last executing test programs: 6.108879727s ago: executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 5.687777097s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private2}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x7d, &(0x7f0000000100)=@assoc_value={r2}, 0x8) 5.522327657s ago: executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0x2, 0x0, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_deladdrlabel={0x1c, 0x49, 0x300, 0x70bd2a, 0x0, {0xa, 0x0, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000000000000000001100000074fff4df66fae68a"], 0x14}}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048090}, 0x240081c1) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)={0x1f4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x79}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x13d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0xff68, 0x3, 0x10000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x27}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}]}, @NL80211_ATTR_CQM={0x80, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x20, 0x6, 0x6c02e5ac, 0xffff, 0x636a, 0x9, 0x200000, 0x7211]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x5, 0x7, 0x4]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x30e}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x424}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x6, 0xe30e, 0xfffffffe, 0x240000, 0x7f, 0x80]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x573}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x3]}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffffff25}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1aa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x36c}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb0}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xfffff424]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ea}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x1f, 0x4, 0xcfb0, 0x0, 0x8]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x329}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x38}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x40000}, 0x44001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$rxrpc(0x21, 0x2, 0x0) 5.089219124s ago: executing program 3: socket$inet6(0xa, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15, 0x0, 0x0, 0x8000, 0xb0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000640)={{0x2, 0xfffffff7}, 0x100, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000000021d96707fa48af4b765c956f3507c8f45216eef9feb12ea5f03738f592aa6571c3fd01c5cc6bac4a259ff02b54aff15ad6aa464387f1572e8503879b3821f1db9c70f487faf69f93ba09312ce264"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81000000000000c7080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000026f849b19050010080000008500"/30], &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @loopback}, &(0x7f0000000140)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000440)}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmsg$sock(r2, &(0x7f00000034c0)={&(0x7f0000005440)=@caif, 0x80, &(0x7f0000003440), 0x0, &(0x7f0000005580)=[@mark={{0x14, 0x1, 0x24, 0x1800}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14}}], 0xc0}, 0x8001) sendfile(r2, r1, 0x0, 0xffefffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r3, &(0x7f00000003c0)={'syz1', "2f84030773b32ccfa0dda86eb4ea046abb77b928158eb8334ec9ac2b5cd604eb21a9ff934ed10ea535ace2d87d01eebfe531466e33dee0c0bc6bb4f162bb706ca03fbe73636dfec726b156ad94950bac560f729824fdb973dceee3edb23b4760888797b9f673322951ee93c0cb9ca57501ff66b94a53ebe565cc9499"}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x209, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x58}}, 0x0) 5.046761516s ago: executing program 2: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file2\x00', 0x1050000, &(0x7f0000000000)={[{@grpjquota}, {@bh}, {@nolazytime}, {@nodelalloc}, {@nouid32}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}]}, 0x0, 0x4a3, &(0x7f0000000580)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x4c, 0x1a, 0x0, 0x25, 0x228, 0x258, 0x258, 0x228, 0x258, 0x3, 0x0, {[{{@ipv6={@mcast2, @loopback, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r0, 0xc, 0x0) 4.963155394s ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 4.751509604s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) 4.704221134s ago: executing program 0: syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000000)={[{@grpquota}, {@ikeep}, {@filestreams}, {@filestreams}, {@gqnoenforce}]}, 0x1, 0x9606, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xd612) 4.514912539s ago: executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{}, {}, {0x3fe, 0x0, 0x81}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x1f}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc020660b, &(0x7f0000000080)={@id={0x2, 0x0, @auto="e766279740eb321d57e8daa27ee607fc"}}) 4.196765132s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.114755784s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000008c0)='ext4_es_find_extent_range_exit\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000240)='THAWED\x00', 0x7) 3.990807878s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) 3.967714197s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x300}, 0x0) 3.880968521s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x44001033, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r3, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) 3.71547384s ago: executing program 4: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000845, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = memfd_secret(0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x44}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x20000004) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000020c0)=0x1e) 3.576355734s ago: executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0xfffffffffffffe3b, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000004bf896e40409"], 0x0}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r3, &(0x7f0000000200)="a38d", 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800000000040}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x4122, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015003000000012000300686173683a6e6574"], 0x60}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x0, 0x0, 0x0, 0x6}, 0x48) 2.827644477s ago: executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) socket(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000080)) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) dup(0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) 2.705400759s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000880)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x1, r2}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000380)={0x1, 0xffffffffffffffff, 0x1}) 2.450792989s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000020000000000000001000001"], 0x0, 0x32}, 0x20) socket$packet(0x11, 0x0, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x978, 0x30, 0x1, 0x0, 0x0, {}, [{0x964, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x8f4, 0x2, 0x0, 0x0, {{0xb}, {0x8c8, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe01}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x50c, 0x3f, 0x0, 0x200, 0xff, 0x0, 0x3, 0x8, 0xfffffff9, 0x10000, 0x7b, 0x458b2af9, 0x3, 0x5, 0xfffffffe, 0xffffff80, 0x0, 0x2f3, 0x3, 0x200, 0x5, 0x7, 0x401, 0x7ff, 0x7fffffff, 0x0, 0x800, 0xff, 0x874, 0x6, 0xfc, 0xffff, 0x0, 0x10000, 0x90000, 0x81, 0x5, 0x7f, 0x11f, 0x6e9e, 0x7, 0x0, 0x18, 0x1, 0x3, 0x5, 0x124f, 0x4, 0x5, 0x0, 0x40, 0xed26, 0x7, 0x3, 0x8, 0xffffff01, 0xe0000, 0x4, 0x2, 0x5, 0x9, 0x7, 0x200, 0x9, 0x3, 0x1, 0x3, 0x9, 0x9, 0xffff, 0x401, 0xfffffffd, 0x4, 0xc9, 0xff, 0x3, 0x7, 0x8000, 0x2, 0x9, 0x4, 0x6, 0x8, 0x5, 0x8, 0x10001, 0x1, 0x0, 0x2d2, 0x7d0d, 0x10001, 0x5, 0x8000, 0xfffffffe, 0x83, 0x80, 0x400, 0x9, 0x3, 0x60, 0x3, 0x0, 0x401, 0x10000, 0x0, 0x9ffe, 0x80000000, 0xb19, 0xfffffff9, 0x9, 0x0, 0x4, 0x8, 0x344a, 0xfffff801, 0x0, 0x5, 0xfffffffa, 0x8001, 0x0, 0x1, 0x10000, 0x0, 0x7, 0x0, 0x0, 0x2, 0x4, 0x1, 0x6, 0x1ff, 0x640, 0x6, 0x0, 0x7, 0x5, 0x0, 0x200, 0x1, 0x3, 0xc24, 0xfff, 0x0, 0x3, 0x0, 0x6, 0x0, 0x8, 0xffffffff, 0x3, 0x0, 0x8, 0x1, 0x5, 0x0, 0xfffffffa, 0xfffffff8, 0x401, 0x4, 0xffff0001, 0x0, 0xd38b, 0x7, 0x101, 0x7ff, 0x7fffffff, 0x4, 0x7fff, 0x20, 0x5, 0xffffffff, 0x1, 0x0, 0x9, 0x80000000, 0x1, 0xfffffffb, 0x2, 0x1, 0x7, 0x8000, 0x3, 0x6, 0x9a1f, 0x4, 0x5, 0x0, 0x81, 0x1, 0x5, 0x9, 0x4, 0x3b23, 0x7, 0x4, 0x1, 0x9, 0x10000000, 0x32, 0x0, 0x2, 0xfffff001, 0x8, 0xfff, 0x0, 0x1, 0xfd2, 0x9, 0x7, 0x7, 0x10000, 0x7, 0x0, 0x400, 0x1f, 0x1, 0x6, 0x3f, 0x9, 0x5, 0x3ff, 0x0, 0xffffffff, 0xffffffff, 0x1, 0x6, 0x3, 0xffffff01, 0x0, 0x100, 0x80000000, 0x9, 0x20, 0x9, 0x8001, 0x3, 0xa5ae, 0x400, 0x2, 0x40000, 0x6, 0x80000000, 0x3, 0x0, 0x6, 0x785bd988, 0x5000000, 0x90, 0x2, 0x3, 0xa8, 0x2, 0x0, 0x6fa1ace1, 0x6, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x40, 0x20000000, 0x5, 0x1, 0x8, {0x8, 0x2, 0x28, 0x1000, 0x3f, 0x3}, {0x5, 0x2, 0x1000, 0x6, 0x5, 0xfffffff8}, 0x80, 0x846, 0xde8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x7fffffff, 0x101, 0x10001, {0x0, 0x0, 0x7, 0x209f, 0x8, 0x3}, {0x7, 0x2, 0x0, 0x9}, 0x7, 0x1, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1f, 0x0, 0xffff, 0x80, 0x0, 0x3ff, 0x1, 0x2, 0x1, 0x0, 0x8, 0xda, 0xfffffffd, 0x4, 0x0, 0xfffffffe, 0x7, 0x7fff, 0x0, 0x7fbe, 0x1, 0x0, 0x6, 0x7, 0x6, 0x8, 0x5, 0x0, 0x0, 0xf, 0x3, 0x8, 0x88, 0x0, 0x0, 0x6, 0x0, 0x7, 0x19, 0x2, 0x81, 0x4, 0x8, 0xe9, 0x0, 0x8004, 0x100, 0x3, 0x2, 0x3, 0x81, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3edbc7a8, 0x0, 0x6, 0x7, 0x7fff, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb4b9, 0x84fc, 0x3, 0x7, 0x401, 0x0, 0xe0, 0x0, 0x3, 0x84e, 0xffffffff, 0x3, 0x81, 0x0, 0x3ff, 0x2, 0x3, 0x71, 0x7f, 0x80000000, 0x0, 0x0, 0x9, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x103, 0x0, 0x0, 0xfff, 0x9, 0x0, 0x40, 0x0, 0x0, 0x5, 0x6, 0xfffffeff, 0x4, 0x9, 0x6, 0x8, 0x20, 0x0, 0x3, 0xdc, 0x5, 0x4, 0x0, 0x2, 0x0, 0xffc0, 0x0, 0x0, 0x90000, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x7fff, 0x8, 0x0, 0x9, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x81, 0x0, 0x8606, 0x7, 0x200, 0x0, 0x0, 0x9, 0x7fff, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x1, 0x0, 0x6, 0xffff, 0x6, 0xffff, 0x0, 0x1f, 0x0, 0x100, 0x0, 0x10000, 0x0, 0x2, 0x0, 0x820e, 0x0, 0x0, 0x0, 0x7f, 0x9, 0x0, 0x3f, 0xa77, 0x785, 0x2, 0x0, 0x6, 0x80000001, 0x1, 0x0, 0x6, 0x0, 0xb500, 0x0, 0x100, 0x9, 0xffffffff, 0x7, 0x5, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfff, 0x7, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x1, 0xffff0001, 0x8, 0x8, 0x1000, 0x7, 0x81, 0x0, 0x8a0, 0x0, 0x5f, 0xc86, 0x7fff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x1, 0xfad1, 0x0, 0xf4c, 0x0, 0xfffffffb, 0x3, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x5, 0x3, 0xffffff81, 0x3ff, 0x1224]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x978}}, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001000000c00000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) 2.355509931s ago: executing program 4: openat$tun(0xffffffffffffff9c, 0x0, 0x408040, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x10d, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@largeio}, {@usrquota}]}, 0x5, 0xb8e1, &(0x7f0000013cc0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) 2.245581462s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2c00ec0ef1254500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_free_inode\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 2.126869469s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 1.909064054s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000240)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x380000}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@nombcache}, {@jqfmt_vfsold}, {@dioread_lock}, {@data_err_abort}], [{@defcontext={'defcontext', 0x3d, 'root'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040), 0x48) 1.012060279s ago: executing program 3: socket$igmp6(0xa, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet6(0xffffffffffffffff, &(0x7f0000000680), 0x1c) inotify_init() r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 875.62803ms ago: executing program 0: syz_usb_connect(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000014da2108ab12a380eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303", @ANYRESHEX], 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000000c0)={[{@mblk_io_submit}, {@delalloc}, {@prjquota}, {@lazytime}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000a00)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") openat$ttyS3(0xffffff9c, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}}, {{&(0x7f00000007c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000800)="6f373624b6b2eb4f262c88f4796bae4d18daa1cdec576f413b0bb99079fa27588641947583a158f9d641537a4c5589f3681d6a75ec5e81bcbaef00821eaa1016f22d97fe10749878bbc656f2b60c79b5d724eab6064c593a6b6a4d04ab05705e50a47c2f3889f5911f54671d69789dfd23b4a2739ed9231b0bc093c1e53264a267c0d70c6c3656a376225b0c4f4bf1d0e0926cd25525903a96e12e2cba84c99f056363d11b5c1140cf22106004ec04d18c159b01076db28f903ed33c7ed96488", 0xc0}, {&(0x7f0000000900)="cc2ee2aa392c9eb9f620778526944fd5a75c4141e6fb4bb1543767986c7e46313e1c510f5880249e327f2bf9f5ab0c5b669aeb94322d622b7cda93ad7d5a2e497f11e6015dd47437c0aa2661c9fe3fb5d000dc3d5267833953b4d1aa4cee7c8bce617c3598dc6f29", 0x68}, {&(0x7f0000000980)="e6f968f9edeb2b21", 0x8}], 0x3, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}], 0x68}}, {{&(0x7f0000001040)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000001080)="5af0b2cfc5672049b450185c4c7dd412d909bcdbd218b4833ce03ca3066edcf2c85e0a2fba717ae195d96710ca9e1ed3f018", 0x32}, {0x0}, {&(0x7f0000001200)="be3cfcbdc3bfd6ac25ab976ea4f36b768f31f7a9ee191e0f685d8b377cf72cc1dc4b1783bab0b7e9c814b6a2f05f06b401408061883645c6ac6dea74f511104217fe34bf0f67f9f3cc3fff6004e4fad27582f23033b27030a5cf5bf8ad3229c095ab71f3b3ebad9ecb5577fbd7d4b998a51367ce9fed3dc99e550448581969ece1d9e317a04bbc0dc35eeb2eb5fea15507bdcf784abdd8fb051b251b8dba7a5456599085a980485cc14fd2117a5f1bb54e7e66dda865101caa11b5bcca8489d7cf9d0045c557", 0xc6}, {&(0x7f0000001300)="3ff6c85d46bdee58f8517e25d7d074b69a0ed8b95d8ef0df1a5791c5e2328ebce13eb5f80c26d246b8f4b87a676e8f720406e9ea8157206deb6fc78176050897665784c9a571", 0x46}, {&(0x7f00000013c0)="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", 0x1000}], 0x5, &(0x7f0000002440)}}, {{&(0x7f0000002500)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000002900)=[{&(0x7f0000002540)="015d93fe104a5fc1a39123564f10407106645d925534609141f1d1e0349545289c809292501d3d9047a4316348cef194", 0x30}, {&(0x7f00000025c0)="776086cb02f722a21b5a96a4b4c8d87be874eb17071b1a411ebe2e18225fed4a553d77983738ddb7e3ff41c0e766e5e3a8260ae46acae888c5e3385c4158098aeb6f0060afb3ecf037898dfff414e74c04d3166682bca34328164092a899b7e16e236346ec2770c6cc6b3213c82084c1e05fdebca1f97ad1b2ac4b34400a1a2dce9adeff37619145a5560a4ebac2a3b67c8e074e628dd733cbc69504ad048f820aa6362961c7a46c898787418565780ee8b990d311b00b70a271", 0xba}, {&(0x7f0000002680)="a7b7a1a48974a51d2883f3fdd13a4a064f3ab5b681217c88080bb69579252b64372b79e2b4c1979a3b061a0de3a300bf9577adb9f79c347d5a2281cc9dc9e4c1bf9100e14516b7d66f66864b60a6a024987cb7271e50fd5f53268bc3fb2d40c90ba0e84c6efda8e6d89018a398788a72eb249c", 0x73}, {&(0x7f00000027c0)="c1ae07553a0a6c4cffae7d99af544458ccb27385d45c6eab76a6577026fbe521e636df8dcefd23939598e87ed685183ec5b4c5742b3e093e9cff2c67b007c583780f0bc4ab8b2650913bf86a156af85c", 0x50}, {&(0x7f0000002840)}], 0x5, &(0x7f0000002ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @empty}}}, @ip_ttl={{0x14}}], 0x80}}], 0x4, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f0000000340)=[{0x7, 0x4, 0xc, 0x10001}, {0x5, 0x3, 0x1, 0x4}, {0x0, 0xc0, 0x20}, {0x35e9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x407, 0x33, 0x0, 0xfffffffe}, {0x4, 0x2f, 0x3f, 0x1}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) ioctl(r1, 0x10000, &(0x7f0000000500)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x90) 796.497906ms ago: executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x0, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r2, 0x0, 0x2, r3}) 290.54641ms ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a"], 