last executing test programs: 1m58.822376832s ago: executing program 32 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="0005d8a4ca71a74d19e83e665100", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m46.009227061s ago: executing program 3 (id=857): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6e6f646973636172642c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6e6f666c7573685f6d657267652c64697361626c655f726f6c6c5f666f72776172642c696e6c696e655f646174612c6673796e635f6d6f64653d706f7369782c686561702c6e6f696e6c696e655f646174612c6e6f657874656e745f63616368652c6d6f64653d61646170746976652c6a71666d743d7666736f6c642c757365725f78617474722c00779cd4f02894cf964d909c186aac251e773b07a2a2349d810b3ec41107242d9e37b999afd91d5fe52bdddd57868a70f0b28523203ce742ef793e984a3e5c4fb9fa37eec6c48714f05711f8f7206ba61dcb3d975e8b544ca8aae49633e3cf0d015e32276cf811c1900db5f8e56ba59a7ec100"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1a37c1, 0x42) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) fsync(r1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 1m45.542961844s ago: executing program 3 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)=ANY=[]) 1m45.353889805s ago: executing program 3 (id=865): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x19) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000340), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20) 1m45.330905655s ago: executing program 3 (id=867): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 1m45.223644566s ago: executing program 3 (id=869): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m44.49009514s ago: executing program 3 (id=881): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/294], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) 1m44.436515621s ago: executing program 33 (id=881): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/294], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) 1m24.177443717s ago: executing program 5 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='task_newtask\x00', r1}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.037230858s ago: executing program 5 (id=1379): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x813) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m24.024661568s ago: executing program 5 (id=1380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m23.981431898s ago: executing program 5 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x102) 1m23.947471428s ago: executing program 5 (id=1382): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) creat(&(0x7f0000001500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m23.838039119s ago: executing program 5 (id=1385): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 1m23.833299389s ago: executing program 34 (id=1385): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 1m20.727115228s ago: executing program 0 (id=1466): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@s}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m20.726926668s ago: executing program 0 (id=1467): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20) 1m20.726789748s ago: executing program 0 (id=1468): capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x40) open(0x0, 0x4001, 0x148) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006241a000000052412"], 0x0) 1m19.512950916s ago: executing program 0 (id=1486): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 1m19.301791247s ago: executing program 0 (id=1499): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) close_range(r0, r0, 0x0) 1m18.80566608s ago: executing program 0 (id=1494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x6, 0xa6, &(0x7f00000021c0)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m18.76836169s ago: executing program 35 (id=1494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x6, 0xa6, &(0x7f00000021c0)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.214130506s ago: executing program 7 (id=2925): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4}) 10.041956027s ago: executing program 7 (id=2929): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x1004810, &(0x7f0000001200)=ANY=[], 0x4, 0x555e, &(0x7f000000b500)="$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") mkdir(&(0x7f0000000580)='./file0\x00', 0x2) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 9.65459373s ago: executing program 7 (id=2933): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@remote, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0) 9.322960482s ago: executing program 7 (id=2943): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 9.309948722s ago: executing program 7 (id=2944): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@minixdf}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0xff, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000005e80)={@id={0x2, 0x0, @auto="f8ff13be93a237a05ecc5624c29bb9c0"}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 9.240962633s ago: executing program 7 (id=2946): unshare(0x24060400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x2) pwritev2(r1, 0x0, 0x0, 0x5412, 0x0, 0x0) 9.195041843s ago: executing program 36 (id=2946): unshare(0x24060400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b6fffec850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x2) pwritev2(r1, 0x0, 0x0, 0x5412, 0x0, 0x0) 6.323155551s ago: executing program 1 (id=3040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r1, r0}, 0xc) 6.245764522s ago: executing program 1 (id=3041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x3e, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1b, 0x80000003, @loopback, 0x80000001}, 0x1c) 6.229312402s ago: executing program 1 (id=3042): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 6.192113362s ago: executing program 1 (id=3043): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x4402, &(0x7f0000000b00)={[{@utf8}, {@errors_continue}, {@umask={'umask', 0x3d, 0x5}}, {@dmask={'dmask', 0x3d, 0xe}}, {@namecase}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@umask}, {@time_offset}, {@keep_last_dots}]}, 0x1, 0x1522, &(0x7f0000001240)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 6.050944903s ago: executing program 1 (id=3045): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 5.859212664s ago: executing program 1 (id=3050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd48", 0x19, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100}, 0x14) 5.762756704s ago: executing program 37 (id=3050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd48", 0x19, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100}, 0x14) 2.103301097s ago: executing program 6 (id=3138): pipe2(0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) 1.853142138s ago: executing program 6 (id=3158): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x192) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x2) 1.58721941s ago: executing program 6 (id=3167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) 823.868345ms ago: executing program 4 (id=3173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 819.673155ms ago: executing program 8 (id=3174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 806.993845ms ago: executing program 4 (id=3176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r2}, 0x10) 792.670245ms ago: executing program 6 (id=3178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000000000008504"]) 773.344575ms ago: executing program 8 (id=3179): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0xa, 0x1) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x11a020, &(0x7f0000000040)={[{@gid}]}) 770.482135ms ago: executing program 2 (id=3180): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f00000005c0)={[{@mblk_io_submit}, {@abort}, {@resuid}, {@oldalloc}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") syz_mount_image$exfat(&(0x7f0000001f40), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000b80)={0x8, 0x2, 0x5}) 769.854115ms ago: executing program 4 (id=3181): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x76b4, 0x800, 0x0, 0xffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x10) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 725.357646ms ago: executing program 8 (id=3182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000580)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 700.456816ms ago: executing program 8 (id=3183): unshare(0x28000600) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0xffffffffffffffff) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x1b, 0x3a, 0x6, 0xd, 0x6, 0x4, 0x2, 0x76, 0xffffffffffffffff}) 696.924686ms ago: executing program 2 (id=3184): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r0, 0x409, 0xb) 685.886396ms ago: executing program 8 (id=3185): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0xbb) 672.418196ms ago: executing program 8 (id=3186): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$rtl8150(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) 650.408186ms ago: executing program 6 (id=3187): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) write$selinux_access(r0, 0x0, 0x4e) 646.951106ms ago: executing program 4 (id=3188): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 601.975076ms ago: executing program 6 (id=3190): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 502.778747ms ago: executing program 9 (id=3193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000440)="f30f0ddf66b917080000dbe30f0176b90f1cb95a5c66b87c7300000f23c80f21f866350c0090000f23f82ee1d66526f30f2ce226360f01ca790c0fc7bc0400", 0x3f}], 0x1, 0x4c, 0x0, 0x0) 502.542047ms ago: executing program 2 (id=3194): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 380.311258ms ago: executing program 4 (id=3195): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f00000005c0)={[{@mblk_io_submit}, {@abort}, {@resuid}, {@oldalloc}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") syz_mount_image$exfat(&(0x7f0000001f40), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000b80)={0x8, 0x2, 0x5}) 380.230138ms ago: executing program 2 (id=3196): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10) 380.154408ms ago: executing program 9 (id=3197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000040000000901"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) getitimer(0x2, &(0x7f0000000200)) 363.561818ms ago: executing program 2 (id=3198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) 359.132408ms ago: executing program 9 (id=3199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r1, 0x5a718000) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x76, 0x709, 0x0, 0xffffffff, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000, 0x0, 0x24040010}, 0x0) 289.171128ms ago: executing program 9 (id=3200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 289.035228ms ago: executing program 2 (id=3201): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) 288.908288ms ago: executing program 9 (id=3202): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 17.85641ms ago: executing program 9 (id=3203): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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") 0s ago: executing program 4 (id=3204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r1, &(0x7f00000000c0)=""/91, 0x5b, 0xfff) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 138.876385][ T6822] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 138.901636][ T6822] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.2476: Allocating blocks 497-513 which overlap fs metadata [ 138.921804][ T6820] EXT4-fs (loop8): pa ffff88813627a3f0: logic 1, phys. 193, len 20 [ 138.929837][ T6820] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 1, pa_free 2 [ 138.955326][ T4436] EXT4-fs (loop8): unmounting filesystem. [ 139.054087][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.070061][ T6848] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.070765][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.090126][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 139.100097][ T2633] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 139.117186][ T24] usb 7-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 139.129656][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.158458][ T24] usb 7-1: config 0 descriptor?? [ 139.238581][ T6834] loop7: detected capacity change from 0 to 40427 [ 139.245877][ T6834] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 139.254295][ T6834] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 139.264670][ T6834] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 139.301408][ T6834] F2FS-fs (loop7): Found nat_bits in checkpoint [ 139.333189][ T6834] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 139.340411][ T6834] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 139.366018][ T6834] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 139.745220][ T24] hid-led 0003:1D34:000A.001F: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.6-1/input0 [ 139.764813][ T24] hid-led 0003:1D34:000A.001F: Dream Cheeky Webmail Notifier initialized [ 139.944096][ T24] usb 7-1: USB disconnect, device number 15 [ 140.064446][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.310667][ T287] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.483013][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.494005][ T287] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 140.503073][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.511924][ T287] usb 2-1: config 0 descriptor?? [ 140.875482][ T6883] loop6: detected capacity change from 0 to 128 [ 140.889509][ T6883] FAT-fs (loop6): bogus sectors per cluster 0 [ 140.897900][ T6883] FAT-fs (loop6): Can't find a valid FAT filesystem [ 140.905890][ T287] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 140.915914][ T287] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0020/input/input27 [ 140.919677][ T6890] loop7: detected capacity change from 0 to 512 [ 140.934088][ T6890] EXT4-fs: Ignoring removed nobh option [ 140.951051][ T6890] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.2491: corrupted inode contents [ 140.963504][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 140.970319][ T6890] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #3: comm syz.7.2491: mark_inode_dirty error [ 140.982277][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 140.989717][ T6890] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #3: comm syz.7.2491: corrupted inode contents [ 141.001826][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.002643][ T287] keytouch 0003:0926:3333.0020: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 141.008380][ T6890] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #3: comm syz.7.2491: mark_inode_dirty error [ 141.008608][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.038474][ T6890] __quota_error: 15 callbacks suppressed [ 141.038492][ T6890] Quota error (device loop7): write_blk: dquota write failed [ 141.051822][ T6890] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 141.061817][ T6890] EXT4-fs error (device loop7): ext4_acquire_dquot:6803: comm syz.7.2491: Failed to acquire dquot type 0 [ 141.073485][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.080802][ T6890] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2491: corrupted inode contents [ 141.092951][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.110099][ T6890] EXT4-fs error (device loop7): ext4_dirty_inode:6121: inode #16: comm syz.7.2491: mark_inode_dirty