comm: syz.6.4571 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 206.628500][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.639661][T10813] RIP: 0010:read_pages+0x8d8/0xdd0 [ 206.646036][T10813] Code: 00 00 00 fc ff df 48 8b 4c 24 48 80 3c 01 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 f4 fe 16 00 49 8b 3e 48 89 de 41 ba 66 11 67 e4 <45> 03 54 24 fc 74 02 0f 0b 41 ff d4 49 bc 00 00 00 00 00 fc ff df [ 206.650971][ T19] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 206.667356][T10813] RSP: 0018:ffffc9000302f1c0 EFLAGS: 00010246 [ 206.667386][T10813] RAX: dffffc0000000000 RBX: ffffea000547fd00 RCX: 1ffff92000605ee0 [ 206.667402][T10813] RDX: ffffc90002641000 RSI: ffffea000547fd00 RDI: ffff88810f990c00 [ 206.667418][T10813] RBP: ffffc9000302f310 R08: dffffc0000000000 R09: fffff94000a8ffa7 [ 206.667432][T10813] R10: 00000000e4671166 R11: 1ffffd4000a8ffa6 R12: 0000000000000000 [ 206.667445][T10813] R13: ffffc9000302f720 R14: ffffc9000302f700 R15: ffffc9000302f718 [ 206.667460][T10813] FS: 00007f3db8cac6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 206.735756][T10813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.743331][T10813] CR2: fffffffffffffffc CR3: 000000011584f000 CR4: 00000000003506a0 [ 206.752544][T10813] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.761235][T10813] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.769763][T10813] Call Trace: [ 206.773240][T10813] [ 206.776217][T10813] ? page_cache_ra_unbounded+0x720/0x720 [ 206.781874][T10813] ? folio_add_lru+0x260/0x390 [ 206.786839][T10813] ? filemap_add_folio+0x105/0x150 [ 206.792115][T10813] page_cache_ra_order+0x940/0xb70 [ 206.797356][T10813] ? __cfi_page_cache_ra_order+0x10/0x10 [ 206.803042][T10813] ? xas_create+0xf67/0x16d0 [ 206.807733][T10813] ondemand_readahead+0x817/0xdb0 [ 206.813390][T10813] ? xas_start+0x317/0x3e0 [ 206.818052][T10813] ? page_cache_sync_ra+0x490/0x490 [ 206.824008][T10813] page_cache_sync_ra+0x41b/0x490 [ 206.829174][T10813] hpage_collapse_scan_file+0x1022/0x38f0 [ 206.835296][T10813] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 206.841195][T10813] ? hugepage_vma_revalidate+0x310/0x310 [ 206.847404][T10813] ? flush_work+0x20/0x20 [ 206.851852][T10813] ? __lru_add_drain_all+0x74a/0x7b0 [ 206.857782][T10813] madvise_collapse+0x5bb/0xa60 [ 206.863096][T10813] do_madvise+0x10ae/0x2f50 [ 206.868051][T10813] ? __cfi_do_madvise+0x10/0x10 [ 206.873021][T10813] ? try_to_wake_up+0x6b8/0x1220 [ 206.878716][T10813] ? __kasan_check_write+0x14/0x20 [ 206.884261][T10813] ? wake_up_q+0x105/0x1b0 [ 206.889726][T10813] ? futex_wake+0x5c1/0x890 [ 206.894593][T10813] ? slab_free_freelist_hook+0xc2/0x190 [ 206.900855][T10813] ? __kmem_cache_free+0xb7/0x1b0 [ 206.907272][T10813] ? __cfi_futex_wake+0x10/0x10 [ 206.912293][T10813] ? do_futex+0x2b9/0x420 [ 206.917262][T10813] ? __cfi_do_futex+0x10/0x10 [ 206.922469][T10813] ? debug_smp_processor_id+0x17/0x20 [ 206.928490][T10813] ? kasan_quarantine_put+0x34/0x190 [ 206.933918][T10813] ? __se_sys_futex+0x273/0x2e0 [ 206.938877][T10813] ? __kasan_slab_free+0x11/0x20 [ 206.944020][T10813] ? __this_cpu_preempt_check+0x13/0x20 [ 206.949935][T10813] ? xfd_validate_state+0x70/0x150 [ 206.955352][T10813] ? fpregs_restore_userregs+0x128/0x260 [ 206.961273][T10813] __x64_sys_madvise+0xa9/0xc0 [ 206.966242][T10813] x64_sys_call+0x99e/0x9a0 [ 206.970896][T10813] do_syscall_64+0x4c/0xa0 [ 206.975488][T10813] ? clear_bhb_loop+0x15/0x70 [ 206.980167][T10813] ? clear_bhb_loop+0x15/0x70 [ 206.985019][T10813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.991050][T10813] RIP: 0033:0x7f3db7d8e969 [ 206.995917][T10813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.016164][T10813] RSP: 002b:00007f3db8cac038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 207.025046][T10813] RAX: ffffffffffffffda RBX: 00007f3db7fb5fa0 RCX: 00007f3db7d8e969 [ 207.033735][T10813] RDX: 0000000000000019 RSI: 0000000000600000 RDI: 0000200000000000 [ 207.042332][T10813] RBP: 00007f3db7e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 207.050754][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.059340][T10813] R13: 0000000000000000 R14: 00007f3db7fb5fa0 R15: 00007ffc3333b5d8 [ 207.067557][T10813] [ 207.071208][T10813] Modules linked in: [ 207.075859][T10813] CR2: fffffffffffffffc [ 207.080361][T10813] ---[ end trace 0000000000000000 ]--- [ 207.086126][T10813] RIP: 0010:read_pages+0x8d8/0xdd0 [ 207.091863][T10813] Code: 00 00 00 fc ff df 48 8b 4c 24 48 80 3c 01 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 f4 fe 16 00 49 8b 3e 48 89 de 41 ba 66 11 67 e4 <45> 03 54 24 fc 74 02 0f 0b 41 ff d4 49 bc 00 00 00 00 00 fc ff df [ 207.116272][T10813] RSP: 0018:ffffc9000302f1c0 EFLAGS: 00010246 [ 207.122710][T10813] RAX: dffffc0000000000 RBX: ffffea000547fd00 RCX: 1ffff92000605ee0 [ 207.131662][T10813] RDX: ffffc90002641000 RSI: ffffea000547fd00 RDI: ffff88810f990c00 [ 207.140169][T10813] RBP: ffffc9000302f310 R08: dffffc0000000000 R09: fffff94000a8ffa7 [ 207.149194][T10813] R10: 00000000e4671166 R11: 1ffffd4000a8ffa6 R12: 0000000000000000 [ 207.157697][T10813] R13: ffffc9000302f720 R14: ffffc9000302f700 R15: ffffc9000302f718 [ 207.167116][T10813] FS: 00007f3db8cac6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 207.177077][T10813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.184713][T10813] CR2: fffffffffffffffc CR3: 000000011584f000 CR4: 00000000003506a0 [ 207.194123][T10813] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.202537][T10813] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.213252][T10813] Kernel panic - not syncing: Fatal exception [ 207.220640][T10813] Kernel Offset: disabled [ 207.225678][T10813] Rebooting in 86400 seconds..