0x2c}}, 0x0) 81.128607ms ago: executing program 1: syz_emit_ethernet(0xfffffffffffffd4d, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010800060a000000002000f8b82b9dec3979ff77caeecb0000000000000000040004800900010033797a30000000000900020073797a0800000000140000001100010000000000000000000000000ac49c1a588233b207281f2aca546f0404a70f7f08f76d32c2b0a60ab95080909d29e2f58e360dafbd"], 0x58}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x100000}, 0x48) 40.819454ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}]}, 0x3c}}, 0x0) 0s ago: executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x10, 0x0, &(0x7f0000000280)=[@clear_death], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T8133] bridge_slave_1: entered allmulticast mode [ 369.102119][ T8133] bridge_slave_1: entered promiscuous mode [ 369.243123][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.261780][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.389489][ T8196] o2cb: This node has not been configured. [ 369.395456][ T8196] o2cb: Cluster check failed. Fix errors before retrying. [ 369.402765][ T8196] (syz-executor.1,8196,0):user_dlm_register:674 ERROR: status = -22 [ 369.410913][ T8196] (syz-executor.1,8196,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 370.208882][ T8133] team0: Port device team_slave_0 added [ 370.259851][ T8133] team0: Port device team_slave_1 added [ 370.417999][ T8197] loop2: detected capacity change from 0 to 8 [ 370.482042][ T8197] SQUASHFS error: lzo decompression failed, data probably corrupt [ 370.499400][ T8197] SQUASHFS error: Failed to read block 0x28d: -5 [ 370.507643][ T8197] SQUASHFS error: Unable to read metadata cache entry [28b] [ 370.519318][ T8197] SQUASHFS error: Unable to read inode 0x11f [ 370.538417][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.565276][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.632759][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.716017][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.731120][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.733609][ T8202] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 370.804541][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.835741][ T4480] Bluetooth: hci3: command tx timeout [ 370.871235][ T8197] loop2: detected capacity change from 0 to 2048 [ 370.888627][ T8197] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 371.031981][ T8133] hsr_slave_0: entered promiscuous mode [ 371.051168][ T8133] hsr_slave_1: entered promiscuous mode [ 371.090074][ T8133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.125062][ T8133] Cannot create hsr debugfs directory [ 371.153062][ T8188] loop4: detected capacity change from 0 to 65536 [ 371.271221][ T8188] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 371.358641][ T8188] XFS (loop4): Ending clean mount [ 371.397202][ T8188] XFS (loop4): Quotacheck needed: Please wait. [ 371.510507][ T8188] XFS (loop4): Quotacheck: Done. [ 371.658649][ T5105] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 372.537887][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.717586][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.834198][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.841451][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.944393][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.951719][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.362002][ T8133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.391003][ T8133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.396457][ T4603] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 373.412606][ T8133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.449789][ T8133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.577973][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.597524][ T4603] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 373.619452][ T4603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.652477][ T4603] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 373.672342][ T4603] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 373.682820][ T4603] usb 2-1: Manufacturer: syz [ 373.691060][ T4603] usb 2-1: config 0 descriptor?? [ 373.799124][ T4603] rc_core: IR keymap rc-hauppauge not found [ 373.832449][ T4603] Registered IR keymap rc-empty [ 373.868410][ T4603] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 373.892151][ T29] audit: type=1400 audit(1718989164.725:345): avc: denied { setattr } for pid=8227 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 373.931804][ T8021] veth0_vlan: entered promiscuous mode [ 373.977596][ T4603] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 373.985684][ T8021] veth1_vlan: entered promiscuous mode [ 374.921954][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.033416][ T8021] veth0_macvtap: entered promiscuous mode [ 375.062743][ T8021] veth1_macvtap: entered promiscuous mode [ 375.171741][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.294190][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.301449][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.380267][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.387543][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.470529][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.493623][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.527170][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.581970][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.584345][ T8250] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 375.612965][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.642325][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.703305][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.784754][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.835908][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.904371][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.950860][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.984705][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.998302][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.025412][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.212866][ T8254] loop4: detected capacity change from 0 to 256 [ 377.961840][ T8021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.976412][ T8021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.985304][ T8021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.994030][ T8021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.093318][ T45] usb 2-1: USB disconnect, device number 20 [ 378.160653][ T8257] loop4: detected capacity change from 0 to 64 [ 379.219879][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.239138][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.310934][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.326763][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.495692][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.503599][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.553109][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.832077][ T8133] veth0_vlan: entered promiscuous mode [ 379.919725][ T8133] veth1_vlan: entered promiscuous mode [ 380.224686][ T8133] veth0_macvtap: entered promiscuous mode [ 380.302500][ T8133] veth1_macvtap: entered promiscuous mode [ 380.401447][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.443976][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.473243][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.504277][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.544616][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.575581][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.577867][ T8279] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 380.604826][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.653370][ T8274] loop0: detected capacity change from 0 to 512 [ 380.659514][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.673386][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.719825][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.731029][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.740940][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.754898][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.766112][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.777383][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.789751][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.800508][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.822103][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.861959][ T8133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.911661][ T8274] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz-executor.0: Invalid inode bitmap blk 4 in block_group 0 [ 380.932528][ T8133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.025722][ T8133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.068084][ T8133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.202561][ T8274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.502419][ T2817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.526739][ T2817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.668786][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.692792][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.395335][ T45] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 383.433477][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 383.841501][ T8021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.874096][ T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 383.905958][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.915730][ T45] usb 1-1: device not accepting address 10, error -71 [ 383.957925][ T8307] loop4: detected capacity change from 0 to 8 [ 383.981457][ T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 384.009985][ T8307] SQUASHFS error: lzo decompression failed, data probably corrupt [ 384.010081][ T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 384.026897][ T8307] SQUASHFS error: Failed to read block 0x28d: -5 [ 384.046925][ T8307] SQUASHFS error: Unable to read metadata cache entry [28b] [ 384.054318][ T8307] SQUASHFS error: Unable to read inode 0x11f [ 384.087510][ T8] usb 2-1: Manufacturer: syz [ 384.150097][ T8] usb 2-1: config 0 descriptor?? [ 385.351076][ T8307] loop4: detected capacity change from 0 to 2048 [ 385.365240][ T8] rc_core: IR keymap rc-hauppauge not found [ 385.398701][ T8307] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 385.418988][ T8] Registered IR keymap rc-empty [ 385.460027][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 385.504175][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 385.552972][ T8] usb 2-1: USB disconnect, device number 21 [ 386.401240][ T8337] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 386.787912][ T8340] overlayfs: missing 'workdir' [ 386.814833][ T8335] loop4: detected capacity change from 0 to 32768 [ 387.115235][ T8335] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=zstd,nojournal_transaction_names [ 387.159940][ T8335] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 387.193694][ T8335] bcachefs (loop4): alloc_read... done [ 387.212607][ T8335] bcachefs (loop4): stripes_read... done [ 387.235993][ T8335] bcachefs (loop4): snapshots_read... done [ 387.254345][ T8335] bcachefs (loop4): journal_replay... done [ 387.264220][ T8335] bcachefs (loop4): resume_logged_ops... done [ 387.278647][ T8335] bcachefs (loop4): going read-write [ 387.306017][ T8335] bcachefs (loop4): done starting filesystem [ 387.933195][ T8331] loop3: detected capacity change from 0 to 65536 [ 387.976245][ T8360] overlayfs: failed to resolve './file0': -2 [ 388.008569][ T8331] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 388.118641][ T8331] XFS (loop3): Ending clean mount [ 388.126180][ T29] audit: type=1400 audit(1718989179.045:346): avc: denied { read write } for pid=8371 comm="syz-executor.1" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 388.146924][ T8331] XFS (loop3): Quotacheck needed: Please wait. [ 388.163695][ T29] audit: type=1400 audit(1718989179.045:347): avc: denied { open } for pid=8371 comm="syz-executor.1" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 388.215649][ T29] audit: type=1400 audit(1718989179.045:348): avc: denied { accept } for pid=8334 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 388.352360][ T8331] XFS (loop3): Quotacheck: Done. [ 388.565549][ T8133] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 388.586692][ T5105] bcachefs (loop4): shutting down [ 388.592207][ T5105] bcachefs (loop4): going read-only [ 388.605188][ T5105] bcachefs (loop4): finished waiting for writes to stop [ 388.664762][ T5105] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 388.754729][ T5105] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 388.806871][ T5105] bcachefs (loop4): shutdown complete, journal seq 16 [ 388.835874][ T5105] bcachefs (loop4): marking filesystem clean [ 389.049760][ T5105] bcachefs (loop4): shutdown complete [ 389.534268][ T8366] loop2: detected capacity change from 0 to 32768 [ 389.644474][ T8366] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 389.733533][ T8366] XFS (loop2): Ending clean mount [ 389.763923][ T8366] XFS (loop2): Quotacheck needed: Please wait. [ 389.864586][ T8366] XFS (loop2): Quotacheck: Done. [ 390.141334][ T29] audit: type=1800 audit(1718989181.045:349): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1066 res=0 errno=0 [ 390.286971][ T29] audit: type=1400 audit(1718989181.055:350): avc: denied { setattr } for pid=8364 comm="syz-executor.2" name="file1" dev="loop2" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 390.315248][ T45] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 390.355663][ T8395] loop1: detected capacity change from 0 to 8 [ 390.467524][ T8395] SQUASHFS error: lzo decompression failed, data probably corrupt [ 390.476057][ T8395] SQUASHFS error: Failed to read block 0x28d: -5 [ 390.482602][ T8395] SQUASHFS error: Unable to read metadata cache entry [28b] [ 390.490124][ T8395] SQUASHFS error: Unable to read inode 0x11f [ 390.528470][ T45] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 390.546129][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.564520][ T5110] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 390.590229][ T45] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 390.669738][ T45] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 390.748377][ T45] usb 4-1: Manufacturer: syz [ 390.782208][ T8395] loop1: detected capacity change from 0 to 2048 [ 390.785172][ T45] usb 4-1: config 0 descriptor?? [ 390.820622][ T8395] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 391.028141][ T45] rc_core: IR keymap rc-hauppauge not found [ 391.034067][ T45] Registered IR keymap rc-empty [ 391.090921][ T45] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 391.146241][ T45] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 391.742689][ T8409] overlayfs: missing 'workdir' [ 392.348454][ T8416] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 392.808810][ T8398] loop4: detected capacity change from 0 to 32768 [ 392.852701][ T8398] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (8398) [ 392.960380][ T8398] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 392.990610][ T8398] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 393.023458][ T8398] BTRFS info (device loop4): using free-space-tree [ 393.083611][ T5160] usb 4-1: USB disconnect, device number 9 [ 393.205267][ T8421] loop0: detected capacity change from 0 to 512 [ 393.311837][ T8421] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz-executor.0: Invalid inode bitmap blk 4 in block_group 0 [ 393.444125][ T8442] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 393.466256][ T8421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.492006][ T29] audit: type=1800 audit(1718989184.415:351): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 393.658451][ T29] audit: type=1800 audit(1718989184.415:352): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 393.745809][ T5105] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 393.885299][ T8439] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 393.918157][ T8420] loop1: detected capacity change from 0 to 32768 [ 394.190072][ T929] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 394.262382][ T8453] o2cb: This