error [ 141.122464][ T6875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.131205][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.137928][ T6875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.145746][ T6890] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2491: corrupted inode contents [ 141.158388][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.165495][ T6890] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.2491: mark_inode_dirty error [ 141.183593][ C1] Mem-Info: [ 141.186762][ C1] active_anon:4037 inactive_anon:12 isolated_anon:0 [ 141.186762][ C1] active_file:21495 inactive_file:2523 isolated_file:0 [ 141.186762][ C1] unevictable:0 dirty:208 writeback:0 [ 141.186762][ C1] slab_reclaimable:9773 slab_unreclaimable:72326 [ 141.186762][ C1] mapped:28928 shmem:239 pagetables:538 [ 141.186762][ C1] sec_pagetables:0 bounce:0 [ 141.186762][ C1] kernel_misc_reclaimable:0 [ 141.186762][ C1] free:1509718 free_pcp:7665 free_cma:0 [ 141.200576][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.231719][ C1] Node 0 active_anon:16148kB inactive_anon:48kB active_file:85980kB inactive_file:10092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115712kB dirty:832kB writeback:0kB shmem:956kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:17044kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no [ 141.231795][ C1] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974188kB mlocked:0kB bounce:0kB free_pcp:5656kB local_pcp:0kB free_cma:0kB [ 141.238484][ T6890] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2491: corrupted inode contents [ 141.270420][ C1] lowmem_reserve[]: 0 3932 3932 3932 [ 141.270465][ C1] Normal free:3070340kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:16148kB inactive_anon:48kB active_file:85980kB inactive_file:10092kB unevictable:0kB writepending:832kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:25004kB local_pcp:1208kB free_cma:0kB [ 141.270530][ C1] lowmem_reserve[]: 0 0 0 0 [ 141.349603][ C1] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 141.365061][ C1] Normal: 1474*4kB (UME) 747*8kB (ME) 644*16kB (UME) 891*32kB (UME) 300*64kB (UME) 207*128kB (UME) 49*256kB (UME) 28*512kB (UME) 22*1024kB (UME) 4*2048kB (UME) 712*4096kB (UM) = 3070336kB [ 141.383617][ C1] 24257 total pagecache pages [ 141.388291][ C1] 13 pages in swap cache [ 141.392526][ C1] Free swap = 124376kB [ 141.396679][ C1] Total swap = 124996kB [ 141.400842][ C1] 2097051 pages RAM [ 141.404654][ C1] 0 pages HighMem/MovableOnly [ 141.409331][ C1] 346840 pages reserved [ 141.413489][ C1] 0 pages cma reserved [ 141.421292][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.428494][ T6901] loop8: detected capacity change from 0 to 128 [ 141.430002][ T6890] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 141.444973][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.448856][ T6901] FAT-fs (loop8): bogus sectors per cluster 0 [ 141.451627][ T6890] EXT4-fs error (device loop7): ext4_do_update_inode:5256: inode #16: comm syz.7.2491: corrupted inode contents [ 141.469593][ T6901] FAT-fs (loop8): Can't find a valid FAT filesystem [ 141.482902][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.489546][ T6890] EXT4-fs error (device loop7): ext4_truncate:4314: inode #16: comm syz.7.2491: mark_inode_dirty error [ 141.501544][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.510052][ T28] audit: type=1400 audit(2000002393.265:1253): avc: denied { execmem } for pid=6906 comm="syz.2.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 141.518086][ T6890] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 141.538656][ T6890] EXT4-fs (loop7): Remounting filesystem read-only [ 141.545546][ T6890] EXT4-fs (loop7): 1 truncate cleaned up [ 141.551688][ T6890] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 141.560703][ T6890] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.611603][ T4167] EXT4-fs (loop7): unmounting filesystem. [ 141.792005][ T6918] loop2: detected capacity change from 0 to 40427 [ 141.799846][ T6918] F2FS-fs (loop2): invalid crc value [ 141.820630][ T6918] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.859914][ T287] usb 2-1: USB disconnect, device number 13 [ 141.874805][ T6918] F2FS-fs (loop2): Start checkpoint disabled! [ 141.881544][ T6918] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 141.904441][ T28] audit: type=1400 audit(2000002393.685:1254): avc: denied { write } for pid=6917 comm="syz.2.2504" name="file0" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.926949][ T28] audit: type=1400 audit(2000002393.685:1255): avc: denied { add_name } for pid=6917 comm="syz.2.2504" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.948643][ T28] audit: type=1400 audit(2000002393.685:1256): avc: denied { rename } for pid=6917 comm="syz.2.2504" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.961795][ T6940] loop7: detected capacity change from 0 to 128 [ 141.971059][ T28] audit: type=1400 audit(2000002393.685:1257): avc: denied { rmdir } for pid=6917 comm="syz.2.2504" name="file0" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 141.987870][ T6940] FAT-fs (loop7): bogus sectors per cluster 0 [ 142.012318][ T6940] FAT-fs (loop7): Can't find a valid FAT filesystem [ 142.019495][ T2633] kworker/u4:248: attempt to access beyond end of device [ 142.019495][ T2633] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 142.045986][ T6944] loop6: detected capacity change from 0 to 512 [ 142.052606][ T6944] EXT4-fs: Ignoring removed nobh option [ 142.104688][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.105228][ T6944] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.2517: corrupted inode contents [ 142.125503][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 142.133750][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 142.142227][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.151326][ T6944] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #3: comm syz.6.2517: mark_inode_dirty error [ 142.177617][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.188477][ T6944] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #3: comm syz.6.2517: corrupted inode contents [ 142.200549][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.207326][ T6944] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.2517: mark_inode_dirty error [ 142.222535][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.225796][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.248625][ T6944] Quota error (device loop6): write_blk: dquota write failed [ 142.256365][ T6944] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 142.268914][ T6944] EXT4-fs error (device loop6): ext4_acquire_dquot:6803: comm syz.6.2517: Failed to acquire dquot type 0 [ 142.280466][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.287414][ T6944] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2517: corrupted inode contents [ 142.299533][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.306120][ T6944] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #16: comm syz.6.2517: mark_inode_dirty error [ 142.327134][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.333744][ T6944] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2517: corrupted inode contents [ 142.335149][ T28] audit: type=1400 audit(2000002394.137:1258): avc: denied { read write } for pid=6956 comm="syz.2.2522" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 142.346176][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.378182][ T6944] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.2517: mark_inode_dirty error [ 142.389719][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.396323][ T6944] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2517: corrupted inode contents [ 142.408562][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.415157][ T6944] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 142.424221][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.431604][ T6944] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #16: comm syz.6.2517: corrupted inode contents [ 142.443881][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.451877][ T6944] EXT4-fs error (device loop6): ext4_truncate:4314: inode #16: comm syz.6.2517: mark_inode_dirty error [ 142.463970][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.470561][ T6944] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 142.482126][ T6944] EXT4-fs (loop6): Remounting filesystem read-only [ 142.492016][ T6944] EXT4-fs (loop6): 1 truncate cleaned up [ 142.497690][ T6944] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 142.506734][ T6944] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.567981][ T2949] EXT4-fs (loop6): unmounting filesystem. [ 142.592543][ T6968] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2527'. [ 142.631216][ T358] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 142.718943][ T6964] loop7: detected capacity change from 0 to 40427 [ 142.727088][ T6964] F2FS-fs (loop7): invalid crc value [ 142.733792][ T6964] F2FS-fs (loop7): Found nat_bits in checkpoint [ 142.766607][ T6964] F2FS-fs (loop7): Start checkpoint disabled! [ 142.773476][ T6964] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 142.787093][ T358] usb 3-1: device descriptor read/64, error -71 [ 142.806582][ T287] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 142.830436][ T2645] kworker/u4:260: attempt to access beyond end of device [ 142.830436][ T2645] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 142.845160][ T6983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.920842][ T2140] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 143.007432][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.018380][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.028919][ T287] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.038043][ T287] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 143.046037][ T287] usb 2-1: Manufacturer: syz [ 143.051163][ T287] usb 2-1: config 0 descriptor?? [ 143.053959][ T358] usb 3-1: device descriptor read/64, error -71 [ 143.093414][ T2140] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.104416][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.111736][ T2140] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.121657][ T2140] usb 9-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 143.130742][ T2140] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.139972][ T2140] usb 9-1: config 0 descriptor?? [ 143.206139][ T411] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 143.310955][ T358] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 143.378874][ T411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.389866][ T411] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 143.398944][ T411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.407642][ T411] usb 7-1: config 0 descriptor?? [ 143.453974][ T358] usb 3-1: device descriptor read/64, error -71 [ 143.721457][ T358] usb 3-1: device descriptor read/64, error -71 [ 143.727833][ T2140] hid-led 0003:1D34:000A.0022: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.8-1/input0 [ 143.739866][ T2140] hid-led 0003:1D34:000A.0022: Dream Cheeky Webmail Notifier initialized [ 143.796866][ T411] keytouch 0003:0926:3333.0023: fixing up Keytouch IEC report descriptor [ 143.806515][ T411] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0023/input/input28 [ 143.824208][ T287] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0021/input/input29 [ 143.844835][ T358] usb usb3-port1: attempt power cycle [ 143.893660][ T411] keytouch 0003:0926:3333.0023: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 143.906461][ T287] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0021/input/input30 [ 143.919078][ T287] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0021/input/input31 [ 143.924971][ T2140] usb 9-1: USB disconnect, device number 11 [ 143.932272][ T287] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0021/input/input32 [ 143.949653][ T287] uclogic 0003:256C:006D.0021: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 143.993529][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.002054][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.023432][ C1] Mem-Info: [ 144.026607][ C1] active_anon:3988 inactive_anon:12 isolated_anon:0 [ 144.026607][ C1] active_file:21495 inactive_file:2523 isolated_file:0 [ 144.026607][ C1] unevictable:0 dirty:230 writeback:0 [ 144.026607][ C1] slab_reclaimable:9787 slab_unreclaimable:72368 [ 144.026607][ C1] mapped:28920 shmem:164 pagetables:548 [ 144.026607][ C1] sec_pagetables:0 bounce:0 [ 144.026607][ C1] kernel_misc_reclaimable:0 [ 144.026607][ C1] free:1506906 free_pcp:10243 free_cma:0 [ 144.029528][ T294] usb 2-1: USB disconnect, device number 14 [ 144.071469][ C1] Node 0 active_anon:15952kB inactive_anon:48kB active_file:85980kB inactive_file:10092kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115680kB dirty:920kB writeback:0kB shmem:656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:17028kB pagetables:2192kB sec_pagetables:0kB all_unreclaimable? no [ 144.071539][ C1] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974188kB mlocked:0kB bounce:0kB free_pcp:5656kB local_pcp:0kB free_cma:0kB [ 144.137674][ C1] lowmem_reserve[]: 0 3932 3932 3932 [ 144.142979][ C1] Normal free:3059092kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:15952kB inactive_anon:48kB active_file:85980kB inactive_file:10092kB unevictable:0kB writepending:920kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:35284kB local_pcp:10712kB free_cma:0kB [ 144.172714][ C1] lowmem_reserve[]: 0 0 0 0 [ 144.177243][ C1] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 144.192641][ C1] Normal: 967*4kB (UE) 235*8kB (UE) 270*16kB (UME) 622*32kB (UME) 314*64kB (UME) 210*128kB (UME) 49*256kB (UME) 28*512kB (UME) 22*1024kB (UME) 6*2048kB (UME) 713*4096kB (UM) = 3059092kB [ 144.210993][ C1] 24182 total pagecache pages [ 144.215663][ C1] 13 pages in swap cache [ 144.219892][ C1] Free swap = 124376kB [ 144.224033][ C1] Total swap = 124996kB [ 144.228181][ C1] 2097051 pages RAM [ 144.231990][ C1] 0 pages HighMem/MovableOnly [ 144.236668][ C1] 346840 pages reserved [ 144.240818][ C1] 0 pages cma reserved [ 144.263876][ T358] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 144.302823][ T358] usb 3-1: device descriptor read/8, error -71 [ 144.446592][ T358] usb 3-1: device descriptor read/8, error -71 [ 144.485694][ T6991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.542191][ T1981] usb 7-1: USB disconnect, device number 16 [ 144.702204][ T358] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 144.741881][ T7016] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2549'. [ 144.758269][ T7004] loop1: detected capacity change from 0 to 40427 [ 144.760756][ T7016] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 144.766913][ T7004] F2FS-fs (loop1): invalid crc value [ 144.786708][ T358] usb 3-1: device descriptor read/8, error -71 [ 144.794828][ T7004] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.823711][ T7004] F2FS-fs (loop1): Start checkpoint disabled! [ 144.830656][ T7004] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 144.889899][ T2645] kworker/u4:260: attempt to access beyond end of device [ 144.889899][ T2645] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 144.941173][ T7024] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 144.941561][ T358] usb 3-1: device descriptor read/8, error -71 [ 145.073240][ T358] usb usb3-port1: unable to enumerate USB device [ 145.225596][ T287] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 145.254200][ T4389] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 145.398201][ T287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 145.409203][ T287] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 145.418277][ T287] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.427236][ T287] usb 9-1: config 0 descriptor?? [ 145.432256][ T4389] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.442260][ T4389] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.455262][ T4389] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.455320][ T7026] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 145.461909][ T4389] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 145.478819][ T4389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.487458][ T4389] usb 2-1: config 0 descriptor?? [ 145.864259][ T287] belkin 0003:050D:3201.0024: unknown main item tag 0x0 [ 145.871357][ T287] belkin 0003:050D:3201.0024: unknown main item tag 0x0 [ 145.878611][ T287] belkin 0003:050D:3201.0024: unknown main item tag 0x0 [ 145.887297][ T4389] nintendo 0003:057E:2009.0025: unknown main item tag 0x0 [ 145.894836][ T4389] nintendo 0003:057E:2009.0025: unknown main item tag 0x0 [ 145.901985][ T4389] nintendo 0003:057E:2009.0025: unknown main item tag 0x0 [ 145.910459][ T287] belkin 0003:050D:3201.0024: hiddev96,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.8-1/input0 [ 145.923284][ T4389] nintendo 0003:057E:2009.0025: hidraw1: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 145.948623][ T7047] loop6: detected capacity change from 0 to 16 [ 145.955390][ T7047] erofs: (device loop6): mounted with root inode @ nid 36. [ 145.965081][ T7047] syz.6.2562: attempt to access beyond end of device [ 145.965081][ T7047] loop6: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 145.980043][ T7047] syz.6.2562: attempt to access beyond end of device [ 145.980043][ T7047] loop6: rw=0, sector=14546590680, nr_sectors = 16 limit=16 [ 145.997381][ T4389] nintendo 0003:057E:2009.0025: failed reading SPI flash; ret=-38 [ 146.005741][ T4389] nintendo 0003:057E:2009.0025: using factory cal for left stick [ 146.013681][ T4389] nintendo 0003:057E:2009.0025: failed reading SPI flash; ret=-38 [ 146.029943][ T4389] nintendo 0003:057E:2009.0025: using factory cal for right stick [ 146.053369][ T4389] nintendo 0003:057E:2009.0025: failed reading SPI flash; ret=-38 [ 146.067239][ T4389] nintendo 0003:057E:2009.0025: Failed to read left stick cal, using defaults; e=-38 [ 146.078400][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 146.078415][ T28] audit: type=1400 audit(2000002398.063:1265): avc: denied { read write } for pid=7053 comm="syz.2.2565" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.091655][ T7044] loop7: detected capacity change from 0 to 40427 [ 146.109844][ T4389] nintendo 0003:057E:2009.0025: failed reading SPI flash; ret=-38 [ 146.124582][ T7044] F2FS-fs (loop7): fault_injection options not supported [ 146.124878][ T4389] nintendo 0003:057E:2009.0025: Failed to read right stick cal, using defaults; e=-38 [ 146.133170][ T7044] F2FS-fs (loop7): invalid crc value [ 146.145117][ T28] audit: type=1400 audit(2000002398.105:1266): avc: denied { open } for pid=7053 comm="syz.2.2565" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.162952][ T7044] F2FS-fs (loop7): Found nat_bits in checkpoint [ 146.171526][ T4389] nintendo 0003:057E:2009.0025: failed reading SPI flash; ret=-38 [ 146.185663][ T28] audit: type=1400 audit(2000002398.136:1267): avc: denied { ioctl } for pid=7053 comm="syz.2.2565" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.211964][ T4389] nintendo 0003:057E:2009.0025: using factory cal for IMU [ 146.214408][ T7044] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 146.219145][ T4389] nintendo 0003:057E:2009.0025: failed reading SPI flash; ret=-38 [ 146.219163][ T4389] nintendo 0003:057E:2009.0025: Failed to read IMU cal, using defaults; ret=-38 [ 146.219181][ T4389] nintendo 0003:057E:2009.0025: Unable to read IMU calibration data [ 146.219208][ T4389] nintendo 0003:057E:2009.0025: Failed to set report mode; ret=-38 [ 146.219224][ T4389] nintendo 0003:057E:2009.0025: Failed to initialize controller; ret=-38 [ 146.219987][ T287] usb 9-1: USB disconnect, device number 12 [ 146.260106][ T28] audit: type=1400 audit(2000002398.262:1268): avc: denied { ioctl } for pid=7043 comm="syz.7.2561" path="/232/file1/file1" dev="loop7" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 146.268477][ T4389] nintendo 0003:057E:2009.0025: probe - fail = -38 [ 146.305016][ T4389] nintendo: probe of 0003:057E:2009.0025 failed with error -38 [ 146.316524][ T4389] usb 2-1: USB disconnect, device number 15 [ 146.320230][ T4167] syz-executor: attempt to access beyond end of device [ 146.320230][ T4167] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.373806][ T7062] loop6: detected capacity change from 0 to 128 [ 146.383374][ T7062] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 146.392224][ T7062] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.419311][ T294] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 146.442881][ T2949] EXT4-fs (loop6): unmounting filesystem. [ 146.458611][ T28] audit: type=1400 audit(2000002398.462:1269): avc: denied { mount } for pid=7071 comm="syz.6.2570" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 146.480930][ T28] audit: type=1400 audit(2000002398.462:1270): avc: denied { remount } for pid=7071 comm="syz.6.2570" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 146.501280][ T28] audit: type=1400 audit(2000002398.462:1271): avc: denied { unmount } for pid=2949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 146.607458][ T7089] loop7: detected capacity change from 0 to 512 [ 146.618381][ T7089] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 146.627449][ T7089] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.646687][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.663984][ T294] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 146.680943][ T28] audit: type=1326 audit(2000002398.693:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.8.2582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f230b58f6c9 code=0x0 [ 146.683579][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.716538][ T294] usb 3-1: config 0 descriptor?? [ 146.722915][ T4167] EXT4-fs (loop7): unmounting filesystem. [ 146.891326][ T7106] loop1: detected capacity change from 0 to 40427 [ 146.898606][ T7106] F2FS-fs (loop1): fault_injection options not supported [ 146.906396][ T7106] F2FS-fs (loop1): invalid crc value [ 146.913047][ T7106] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.944283][ T7106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.976305][ T454] syz-executor: attempt to access beyond end of device [ 146.976305][ T454] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 146.988019][ T4389] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 147.065128][ T28] audit: type=1400 audit(2000002399.102:1273): avc: denied { create } for pid=7110 comm="syz.1.2587" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.089169][ T28] audit: type=1400 audit(2000002399.123:1274): avc: denied { mounton } for pid=7110 comm="syz.1.2587" path="/530/file0" dev="tmpfs" ino=2767 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 147.089436][ T7111] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 147.114813][ T294] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 147.121736][ T7111] FAT-fs (loop3): unable to read boot sector [ 147.132484][ T294] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0026/input/input34 [ 147.170681][ T4389] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.183078][ T4389] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 147.192198][ T4389] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.200416][ T4389] usb 8-1: Product: syz [ 147.204605][ T4389] usb 8-1: Manufacturer: syz [ 147.209226][ T4389] usb 8-1: SerialNumber: syz [ 147.218466][ T294] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 147.351871][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.361232][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.369651][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2588'. [ 147.379474][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2588'. [ 147.396757][ T7115] device wireguard0 entered promiscuous mode [ 147.408402][ C0] Mem-Info: [ 147.411565][ C0] active_anon:5794 inactive_anon:12 isolated_anon:0 [ 147.411565][ C0] active_file:21495 inactive_file:2525 isolated_file:0 [ 147.411565][ C0] unevictable:0 dirty:256 writeback:0 [ 147.411565][ C0] slab_reclaimable:9743 slab_unreclaimable:72136 [ 147.411565][ C0] mapped:30698 shmem:1939 pagetables:550 [ 147.411565][ C0] sec_pagetables:0 bounce:0 [ 147.411565][ C0] kernel_misc_reclaimable:0 [ 147.411565][ C0] free:1504104 free_pcp:10814 free_cma:0 [ 147.456496][ C0] Node 0 active_anon:23176kB inactive_anon:48kB active_file:85980kB inactive_file:10100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122792kB dirty:1024kB writeback:0kB shmem:7756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:17144kB pagetables:2200kB sec_pagetables:0kB all_unreclaimable? no [ 147.488850][ C0] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974188kB mlocked:0kB bounce:0kB free_pcp:5656kB local_pcp:5656kB free_cma:0kB [ 147.517026][ C0] lowmem_reserve[]: 0 3932 3932 3932 [ 147.522356][ C0] Normal free:3047884kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:23176kB inactive_anon:48kB active_file:85980kB inactive_file:10100kB unevictable:0kB writepending:1024kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:37600kB local_pcp:22548kB free_cma:0kB [ 147.552174][ C0] lowmem_reserve[]: 0 0 0 0 [ 147.556711][ C0] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 147.572225][ C0] Normal: 689*4kB (UME) 53*8kB (UME) 44*16kB (UE) 509*32kB (UME) 292*64kB (UME) 208*128kB (UME) 48*256kB (UME) 27*512kB (UME) 21*1024kB (UME) 5*2048kB (UME) 714*4096kB (UM) = 3047884kB [ 147.590534][ C0] 25959 total pagecache pages [ 147.595203][ C0] 13 pages in swap cache [ 147.599440][ C0] Free swap = 124376kB [ 147.603600][ C0] Total swap = 124996kB [ 147.607781][ C0] 2097051 pages RAM [ 147.611596][ C0] 0 pages HighMem/MovableOnly [ 147.616277][ C0] 346840 pages reserved [ 147.620429][ C0] 0 pages cma reserved [ 147.936117][ T287] usb 3-1: USB disconnect, device number 20 [ 148.199685][ T4389] cdc_ncm 8-1:1.0: failed to get mac address [ 148.205950][ T4389] cdc_ncm 8-1:1.0: bind() failure [ 148.212154][ T4389] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 148.218849][ T4389] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 148.226314][ T4389] usb 8-1: USB disconnect, device number 16 [ 148.456512][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'. [ 148.465529][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2603'. [ 148.477273][ T7149] device wireguard0 entered promiscuous mode [ 148.532806][ T7162] loop1: detected capacity change from 0 to 512 [ 148.759981][ T7177] incfs: iterate_incfs_dir / -22 [ 148.764984][ T7177] incfs: iterate_incfs_dir / -22 [ 148.844553][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2618'. [ 148.853709][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2618'. [ 148.864921][ T7183] device wireguard0 entered promiscuous mode [ 149.007540][ T294] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 149.179802][ T294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.190792][ T294] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.199904][ T358] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 149.207489][ T294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.216208][ T294] usb 2-1: config 0 descriptor?? [ 149.245421][ T287] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 149.398847][ T358] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.411214][ T358] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.416994][ T287] usb 8-1: Using ep0 maxpacket: 16 [ 149.420424][ T358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.429519][ T287] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.434882][ T358] usb 3-1: Product: syz [ 149.442610][ T287] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.446726][ T358] usb 3-1: Manufacturer: syz [ 149.454886][ T287] usb 8-1: Product: syz [ 149.459419][ T358] usb 3-1: SerialNumber: syz [ 149.463540][ T287] usb 8-1: Manufacturer: syz [ 149.463557][ T287] usb 8-1: SerialNumber: syz [ 149.478010][ T287] r8152-cfgselector 8-1: config 0 descriptor?? [ 149.617609][ T294] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 149.627721][ T294] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0027/input/input36 [ 149.704608][ T294] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 149.731196][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 149.731205][ T2320] Bluetooth: hci0: command 0x1003 tx timeout [ 149.817595][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.826339][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.849442][ C0] Mem-Info: [ 149.852620][ C0] active_anon:4027 inactive_anon:12 isolated_anon:0 [ 149.852620][ C0] active_file:21495 inactive_file:2527 isolated_file:0 [ 149.852620][ C0] unevictable:0 dirty:283 writeback:0 [ 149.852620][ C0] slab_reclaimable:9666 slab_unreclaimable:72458 [ 149.852620][ C0] mapped:28930 shmem:164 pagetables:579 [ 149.852620][ C0] sec_pagetables:0 bounce:0 [ 149.852620][ C0] kernel_misc_reclaimable:0 [ 149.852620][ C0] free:1504982 free_pcp:11335 free_cma:0 [ 149.897460][ C0] Node 0 active_anon:16108kB inactive_anon:48kB active_file:85980kB inactive_file:10108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115720kB dirty:1132kB writeback:0kB shmem:656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:17148kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no [ 149.929723][ C0] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974188kB mlocked:0kB bounce:0kB free_pcp:5656kB local_pcp:5656kB free_cma:0kB [ 149.957893][ C0] lowmem_reserve[]: 0 3932 3932 3932 [ 149.963226][ C0] Normal free:3051396kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:16108kB inactive_anon:48kB active_file:85980kB inactive_file:10108kB unevictable:0kB writepending:1132kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:39684kB local_pcp:23184kB free_cma:0kB [ 149.993120][ C0] lowmem_reserve[]: 0 0 0 0 [ 149.997656][ C0] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 150.013099][ C0] Normal: 1385*4kB (UME) 94*8kB (UME) 181*16kB (UME) 589*32kB (UME) 292*64kB (UME) 206*128kB (UME) 48*256kB (UME) 27*512kB (UME) 21*1024kB (UME) 3*2048kB (UE) 714*4096kB (UM) = 3051396kB [ 150.031579][ C0] 24186 total pagecache pages [ 150.036248][ C0] 13 pages in swap cache [ 150.040488][ C0] Free swap = 124376kB [ 150.044631][ C0] Total swap = 124996kB [ 150.048773][ C0] 2097051 pages RAM [ 150.052626][ C0] 0 pages HighMem/MovableOnly [ 150.057328][ C0] 346840 pages reserved [ 150.061478][ C0] 0 pages cma reserved [ 150.069251][ T287] r8152-cfgselector 8-1: Unknown version 0x0000 [ 150.078931][ T287] r8152-cfgselector 8-1: bad CDC descriptors [ 150.089936][ T287] r8152-cfgselector 8-1: Unknown version 0x0000 [ 150.105601][ T287] r8152-cfgselector 8-1: USB disconnect, device number 17 [ 150.149028][ T7228] usb usb1: check_ctrlrecip: process 7228 (syz.6.2641) requesting ep 01 but needs 81 [ 150.353498][ T287] usb 2-1: USB disconnect, device number 16 [ 150.605255][ T7232] loop6: detected capacity change from 0 to 16 [ 150.616991][ T7232] erofs: (device loop6): mounted with root inode @ nid 36. [ 150.643169][ T358] cdc_ncm 3-1:1.0: failed to get mac address [ 150.658447][ T358] cdc_ncm 3-1:1.0: bind() failure [ 150.677807][ T358] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 150.684464][ T7239] loop6: detected capacity change from 0 to 1024 [ 150.684881][ T358] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 150.691493][ T7239] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.699661][ T358] usb 3-1: USB disconnect, device number 21 [ 150.723636][ T7239] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 150.748973][ T2949] EXT4-fs (loop6): unmounting filesystem. [ 150.789478][ T7251] loop8: detected capacity change from 0 to 512 [ 150.799996][ T7251] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 150.808992][ T7251] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.829600][ T7251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.838711][ T7251] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 150.862052][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 150.862069][ T28] audit: type=1400 audit(2000002403.081:1289): avc: denied { read } for pid=7257 comm="syz.1.2651" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.889252][ T4436] EXT4-fs (loop8): unmounting filesystem. [ 151.091048][ T7274] loop6: detected capacity change from 0 to 40427 [ 151.098109][ T7274] F2FS-fs (loop6): fault_injection options not supported [ 151.105945][ T7274] F2FS-fs (loop6): fault_type options not supported [ 151.112587][ T7274] F2FS-fs (loop6): Image doesn't support compression [ 151.120062][ T7274] F2FS-fs (loop6): invalid crc value [ 151.126411][ T7274] F2FS-fs (loop6): Found nat_bits in checkpoint [ 151.153963][ T7274] F2FS-fs (loop6): Start checkpoint disabled! [ 151.164648][ T7274] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 151.179497][ T358] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 151.196603][ T7274] syz.6.2660: attempt to access beyond end of device [ 151.196603][ T7274] loop6: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 151.212469][ T7274] syz.6.2660: attempt to access beyond end of device [ 151.212469][ T7274] loop6: rw=0, sector=53336, nr_sectors = 8 limit=40427 [ 151.226081][ T28] audit: type=1400 audit(2000002403.459:1290): avc: denied { create } for pid=7283 comm="syz.2.