node has not been configured. [ 394.268439][ T8453] o2cb: Cluster check failed. Fix errors before retrying. [ 394.275814][ T8453] (syz-executor.2,8453,0):user_dlm_register:674 ERROR: status = -22 [ 394.283954][ T8453] (syz-executor.2,8453,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 395.073038][ T8420] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=zstd,nojournal_transaction_names [ 395.123112][ T8420] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 395.183141][ T8455] loop3: detected capacity change from 0 to 128 [ 395.198829][ T929] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 395.216747][ T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.314850][ T8460] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 395.327442][ T8420] bcachefs (loop1): alloc_read... done [ 395.333007][ T8420] bcachefs (loop1): stripes_read... [ 395.333028][ T929] usb 1-1: config 0 descriptor?? [ 395.333064][ T8420] done [ 395.348831][ T929] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 395.364264][ T929] usb 1-1: bad CDC descriptors [ 395.373735][ T929] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 395.385111][ T8420] bcachefs (loop1): snapshots_read... done [ 395.413405][ T8420] bcachefs (loop1): journal_replay... done [ 395.430746][ T929] usb 1-1: USB disconnect, device number 12 [ 395.440293][ T8420] bcachefs (loop1): resume_logged_ops... done [ 395.506865][ T8021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.512779][ T8455] loop3: detected capacity change from 0 to 4096 [ 395.558512][ T8420] bcachefs (loop1): going read-write [ 395.583070][ T8420] bcachefs (loop1): bch2_copygc_start(): error creating copygc thread EINTR [ 395.609526][ T8420] bcachefs (loop1): error starting copygc thread [ 395.627930][ T8464] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.644225][ T8420] bcachefs (loop1): going read-only [ 395.662766][ T8420] bcachefs (loop1): finished waiting for writes to stop [ 395.680762][ T8420] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10 [ 395.709454][ T8420] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 395.730408][ T29] audit: type=1800 audit(1718989186.655:353): pid=8455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 395.780917][ T8420] bcachefs (loop1): shutdown complete, journal seq 11 [ 395.796358][ T8420] bcachefs (loop1): marking filesystem clean [ 395.839040][ T8420] bcachefs (loop1): bch2_fs_start(): error starting filesystem EINTR [ 395.884266][ T8420] bcachefs (loop1): shutting down [ 395.916976][ T8467] xt_hashlimit: overflow, rate too high: 0 [ 395.939711][ T8467] loop0: detected capacity change from 0 to 47 [ 396.016847][ T8420] bcachefs (loop1): shutdown complete [ 396.032540][ T29] audit: type=1400 audit(1718989186.955:354): avc: denied { unlink } for pid=8133 comm="syz-executor.3" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 396.122680][ T29] audit: type=1400 audit(1718989186.955:355): avc: denied { rmdir } for pid=8133 comm="syz-executor.3" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 396.197948][ T29] audit: type=1400 audit(1718989187.095:356): avc: denied { unmount } for pid=8133 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 396.662586][ T8477] loop3: detected capacity change from 0 to 8 [ 396.720257][ T8477] SQUASHFS error: lzo decompression failed, data probably corrupt [ 396.729611][ T8477] SQUASHFS error: Failed to read block 0x28d: -5 [ 396.737201][ T8477] SQUASHFS error: Unable to read metadata cache entry [28b] [ 396.748576][ T8477] SQUASHFS error: Unable to read inode 0x11f [ 397.068609][ T8477] loop3: detected capacity change from 0 to 2048 [ 397.101054][ T8477] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 397.557827][ T8480] loop1: detected capacity change from 0 to 64 [ 397.628014][ T8462] loop4: detected capacity change from 0 to 65536 [ 397.721869][ T8462] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 397.827250][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.945245][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.957030][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.972436][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.985212][ T8462] XFS (loop4): Ending clean mount [ 397.992789][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 398.000819][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 398.000937][ T8462] XFS (loop4): Quotacheck needed: Please wait. [ 398.019541][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.129292][ T8462] XFS (loop4): Quotacheck: Done. [ 398.196634][ T5105] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 398.197254][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.502058][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.744385][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.822718][ T8482] loop3: detected capacity change from 0 to 32768 [ 398.864001][ T8482] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8482) [ 398.957211][ T8482] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 399.033862][ T8482] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 399.252763][ T8482] BTRFS info (device loop3): using free-space-tree [ 399.847697][ T29] audit: type=1800 audit(1718989190.765:357): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 399.922487][ T144] bridge_slave_1: left allmulticast mode [ 399.943394][ T144] bridge_slave_1: left promiscuous mode [ 399.943919][ T8527] loop1: detected capacity change from 0 to 256 [ 399.957083][ T8527] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 399.961926][ T29] audit: type=1800 audit(1718989190.825:358): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 399.985401][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.046065][ T144] bridge_slave_0: left allmulticast mode [ 400.051817][ T144] bridge_slave_0: left promiscuous mode [ 400.058262][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.099221][ T8133] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 400.109680][ T4480] Bluetooth: hci2: command tx timeout [ 400.149737][ T8526] overlayfs: missing 'workdir' [ 401.436388][ T8540] overlayfs: missing 'workdir' [ 401.798873][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.186575][ T4480] Bluetooth: hci2: command tx timeout [ 402.343562][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.806683][ T144] bond0 (unregistering): Released all slaves [ 402.972161][ T8493] chnl_net:caif_netlink_parms(): no params data found [ 403.081300][ T8539] loop2: detected capacity change from 0 to 32768 [ 403.332113][ T8539] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=zstd,nojournal_transaction_names [ 403.395512][ T8539] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 403.570092][ T8539] bcachefs (loop2): alloc_read... done [ 403.600266][ T8539] bcachefs (loop2): stripes_read... done [ 403.634346][ T8539] bcachefs (loop2): snapshots_read... done [ 403.667022][ T8539] bcachefs (loop2): journal_replay... done [ 403.692839][ T8539] bcachefs (loop2): resume_logged_ops... done [ 403.770091][ T8539] bcachefs (loop2): going read-write [ 403.796352][ T8539] bcachefs (loop2): done starting filesystem [ 403.804198][ T144] hsr_slave_0: left promiscuous mode [ 403.812634][ T144] hsr_slave_1: left promiscuous mode [ 403.840297][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.870054][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.892699][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.903265][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.987224][ T29] audit: type=1400 audit(1718989194.905:359): avc: denied { watch } for pid=8538 comm="syz-executor.2" path="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/158/file0" dev="loop2" ino=4096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.025637][ T144] veth1_macvtap: left promiscuous mode [ 404.031259][ T144] veth0_macvtap: left promiscuous mode [ 404.083176][ T144] veth1_vlan: left promiscuous mode [ 404.116782][ T144] veth0_vlan: left promiscuous mode [ 404.227538][ T5110] bcachefs (loop2): shutting down [ 404.266225][ T4480] Bluetooth: hci2: command tx timeout [ 404.270712][ T5110] bcachefs (loop2): going read-only [ 404.298639][ T5110] bcachefs (loop2): finished waiting for writes to stop [ 404.330772][ T5110] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 405.172380][ T5110] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 405.247634][ T5110] bcachefs (loop2): shutdown complete, journal seq 16 [ 405.266729][ T5110] bcachefs (loop2): marking filesystem clean [ 405.334522][ T8548] loop1: detected capacity change from 0 to 65536 [ 405.355782][ T5110] bcachefs (loop2): shutdown complete [ 405.450223][ T8548] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 405.570296][ T8548] XFS (loop1): Ending clean mount [ 405.590204][ T8548] XFS (loop1): Quotacheck needed: Please wait. [ 405.614031][ T5159] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 405.733622][ T8588] loop4: detected capacity change from 0 to 2048 [ 405.761772][ T8548] XFS (loop1): Quotacheck: Done. [ 405.781491][ T8588] udf: Unknown parameter 'iocharlt' [ 405.844546][ T5159] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 405.854620][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.882915][ T5159] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 405.892733][ T5159] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 405.907880][ T5159] usb 4-1: Manufacturer: syz [ 405.915859][ T5159] usb 4-1: config 0 descriptor?? [ 406.020399][ T5106] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 406.713274][ T5118] Bluetooth: hci2: command tx timeout [ 406.998700][ T5159] rc_core: IR keymap rc-hauppauge not found [ 407.004639][ T5159] Registered IR keymap rc-empty [ 407.015382][ T5159] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 407.037274][ T5159] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 407.675068][ T785] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 407.824769][ T144] team0 (unregistering): Port device team_slave_1 removed [ 407.978842][ T785] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 408.020732][ T785] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.073370][ T785] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 408.097476][ T785] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 408.119510][ T144] team0 (unregistering): Port device team_slave_0 removed [ 408.123193][ T785] usb 5-1: Manufacturer: syz [ 408.152847][ T785] usb 5-1: config 0 descriptor?? [ 408.394869][ T8601] loop2: detected capacity change from 0 to 32768 [ 408.425726][ T785] rc_core: IR keymap rc-hauppauge not found [ 408.437645][ T5191] usb 4-1: USB disconnect, device number 10 [ 408.465409][ T785] Registered IR keymap rc-empty [ 408.465426][ T8601] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8601) [ 408.509355][ T785] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1 [ 408.517158][ T8601] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 408.531053][ T8601] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 408.545407][ T8601] BTRFS info (device loop2): using free-space-tree [ 408.552431][ T785] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input31 [ 408.642768][ T8607] loop3: detected capacity change from 0 to 2048 [ 408.723298][ T8607] loop3: p3 < > p4 < > [ 408.760744][ T8607] loop3: partition table partially beyond EOD, truncated [ 408.773272][ T8607] loop3: p3 start 4284289 is beyond EOD, truncated [ 408.854097][ T29] audit: type=1800 audit(1718989199.775:360): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 408.909151][ T29] audit: type=1800 audit(1718989199.775:361): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 408.963829][ T5110] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 409.762935][ T8631] loop2: detected capacity change from 0 to 2048 [ 409.807059][ T8631] udf: Unknown parameter 'iocharlt' [ 410.407017][ T5159] usb 5-1: USB disconnect, device number 10 [ 410.454835][ T8627] loop1: detected capacity change from 0 to 32768 [ 410.535286][ T8627] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8627) [ 410.642603][ T8627] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 410.669733][ T8627] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 410.683778][ T8627] BTRFS info (device loop1): using free-space-tree [ 410.756516][ T8493] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.772242][ T8493] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.780311][ T8493] bridge_slave_0: entered allmulticast mode [ 410.847793][ T8493] bridge_slave_0: entered promiscuous mode [ 410.941152][ T8493] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.949415][ T8493] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.957485][ T8493] bridge_slave_1: entered allmulticast mode [ 410.975917][ T8493] bridge_slave_1: entered promiscuous mode [ 411.673773][ T8493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.698347][ T8627] BTRFS warning (device loop1): can't clear the compat:0,compat:2 feature bits while mounted [ 411.701202][ T8629] loop3: detected capacity change from 0 to 32768 [ 411.719380][ T8493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.760574][ T8629] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8629) [ 411.854514][ T8629] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 411.874672][ T8629] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 411.894409][ T8493] team0: Port device team_slave_0 added [ 411.894818][ T8629] BTRFS info (device loop3): using free-space-tree [ 411.922480][ T5106] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 411.987211][ T8493] team0: Port device team_slave_1 added [ 412.037159][ T8638] loop4: detected capacity change from 0 to 32768 [ 412.168984][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.205723][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.266501][ T8638] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=zstd,nojournal_transaction_names [ 412.293353][ T8638] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 412.302479][ T8493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.316537][ T29] audit: type=1400 audit(1718989203.245:362): avc: denied { ioctl } for pid=8628 comm="syz-executor.3" path="/root/syzkaller-testdir2049325047/syzkaller.oFHxi1/14/file0/memory.events" dev="loop3" ino=263 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 412.336373][ T8493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.359320][ T8684] btrfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ1844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 412.409828][ T8493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.488198][ T8638] bcachefs (loop4): alloc_read... done [ 412.508565][ T8493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.533000][ T8638] bcachefs (loop4): stripes_read... done [ 412.556704][ T8638] bcachefs (loop4): snapshots_read... done [ 412.581711][ T8638] bcachefs (loop4): journal_replay... done [ 412.606302][ T8638] bcachefs (loop4): resume_logged_ops... done [ 412.617615][ T8133] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 412.648388][ T8638] bcachefs (loop4): going read-write [ 412.675742][ T8638] bcachefs (loop4): done starting filesystem [ 412.717073][ T8493] hsr_slave_0: entered promiscuous mode [ 412.756198][ T8493] hsr_slave_1: entered promiscuous mode [ 413.126375][ T5105] bcachefs (loop4): shutting down [ 413.218907][ T5105] bcachefs (loop4): going read-only [ 413.224333][ T5105] bcachefs (loop4): finished waiting for writes to stop [ 413.259863][ T5105] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 413.279713][ T8692] loop3: detected capacity change from 0 to 2048 [ 413.332117][ T8692] udf: Unknown parameter 'iocharlt' [ 413.347623][ T5105] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 15 [ 413.376463][ T5105] bcachefs (loop4): shutdown complete, journal seq 16 [ 413.416099][ T5105] bcachefs (loop4): marking filesystem clean [ 413.618352][ T5105] bcachefs (loop4): shutdown complete [ 415.159777][ T8493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 415.210936][ T8493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 415.254059][ T8493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 415.293388][ T8493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 415.351481][ T8688] loop1: detected capacity change from 0 to 65536 [ 415.412144][ T8688] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 415.560166][ T8688] XFS (loop1): Ending clean mount [ 415.588128][ T8688] XFS (loop1): Quotacheck needed: Please wait. [ 415.724507][ T8493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.736941][ T8701] loop3: detected capacity change from 0 to 32768 [ 415.764926][ T8712] loop2: detected capacity change from 0 to 2048 [ 415.769169][ T8701] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (8701) [ 415.810065][ T8688] XFS (loop1): Quotacheck: Done. [ 415.837951][ T8701] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 415.851265][ T8712] loop2: p3 < > p4 < > [ 415.858079][ T8493] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.875040][ T8712] loop2: partition table partially beyond EOD, truncated [ 415.875880][ T5106] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 415.882261][ T8712] loop2: p3 start 4284289 is beyond EOD, [ 415.891601][ T8701] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 415.907138][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.907315][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.926268][ T8701] BTRFS info (device loop3): using free-space-tree [ 415.926782][ T8712] truncated [ 415.939920][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.947156][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.110474][ T29] audit: type=1800 audit(1718989207.035:363): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 416.198200][ T29] audit: type=1800 audit(1718989207.065:364): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 416.316243][ T8133] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 416.914213][ T8733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.920704][ T8733] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 417.125241][ T8733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 417.131237][ T8733] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 417.202681][ T8738] o2cb: This node has not been configured. [ 417.209035][ T8738] o2cb: Cluster check failed. Fix errors before retrying. [ 417.216494][ T8738] (syz-executor.2,8738,1):user_dlm_register:674 ERROR: status = -22 [ 417.224582][ T8738] (syz-executor.2,8738,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 418.552332][ T8493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.071816][ T8493] veth0_vlan: entered promiscuous mode [ 421.095908][ T29] audit: type=1400 audit(1718989212.005:365): avc: denied { write } for pid=8740 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 421.117970][ T8493] veth1_vlan: entered promiscuous mode [ 421.234662][ T8493] veth0_macvtap: entered promiscuous mode [ 421.280391][ T8493] veth1_macvtap: entered promiscuous mode [ 421.332855][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.352415][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.373662][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.415707][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.451652][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.487595][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.517720][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.558754][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.582818][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.652595][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.692383][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.722062][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.744072][ T8770] overlayfs: missing 'workdir' [ 421.750129][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.772248][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.816425][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.869058][ T8493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.901001][ T8493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.934912][ T8493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.944259][ T8762] loop2: detected capacity change from 0 to 32768 [ 421.990517][ T8493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.009021][ T8493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.023205][ T8493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.042879][ T8493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.323950][ T8762] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=zstd,nojournal_transaction_names [ 422.380061][ T8762] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 422.385075][ T2817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.419862][ T2817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.496612][ T2817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.527203][ T2817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.561794][ T8762] bcachefs (loop2): alloc_read... done [ 422.579063][ T8762] bcachefs (loop2): stripes_read... done [ 422.615336][ T8762] bcachefs (loop2): snapshots_read... done [ 422.637502][ T8762] bcachefs (loop2): journal_replay... done [ 422.643506][ T8762] bcachefs (loop2): resume_logged_ops... done [ 422.690206][ T8762] bcachefs (loop2): going read-write [ 422.735133][ T8762] bcachefs (loop2): done starting filesystem [ 422.978346][ T5110] bcachefs (loop2): shutting down [ 422.993799][ T5110] bcachefs (loop2): going read-only [ 423.012259][ T8789] overlayfs: missing 'workdir' [ 423.027646][ T5110] bcachefs (loop2): finished waiting for writes to stop [ 423.096045][ T5110] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 423.139344][ T5110] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 423.183414][ T5110] bcachefs (loop2): shutdown complete, journal seq 14 [ 423.218750][ T5110] bcachefs (loop2): marking filesystem clean [ 423.332852][ T5110] bcachefs (loop2): shutdown complete [ 424.110078][ T8798] o2cb: This node has not been configured. [ 424.116223][ T8798] o2cb: Cluster check failed. Fix errors before retrying. [ 424.123477][ T8798] (syz-executor.0,8798,1):user_dlm_register:674 ERROR: status = -22 [ 424.131651][ T8798] (syz-executor.0,8798,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 424.733248][ T8801] loop4: detected capacity change from 0 to 2048 [ 424.754885][ T8796] loop3: detected capacity change from 0 to 2048 [ 424.764308][ T8801] udf: Unknown parameter 'iocharlt' [ 424.891416][ T8796] loop3: p3 < > p4 < > [ 424.908851][ T8796] loop3: partition table partially beyond EOD, truncated [ 424.945196][ T8796] loop3: p3 start 4284289 is beyond EOD, truncated [ 426.865529][ T8812] overlayfs: missing 'workdir' [ 426.932434][ T8817] loop4: detected capacity change from 0 to 256 [ 426.977582][ T8817] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 427.074766][ T8823] loop1: detected capacity change from 0 to 512 [ 427.120878][ T8823] EXT4-fs: Ignoring removed orlov option [ 427.169436][ T8823] EXT4-fs (loop1): Test dummy encryption mode enabled [ 427.231304][ T8823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0102] [ 427.258671][ T8823] System zones: 1-12 [ 427.281061][ T8823] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 427.302275][ T8823] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 427.329077][ T8823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.006375][ T8832] overlayfs: missing 'workdir' [ 428.185513][ T8821] loop2: detected capacity change from 0 to 32768 [ 428.206540][ T8835] loop3: detected capacity change from 0 to 8 [ 428.214514][ T8821] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (8821) [ 428.258693][ T8835] SQUASHFS error: lzo decompression failed, data probably corrupt [ 428.273371][ T8835] SQUASHFS error: Failed to read block 0x28d: -5 [ 428.281993][ T8835] SQUASHFS error: Unable to read metadata cache entry [28b] [ 428.290127][ T8835] SQUASHFS error: Unable to read inode 0x11f [ 428.341441][ T8821] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 428.359831][ T8821] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 428.384087][ T8821] BTRFS info (device loop2): using free-space-tree [ 428.691529][ T8835] loop3: detected capacity change from 0 to 2048 [ 428.701309][ T8835] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 428.714702][ T29] audit: type=1800 audit(1718989219.635:366): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 428.736467][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.751151][ T29] audit: type=1800 audit(1718989219.675:367): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 428.894246][ T5110] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 429.071352][ T8857] loop0: detected capacity change from 0 to 2048 [ 429.167108][ T8857] loop0: p3 < > p4 < > [ 429.185095][ T8857] loop0: partition table partially beyond EOD, truncated [ 429.251140][ T8857] loop0: p3 start 4284289 is beyond EOD, truncated [ 429.420302][ T8863] o2cb: This node has not been configured. [ 429.427044][ T8863] o2cb: Cluster check failed. Fix errors before retrying. [ 429.434313][ T8863] (syz-executor.3,8863,0):user_dlm_register:674 ERROR: status = -22 [ 429.442445][ T8863] (syz-executor.3,8863,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 430.273829][ T8865] loop2: detected capacity change from 0 to 64 [ 430.358949][ T8867] loop3: detected capacity change from 0 to 2048 [ 430.391163][ T8853] loop4: detected capacity change from 0 to 32768 [ 430.486244][ T8867] loop3: p3 < > p4 < > [ 430.514526][ T8867] loop3: partition table partially beyond EOD, truncated [ 430.525718][ T8867] loop3: p3 start 4284289 is beyond EOD, truncated [ 431.334433][ T8853] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=zstd,nojournal_transaction_names [ 431.378329][ T8853] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 431.500648][ T8853] bcachefs (loop4): alloc_read... done [ 431.535170][ T8853] bcachefs (loop4): stripes_read... done [ 431.540915][ T8853] bcachefs (loop4): snapshots_read... done [ 431.568405][ T8853] bcachefs (loop4): journal_replay... done [ 431.706264][ T8885] overlayfs: missing 'workdir' [ 431.717043][ T8853] bcachefs (loop4): resume_logged_ops... done [ 432.702114][ T8853] bcachefs (loop4): going read-write [ 432.795763][ T8853] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR [ 432.808216][ T5106] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.834349][ T8853] bcachefs (loop4): error starting copygc thread [ 432.865310][ T8853] bcachefs (loop4): going read-only [ 432.870597][ T8853] bcachefs (loop4): finished waiting for writes to stop [ 432.896004][ T8896] loop2: detected capacity change from 0 to 2048 [ 432.901648][ T8853] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 432.914698][ T8853] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 432.935561][ T8896] udf: Unknown parameter 'iocharlt' [ 432.950148][ T8853] bcachefs (loop4): shutdown complete, journal seq 11 [ 432.971316][ T8853] bcachefs (loop4): marking filesystem clean [ 432.985890][ T8853] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 432.994517][ T8853] bcachefs (loop4): shutting down [ 433.073255][ T8853] bcachefs (loop4): shutdown complete [ 434.211134][ T8909] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 436.349263][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 436.479348][ T8927] loop1: detected capacity change from 0 to 64 [ 436.522528][ T8916] loop0: detected capacity change from 0 to 32768 [ 436.549570][ T8916] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (8916) [ 436.562864][ T8923] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 436.589322][ T8928] loop2: detected capacity change from 0 to 8 [ 436.604062][ T8916] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 436.813682][ T8916] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 436.828969][ T8928] SQUASHFS error: lzo decompression failed, data probably corrupt [ 436.834321][ T8916] BTRFS info (device loop0): using free-space-tree [ 437.186290][ T8935] o2cb: This node has not been configured. [ 437.192152][ T8935] o2cb: Cluster check failed. Fix errors before retrying. [ 437.199413][ T8935] (syz-executor.4,8935,0):user_dlm_register:674 ERROR: status = -22 [ 437.208575][ T8935] (syz-executor.4,8935,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 437.498348][ T8928] SQUASHFS error: Failed to read block 0x28d: -5 [ 437.504903][ T8928] SQUASHFS error: Unable to read metadata cache entry [28b] [ 437.512421][ T8928] SQUASHFS error: Unable to read inode 0x11f [ 437.911001][ T8941] loop4: detected capacity change from 0 to 2048 [ 437.931448][ T8928] loop2: detected capacity change from 0 to 2048 [ 437.944282][ T8928] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 437.956164][ T8941] loop4: p3 < > p4 < > [ 437.972005][ T8941] loop4: partition table partially beyond EOD, truncated [ 438.015390][ T8941] loop4: p3 start 4284289 is beyond EOD, truncated [ 438.115034][ T29] audit: type=1800 audit(1718989229.035:368): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 438.222878][ T29] audit: type=1800 audit(1718989229.035:369): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 438.329373][ T8493] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 438.860559][ T8965] loop2: detected capacity change from 0 to 256 [ 438.907700][ T8965] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 439.351006][ T8967] loop4: detected capacity change from 0 to 8 [ 439.368732][ T8967] SQUASHFS error: lzo decompression failed, data probably corrupt [ 439.376772][ T8967] SQUASHFS error: Failed to read block 0x28d: -5 [ 439.383261][ T8967] SQUASHFS error: Unable to read metadata cache entry [28b] [ 439.391442][ T8967] SQUASHFS error: Unable to read inode 0x11f [ 440.447611][ T8958] loop1: detected capacity change from 0 to 32768 [ 440.494710][ T8958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8958) [ 440.556180][ T8958] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 440.604681][ T8966] loop3: detected capacity change from 0 to 512 [ 440.609370][ T8958] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 440.636924][ T8967] loop4: detected capacity change from 0 to 2048 [ 440.659813][ T8958] BTRFS info (device loop1): using free-space-tree [ 440.667695][ T8967] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 440.669194][ T8966] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0 [ 440.745954][ T8966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.764877][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.772561][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.293446][ T8995] loop4: detected capacity change from 0 to 64 [ 441.332772][ T5106] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 441.705850][ T8977] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 442.004126][ T9000] loop2: detected capacity change from 0 to 8 [ 442.501513][ T9004] loop1: detected capacity change from 0 to 256 [ 444.272673][ T8133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.491166][ T9014] o2cb: This node has not been configured. [ 444.497134][ T9014] o2cb: Cluster check failed. Fix errors before retrying. [ 444.504291][ T9014] (syz-executor.2,9014,1):user_dlm_register:674 ERROR: status = -22 [ 444.512407][ T9014] (syz-executor.2,9014,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 445.348344][ T9017] o2cb: This node has not been configured. [ 445.354201][ T9017] o2cb: Cluster check failed. Fix errors before retrying. [ 445.407498][ T9017] (syz-executor.3,9017,0):user_dlm_register:674 ERROR: status = -22 [ 445.445622][ T9017] (syz-executor.3,9017,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 445.561276][ T9019] loop4: detected capacity change from 0 to 8 [ 445.568428][ T9023] loop2: detected capacity change from 0 to 2048 [ 445.632197][ T9019] SQUASHFS error: lzo decompression failed, data probably corrupt [ 445.640512][ T9019] SQUASHFS error: Failed to read block 0x28d: -5 [ 445.647568][ T9019] SQUASHFS error: Unable to read metadata cache entry [28b] [ 445.655391][ T9019] SQUASHFS error: Unable to read inode 0x11f [ 445.711731][ T9023] loop2: p3 < > p4 < > [ 445.717818][ T9023] loop2: partition table partially beyond EOD, truncated [ 445.749080][ T9023] loop2: p3 start 4284289 is beyond EOD, truncated [ 445.872809][ T9026] overlayfs: missing 'workdir' [ 445.954145][ T9019] loop4: detected capacity change from 0 to 2048 [ 445.976215][ T9019] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 445.980546][ T9009] loop1: detected capacity change from 0 to 32768 [ 446.017313][ T9009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9009) [ 446.059890][ T9009] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 446.081772][ T9009] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 