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.245800][ T287] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 151.248867][ T28] audit: type=1400 audit(2000002403.459:1291): avc: denied { connect } for pid=7283 comm="syz.2.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.274231][ T28] audit: type=1400 audit(2000002403.469:1292): avc: denied { write } for pid=7283 comm="syz.2.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 151.298507][ T2633] kworker/u4:248: attempt to access beyond end of device [ 151.298507][ T2633] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 151.361943][ T358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.373442][ T358] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.382602][ T358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.391122][ T358] usb 2-1: config 0 descriptor?? [ 151.417520][ T287] usb 9-1: Using ep0 maxpacket: 16 [ 151.425138][ T287] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 151.434212][ T287] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.442240][ T287] usb 9-1: Product: syz [ 151.446434][ T287] usb 9-1: Manufacturer: syz [ 151.451024][ T287] usb 9-1: SerialNumber: syz [ 151.456180][ T287] r8152-cfgselector 9-1: config 0 descriptor?? [ 151.780139][ T358] keytouch 0003:0926:3333.0028: fixing up Keytouch IEC report descriptor [ 151.789872][ T358] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0028/input/input37 [ 151.845095][ T287] r8152-cfgselector 9-1: Unknown version 0x0000 [ 151.851544][ T287] r8152-cfgselector 9-1: bad CDC descriptors [ 151.858036][ T287] r8152-cfgselector 9-1: Unknown version 0x0000 [ 151.864849][ T287] r8152-cfgselector 9-1: USB disconnect, device number 13 [ 151.868359][ T358] keytouch 0003:0926:3333.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 151.978010][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.986557][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.009378][ C0] Mem-Info: [ 152.012552][ C0] active_anon:3960 inactive_anon:12 isolated_anon:0 [ 152.012552][ C0] active_file:21495 inactive_file:2527 isolated_file:0 [ 152.012552][ C0] unevictable:0 dirty:295 writeback:0 [ 152.012552][ C0] slab_reclaimable:9707 slab_unreclaimable:72425 [ 152.012552][ C0] mapped:28929 shmem:164 pagetables:525 [ 152.012552][ C0] sec_pagetables:0 bounce:0 [ 152.012552][ C0] kernel_misc_reclaimable:0 [ 152.012552][ C0] free:1508387 free_pcp:9824 free_cma:0 [ 152.057298][ C0] Node 0 active_anon:15840kB inactive_anon:48kB active_file:85980kB inactive_file:10108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115716kB dirty:1180kB writeback:0kB shmem:656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:17088kB pagetables:2100kB sec_pagetables:0kB all_unreclaimable? no [ 152.089535][ C0] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974188kB mlocked:0kB bounce:0kB free_pcp:5656kB local_pcp:5656kB free_cma:0kB [ 152.117686][ C0] lowmem_reserve[]: 0 3932 3932 3932 [ 152.123003][ C0] Normal free:3065016kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:15840kB inactive_anon:48kB active_file:85980kB inactive_file:10108kB unevictable:0kB writepending:1180kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:33640kB local_pcp:26032kB free_cma:0kB [ 152.152796][ C0] lowmem_reserve[]: 0 0 0 0 [ 152.157310][ C0] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 152.172702][ C0] Normal: 1428*4kB (UME) 605*8kB (UME) 326*16kB (UME) 665*32kB (UME) 300*64kB (UME) 206*128kB (UME) 48*256kB (UME) 27*512kB (UME) 21*1024kB (UME) 5*2048kB (UME) 714*4096kB (UM) = 3065016kB [ 152.191311][ C0] 24186 total pagecache pages [ 152.195973][ C0] 13 pages in swap cache [ 152.200201][ C0] Free swap = 124376kB [ 152.204336][ C0] Total swap = 124996kB [ 152.208473][ C0] 2097051 pages RAM [ 152.212263][ C0] 0 pages HighMem/MovableOnly [ 152.216921][ C0] 346840 pages reserved [ 152.221061][ C0] 0 pages cma reserved [ 152.509071][ T358] usb 2-1: USB disconnect, device number 17 [ 152.551947][ T7297] loop8: detected capacity change from 0 to 512 [ 152.558659][ T7297] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 152.560517][ T2319] Bluetooth: hci0: command 0x1003 tx timeout [ 152.568680][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 152.576659][ T7297] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 152.614338][ T7297] EXT4-fs (loop8): 1 truncate cleaned up [ 152.621689][ T7297] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 152.648249][ T4436] EXT4-fs (loop8): unmounting filesystem. [ 152.697022][ T7319] loop7: detected capacity change from 0 to 1024 [ 152.704097][ T7319] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.724358][ T7319] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 152.748932][ T4167] EXT4-fs (loop7): unmounting filesystem. [ 152.812783][ T7334] loop6: detected capacity change from 0 to 512 [ 152.819773][ T7334] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 152.831250][ T7334] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 152.846390][ T7334] EXT4-fs (loop6): 1 truncate cleaned up [ 152.852171][ T7334] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 152.873728][ T2949] EXT4-fs (loop6): unmounting filesystem. [ 152.885386][ T7339] netlink: 'syz.7.2688': attribute type 6 has an invalid length. [ 152.932286][ T2140] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 152.950915][ T1981] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 152.973853][ T7350] loop7: detected capacity change from 0 to 512 [ 152.990937][ T7350] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 152.999963][ T7350] ext4 filesystem being mounted at /259/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.020531][ T7350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.029625][ T7350] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 153.044215][ T4167] EXT4-fs (loop7): unmounting filesystem. [ 153.104592][ T2140] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.116943][ T2140] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.126041][ T1981] usb 3-1: Using ep0 maxpacket: 16 [ 153.131261][ T2140] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.139309][ T2140] usb 9-1: Product: syz [ 153.143593][ T2140] usb 9-1: Manufacturer: syz [ 153.148212][ T2140] usb 9-1: SerialNumber: syz [ 153.154612][ T1981] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 153.163754][ T1981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.171818][ T1981] usb 3-1: Product: syz [ 153.176009][ T1981] usb 3-1: Manufacturer: syz [ 153.180610][ T1981] usb 3-1: SerialNumber: syz [ 153.185752][ T1981] r8152-cfgselector 3-1: config 0 descriptor?? [ 153.575423][ T1981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 153.581817][ T1981] r8152-cfgselector 3-1: bad CDC descriptors [ 153.588206][ T1981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 153.594984][ T1981] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 154.077975][ T28] audit: type=1400 audit(2000002406.461:1293): avc: denied { getopt } for pid=7364 comm="syz.1.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 154.098106][ T7360] loop2: detected capacity change from 0 to 1024 [ 154.105204][ T7360] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.111269][ T2140] cdc_ncm 9-1:1.0: failed to get mac address [ 154.123490][ T2140] cdc_ncm 9-1:1.0: bind() failure [ 154.134373][ T2140] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 154.140305][ T7360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.141135][ T2140] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 154.157899][ T2140] usb 9-1: USB disconnect, device number 14 [ 154.167999][ T284] EXT4-fs (loop2): unmounting filesystem. [ 154.256724][ T28] audit: type=1400 audit(2000002406.650:1294): avc: denied { mount } for pid=7388 comm="syz.7.2709" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.279828][ T28] audit: type=1400 audit(2000002406.650:1295): avc: denied { mounton } for pid=7388 comm="syz.7.2709" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 154.301645][ T28] audit: type=1400 audit(2000002406.650:1296): avc: denied { mount } for pid=7388 comm="syz.7.2709" name="/" dev="pstore" ino=14332 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 154.322958][ T7392] loop1: detected capacity change from 0 to 512 [ 154.328441][ T28] audit: type=1400 audit(2000002406.671:1297): avc: denied { unmount } for pid=4167 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 154.352171][ T28] audit: type=1400 audit(2000002406.703:1298): avc: denied { unmount } for pid=4167 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 154.373698][ T7392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.382755][ T7392] ext4 filesystem being mounted at /547/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.410923][ T7392] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.421853][ T7392] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 154.427828][ T4389] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 154.445453][ T454] EXT4-fs (loop1): unmounting filesystem. [ 154.608798][ T4389] usb 7-1: Using ep0 maxpacket: 32 [ 154.615113][ T4389] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.626007][ T4389] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.647053][ T4389] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 154.660263][ T4389] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 154.662920][ T7411] loop8: detected capacity change from 0 to 1024 [ 154.669342][ T4389] usb 7-1: Product: syz [ 154.679302][ T4389] usb 7-1: Manufacturer: syz [ 154.685648][ T7411] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.703197][ T4389] hub 7-1:4.0: USB hub found [ 154.732546][ T7411] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 154.787672][ T4436] EXT4-fs (loop8): unmounting filesystem. [ 154.797733][ T7427] loop2: detected capacity change from 0 to 512 [ 154.834878][ T7427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 154.843941][ T7427] ext4 filesystem being mounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.864267][ T7427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.873402][ T7427] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 154.880316][ T4389] hub 7-1:4.0: 2 ports detected [ 154.893745][ T284] EXT4-fs (loop2): unmounting filesystem. [ 155.296661][ T7429] loop7: detected capacity change from 0 to 131072 [ 155.303726][ T7429] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 155.311851][ T7429] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 155.320679][ T7429] F2FS-fs (loop7): invalid crc value [ 155.327671][ T7429] F2FS-fs (loop7): Found nat_bits in checkpoint [ 155.357481][ T7429] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 155.364575][ T7429] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 155.454953][ T4389] usb 7-1: USB disconnect, device number 17 [ 156.092900][ T7452] loop8: detected capacity change from 0 to 40427 [ 156.100114][ T7452] F2FS-fs (loop8): heap/no_heap options were deprecated [ 156.107150][ T7452] F2FS-fs (loop8): Image doesn't support compression [ 156.113922][ T7452] F2FS-fs (loop8): heap/no_heap options were deprecated [ 156.121515][ T7452] F2FS-fs (loop8): invalid crc value [ 156.127957][ T7452] F2FS-fs (loop8): Found nat_bits in checkpoint [ 156.155700][ T7452] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 156.181918][ T4436] syz-executor: attempt to access beyond end of device [ 156.181918][ T4436] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.208905][ T1981] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 156.213606][ T7471] loop2: detected capacity change from 0 to 1024 [ 156.227951][ T7471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.258148][ T7471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.285593][ T284] EXT4-fs (loop2): unmounting filesystem. [ 156.299222][ T7478] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 156.312233][ T28] audit: type=1400 audit(2000002408.802:1299): avc: denied { connect } for pid=7480 comm="syz.7.2744" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.376701][ T7486] device syz_tun entered promiscuous mode [ 156.389263][ T28] audit: type=1400 audit(2000002408.886:1300): avc: denied { mount } for pid=7489 comm="syz.7.2750" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 156.392616][ T7485] device syz_tun left promiscuous mode [ 156.418284][ T1981] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.450781][ T1981] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.466963][ T7496] netlink: 'syz.7.2752': attribute type 16 has an invalid length. [ 156.475951][ T1981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.483975][ T1981] usb 7-1: Product: syz [ 156.493585][ T7496] netlink: 'syz.7.2752': attribute type 17 has an invalid length. [ 156.501582][ T1981] usb 7-1: Manufacturer: syz [ 156.517454][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.524932][ T7496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.531315][ T1981] usb 7-1: SerialNumber: syz [ 156.634321][ T7517] loop8: detected capacity change from 0 to 512 [ 156.648784][ T7517] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 156.658583][ T7517] ext4 filesystem being mounted at /216/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.870055][ T4436] EXT4-fs (loop8): unmounting filesystem. [ 