446.116372][ T9009] BTRFS info (device loop1): using free-space-tree [ 446.467673][ T5106] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 447.894610][ T9050] overlayfs: missing 'workdir' [ 447.901142][ T9052] loop2: detected capacity change from 0 to 512 [ 447.914623][ T9054] loop0: detected capacity change from 0 to 1024 [ 447.953816][ T9052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 448.036553][ T9052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c02c, mo2=0002] [ 448.085550][ T9052] System zones: 1-12 [ 448.129625][ T9052] EXT4-fs (loop2): 1 truncate cleaned up [ 448.160523][ T9059] loop3: detected capacity change from 0 to 8 [ 448.196465][ T9052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.384682][ T9061] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 448.420024][ T29] audit: type=1804 audit(1718989239.345:370): pid=9052 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/179/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 449.365818][ T9061] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.452201][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.610439][ T9073] o2cb: This node has not been configured. [ 449.616426][ T9073] o2cb: Cluster check failed. Fix errors before retrying. [ 449.623794][ T9073] (syz-executor.4,9073,0):user_dlm_register:674 ERROR: status = -22 [ 449.632108][ T9073] (syz-executor.4,9073,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 449.713035][ T9072] loop3: detected capacity change from 0 to 256 [ 451.107920][ T9079] loop2: detected capacity change from 0 to 64 [ 451.375432][ T9081] loop4: detected capacity change from 0 to 2048 [ 451.507909][ T9081] loop4: p3 < > p4 < > [ 451.512138][ T9081] loop4: partition table partially beyond EOD, truncated [ 451.565351][ T9081] loop4: p3 start 4284289 is beyond EOD, truncated [ 451.798634][ T9087] loop3: detected capacity change from 0 to 8 [ 451.825339][ T9087] SQUASHFS error: lzo decompression failed, data probably corrupt [ 451.833388][ T9087] SQUASHFS error: Failed to read block 0x28d: -5 [ 451.840146][ T9087] SQUASHFS error: Unable to read metadata cache entry [28b] [ 451.847588][ T9087] SQUASHFS error: Unable to read inode 0x11f [ 452.136989][ T9087] loop3: detected capacity change from 0 to 2048 [ 452.153946][ T9087] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 452.623392][ T9092] loop2: detected capacity change from 0 to 2048 [ 452.691770][ T9092] loop2: p3 < > p4 < > [ 452.710606][ T9092] loop2: partition table partially beyond EOD, truncated [ 452.742131][ T9092] loop2: p3 start 4284289 is beyond EOD, truncated [ 453.070593][ T2817] hfsplus: b-tree write err: -5, ino 4 [ 453.248468][ T9075] loop1: detected capacity change from 0 to 65536 [ 453.251045][ T9090] loop4: detected capacity change from 0 to 512 [ 453.271971][ T9096] overlayfs: missing 'workdir' [ 453.354244][ T9075] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 453.407467][ T9075] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 453.408472][ T9075] XFS (loop1): log mount failed [ 453.440538][ T9090] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz-executor.4: Invalid inode bitmap blk 4 in block_group 0 [ 453.502886][ T9090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.564152][ T9109] o2cb: This node has not been configured. [ 453.570974][ T9109] o2cb: Cluster check failed. Fix errors before retrying. [ 453.578349][ T9109] (syz-executor.0,9109,1):user_dlm_register:674 ERROR: status = -22 [ 453.586645][ T9109] (syz-executor.0,9109,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 454.488524][ T9111] loop2: detected capacity change from 0 to 64 [ 454.622346][ T9113] loop0: detected capacity change from 0 to 512 [ 454.692749][ T9113] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 454.729014][ T9113] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c02c, mo2=0002] [ 454.865287][ T9113] System zones: 1-12 [ 454.892757][ T9113] EXT4-fs (loop0): 1 truncate cleaned up [ 454.923694][ T9113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.385587][ T9107] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 455.565145][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 455.618165][ T29] audit: type=1804 audit(1718989246.545:371): pid=9113 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir18893390/syzkaller.5Txjy2/14/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 455.644519][ C1] vkms_vblank_simulate: vblank timer overrun [ 455.719063][ T8493] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.985511][ T8] usb 5-1: device not accepting address 11, error -71 [ 456.272355][ T9125] loop3: detected capacity change from 0 to 512 [ 457.278184][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.368046][ T9136] loop0: detected capacity change from 0 to 64 [ 457.446845][ T9125] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0 [ 457.723155][ T9125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.729739][ T9126] loop2: detected capacity change from 0 to 512 [ 457.760832][ T9126] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz-executor.2: Invalid inode bitmap blk 4 in block_group 0 [ 457.977329][ T9126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.035892][ T9146] loop4: detected capacity change from 0 to 2048 [ 458.205563][ T9146] loop4: p3 < > p4 < > [ 458.224325][ T9146] loop4: partition table partially beyond EOD, truncated [ 458.285174][ T9146] loop4: p3 start 4284289 is beyond EOD, truncated [ 458.515849][ T9133] loop1: detected capacity change from 0 to 32768 [ 458.543979][ T9133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (9133) [ 458.646022][ T9133] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 458.669515][ T9133] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 458.684600][ T8133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.697724][ T9133] BTRFS info (device loop1): using free-space-tree [ 459.193373][ T9167] loop3: detected capacity change from 0 to 1024 [ 459.270557][ T9169] loop4: detected capacity change from 0 to 2048 [ 459.358487][ T5106] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 459.362691][ T9169] loop4: p3 < > p4 < > [ 459.405207][ T9169] loop4: partition table partially beyond EOD, truncated [ 459.460103][ T9169] loop4: p3 start 4284289 is beyond EOD, truncated [ 459.485917][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 459.667123][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.872779][ T9175] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:0 [ 460.149985][ T29] audit: type=1400 audit(1718989251.075:372): avc: denied { bind } for pid=9177 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.170661][ T9178] Bluetooth: MGMT ver 1.22 [ 460.178109][ T29] audit: type=1400 audit(1718989251.095:373): avc: denied { write } for pid=9177 comm="syz-executor.2" path="socket:[21571]" dev="sockfs" ino=21571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 460.398623][ T9178] loop2: detected capacity change from 0 to 32768 [ 460.406187][ T9178] XFS: ikeep mount option is deprecated. [ 460.569128][ T9178] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 460.759223][ T9178] XFS (loop2): Ending clean mount [ 460.771068][ T9178] XFS (loop2): Quotacheck needed: Please wait. [ 460.879256][ T9178] XFS (loop2): Quotacheck: Done. [ 460.998134][ T29] audit: type=1804 audit(1718989251.925:374): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2063573541/syzkaller.86DTWL/149/file0" dev="sda1" ino=1955 res=1 errno=0 [ 461.149736][ T5110] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 461.902617][ T9201] loop2: detected capacity change from 0 to 512 [ 461.943361][ T9201] EXT4-fs: Ignoring removed orlov option [ 461.973641][ T9201] EXT4-fs (loop2): Test dummy encryption mode enabled [ 462.019696][ T9201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0102] [ 462.044420][ T144] hfsplus: b-tree write err: -5, ino 4 [ 462.055166][ T9201] System zones: 1-12 [ 462.072525][ T9201] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 462.131469][ T9201] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 462.152173][ T9201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.225612][ T9174] loop1: detected capacity change from 0 to 65536 [ 462.330551][ T9174] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 462.349010][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.401179][ T9174] XFS (loop1): Ending clean mount [ 462.418162][ T9174] XFS (loop1): Quotacheck needed: Please wait. [ 462.461111][ T9216] loop3: detected capacity change from 0 to 64 [ 462.576419][ T9174] XFS (loop1): Quotacheck: Done. [ 463.399752][ T9202] loop0: detected capacity change from 0 to 512 [ 463.536417][ T5106] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 463.829196][ T9221] loop2: detected capacity change from 0 to 512 [ 463.849710][ T9202] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz-executor.0: Invalid inode bitmap blk 4 in block_group 0 [ 463.876466][ T9226] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.970459][ T9221] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz-executor.2: Invalid inode bitmap blk 4 in block_group 0 [ 464.099282][ T9202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.153885][ T9221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.540782][ T5191] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 464.699280][ T9229] loop1: detected capacity change from 0 to 16 [ 464.712175][ T9229] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 464.751596][ T9204] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 464.776586][ T5191] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 464.793656][ T5191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.834453][ T5191] usb 1-1: config 0 descriptor?? [ 464.834999][ T29] audit: type=1400 audit(1718989255.755:375): avc: denied { read } for pid=9228 comm="syz-executor.1" name="file1" dev="loop1" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=lnk_file permissive=1 [ 464.866444][ T5191] rndis_host 1-1:0.0: More than one union descriptor, skipping ... [ 464.904825][ T5191] usb 1-1: bad CDC descriptors [ 464.941533][ T5191] cdc_acm 1-1:0.0: More than one union descriptor, skipping ... [ 464.950146][ T29] audit: type=1400 audit(1718989255.775:376): avc: denied { mounton } for pid=9228 comm="syz-executor.1" path="/root/syzkaller-testdir366199291/syzkaller.nk9KJR/163/file1/file0" dev="loop1" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:romfs_t tclass=file permissive=1 [ 465.025408][ T29] audit: type=1326 audit(1718989255.905:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9c87cf29 code=0x7ffc0000 [ 465.091159][ T9236] overlayfs: missing 'workdir' [ 465.091230][ T29] audit: type=1326 audit(1718989255.905:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9c87cf29 code=0x7ffc0000 [ 465.198400][ T29] audit: type=1326 audit(1718989255.905:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c9c87cf29 code=0x7ffc0000 [ 465.302706][ T9239] loop1: detected capacity change from 0 to 2048 [ 465.304719][ T29] audit: type=1326 audit(1718989255.915:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9c87cf29 code=0x7ffc0000 [ 465.404142][ T29] audit: type=1326 audit(1718989255.915:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c9c87cf29 code=0x7ffc0000 [ 465.445296][ T29] audit: type=1326 audit(1718989255.915:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9c87cf29 code=0x7ffc0000 [ 465.474240][ T29] audit: type=1326 audit(1718989255.915:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9228 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c9c87cf29 code=0x7ffc0000 [ 465.498579][ T9239] loop1: p2 p3 p7 [ 465.722221][ T929] usb 1-1: USB disconnect, device number 13 [ 465.768589][ T8493] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.951495][ T5110] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.951902][ T9246] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 465.996622][ T9248] loop3: detected capacity change from 0 to 64 [ 466.045583][ T9244] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 466.053967][ T9244] ipvlan1: entered promiscuous mode [ 466.126694][ T9253] loop1: detected capacity change from 0 to 512 [ 466.293836][ T9252] loop2: detected capacity change from 0 to 1024 [ 466.314523][ T9244] team0: Device ipvlan1 failed to register rx_handler [ 466.324749][ T9253] EXT4-fs warning (device loop1): ext4_enable_quotas:7074: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 466.981460][ T9253] EXT4-fs (loop1): mount failed [ 467.077699][ T9253] fuse: Bad value for 'rootmode' [ 467.105405][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 467.105424][ T29] audit: type=1400 audit(1718989258.025:390): avc: denied { read } for pid=9249 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 467.168860][ T9259] loop3: detected capacity change from 0 to 64 [ 467.245167][ T29] audit: type=1400 audit(1718989258.025:391): avc: denied { open } for pid=9249 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 468.461102][ T9274] loop1: detected capacity change from 0 to 1024 [ 468.506148][ T9274] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 468.531264][ T9274] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 468.569350][ T9274] JBD2: no valid journal superblock found [ 468.581441][ T9274] EXT4-fs (loop1): Could not load journal inode [ 468.692879][ T9274] loop1: detected capacity change from 0 to 512 [ 469.067925][ T5191] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 469.296759][ T5191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 469.325003][ T5191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26623, setting to 1024 [ 469.355155][ T5191] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.395028][ T5191] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.404234][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.431007][ T9278] loop3: detected capacity change from 0 to 24 [ 469.451618][ T9278] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 469.466335][ T5191] usb 2-1: config 0 descriptor?? [ 469.476760][ T9274] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 469.506250][ T9278] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 469.799515][ T2817] hfsplus: b-tree write err: -5, ino 4 [ 469.934214][ T5191] plantronics 0003:047F:FFFF.0002: item fetching failed at offset 12/15 [ 470.450948][ T5191] plantronics 0003:047F:FFFF.0002: parse failed [ 470.458538][ T5191] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 470.534392][ T9274] loop1: detected capacity change from 0 to 64 [ 470.820486][ T29] audit: type=1400 audit(1718989261.745:392): avc: denied { rename } for pid=9269 comm="syz-executor.1" name="file0" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 470.868457][ T29] audit: type=1400 audit(1718989261.795:393): avc: denied { bind } for pid=9269 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 471.071854][ T9295] loop3: detected capacity change from 0 to 32768 [ 471.079346][ T9295] btrfs: Unknown parameter 'measure' [ 471.265014][ T45] usb 2-1: USB disconnect, device number 22 [ 471.460604][ T9295] loop3: detected capacity change from 0 to 32768 [ 471.472576][ T29] audit: type=1400 audit(1718989262.195:394): avc: denied { mount } for pid=9294 comm="syz-executor.3" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 471.498367][ T9295] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas_v0: no devices in entry need_discard: 1/0 [] [ 471.498367][ T9295] replicas_v0 (size 40): [ 471.498367][ T9295] need_discard: 0 [] [ 471.498367][ T9295] [ 471.559243][ T29] audit: type=1400 audit(1718989262.395:395): avc: denied { mounton } for pid=9294 comm="syz-executor.3" path="/root/syzkaller-testdir2049325047/syzkaller.oFHxi1/41/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 472.127500][ T9304] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 472.168977][ T9304] team0: Device ipvlan1 failed to register rx_handler [ 472.183010][ T9307] loop1: detected capacity change from 0 to 8 [ 472.376883][ T9310] loop2: detected capacity change from 0 to 64 [ 474.044025][ T9321] loop1: detected capacity change from 0 to 1024 [ 474.059356][ T29] audit: type=1400 audit(1718989264.985:396): avc: denied { sqpoll } for pid=9317 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 474.117101][ T9318] loop0: detected capacity change from 0 to 8 [ 474.132947][ T9318] squashfs: Unknown parameter '/dev/kvm' [ 474.801504][ T9326] loop3: detected capacity change from 0 to 2048 [ 474.821052][ T9326] udf: Unknown parameter 'iocharlt' [ 475.131778][ T29] audit: type=1400 audit(1718989265.225:397): avc: denied { mount } for pid=9325 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 475.205510][ T29] audit: type=1400 audit(1718989266.095:398): avc: denied { create } for pid=9317 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 475.227996][ T29] audit: type=1400 audit(1718989266.155:399): avc: denied { unmount } for pid=5105 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 475.275057][ T29] audit: type=1400 audit(1718989266.155:400): avc: denied { bind } for pid=9317 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 475.330984][ T29] audit: type=1400 audit(1718989266.175:401): avc: denied { bind } for pid=9317 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 475.409386][ T29] audit: type=1400 audit(1718989266.335:402): avc: denied { read } for pid=9335 comm="syz-executor.4" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 475.482704][ T29] audit: type=1400 audit(1718989266.335:403): avc: denied { open } for pid=9335 comm="syz-executor.4" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 476.757583][ T29] audit: type=1400 audit(1718989267.655:404): avc: denied { write } for pid=9335 comm="syz-executor.4" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 476.990730][ T9348] loop4: detected capacity change from 0 to 1024 [ 477.017030][ T9348] hfsplus: failed to load root directory [ 477.182205][ T9350] loop3: detected capacity change from 0 to 1024 [ 477.314140][ T9350] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 477.401089][ T9350] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 477.416206][ T9350] JBD2: no valid journal superblock found [ 477.428843][ T9350] EXT4-fs (loop3): Could not load journal inode [ 477.447783][ T2459] hfsplus: b-tree write err: -5, ino 4 [ 477.594013][ T9350] loop3: detected capacity change from 0 to 512 [ 477.679996][ T29] audit: type=1400 audit(1718989268.595:405): avc: denied { nlmsg_write } for pid=9353 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 477.893471][ T9360] loop4: detected capacity change from 0 to 64 [ 478.254593][ T9358] loop2: detected capacity change from 0 to 40427 [ 478.341523][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 478.401605][ T9358] F2FS-fs (loop2): invalid crc value [ 478.474333][ T9358] F2FS-fs (loop2): Found nat_bits in checkpoint [ 478.566523][ T9358] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 479.185462][ T9371] bio_check_eod: 10 callbacks suppressed [ 479.185534][ T9371] syz-executor.2: attempt to access beyond end of device [ 479.185534][ T9371] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 479.238852][ T9371] syz-executor.2: attempt to access beyond end of device [ 479.238852][ T9371] loop2: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 479.886201][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 479.922276][ T29] audit: type=1400 audit(1718989269.965:406): avc: denied { mounton } for pid=9357 comm="syz-executor.2" path="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/192/file0/bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 480.436914][ T29] audit: type=1800 audit(1718989270.025:407): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=19 res=0 errno=0 [ 480.575382][ T29] audit: type=1804 audit(1718989270.215:408): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/192/file0/file2" dev="loop2" ino=19 res=1 errno=0 [ 480.727970][ T29] audit: type=1400 audit(1718989270.825:409): avc: denied { setattr } for pid=9357 comm="syz-executor.2" path="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/192/file0" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 481.069441][ T8] usb 4-1: unable to read config index 0 descriptor/all [ 481.076986][ T8] usb 4-1: can't read configurations, error -71 [ 481.397505][ T29] audit: type=1800 audit(1718989272.245:410): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=19 res=0 errno=0 [ 481.447806][ T5110] syz-executor.2: attempt to access beyond end of device [ 481.447806][ T5110] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 481.465853][ T9386] 9pnet_fd: Insufficient options for proto=fd [ 481.473471][ T9388] loop0: detected capacity change from 0 to 1024 [ 481.483518][ T5110] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 481.496506][ T5110] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 481.520713][ T5110] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 481.900611][ T9392] loop3: detected capacity change from 0 to 1024 [ 481.954551][ T9392] ext4: Bad value for 'min_batch_time' [ 482.044457][ T9392] loop3: detected capacity change from 0 to 256 [ 482.090908][ T9392] FAT-fs (loop3): Unrecognized mount option "shortname=winnt6Jodepage=864" or missing value [ 482.114124][ T9374] loop1: detected capacity change from 0 to 40427 [ 482.137555][ T9374] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 482.165063][ T9374] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 482.187989][ T9374] F2FS-fs (loop1): invalid crc value [ 482.226266][ T9374] F2FS-fs (loop1): Wrong journal entry on segno 1280 [ 482.264728][ T9374] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 482.929150][ T9403] loop3: detected capacity change from 0 to 64 [ 483.276310][ T29] audit: type=1400 audit(1718989274.205:411): avc: denied { open } for pid=9373 comm="syz-executor.1" path="/dev/ptyq7" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 483.502903][ T29] audit: type=1400 audit(1718989274.205:412): avc: denied { ioctl } for pid=9373 comm="syz-executor.1" path="/dev/ptyq7" dev="devtmpfs" ino=128 ioctlcmd=0x5402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 484.034331][ T9374] loop1: detected capacity change from 0 to 4096 [ 484.045565][ T9374] ntfs3: Unknown parameter 'smackfsdef' [ 484.069807][ T29] audit: type=1400 audit(1718989274.995:413): avc: denied { write } for pid=9405 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 484.149092][ T9413] loop3: detected capacity change from 0 to 8 [ 484.220728][ T9413] unable to read fragment index table [ 484.472120][ T9410] loop4: detected capacity change from 0 to 4096 [ 484.526308][ T9410] NILFS (loop4): invalid segment: Checksum error in segment payload [ 484.541209][ T9410] NILFS (loop4): trying rollback from an earlier position [ 484.578611][ T9419] loop3: detected capacity change from 0 to 64 [ 484.637554][ T9410] NILFS (loop4): recovery complete [ 484.684254][ T9420] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 485.005768][ T2424] hfsplus: b-tree write err: -5, ino 4 [ 485.786976][ T29] audit: type=1400 audit(1718989276.695:414): avc: denied { set_context_mgr } for pid=9425 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 485.895954][ T29] audit: type=1400 audit(1718989276.825:415): avc: denied { unmount } for pid=5105 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 485.993483][ T29] audit: type=1400 audit(1718989276.895:416): avc: denied { ioctl } for pid=9424 comm="syz-executor.0" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 486.061575][ T29] audit: type=1400 audit(1718989276.925:417): avc: denied { map } for pid=9425 comm="syz-executor.3" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 486.080206][ T9428] mkiss: ax0: crc mode is auto. [ 486.153744][ T9429] loop0: detected capacity change from 0 to 256 [ 486.455877][ T29] audit: type=1400 audit(1718989277.385:418): avc: denied { call } for pid=9425 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 486.689830][ T29] audit: type=1400 audit(1718989277.615:419): avc: denied { read } for pid=9437 comm="syz-executor.2" name="mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 486.779501][ T29] audit: type=1400 audit(1718989277.615:420): avc: denied { open } for pid=9437 comm="syz-executor.2" path="/dev/input/mice" dev="devtmpfs" ino=832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 486.832915][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 486.856625][ T9436] loop4: detected capacity change from 0 to 256 [ 486.927063][ T29] audit: type=1400 audit(1718989277.635:421): avc: denied { ioctl } for pid=9437 comm="syz-executor.2" path="/dev/input/mice" dev="devtmpfs" ino=832 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 486.983733][ T29] audit: type=1400 audit(1718989277.895:422): avc: denied { write } for pid=9435 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 486.991814][ T9440] syz-executor.2 (pid 9440) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 487.095212][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 487.103804][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 487.133114][ T8] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 487.166265][ T8] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 487.177512][ T29] audit: type=1400 audit(1718989278.095:423): avc: denied { mount } for pid=9439 comm="syz-executor.2" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 487.214991][ T8] usb 1-1: Product: syz [ 487.219206][ T8] usb 1-1: Manufacturer: syz [ 487.245107][ T8] usb 1-1: SerialNumber: syz [ 487.254389][ T8] usb 1-1: config 0 descriptor?? [ 487.271056][ T9429] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 487.529384][ T9447] loop4: detected capacity change from 0 to 512 [ 487.542813][ T9448] overlayfs: missing 'workdir' [ 487.614743][ T785] usb 1-1: USB disconnect, device number 14 [ 487.680260][ T9447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.693378][ T9447] ext4 filesystem being mounted at /root/syzkaller-testdir2063573541/syzkaller.86DTWL/162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.267332][ T9442] loop3: detected capacity change from 0 to 32768 [ 488.289045][ T9442] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (9442) [ 488.361356][ T9442] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 488.378650][ T9442] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 488.407542][ T9442] BTRFS info (device loop3): using free-space-tree [ 488.718922][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.906374][ T9478] loop0: detected capacity change from 0 to 64 [ 488.994228][ T9483] loop4: detected capacity change from 0 to 1024 [ 489.923046][ T8133] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 489.976417][ T9493] loop1: detected capacity change from 0 to 512 [ 490.423430][ T9501] overlayfs: missing 'workdir' [ 490.479606][ T9507] loop0: detected capacity change from 0 to 1024 [ 490.559849][ T9508] overlayfs: missing 'workdir' [ 490.569063][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.649751][ T9511] loop3: detected capacity change from 0 to 1024 [ 490.730178][ T9511] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 490.761819][ T9511] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 490.805404][ T9511] JBD2: no valid journal superblock found [ 490.818030][ T9511] EXT4-fs (loop3): Could not load journal inode [ 490.978540][ T9511] loop3: detected capacity change from 0 to 512 [ 491.330002][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 491.330021][ T29] audit: type=1804 audit(1718989282.235:426): pid=9520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/200/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 491.345214][ T5189] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 491.445986][ T8] IPVS: starting estimator thread 0... [ 491.585181][ T9522] IPVS: using max 32 ests per chain, 76800 per kthread [ 491.599287][ T5189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 219, changing to 11 [ 491.689975][ T5189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26623, setting to 1024 [ 491.721020][ T2459] hfsplus: b-tree write err: -5, ino 4 [ 491.738065][ T5189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 491.751733][ T5189] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.760925][ T5189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.809795][ T5189] usb 4-1: config 0 descriptor?? [ 491.828455][ T9511] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 492.075155][ T29] audit: type=1400 audit(1718989282.985:427): avc: denied { write } for pid=9526 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 492.364065][ T5189] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 12/15 [ 492.416231][ T5189] plantronics 0003:047F:FFFF.0003: parse failed [ 492.436301][ T5189] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 492.827413][ T9511] loop3: detected capacity change from 0 to 64 [ 493.052485][ T9518] loop0: detected capacity change from 0 to 65536 [ 493.181567][ T9554] loop2: detected capacity change from 0 to 64 [ 493.199616][ T9518] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 493.217779][ T45] usb 4-1: USB disconnect, device number 13 [ 493.319064][ T9518] XFS (loop0): Ending clean mount [ 493.339330][ T9518] XFS (loop0): Quotacheck needed: Please wait. [ 494.189396][ T9518] XFS (loop0): Quotacheck: Done. [ 494.229617][ T8493] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 494.512201][ T9569] loop4: detected capacity change from 0 to 1024 [ 494.524894][ T29] audit: type=1400 audit(1718989285.445:428): avc: denied { setopt } for pid=9565 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 494.615069][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.697797][ T9571] loop2: detected capacity change from 0 to 64 [ 495.628746][ T29] audit: type=1400 audit(1718989286.015:429): avc: denied { accept } for pid=9573 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 495.652313][ T29] audit: type=1400 audit(1718989286.225:430): avc: denied { getopt } for pid=9573 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 495.837508][ T29] audit: type=1400 audit(1718989286.765:431): avc: denied { create } for pid=9583 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 496.094228][ T29] audit: type=1400 audit(1718989286.985:432): avc: denied { create } for pid=9581 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 496.130007][ T9593] overlayfs: missing 'workdir' [ 496.155128][ T29] audit: type=1400 audit(1718989287.065:433): avc: denied { ioctl } for pid=9581 comm="syz-executor.3" path="socket:[22038]" dev="sockfs" ino=22038 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 496.313526][ T29] audit: type=1400 audit(1718989287.225:434): avc: denied { setattr } for pid=9594 comm="syz-executor.2" name="vhost-net" dev="devtmpfs" ino=1084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 496.353915][ T9601] delete_channel: no stack [ 496.577340][ T929] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 496.825582][ T929] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.864268][ T929] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 496.903323][ T929] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.933484][ T9581] delete_channel: no stack [ 496.953383][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.018259][ T929] usb 2-1: invalid MIDI out EP 0 [ 497.057696][ T9606] loop2: detected capacity change from 0 to 64 [ 498.055776][ T9615] loop0: detected capacity change from 0 to 256 [ 498.118921][ T9615] exFAT-fs (loop0): bogus fat length [ 498.129027][ T9615] exFAT-fs (loop0): failed to read boot sector [ 498.149832][ T9615] exFAT-fs (loop0): failed to recognize exfat type [ 499.010711][ T9615] loop0: detected capacity change from 0 to 32768 [ 499.013807][ T929] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 499.089884][ T929] usb 2-1: USB disconnect, device number 23 [ 499.108025][ T9615] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (9615) [ 499.375334][ T9615] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 499.385545][ T9615] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 499.394361][ T9615] BTRFS info (device loop0): using free-space-tree [ 499.449569][ T29] audit: type=1400 audit(1718989290.375:435): avc: denied { append } for pid=9619 comm="syz-executor.2" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 499.473103][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.480336][ T9623] random: crng reseeded on system resumption [ 499.603462][ T2817] hfsplus: b-tree write err: -5, ino 4 [ 499.667415][ T9637] loop4: detected capacity change from 0 to 64 [ 499.687109][ T29] audit: type=1400 audit(1718989290.405:436): avc: denied { ioctl } for pid=9619 comm="syz-executor.2" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 