156.922477][ T7537] loop7: detected capacity change from 0 to 1024 [ 156.929662][ T7537] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.945352][ T7537] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 156.959682][ T7537] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3836: comm syz.7.2772: Allocating blocks 385-513 which overlap fs metadata [ 156.975488][ T7536] EXT4-fs (loop7): pa ffff888117de41f8: logic 16, phys. 129, len 24 [ 156.983553][ T7536] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 157.000359][ T4167] EXT4-fs (loop7): unmounting filesystem. [ 157.170714][ T358] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 157.293504][ T28] audit: type=1400 audit(2000002409.831:1301): avc: denied { mount } for pid=7563 comm="syz.8.2781" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 157.334694][ T28] audit: type=1400 audit(2000002409.873:1302): avc: denied { unmount } for pid=4436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 157.408969][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.420544][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.439314][ T358] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.470530][ T358] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.479914][ T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.491798][ T358] usb 3-1: config 0 descriptor?? [ 157.643626][ T1981] cdc_ncm 7-1:1.0: failed to get mac address [ 157.652185][ T1981] cdc_ncm 7-1:1.0: bind() failure [ 157.658637][ T1981] cdc_ncm: probe of 7-1:1.1 failed with error -71 [ 157.665574][ T1981] cdc_mbim: probe of 7-1:1.1 failed with error -71 [ 157.675050][ T1981] usb 7-1: USB disconnect, device number 18 [ 157.808958][ T28] audit: type=1400 audit(2000002410.377:1303): avc: denied { write } for pid=7593 comm="syz.7.2794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.841411][ T28] audit: type=1400 audit(2000002410.409:1304): avc: denied { read write } for pid=4167 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.866652][ T28] audit: type=1400 audit(2000002410.409:1305): avc: denied { open } for pid=4167 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.891062][ T28] audit: type=1400 audit(2000002410.409:1306): avc: denied { ioctl } for pid=4167 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.899178][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 157.924325][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 157.931860][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 157.939345][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 157.946968][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 157.955268][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 157.957848][ T28] audit: type=1400 audit(2000002410.419:1307): avc: denied { bpf } for pid=7595 comm="syz.7.2796" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.964699][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 157.984309][ T28] audit: type=1400 audit(2000002410.419:1308): avc: denied { map_create } for pid=7595 comm="syz.7.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 157.992426][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.017569][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.026644][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.034107][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.037905][ T7602] loop7: detected capacity change from 0 to 2048 [ 158.041763][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.055272][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.058996][ T7602] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 158.062726][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.071544][ T7602] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.078700][ T358] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 158.078918][ T358] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 158.080964][ T358] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 158.123319][ T4389] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 158.131782][ T4167] EXT4-fs (loop7): unmounting filesystem. [ 158.193558][ T287] usb 3-1: USB disconnect, device number 23 [ 158.304629][ T4389] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.340372][ T4389] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.358017][ T4389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.370051][ T4389] usb 2-1: Product: syz [ 158.379587][ T4389] usb 2-1: Manufacturer: syz [ 158.389805][ T4389] usb 2-1: SerialNumber: syz [ 158.650599][ T7660] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 158.969197][ T7689] loop7: detected capacity change from 0 to 256 [ 158.981524][ T7689] exfat: Deprecated parameter 'utf8' [ 158.995139][ T7689] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 159.023039][ T7695] input: syz0 as /devices/virtual/input/input38 [ 159.045029][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2838'. [ 159.174006][ T4389] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 159.193133][ T4389] cdc_ncm 2-1:1.0: bind() failure [ 159.198937][ T4389] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 159.205802][ T4389] cdc_ncm 2-1:1.1: bind() failure [ 159.212321][ T4389] usb 2-1: USB disconnect, device number 18 [ 159.287781][ T7725] loop2: detected capacity change from 0 to 1024 [ 159.296943][ T7725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.320433][ T284] EXT4-fs (loop2): unmounting filesystem. [ 159.382672][ T7744] loop2: detected capacity change from 0 to 256 [ 159.432941][ T7757] device syz_tun entered promiscuous mode [ 159.439525][ T7756] device syz_tun left promiscuous mode [ 159.460990][ T7761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.473842][ T7763] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2867'. [ 159.483497][ T7763] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2867'. [ 159.707590][ T7798] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2884'. [ 159.746706][ T7802] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 159.787983][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2889'. [ 159.833063][ T7817] netlink: 'syz.1.2892': attribute type 16 has an invalid length. [ 159.842041][ T7817] netlink: 'syz.1.2892': attribute type 17 has an invalid length. [ 159.857594][ T7817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.879081][ T7817] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.023288][ T7842] incfs: Options parsing error. -22 [ 160.028954][ T7842] incfs: mount failed -22 [ 160.093715][ T7849] loop2: detected capacity change from 0 to 1024 [ 160.131802][ T7849] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 160.159252][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.170159][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.186498][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.205485][ T7849] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.209669][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.221892][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.229320][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.236725][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.244286][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.257268][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.258720][ T7849] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.2905: Allocating blocks 385-513 which overlap fs metadata [ 160.264713][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.304704][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.312186][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.320027][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.333493][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.340940][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.351075][ T7848] EXT4-fs (loop2): pa ffff888117d0c7e0: logic 16, phys. 129, len 24 [ 160.359355][ T7848] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 160.362258][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.376750][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.384202][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.391674][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.399078][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.412945][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.427101][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.438001][ T284] EXT4-fs (loop2): unmounting filesystem. [ 160.462672][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.476438][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.484771][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.504889][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.512335][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.533453][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.541042][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.561978][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.569555][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.590463][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.597969][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.605556][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.613645][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.624175][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.632000][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.641064][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.649238][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.657063][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.664602][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.672099][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.679913][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.687725][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.695150][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.702582][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.710722][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.718168][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.725638][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.733045][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.740468][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.747886][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.755300][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.762718][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.770127][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.777545][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.784990][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.792403][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.799887][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.807308][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.814725][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.822133][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.829544][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.836939][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.844363][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.851772][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.859256][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.866648][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.874065][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.881466][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.888873][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.896287][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.903680][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.911084][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.918503][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.925913][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.933306][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.940713][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.948117][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.955528][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.962954][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.970349][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.987970][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 160.995901][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.003504][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.010961][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.018422][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.025877][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.033592][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.041029][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.048474][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.055883][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.063333][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.070754][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.078198][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.085618][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.093075][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.100506][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.107966][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.115393][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.122843][ T358] hid-generic 0000:0000:0004.002A: unknown main item tag 0x0 [ 161.130791][ T358] hid-generic 0000:0000:0004.002A: hidraw0: HID v0.03 Device [syz1] on syz1 [ 161.203441][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 161.203458][ T28] audit: type=1400 audit(2000002413.946:1395): avc: denied { bind } for pid=7884 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.250975][ T7887] netlink: 'syz.2.2919': attribute type 16 has an invalid length. [ 161.259280][ T7887] netlink: 'syz.2.2919': attribute type 17 has an invalid length. [ 161.272136][ T28] audit: type=1400 audit(2000002413.967:1396): avc: denied { write } for pid=7884 comm="syz.1.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.272222][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.299722][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.311534][ T28] audit: type=1400 audit(2000002413.999:1397): avc: denied { create } for pid=7888 comm="syz.1.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.331843][ T28] audit: type=1400 audit(2000002413.999:1398): avc: denied { connect } for pid=7888 comm="syz.1.