500.787807][ T8493] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 500.835316][ T9631] loop1: detected capacity change from 0 to 8 [ 500.891361][ T9631] SQUASHFS error: lzo decompression failed, data probably corrupt [ 500.914547][ T9631] SQUASHFS error: Failed to read block 0x28d: -5 [ 500.939731][ T9631] SQUASHFS error: Unable to read metadata cache entry [28b] [ 500.958143][ T9631] SQUASHFS error: Unable to read inode 0x11f [ 500.978384][ T9649] loop4: detected capacity change from 0 to 64 [ 501.099184][ T9627] loop1: detected capacity change from 0 to 2048 [ 501.127274][ T9627] udf: Unknown parameter 'xœì’?NAÆ¿Y–?ZM¬h ‘(ʲ¨16Zbï$°"qQa7QÅc(' [ 501.652791][ T9657] fuse: Bad value for 'user_id' [ 502.026977][ T9657] input: syz1 as /devices/virtual/input/input32 [ 502.194855][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.204772][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.321910][ T9666] overlayfs: missing 'workdir' [ 502.349311][ T9668] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 502.367034][ T9673] loop3: detected capacity change from 0 to 64 [ 503.377311][ T9682] o2cb: This node has not been configured. [ 503.383227][ T9682] o2cb: Cluster check failed. Fix errors before retrying. [ 503.390597][ T9682] (syz-executor.1,9682,1):user_dlm_register:674 ERROR: status = -22 [ 503.398890][ T9682] (syz-executor.1,9682,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 503.524342][ T9684] loop4: detected capacity change from 0 to 1024 [ 503.721984][ T29] audit: type=1400 audit(1718989294.635:437): avc: denied { write } for pid=9686 comm="syz-executor.3" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 503.745248][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.769651][ T9688] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 503.797743][ T29] audit: type=1400 audit(1718989294.715:438): avc: denied { getopt } for pid=9661 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 504.238491][ T9700] loop1: detected capacity change from 0 to 64 [ 505.413443][ T29] audit: type=1400 audit(1718989296.315:439): avc: denied { create } for pid=9712 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 505.496559][ T29] audit: type=1400 audit(1718989296.425:440): avc: denied { create } for pid=9714 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 505.551152][ T29] audit: type=1400 audit(1718989296.435:441): avc: denied { setopt } for pid=9714 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 505.677605][ T9707] loop3: detected capacity change from 0 to 1024 [ 505.706859][ T9716] loop1: detected capacity change from 0 to 1024 [ 505.839512][ T9716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.148721][ T29] audit: type=1400 audit(1718989297.075:442): avc: denied { getopt } for pid=9712 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 506.200129][ T29] audit: type=1400 audit(1718989297.075:443): avc: denied { write } for pid=9712 comm="syz-executor.2" name="file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 506.265068][ T29] audit: type=1400 audit(1718989297.075:444): avc: denied { open } for pid=9712 comm="syz-executor.2" path="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/212/file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 506.346196][ T2459] hfsplus: b-tree write err: -5, ino 4 [ 506.592903][ T9721] kAFS: No cell specified [ 506.679306][ T9696] loop0: detected capacity change from 0 to 65536 [ 506.683922][ T9723] fuse: Bad value for 'user_id' [ 506.750919][ T9696] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 506.782452][ T9723] input: syz1 as /devices/virtual/input/input33 [ 506.791771][ T9696] XFS (loop0): Ending clean mount [ 506.912979][ T9734] overlayfs: missing 'workdir' [ 506.919777][ T9696] XFS (loop0): Quotacheck needed: Please wait. [ 506.972909][ T9736] loop3: detected capacity change from 0 to 64 [ 507.019185][ T9696] XFS (loop0): Quotacheck: Done. [ 507.120707][ T8493] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 507.321249][ T2459] hfsplus: b-tree write err: -5, ino 4 [ 508.214879][ T29] audit: type=1400 audit(1718989299.135:445): avc: denied { write } for pid=9745 comm="syz-executor.1" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 508.367794][ T29] audit: type=1400 audit(1718989299.275:446): avc: denied { unlink } for pid=5110 comm="syz-executor.2" name="file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 508.513747][ T9749] loop1: detected capacity change from 0 to 8 [ 509.395503][ T9749] SQUASHFS error: lzo decompression failed, data probably corrupt [ 509.410123][ T9749] SQUASHFS error: Failed to read block 0x28d: -5 [ 509.420886][ T9749] SQUASHFS error: Unable to read metadata cache entry [28b] [ 509.437720][ T9749] SQUASHFS error: Unable to read inode 0x11f [ 509.438436][ T9754] o2cb: This node has not been configured. [ 509.450535][ T9754] o2cb: Cluster check failed. Fix errors before retrying. [ 509.457899][ T9754] (syz-executor.2,9754,1):user_dlm_register:674 ERROR: status = -22 [ 509.465987][ T9754] (syz-executor.2,9754,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 509.545835][ T9758] loop4: detected capacity change from 0 to 64 [ 513.335361][ T29] audit: type=1400 audit(1718989304.245:447): avc: denied { write } for pid=9773 comm="syz-executor.3" name="uinput" dev="devtmpfs" ino=836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 513.378129][ T9779] loop3: detected capacity change from 0 to 128 [ 513.398431][ T9779] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 513.447177][ T9782] loop1: detected capacity change from 0 to 1024 [ 513.530799][ T9788] overlayfs: missing 'workdir' [ 514.043724][ T9776] loop2: detected capacity change from 0 to 1024 [ 514.391007][ T9792] batadv0: entered promiscuous mode [ 514.428403][ T29] audit: type=1400 audit(1718989305.355:448): avc: denied { create } for pid=9793 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 514.654993][ T29] audit: type=1400 audit(1718989305.575:449): avc: denied { read } for pid=9790 comm="syz-executor.3" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 514.918087][ T29] audit: type=1400 audit(1718989305.575:450): avc: denied { open } for pid=9790 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 514.918104][ T51] hfsplus: b-tree write err: -5, ino 4 [ 515.778545][ T29] audit: type=1400 audit(1718989305.625:451): avc: denied { ioctl } for pid=9790 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 515.803935][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.810415][ T29] audit: type=1400 audit(1718989305.815:452): avc: denied { map } for pid=9790 comm="syz-executor.3" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 515.834204][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.840480][ T29] audit: type=1400 audit(1718989305.815:453): avc: denied { execute } for pid=9790 comm="syz-executor.3" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 516.021403][ T9807] o2cb: This node has not been configured. [ 516.027348][ T9807] o2cb: Cluster check failed. Fix errors before retrying. [ 516.034577][ T9807] (syz-executor.4,9807,1):user_dlm_register:674 ERROR: status = -22 [ 516.042708][ T9807] (syz-executor.4,9807,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 516.105271][ T29] audit: type=1400 audit(1718989307.015:454): avc: denied { write } for pid=9804 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 516.466503][ T9810] loop3: detected capacity change from 0 to 512 [ 516.555174][ T9810] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 516.616479][ T9810] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 516.656090][ T9810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.090061][ T2817] hfsplus: b-tree write err: -5, ino 4 [ 517.225631][ T29] audit: type=1400 audit(1718989308.145:455): avc: denied { read } for pid=9816 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 517.250074][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.318044][ T9808] loop2: detected capacity change from 0 to 32768 [ 517.336420][ T29] audit: type=1400 audit(1718989308.265:456): avc: denied { setopt } for pid=9806 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 518.178285][ T9814] loop4: detected capacity change from 0 to 32768 [ 518.261729][ T9814] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (9814) [ 518.333871][ T9814] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 518.395253][ T9814] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 518.447882][ T9814] BTRFS info (device loop4): using free-space-tree [ 518.545147][ T29] audit: type=1400 audit(1718989309.405:457): avc: denied { setopt } for pid=9832 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 518.643824][ T29] audit: type=1400 audit(1718989309.455:458): avc: denied { create } for pid=9832 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 518.669989][ T29] audit: type=1400 audit(1718989309.465:459): avc: denied { create } for pid=9832 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 518.690699][ T29] audit: type=1400 audit(1718989309.535:460): avc: denied { write } for pid=9832 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 518.898662][ T8133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.975883][ T29] audit: type=1800 audit(1718989309.895:461): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 519.057725][ T29] audit: type=1804 audit(1718989309.965:462): pid=9814 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2063573541/syzkaller.86DTWL/179/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 519.084366][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.341180][ T9869] fuse: Unknown parameter 'fd}0x0000000000000009' [ 520.160331][ T5105] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 520.449430][ T9874] sg_write: data in/out 624/1 bytes for SCSI command 0xcb-- guessing data in; [ 520.449430][ T9874] program syz-executor.0 not setting count and/or reply_len properly [ 520.495599][ T9874] loop0: detected capacity change from 0 to 2048 [ 520.503742][ T9874] nilfs2: Unknown parameter './file0' [ 520.971232][ T9874] overlayfs: missing 'lowerdir' [ 521.424811][ T9875] loop3: detected capacity change from 0 to 256 [ 521.477044][ T9875] FAT-fs (loop3): Unrecognized mount option "uni_xlate=q" or missing value [ 522.162723][ T9881] loop4: detected capacity change from 0 to 512 [ 522.366963][ T9881] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 522.426428][ T9881] EXT4-fs (loop4): 1 truncate cleaned up [ 522.482645][ T9881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.690333][ T29] audit: type=1400 audit(1718989313.615:463): avc: denied { execute } for pid=9887 comm="syz-executor.2" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 522.695142][ T5161] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 522.783785][ T29] audit: type=1400 audit(1718989313.705:464): avc: denied { bind } for pid=9889 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.785240][ T9890] netdevsim netdevsim1 €: renamed from netdevsim0 (while UP) [ 522.831647][ T5105] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.915152][ T5161] usb 4-1: Using ep0 maxpacket: 32 [ 522.928723][ T5161] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 522.955565][ T5161] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 522.974287][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 522.992899][ T5161] usb 4-1: Product: syz [ 523.004993][ T5161] usb 4-1: Manufacturer: syz [ 523.009648][ T5161] usb 4-1: SerialNumber: syz [ 523.024010][ T9895] loop1: detected capacity change from 0 to 256 [ 523.042785][ T5161] usb 4-1: config 0 descriptor?? [ 523.065319][ T9886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 523.094813][ T9895] FAT-fs (loop1): Directory bread(block 64) failed [ 523.111914][ T9895] FAT-fs (loop1): Directory bread(block 65) failed [ 523.125252][ T9895] FAT-fs (loop1): Directory bread(block 66) failed [ 523.142132][ T9895] FAT-fs (loop1): Directory bread(block 67) failed [ 523.159981][ T9895] FAT-fs (loop1): Directory bread(block 68) failed [ 523.177041][ T9895] FAT-fs (loop1): Directory bread(block 69) failed [ 523.193913][ T9895] FAT-fs (loop1): Directory bread(block 70) failed [ 523.210816][ T9895] FAT-fs (loop1): Directory bread(block 71) failed [ 523.221049][ T9895] FAT-fs (loop1): Directory bread(block 72) failed [ 523.234993][ T9895] FAT-fs (loop1): Directory bread(block 73) failed [ 523.295252][ T929] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 523.316119][ T5161] usb 4-1: USB disconnect, device number 14 [ 523.358674][ T9877] loop0: detected capacity change from 0 to 65536 [ 523.406399][ T9877] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 523.424240][ T2459] kworker/u8:10: attempt to access beyond end of device [ 523.424240][ T2459] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 523.482301][ T9892] loop2: detected capacity change from 0 to 32768 [ 523.492391][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.497833][ T9892] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (9892) [ 523.507841][ T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.526764][ T929] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 523.530231][ T9877] XFS (loop0): Ending clean mount [ 523.536709][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.547281][ T9892] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 523.552338][ T929] usb 5-1: config 0 descriptor?? [ 523.570653][ T9892] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 523.580450][ T9892] BTRFS info (device loop2): using free-space-tree [ 523.590449][ T9877] XFS (loop0): Quotacheck needed: Please wait. [ 523.667847][ T9877] XFS (loop0): Quotacheck: Done. [ 523.716087][ T8493] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 523.767974][ T29] audit: type=1804 audit(1718989314.695:465): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir550322052/syzkaller.14Wmhi/218/file0/file1" dev="loop2" ino=260 res=1 errno=0 [ 523.997244][ T929] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 524.004567][ T929] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 524.006789][ T5110] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 524.025457][ T929] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 524.036939][ T929] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 524.070686][ T929] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 524.113696][ T929] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving [ 524.188404][ T929] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 524.309185][ T45] usb 5-1: USB disconnect, device number 13 [ 525.032453][ T9945] loop4: detected capacity change from 0 to 512 [ 525.087637][ T29] audit: type=1400 audit(1718989316.005:466): avc: denied { ioctl } for pid=9946 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=694 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 525.961669][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.013179][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.133157][ T29] audit: type=1400 audit(1718989317.055:467): avc: denied { ioctl } for pid=9964 comm="syz-executor.2" path="socket:[23062]" dev="sockfs" ino=23062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 526.213413][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.238553][ T29] audit: type=1400 audit(1718989317.055:468): avc: denied { bind } for pid=9964 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 526.266589][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.598539][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.699178][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 527.011083][ T9987] loop2: detected capacity change from 0 to 512 [ 527.115381][ T29] audit: type=1400 audit(1718989318.035:469): avc: denied { connect } for pid=9986 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 527.185028][ T29] audit: type=1400 audit(1718989318.105:470): avc: denied { write } for pid=9986 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 527.688501][ T9959] loop1: detected capacity change from 0 to 65536 [ 527.742798][ T9959] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 527.875391][ T9959] XFS (loop1): Ending clean mount [ 527.896340][ T9959] XFS (loop1): Quotacheck needed: Please wait. [ 527.989612][ T9959] XFS (loop1): Quotacheck: Done. [ 528.091478][ T5106] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 528.218084][ T9998] loop0: detected capacity change from 0 to 