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 161.377850][ T7868] loop6: detected capacity change from 0 to 131072 [ 161.385107][ T7868] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 161.396771][ T7868] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 161.405758][ T7868] F2FS-fs (loop6): invalid crc value [ 161.421056][ T7868] F2FS-fs (loop6): Found nat_bits in checkpoint [ 161.452242][ T7868] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 161.459465][ T7868] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 161.524487][ T287] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 161.706476][ T287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.727352][ T287] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.752890][ T7913] loop6: detected capacity change from 0 to 1024 [ 161.765588][ T287] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.769397][ T7913] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.774753][ T287] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 161.774776][ T287] usb 9-1: Manufacturer: syz [ 161.800072][ T287] usb 9-1: config 0 descriptor?? [ 161.807095][ T7913] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 161.822653][ T7913] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3836: comm syz.6.2923: Allocating blocks 385-513 which overlap fs metadata [ 161.839201][ T7912] EXT4-fs (loop6): pa ffff888117d0ce70: logic 16, phys. 129, len 24 [ 161.847297][ T7912] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 161.865459][ T2949] EXT4-fs (loop6): unmounting filesystem. [ 161.873457][ T7911] loop7: detected capacity change from 0 to 40427 [ 161.880801][ T7911] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 161.882359][ T7917] netlink: 27 bytes leftover after parsing attributes in process `syz.6.2930'. [ 161.888829][ T7911] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 161.897970][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 161.907177][ T7911] F2FS-fs (loop7): invalid crc value [ 161.920787][ T7911] F2FS-fs (loop7): Found nat_bits in checkpoint [ 161.932472][ T7922] loop6: detected capacity change from 0 to 16 [ 161.939416][ T7922] erofs: (device loop6): mounted with root inode @ nid 36. [ 161.964729][ T7911] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 161.971931][ T7911] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 161.988263][ T28] audit: type=1400 audit(2000002414.765:1399): avc: denied { write } for pid=7910 comm="syz.7.2929" name="file0" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 162.010719][ T28] audit: type=1400 audit(2000002414.797:1400): avc: denied { add_name } for pid=7910 comm="syz.7.2929" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 162.031483][ T28] audit: type=1400 audit(2000002414.818:1401): avc: denied { read open } for pid=7910 comm="syz.7.2929" path="/323/file1/file0/file0" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.056016][ T28] audit: type=1400 audit(2000002414.839:1402): avc: denied { mounton } for pid=7910 comm="syz.7.2929" path="/323/file1/file0" dev="loop7" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 162.073271][ T4167] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 162.079276][ T4167] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 162.079855][ T28] audit: type=1400 audit(2000002414.839:1403): avc: denied { write } for pid=7910 comm="syz.7.2929" path="/323/file1/file0/file0" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 162.094457][ T4167] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 162.094474][ T4167] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 162.094487][ T4167] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 162.117983][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 162.125401][ T4167] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 162.134395][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.151923][ T4167] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 162.155775][ T24] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.183458][ T28] audit: type=1400 audit(2000002414.975:1404): avc: denied { remove_name } for pid=4167 comm="syz-executor" name=".index" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 162.207376][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 162.235609][ T24] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 162.244836][ T24] usb 3-1: Product: syz [ 162.246790][ T7933] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 162.249386][ T24] usb 3-1: Manufacturer: syz [ 162.263379][ T24] hub 3-1:4.0: USB hub found [ 162.270881][ T7933] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.363052][ T7943] bridge0: port 3(syz_tun) entered blocking state [ 162.369722][ T7943] bridge0: port 3(syz_tun) entered disabled state [ 162.376906][ T7943] device syz_tun entered promiscuous mode [ 162.383725][ T7943] bridge0: port 3(syz_tun) entered blocking state [ 162.390217][ T7943] bridge0: port 3(syz_tun) entered forwarding state [ 162.428926][ T7947] loop6: detected capacity change from 0 to 128 [ 162.430002][ T4167] bridge0: port 3(syz_tun) entered disabled state [ 162.443078][ T4167] device syz_tun left promiscuous mode [ 162.448796][ T4167] bridge0: port 3(syz_tun) entered disabled state [ 162.456666][ T24] hub 3-1:4.0: 2 ports detected [ 162.470239][ T7947] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2945'. [ 162.606626][ T287] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.002B/input/input39 [ 162.620429][ T287] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.002B/input/input40 [ 162.632669][ T287] input: syz Touch Strip as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.002B/input/input41 [ 162.645549][ T287] input: syz Dial as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:256C:006D.002B/input/input42 [ 162.659584][ T287] uclogic 0003:256C:006D.002B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.8-1/input0 [ 162.685162][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.692291][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.699736][ T7954] device bridge_slave_0 entered promiscuous mode [ 162.706789][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.713841][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.721452][ T7954] device bridge_slave_1 entered promiscuous mode [ 162.782470][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.789575][ T7954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.796926][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.803986][ T7954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.827176][ T287] usb 9-1: USB disconnect, device number 15 [ 162.833937][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.842613][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.850007][ T2682] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.862810][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.871101][ T2682] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.878243][ T2682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.887764][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.896161][ T2682] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.903226][ T2682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.918695][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.928306][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.944800][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.954378][ T2645] device bridge_slave_1 left promiscuous mode [ 162.960542][ T2645] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.968417][ T2645] device bridge_slave_0 left promiscuous mode [ 162.974755][ T2645] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.982961][ T2645] device veth1_macvtap left promiscuous mode [ 162.988997][ T2645] device veth0_vlan left promiscuous mode [ 163.042912][ T24] usb 3-1: USB disconnect, device number 24 [ 163.103361][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.111625][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.119214][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.127381][ T7954] device veth0_vlan entered promiscuous mode [ 163.140573][ T7954] device veth1_macvtap entered promiscuous mode [ 163.149597][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.160888][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.176982][ T2682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.204657][ T7965] loop9: detected capacity change from 0 to 1024 [ 163.220061][ T7953] Bluetooth: hci0: command 0x1003 tx timeout [ 163.220319][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.232210][ T7965] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 163.232280][ T7965] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.257292][ T7965] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: comm syz.9.2948: lblock 0 mapped to illegal pblock 0 (length 3) [ 163.271047][ T7965] EXT4-fs (loop9): Remounting filesystem read-only [ 163.283723][ T7954] EXT4-fs (loop9): unmounting filesystem. [ 163.337381][ T7973] loop8: detected capacity change from 0 to 256 [ 163.349594][ T7973] FAT-fs (loop8): Directory bread(block 64) failed [ 163.356542][ T7973] FAT-fs (loop8): Directory bread(block 65) failed [ 163.363386][ T7973] FAT-fs (loop8): Directory bread(block 66) failed [ 163.369989][ T7973] FAT-fs (loop8): Directory bread(block 67) failed [ 163.376824][ T7973] FAT-fs (loop8): Directory bread(block 68) failed [ 163.383602][ T7973] FAT-fs (loop8): Directory bread(block 69) failed [ 163.390212][ T7973] FAT-fs (loop8): Directory bread(block 70) failed [ 163.396838][ T7973] FAT-fs (loop8): Directory bread(block 71) failed [ 163.403439][ T7973] FAT-fs (loop8): Directory bread(block 72) failed [ 163.409966][ T7973] FAT-fs (loop8): Directory bread(block 73) failed [ 163.488497][ T7982] loop8: detected capacity change from 0 to 512 [ 163.507326][ T7982] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 163.516513][ T7982] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.536090][ T4436] EXT4-fs (loop8): unmounting filesystem. [ 163.646408][ T8002] loop2: detected capacity change from 0 to 2048 [ 163.706579][ T8002] loop2: p1 < > p3 p4 [ 163.711368][ T8002] loop2: p3 size 54016 extends beyond EOD, truncated [ 163.718622][ T8002] loop2: p4 start 4294967295 is beyond EOD, truncated [ 164.273650][ T8071] netem: change failed [ 164.327874][ T8046] loop1: detected capacity change from 0 to 40427 [ 164.339613][ T8046] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 164.351845][ T8046] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.368241][ T8046] F2FS-fs (loop1): invalid crc value [ 164.390790][ T8046] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.448110][ T8046] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 164.455448][ T8046] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.524855][ T2320] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 164.555496][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3006'. [ 164.638730][ T8105] netlink: 'syz.1.3005': attribute type 3 has an invalid length. [ 164.814121][ T8129] loop6: detected capacity change from 0 to 512 [ 164.839390][ T8137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3023'. [ 164.861804][ T8129] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 164.879998][ T8129] ext4 filesystem being mounted at /450/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.922690][ T8129] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #4: comm syz.6.3020: corrupted inode contents [ 164.949264][ T8129] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #4: comm syz.6.3020: mark_inode_dirty error [ 164.963509][ T8129] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #4: comm syz.6.3020: corrupted inode contents [ 164.976006][ T8129] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #4: comm syz.6.3020: mark_inode_dirty error [ 164.997531][ T8154] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #4: comm syz.6.3020: corrupted inode contents [ 165.019538][ T8129] EXT4-fs error (device loop6): ext4_acquire_dquot:6803: comm syz.6.3020: Failed to acquire dquot type 1 [ 165.031200][ T8154] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #4: comm syz.6.3020: mark_inode_dirty error [ 165.042786][ T294] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 165.071137][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 165.081510][ T8154] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #4: comm syz.6.3020: corrupted inode contents [ 165.097406][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 165.112963][ T8154] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #4: comm syz.6.3020: mark_inode_dirty error [ 165.116440][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 165.126641][ T8154] EXT4-fs error (device loop6): ext4_acquire_dquot:6803: comm syz.6.3020: Failed to acquire dquot type 1 [ 165.145792][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3030'. [ 165.178983][ T2949] EXT4-fs (loop6): unmounting filesystem. [ 165.240268][ T294] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.254467][ T294] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 165.282179][ T294] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.304271][ T8173] loop2: detected capacity change from 0 to 512 [ 165.310758][ T294] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.319184][ T294] usb 10-1: Product: syz [ 165.323457][ T294] usb 10-1: Manufacturer: syz [ 165.328887][ T294] usb 10-1: SerialNumber: syz [ 165.333641][ T8173] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 165.345664][ T8173] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.356934][ T294] cdc_mbim 10-1:1.0: skipping garbage [ 165.380332][ T8173] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.3037: Invalid block bitmap block 0 in block_group 0 [ 165.410443][ T8173] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 165.419442][ T8173] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.3037: attempt to clear invalid blocks 983261 len 1 [ 165.436722][ T8173] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.3037: Invalid inode table block 0 in block_group 0 [ 165.449763][ T8173] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 165.459436][ T8173] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 165.468451][ T8173] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.3037: Invalid inode table block 0 in block_group 0 [ 165.488071][ T8173] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 165.500713][ T8173] EXT4-fs error (device loop2): ext4_truncate:4314: inode #11: comm syz.2.3037: mark_inode_dirty error [ 165.512686][ T8173] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 165.521947][ T8173] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.3037: Invalid inode table block 0 in block_group 0 [ 165.535219][ T8173] EXT4-fs (loop2): 1 truncate cleaned up [ 165.541029][ T8173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 165.552234][ T8126] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 165.553872][ T8186] loop1: detected capacity change from 0 to 256 [ 165.569483][ T8186] exfat: Deprecated parameter 'utf8' [ 165.575930][ T8186] exfat: Deprecated parameter 'namecase' [ 165.584348][ T8186] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8b6193f0, utbl_chksum : 0xe619d30d) [ 165.613126][ T284] EXT4-fs (loop2): unmounting filesystem. [ 165.648661][ T8186] loop1: detected capacity change from 256 to 0 [ 165.676244][ C1] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.686056][ C1] I/O error, dev loop1, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.695983][ C1] I/O error, dev loop1, sector 162 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.705699][ C1] I/O error, dev loop1, sector 163 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.715367][ C1] I/O error, dev loop1, sector 164 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.725120][ C1] I/O error, dev loop1, sector 165 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.734811][ C1] I/O error, dev loop1, sector 166 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.744515][ C1] I/O error, dev loop1, sector 167 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.754687][ C1] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.764303][ C1] I/O error, dev loop1, sector 161 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.792074][ T2645] loop: Write error at byte offset 9223372036854775807, length 512. [ 165.804155][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 165.868229][ T2547] tipc: Left network mode [ 166.138152][ T8126] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 166.149226][ T294] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 166.173086][ T294] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, e2:e5:3f:c7:45:f3 [ 166.209047][ T8165] loop6: detected capacity change from 0 to 131072 [ 166.225916][ T8165] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 166.233875][ T8165] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 166.243526][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.251337][ T8165] F2FS-fs (loop6): invalid crc value [ 166.256730][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.264793][ T8200] device bridge_slave_0 entered promiscuous mode [ 166.272327][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.279708][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.288074][ T8165] F2FS-fs (loop6): Found nat_bits in checkpoint [ 166.296004][ T8200] device bridge_slave_1 entered promiscuous mode [ 166.342043][ T294] usb 10-1: USB disconnect, device number 2 [ 166.350157][ T2547] device veth1_macvtap left promiscuous mode [ 166.356775][ T294] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 166.367900][ T2547] device veth0_vlan left promiscuous mode [ 166.390983][ T8165] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 166.400395][ T8165] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 166.437168][ T8165] F2FS-fs (loop6): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 166.592000][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 166.592017][ T28] audit: type=1400 audit(2000002419.605:1465): avc: denied { name_bind } for pid=8208 comm="syz.8.3052" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 166.653407][ T28] audit: type=1400 audit(2000002419.605:1466): avc: denied { node_bind } for pid=8208 comm="syz.8.3052" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 166.700630][ T8222] loop2: detected capacity change from 0 to 512 [ 166.712462][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.719580][ T8200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.726895][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.733936][ T8200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.760085][ T8222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.770969][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.778283][ T8222] ext4 filesystem being mounted at /610/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.788939][ T2645] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.800618][ T2645] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.808177][ T284] EXT4-fs (loop2): unmounting filesystem. [ 166.830936][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.844863][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.863663][ T8233] loop9: detected capacity change from 0 to 1024 [ 166.875945][ T2645] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.883052][ T2645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.890867][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.899828][ T8233] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.907728][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.915962][ T8233] EXT4-fs: Ignoring removed oldalloc option [ 166.922203][ T2645] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.929284][ T2645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.934814][ T8233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.947863][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.957457][ T28] audit: type=1326 audit(2000002419.972:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 166.986076][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.992287][ T28] audit: type=1326 audit(2000002419.972:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 166.995682][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.025950][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.028424][ T8233] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 167.043203][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'. [ 167.052168][ T28] audit: type=1326 audit(2000002419.972:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 167.077007][ T28] audit: type=1326 audit(2000002419.972:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 167.100769][ T8200] device veth0_vlan entered promiscuous mode [ 167.107002][ T28] audit: type=1326 audit(2000002419.972:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 167.132366][ T28] audit: type=1326 audit(2000002419.972:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 167.140441][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.156754][ T28] audit: type=1326 audit(2000002419.983:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 167.187950][ T28] audit: type=1326 audit(2000002419.983:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8240 comm="syz.8.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f230b58f6c9 code=0x7ffc0000 [ 167.188617][ T7954] EXT4-fs (loop9): unmounting filesystem. [ 167.212670][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.225942][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.245068][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.254490][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.262736][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.301290][ T2547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.311921][ T2547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.324274][ T8200] device veth1_macvtap entered promiscuous mode [ 167.333851][ T8260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 167.352041][ T8264] loop6: detected capacity change from 0 to 2048 [ 167.354649][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.367024][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 167.376846][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.392528][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 167.400770][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.409158][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.411782][ T8264] loop6: p1 < > p3 p4 [ 167.418076][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.429730][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.437000][ T8264] loop6: p3 size 54016 extends beyond EOD, truncated [ 167.438624][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.452858][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.456275][ T8264] loop6: p4 start 4294967295 is beyond EOD, truncated [ 167.461207][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.461494][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 167.484778][ T2645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 167.546165][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3076'. [ 167.556665][ T2140] kernel write not supported for file bpf-prog (pid: 2140 comm: kworker/0:5) [ 167.586205][ T2547] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.628687][ T8293] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3085'. [ 167.732766][ T8310] input: syz1 as /devices/virtual/input/input43 [ 167.808944][ T8328] loop4: detected capacity change from 0 to 512 [ 167.816448][ T8328] EXT4-fs (loop4): Test dummy encryption mode enabled [ 167.823523][ T8328] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.835267][ T8328] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.3100: corrupted in-inode xattr [ 167.847797][ T8328] EXT4-fs (loop4): 1 orphan inode deleted [ 167.853830][ T8328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 167.874691][ T8200] EXT4-fs (loop4): unmounting filesystem. [ 167.887132][ T2140] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 167.934122][ T8338] loop4: detected capacity change from 0 to 512 [ 167.965661][ T8342] netlink: 'syz.4.3105': attribute type 4 has an invalid length. [ 167.973142][ T8344] loop8: detected capacity change from 0 to 256 [ 168.043907][ T8356] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3111'. [ 168.058636][ T2140] usb 7-1: Using ep0 maxpacket: 32 [ 168.065084][ T2140] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 168.073358][ T2140] usb 7-1: config 0 has no interface number 0 [ 168.081351][ T2140] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 168.090590][ T2140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.098856][ T2140] usb 7-1: Product: syz [ 168.103304][ T2140] usb 7-1: Manufacturer: syz [ 168.108249][ T2140] usb 7-1: SerialNumber: syz [ 168.113630][ T2140] usb 7-1: config 0 descriptor?? [ 168.119957][ T2140] smsc95xx v2.0.0 [ 168.194677][ T8365] loop4: detected capacity change from 0 to 1024 [ 168.201967][ T8365] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.213010][ T8365] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.223651][ T8365] JBD2: no valid journal superblock found [ 168.229491][ T8365] EXT4-fs (loop4): error loading journal [ 168.306151][ T358] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 168.479801][ T358] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.490802][ T358] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.500584][ T358] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.513554][ T2140] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 168.524283][ T358] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.533416][ T2140] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 168.542466][ T358] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.551181][ T358] usb 9-1: config 0 descriptor?? [ 168.563383][ T287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.736278][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.747276][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.757110][ T287] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 168.766349][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.775135][ T287] usb 5-1: config 0 descriptor?? [ 168.938459][ T2140] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 168.949480][ T2140] smsc95xx: probe of 7-1:0.67 failed with error -71 [ 168.957532][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 168.965429][ T2140] usb 7-1: USB disconnect, device number 19 [ 168.972326][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 168.980371][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 168.988331][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 168.995812][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.003249][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.010697][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.018143][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.025574][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.033099][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.040538][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.047945][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.055365][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.062796][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.070201][ T358] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 169.078061][ T358] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving [ 169.086969][ T358] plantronics 0003:047F:FFFF.002C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 169.164724][ T287] petalynx 0003:18B1:0037.002D: unknown main item tag 0x0 [ 169.171987][ T287] petalynx 0003:18B1:0037.002D: item fetching failed at offset 3/5 [ 169.180192][ T287] petalynx 0003:18B1:0037.002D: parse failed [ 169.183386][ T8369] loop2: detected capacity change from 0 to 128 [ 169.186345][ T287] petalynx: probe of 0003:18B1:0037.002D failed with error -22 [ 169.221678][ T358] usb 9-1: USB disconnect, device number 16 [ 169.356541][ T2140] usb 5-1: USB disconnect, device number 2 [ 169.481142][ T8393] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 169.520249][ T8399] support for the xor transformation has been removed. [ 169.522963][ T8397] loop2: detected capacity change from 0 to 512 [ 169.537356][ T8397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 169.546263][ T2320] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.552661][ T8397] ext4 filesystem being mounted at /636/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.594134][ T284] EXT4-fs (loop2): unmounting filesystem. [ 169.611396][ T2140] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 169.629139][ T2140] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.807385][ T8438] incfs: Options parsing error. -22 [ 169.813143][ T8438] incfs: mount failed -22 [ 169.859455][ T8455] loop9: detected capacity change from 0 to 256 [ 169.882820][ T8455] FAT-fs (loop9): Directory bread(block 64) failed [ 169.895072][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 169.897307][ T8455] FAT-fs (loop9): Directory bread(block 65) failed [ 169.905425][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 169.916407][ T8455] FAT-fs (loop9): Directory bread(block 66) failed [ 169.923015][ T8455] FAT-fs (loop9): Directory bread(block 67) failed [ 169.926046][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 169.941363][ T8458] loop6: detected capacity change from 0 to 4096 [ 169.942057][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 169.955274][ T8455] FAT-fs (loop9): Directory bread(block 68) failed [ 169.955303][ T8455] FAT-fs (loop9): Directory bread(block 69) failed [ 169.962162][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 169.985891][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 169.989139][ T8458] EXT4-fs (loop6): Test dummy encryption mode enabled [ 169.993535][ T8455] FAT-fs (loop9): Directory bread(block 70) failed [ 170.001181][ T8458] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 170.015091][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.016277][ T8458] System zones: 0-5 [ 170.030281][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.038009][ T8455] FAT-fs (loop9): Directory bread(block 71) failed [ 170.038904][ T8458] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 170.044966][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.061273][ T8455] FAT-fs (loop9): Directory bread(block 72) failed [ 170.068519][ T8455] FAT-fs (loop9): Directory bread(block 73) failed [ 170.079705][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.102053][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.112916][ T8458] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 170.123721][ T8475] __nla_validate_parse: 3 callbacks suppressed [ 170.123743][ T8475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3165'. [ 170.139368][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.149395][ T2949] EXT4-fs (loop6): unmounting filesystem. [ 170.155423][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.161152][ T8475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3165'. [ 170.162834][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.180467][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.187933][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.205224][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.212780][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.220297][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.227944][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.236889][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.244389][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.251925][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.259413][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.266871][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.274333][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.281977][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.289420][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.296847][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.304473][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.311913][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.319416][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.326848][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.334259][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.341709][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.349169][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.356628][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.364051][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.371435][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.378838][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.386416][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.393846][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.401232][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.408708][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.416213][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.423702][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.431178][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.438603][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.446389][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.453898][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.461371][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.468834][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.476252][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.483674][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.491130][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.498527][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.505905][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.513317][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.520748][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.528230][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.535778][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.543189][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.550616][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.558014][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.565422][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.572800][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.580274][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.587738][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.595200][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.602650][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.610037][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.617605][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.625052][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.632468][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.639908][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.647621][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.655115][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.662802][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.670216][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.677609][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.685046][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.692473][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.699948][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.707501][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.714903][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.722323][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.729785][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.737285][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.744734][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.752544][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.759964][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.767387][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.774802][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.782196][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.789635][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.797073][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.804528][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.811967][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.819390][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.826823][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.834270][ T2140] hid-generic 0000:0000:0004.002F: unknown main item tag 0x0 [ 170.851952][ T2140] hid-generic 0000:0000:0004.002F: hidraw0: HID v0.03 Device [syz1] on syz1 [ 170.887044][ T8490] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 170.974557][ T8513] loop2: detected capacity change from 0 to 1024 [ 170.981274][ T8513] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.988295][ T8513] EXT4-fs: Ignoring removed oldalloc option [ 170.994351][ T8513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.004634][ T8513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.030755][ T284] EXT4-fs (loop2): unmounting filesystem. [ 171.325858][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 171.367886][ T8551] loop4: detected capacity change from 0 to 1024 [ 171.373662][ T8554] netlink: 'syz.9.3199': attribute type 1 has an invalid length. [ 171.376635][ T8551] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.389882][ T8551] EXT4-fs: Ignoring removed oldalloc option [ 171.396030][ T8551] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.402737][ T4389] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 171.417141][ T284] ------------[ cut here ]------------ [ 171.422809][ T284] WARNING: CPU: 1 PID: 284 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 171.426074][ T8560] xt_hashlimit: size too large, truncated to 1048576 [ 171.430759][ T284] Modules linked in: [ 171.441629][ T284] CPU: 1 PID: 284 Comm: syz-executor Not tainted syzkaller #0 [ 171.449124][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.459432][ T284] RIP: 0010:drop_nlink+0xc5/0x110 [ 171.464525][ T284] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb 73 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 171.484409][ T284] RSP: 0018:ffffc900011c7c38 EFLAGS: 00010293 [ 171.490535][ T284] RAX: ffffffff81c3ac05 RBX: ffff888123b9f1a8 RCX: ffff88810d231440 [ 171.498549][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.506550][ T284] RBP: ffffc900011c7c60 R08: 0000000000000004 R09: 0000000000000003 [ 171.508635][ T8551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 171.514570][ T284] R10: fffff52000238f78 R11: 1ffff92000238f78 R12: dffffc0000000000 [ 171.530987][ T284] R13: 1ffff11024773e3e R14: ffff888123b9f1f0 R15: 0000000000000000 [ 171.539094][ T284] FS: 00005555953b8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 171.548081][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.554709][ T284] CR2: 00005555953db4e8 CR3: 000000012f1f6000 CR4: 00000000003506a0 [ 171.562710][ T284] Call Trace: [ 171.566038][ T284] [ 171.568985][ T284] shmem_rmdir+0x5b/0x90 [ 171.573258][ T284] vfs_rmdir+0x393/0x500 [ 171.577549][ T284] incfs_kill_sb+0x105/0x220 [ 171.582171][ T284] deactivate_locked_super+0xb5/0x120 [ 171.587589][ T284] deactivate_super+0xaf/0xe0 [ 171.592298][ T284] cleanup_mnt+0x45f/0x4e0 [ 171.596761][ T284] __cleanup_mnt+0x19/0x20 [ 171.601200][ T284] task_work_run+0x1db/0x240 [ 171.605871][ T284] ? __cfi_task_work_run+0x10/0x10 [ 171.611016][ T284] ? __x64_sys_umount+0x125/0x160 [ 171.616088][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 171.621507][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 171.626728][ T284] exit_to_user_mode_prepare+0x87/0xd0 [ 171.632230][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 171.637715][ T284] do_syscall_64+0x58/0xa0 [ 171.642184][ T284] ? clear_bhb_loop+0x30/0x80 [ 171.646890][ T284] ? clear_bhb_loop+0x30/0x80 [ 171.651616][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.657542][ T284] RIP: 0033:0x7f21eef909f7 [ 171.662023][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 171.681741][ T284] RSP: 002b:00007ffe61e902e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.690299][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f21eef909f7 [ 171.698319][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe61e903a0 [ 171.706322][ T284] RBP: 00007ffe61e903a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.714367][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe61e91430 [ 171.722416][ T284] R13: 00007f21ef011d7d R14: 000000000002ad78 R15: 00007ffe61e91470 [ 171.730526][ T284] [ 171.733567][ T284] ---[ end trace 0000000000000000 ]--- [ 171.739446][ T284] ================================================================== [ 171.739703][ T8200] EXT4-fs (loop4): unmounting filesystem. [ 171.747709][ T284] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 171.747748][ T284] Write of size 4 at addr 0000000000000170 by task syz-executor/284 [ 171.747765][ T284] [ 171.747771][ T284] CPU: 1 PID: 284 Comm: syz-executor Tainted: G W syzkaller #0 [ 171.747791][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.789024][ T284] Call Trace: [ 171.792312][ T284] [ 171.795243][ T284] __dump_stack+0x21/0x24 [ 171.799610][ T284] dump_stack_lvl+0xee/0x150 [ 171.804207][ T284] ? __cfi_dump_stack_lvl+0x8/0x8 [ 171.809235][ T284] ? ihold+0x20/0x60 [ 171.813130][ T284] ? ihold+0x20/0x60 [ 171.817025][ T284] print_report+0x3d/0x60 [ 171.821361][ T284] kasan_report+0x122/0x150 [ 171.825876][ T284] ? ihold+0x20/0x60 [ 171.829774][ T284] kasan_check_range+0x280/0x290 [ 171.834721][ T284] __kasan_check_write+0x14/0x20 [ 171.839663][ T284] ihold+0x20/0x60 [ 171.843402][ T284] vfs_rmdir+0x25f/0x500 [ 171.847656][ T284] incfs_kill_sb+0x105/0x220 [ 171.852273][ T284] deactivate_locked_super+0xb5/0x120 [ 171.857652][ T284] deactivate_super+0xaf/0xe0 [ 171.862338][ T284] cleanup_mnt+0x45f/0x4e0 [ 171.866762][ T284] __cleanup_mnt+0x19/0x20 [ 171.871179][ T284] task_work_run+0x1db/0x240 [ 171.875777][ T284] ? __cfi_task_work_run+0x10/0x10 [ 171.880892][ T284] ? __x64_sys_umount+0x125/0x160 [ 171.885920][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 171.891298][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 171.896501][ T284] exit_to_user_mode_prepare+0x87/0xd0 [ 171.901980][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 171.907451][ T284] do_syscall_64+0x58/0xa0 [ 171.911873][ T284] ? clear_bhb_loop+0x30/0x80 [ 171.916556][ T284] ? clear_bhb_loop+0x30/0x80 [ 171.921246][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.927148][ T284] RIP: 0033:0x7f21eef909f7 [ 171.931566][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 171.951180][ T284] RSP: 002b:00007ffe61e902e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.959595][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f21eef909f7 [ 171.967576][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe61e903a0 [ 171.975551][ T284] RBP: 00007ffe61e903a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.983612][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe61e91430 [ 171.991592][ T284] R13: 00007f21ef011d7d R14: 000000000002ad78 R15: 00007ffe61e91470 [ 171.999577][ T284] [ 172.002603][ T284] ================================================================== [ 172.012064][ T284] Disabling lock debugging due to kernel taint [ 172.014635][ T8565] loop9: detected capacity change from 0 to 512 [ 172.018406][ T284] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 172.025982][ T8565] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 172.032324][ T284] #PF: supervisor write access in kernel mode [ 172.032337][ T284] #PF: error_code(0x0002) - not-present page [ 172.032363][ T284] PGD 132832067 P4D 132832067 PUD 0 [ 172.032390][ T284] Oops: 0002 [#1] PREEMPT SMP KASAN [ 172.049538][ T8565] EXT4-fs (loop9): invalid journal inode [ 172.052664][ T284] CPU: 1 PID: 284 Comm: syz-executor Tainted: G B W syzkaller #0 [ 172.052690][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.052702][ T284] RIP: 0010:ihold+0x26/0x60 [ 172.058127][ T8565] EXT4-fs (loop9): can't get journal size [ 172.063195][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 6b ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 172.063214][ T284] RSP: 0018:ffffc900011c7c78 EFLAGS: 00010246 [ 172.063232][ T284] RAX: ffff88810d231400 RBX: 0000000000000000 RCX: ffff88810d231440 [ 172.063248][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.063260][ T284] RBP: ffffc900011c7c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 172.063274][ T284] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888123b9f1b4 [ 172.063289][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 172.063302][ T284] FS: 00005555953b8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.063319][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.063332][ T284] CR2: 0000000000000170 CR3: 000000012f1f6000 CR4: 00000000003506a0 [ 172.063350][ T284] Call Trace: [ 172.063357][ T284] [ 172.063365][ T284] vfs_rmdir+0x25f/0x500 [ 172.063394][ T284] incfs_kill_sb+0x105/0x220 [ 172.063420][ T284] deactivate_locked_super+0xb5/0x120 [ 172.063446][ T284] deactivate_super+0xaf/0xe0 [ 172.073234][ T8565] EXT4-fs (loop9): 1 truncate cleaned up [ 172.078020][ T284] cleanup_mnt+0x45f/0x4e0 [ 172.088403][ T8565] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 172.092624][ T284] __cleanup_mnt+0x19/0x20 [ 172.235110][ T284] task_work_run+0x1db/0x240 [ 172.239715][ T284] ? __cfi_task_work_run+0x10/0x10 [ 172.244832][ T284] ? __x64_sys_umount+0x125/0x160 [ 172.249869][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 172.255261][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 172.260462][ T284] exit_to_user_mode_prepare+0x87/0xd0 [ 172.265922][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 172.271393][ T284] do_syscall_64+0x58/0xa0 [ 172.275811][ T284] ? clear_bhb_loop+0x30/0x80 [ 172.280520][ T284] ? clear_bhb_loop+0x30/0x80 [ 172.285209][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.291108][ T284] RIP: 0033:0x7f21eef909f7 [ 172.295523][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 172.315125][ T284] RSP: 002b:00007ffe61e902e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 172.323628][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f21eef909f7 [ 172.331601][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe61e903a0 [ 172.339658][ T284] RBP: 00007ffe61e903a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.347627][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe61e91430 [ 172.355626][ T284] R13: 00007f21ef011d7d R14: 000000000002ad78 R15: 00007ffe61e91470 [ 172.363603][ T284] [ 172.366642][ T284] Modules linked in: [ 172.370534][ T284] CR2: 0000000000000170 [ 172.374701][ T284] ---[ end trace 0000000000000000 ]--- [ 172.380148][ T284] RIP: 0010:ihold+0x26/0x60 [ 172.384660][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 61 6b ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 172.404277][ T284] RSP: 0018:ffffc900011c7c78 EFLAGS: 00010246 [ 172.410339][ T284] RAX: ffff88810d231400 RBX: 0000000000000000 RCX: ffff88810d231440 [ 172.418310][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.426275][ T284] RBP: ffffc900011c7c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 172.434346][ T284] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888123b9f1b4 [ 172.442341][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 172.450321][ T284] FS: 00005555953b8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.459436][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.466023][ T284] CR2: 0000000000000170 CR3: 000000012f1f6000 CR4: 00000000003506a0 [ 172.473999][ T284] Kernel panic - not syncing: Fatal exception [ 172.480365][ T284] Kernel Offset: disabled [ 172.484686][ T284] Rebooting in 86400 seconds..