32768 [ 528.227345][ T9998] XFS: ikeep mount option is deprecated. [ 528.312528][ T9998] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 528.723417][ T9998] XFS (loop0): Ending clean mount [ 528.749207][ T9998] XFS (loop0): Quotacheck needed: Please wait. [ 528.795168][ T929] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 528.971478][ T9998] XFS (loop0): Quotacheck: Done. [ 529.009934][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 529.026807][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 529.040758][ T929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.083821][ T929] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.169931][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.188369][ T929] usb 4-1: config 0 descriptor?? [ 529.215963][ T29] audit: type=1400 audit(1718989320.135:471): avc: denied { rename } for pid=9997 comm="syz-executor.0" name="file2" dev="loop0" ino=9287 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 529.276340][ T29] audit: type=1804 audit(1718989320.165:472): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir18893390/syzkaller.5Txjy2/51/file0/file1" dev="loop0" ino=9286 res=1 errno=0 [ 529.334979][ T29] audit: type=1400 audit(1718989320.235:473): avc: denied { unlink } for pid=9997 comm="syz-executor.0" name="file1" dev="loop0" ino=9286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 529.532271][ T8493] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 529.601597][ T5161] psmouse serio2: Failed to reset mouse on : -5 [ 529.658165][ T929] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 529.677392][ T929] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 529.715311][ T929] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 529.849992][ T29] audit: type=1400 audit(1718989320.775:474): avc: denied { connect } for pid=10035 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 529.913020][ T45] usb 4-1: USB disconnect, device number 15 [ 530.251166][T10067] loop1: detected capacity change from 0 to 1024 [ 530.277339][T10067] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 531.170655][ T29] audit: type=1400 audit(1718989322.095:475): avc: denied { read } for pid=10071 comm="syz-executor.3" name="loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 531.251720][ T29] audit: type=1400 audit(1718989322.095:476): avc: denied { open } for pid=10071 comm="syz-executor.3" path="/dev/loop-control" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 531.292385][ T29] audit: type=1400 audit(1718989322.125:477): avc: denied { ioctl } for pid=10071 comm="syz-executor.3" path="/dev/loop-control" dev="devtmpfs" ino=647 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 531.551473][T10059] loop4: detected capacity change from 0 to 65536 [ 531.558124][ T5189] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 531.618981][T10059] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 531.720027][T10059] XFS (loop4): Ending clean mount [ 531.738752][T10059] XFS (loop4): Quotacheck needed: Please wait. [ 531.756659][ T5189] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 531.769752][ T5189] usb 1-1: config 179 has no interface number 0 [ 531.789897][ T5189] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 531.845588][T10059] XFS (loop4): Quotacheck: Done. [ 531.863575][ T5189] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 531.890510][ T5189] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 30768, setting to 8 [ 531.920370][ T5189] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 531.934018][ T5189] usb 1-1: New USB device found, idVendor=12ab, idProduct=80a3, bcdDevice=1e.eb [ 531.943553][ T5189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.958353][ T5105] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 531.980614][T10075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 532.004038][T10075] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 532.356631][ T8] usb 1-1: USB disconnect, device number 15 [ 532.356782][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 532.370890][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 532.380413][ C1] ================================================================== [ 532.388507][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x271/0x2c0 [ 532.396440][ C1] Read of size 4 at addr ffff888058e7405c by task syz-executor.3/8133 [ 532.404624][ C1] 2024/06/21 17:02:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 532.406987][ C1] CPU: 1 PID: 8133 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00148-g50736169ecc8 #0 [ 532.417785][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 532.427873][ C1] Call Trace: [ 532.431171][ C1] [ 532.434031][ C1] dump_stack_lvl+0x116/0x1f0 [ 532.438770][ C1] print_report+0xc3/0x620 [ 532.443238][ C1] ? __virt_addr_valid+0x5e/0x580 [ 532.448293][ C1] ? __phys_addr+0xc6/0x150 [ 532.452911][ C1] kasan_report+0xd9/0x110 [ 532.457383][ C1] ? do_raw_spin_lock+0x271/0x2c0 [ 532.462452][ C1] ? do_raw_spin_lock+0x271/0x2c0 [ 532.467510][ C1] do_raw_spin_lock+0x271/0x2c0 [ 532.472386][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 532.477774][ C1] ? __usb_hcd_giveback_urb+0x466/0x6e0 [ 532.483362][ C1] ? __pfx_lock_release+0x10/0x10 [ 532.488412][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 532.493646][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 532.498934][ C1] ? __wake_up+0x1c/0x60 [ 532.503186][ C1] __wake_up+0x1c/0x60 [ 532.507265][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 532.512732][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 532.518113][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 532.523318][ C1] dummy_timer+0x17f6/0x3900 [ 532.527915][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 532.533129][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 532.538505][ C1] ? __pfx_lock_release+0x10/0x10 [ 532.543548][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 532.548576][ C1] ? timerqueue_del+0x83/0x150 [ 532.553346][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 532.558285][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 532.563493][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 532.569218][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 532.575303][ C1] hrtimer_interrupt+0x31b/0x800 [ 532.580247][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 532.586237][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 532.591884][ C1] [ 532.594811][ C1] [ 532.597736][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.603819][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 532.610238][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 f7 80 f6 48 89 df e8 ee 73 81 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 b6 72 f6 65 8b 05 f6 04 19 75 85 c0 74 16 5b [ 532.629852][ C1] RSP: 0018:ffffc90004337638 EFLAGS: 00000246 [ 532.635936][ C1] RAX: 0000000000000006 RBX: ffffffff8dbbce98 RCX: 1ffffffff2854f2e [ 532.643911][ C1] RDX: 0000000000000000 RSI: ffffffff8b2caf60 RDI: ffffffff8b8ff400 [ 532.651891][ C1] RBP: 0000000000000282 R08: 0000000000000001 R09: fffffbfff284cc6c [ 532.659861][ C1] R10: ffffffff94266367 R11: 0000000000000000 R12: 0000000000000001 [ 532.667840][ C1] R13: 0000000000000000 R14: 000000000000c76d R15: ffffffff8dbbc940 [ 532.675820][ C1] rcu_preempt_deferred_qs_irqrestore+0x8a9/0xb80 [ 532.682249][ C1] ? rcu_is_watching+0x12/0xc0 [ 532.687012][ C1] __rcu_read_unlock+0x2b4/0x580 [ 532.691993][ C1] page_ext_put+0x48/0xd0 [ 532.696409][ C1] __reset_page_owner+0x28d/0x400 [ 532.701441][ C1] free_unref_folios+0x991/0x1310 [ 532.706475][ C1] folios_put_refs+0x487/0x6d0 [ 532.711250][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 532.716540][ C1] ? __pfx_workingset_update_node+0x10/0x10 [ 532.722431][ C1] ? __pfx_ext4_invalidate_folio+0x10/0x10 [ 532.728240][ C1] ? folio_flags.constprop.0+0x56/0x150 [ 532.733815][ C1] truncate_inode_pages_range+0x334/0xe80 [ 532.739539][ C1] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 532.745797][ C1] ? hlock_class+0x4e/0x130 [ 532.750298][ C1] ? mark_lock+0xb5/0xc60 [ 532.754633][ C1] ? hlock_class+0x4e/0x130 [ 532.759135][ C1] ? mark_lock+0xb5/0xc60 [ 532.763472][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 532.768703][ C1] ? hlock_class+0x4e/0x130 [ 532.773227][ C1] ? mark_held_locks+0x9f/0xe0 [ 532.777997][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 532.783192][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.788389][ C1] ext4_evict_inode+0x2cc/0x17d0 [ 532.793331][ C1] ? evict+0x2b7/0x6c0 [ 532.797408][ C1] ? __pfx_lock_release+0x10/0x10 [ 532.802443][ C1] ? __pfx_wake_bit_function+0x10/0x10 [ 532.807913][ C1] ? __pfx_ext4_evict_inode+0x10/0x10 [ 532.813339][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 532.818714][ C1] ? __pfx_ext4_evict_inode+0x10/0x10 [ 532.824112][ C1] evict+0x2ed/0x6c0 [ 532.828019][ C1] iput.part.0+0x5a8/0x7f0 [ 532.832457][ C1] ? __pfx_ext4_drop_inode+0x10/0x10 [ 532.837743][ C1] iput+0x5c/0x80 [ 532.841385][ C1] do_unlinkat+0x613/0x750 [ 532.845811][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 532.850755][ C1] ? __check_object_size+0x48e/0x720 [ 532.856049][ C1] ? getname_flags.part.0+0x1e1/0x4f0 [ 532.861420][ C1] __x64_sys_unlink+0xc7/0x110 [ 532.866194][ C1] do_syscall_64+0xcd/0x250 [ 532.870704][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.876608][ C1] RIP: 0033:0x7f9261c7c6d7 [ 532.881381][ C1] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 532.900988][ C1] RSP: 002b:00007ffdb07ac818 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 532.909398][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9261c7c6d7 [ 532.917364][ C1] RDX: 00007ffdb07ac840 RSI: 00007ffdb07ac8d0 RDI: 00007ffdb07ac8d0 [ 532.925332][ C1] RBP: 00007ffdb07ac8d0 R08: 0000000000000000 R09: 0000000000000000 [ 532.933298][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdb07ad980 [ 532.941265][ C1] R13: 00007f9261cd96c6 R14: 0000000000081a2c R15: 0000000000000019 [ 532.949238][ C1] [ 532.952252][ C1] [ 532.954568][ C1] Allocated by task 5189: [ 532.958880][ C1] kasan_save_stack+0x33/0x60 [ 532.963563][ C1] kasan_save_track+0x14/0x30 [ 532.968331][ C1] __kasan_kmalloc+0xaa/0xb0 [ 532.972924][ C1] xpad_probe+0x27e/0x1f50 [ 532.977338][ C1] usb_probe_interface+0x309/0x9d0 [ 532.982449][ C1] really_probe+0x23e/0xa90 [ 532.986956][ C1] __driver_probe_device+0x1de/0x440 [ 532.992246][ C1] driver_probe_device+0x4c/0x1b0 [ 532.997273][ C1] __device_attach_driver+0x1df/0x310 [ 533.002652][ C1] bus_for_each_drv+0x157/0x1e0 [ 533.007586][ C1] __device_attach+0x1e8/0x4b0 [ 533.012352][ C1] bus_probe_device+0x17f/0x1c0 [ 533.017204][ C1] device_add+0x114b/0x1a70 [ 533.021712][ C1] usb_set_configuration+0x10cb/0x1c50 [ 533.027181][ C1] usb_generic_driver_probe+0xb1/0x110 [ 533.032642][ C1] usb_probe_device+0xec/0x3e0 [ 533.037400][ C1] really_probe+0x23e/0xa90 [ 533.041901][ C1] __driver_probe_device+0x1de/0x440 [ 533.047188][ C1] driver_probe_device+0x4c/0x1b0 [ 533.052216][ C1] __device_attach_driver+0x1df/0x310 [ 533.057588][ C1] bus_for_each_drv+0x157/0x1e0 [ 533.062432][ C1] __device_attach+0x1e8/0x4b0 [ 533.067195][ C1] bus_probe_device+0x17f/0x1c0 [ 533.072046][ C1] device_add+0x114b/0x1a70 [ 533.076555][ C1] usb_new_device+0xd90/0x1a10 [ 533.081326][ C1] hub_event+0x2db0/0x4e20 [ 533.085732][ C1] process_one_work+0x9fb/0x1b60 [ 533.090667][ C1] worker_thread+0x6c8/0xf70 [ 533.095250][ C1] kthread+0x2c1/0x3a0 [ 533.099313][ C1] ret_from_fork+0x45/0x80 [ 533.103730][ C1] ret_from_fork_asm+0x1a/0x30 [ 533.108500][ C1] [ 533.110837][ C1] Freed by task 8: [ 533.114547][ C1] kasan_save_stack+0x33/0x60 [ 533.119348][ C1] kasan_save_track+0x14/0x30 [ 533.124225][ C1] kasan_save_free_info+0x3b/0x60 [ 533.129260][ C1] poison_slab_object+0xf7/0x160 [ 533.134200][ C1] __kasan_slab_free+0x32/0x50 [ 533.138969][ C1] kfree+0x12a/0x3b0 [ 533.142866][ C1] xpad_disconnect+0x1cf/0x580 [ 533.147627][ C1] usb_unbind_interface+0x1e8/0x970 [ 533.152900][ C1] device_remove+0x122/0x170 [ 533.158108][ C1] device_release_driver_internal+0x44a/0x610 [ 533.164186][ C1] bus_remove_device+0x22f/0x420 [ 533.169130][ C1] device_del+0x396/0x9f0 [ 533.173484][ C1] usb_disable_device+0x36c/0x7f0 [ 533.178516][ C1] usb_disconnect+0x2e1/0x920 [ 533.183203][ C1] hub_event+0x1dbb/0x4e20 [ 533.187752][ C1] process_one_work+0x9fb/0x1b60 [ 533.192691][ C1] worker_thread+0x6c8/0xf70 [ 533.197278][ C1] kthread+0x2c1/0x3a0 [ 533.201368][ C1] ret_from_fork+0x45/0x80 [ 533.205802][ C1] ret_from_fork_asm+0x1a/0x30 [ 533.210572][ C1] [ 533.212890][ C1] The buggy address belongs to the object at ffff888058e74000 [ 533.212890][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 533.226938][ C1] The buggy address is located 92 bytes inside of [ 533.226938][ C1] freed 1024-byte region [ffff888058e74000, ffff888058e74400) [ 533.240822][ C1] [ 533.243136][ C1] The buggy address belongs to the physical page: [ 533.249540][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x58e70 [ 533.258292][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 533.266798][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 533.274358][ C1] page_type: 0xffffefff(slab) [ 533.279133][ C1] raw: 00fff00000000040 ffff888015441dc0 dead000000000100 dead000000000122 [ 533.287711][ C1] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 533.296291][ C1] head: 00fff00000000040 ffff888015441dc0 dead000000000100 dead000000000122 [ 533.304972][ C1] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 533.313661][ C1] head: 00fff00000000003 ffffea0001639c01 ffffffffffffffff 0000000000000000 [ 533.322339][ C1] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 533.330998][ C1] page dumped because: kasan: bad access detected [ 533.337413][ C1] page_owner tracks the page as allocated [ 533.343121][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 144, tgid 144 (kworker/u8:5), ts 79970362853, free_ts 79789205384 [ 533.362224][ C1] post_alloc_hook+0x2d1/0x350 [ 533.366994][ C1] get_page_from_freelist+0x136a/0x2e50 [ 533.372546][ C1] __alloc_pages_noprof+0x22b/0x2460 [ 533.377847][ C1] alloc_slab_page+0x56/0x110 [ 533.382612][ C1] new_slab+0x84/0x260 [ 533.386697][ C1] ___slab_alloc+0xdac/0x1870 [ 533.391399][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 533.396790][ C1] __kmalloc_noprof+0x36d/0x410 [ 533.401634][ C1] ___neigh_create+0x152b/0x2ae0 [ 533.406579][ C1] ip6_finish_output2+0x112f/0x18b0 [ 533.411778][ C1] ip6_finish_output+0x3f9/0x1300 [ 533.416805][ C1] ip6_output+0x1f8/0x540 [ 533.421167][ C1] ndisc_send_skb+0xa2d/0x1c30 [ 533.426274][ C1] ndisc_send_ns+0xc7/0x150 [ 533.430893][ C1] addrconf_dad_work+0xca5/0x1500 [ 533.435944][ C1] process_one_work+0x9fb/0x1b60 [ 533.440973][ C1] page last free pid 5158 tgid 5158 stack trace: [ 533.447355][ C1] free_unref_page+0x64a/0xe40 [ 533.452126][ C1] __put_partials+0x14c/0x170 [ 533.456916][ C1] qlist_free_all+0x4e/0x140 [ 533.461509][ C1] kasan_quarantine_reduce+0x192/0x1e0 [ 533.466979][ C1] __kasan_slab_alloc+0x69/0x90 [ 533.471842][ C1] kmalloc_trace_noprof+0x11e/0x300 [ 533.477152][ C1] kernfs_fop_open+0x28b/0xdb0 [ 533.481918][ C1] do_dentry_open+0x910/0x1930 [ 533.486686][ C1] path_openat+0x1e3a/0x29f0 [ 533.491298][ C1] do_filp_open+0x1dc/0x430 [ 533.495824][ C1] do_sys_openat2+0x17a/0x1e0 [ 533.500506][ C1] __x64_sys_openat+0x175/0x210 [ 533.505376][ C1] do_syscall_64+0xcd/0x250 [ 533.509904][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.515850][ C1] [ 533.518161][ C1] Memory state around the buggy address: [ 533.523787][ C1] ffff888058e73f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.531933][ C1] ffff888058e73f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 533.539987][ C1] >ffff888058e74000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.548039][ C1] ^ [ 533.554969][ C1] ffff888058e74080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.563032][ C1] ffff888058e74100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 533.571084][ C1] ================================================================== [ 533.579135][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 533.586390][ C1] CPU: 1 PID: 8133 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00148-g50736169ecc8 #0 [ 533.596799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 533.606849][ C1] Call Trace: [ 533.610133][ C1] [ 533.612971][ C1] dump_stack_lvl+0x3d/0x1f0 [ 533.617566][ C1] panic+0x6f5/0x7a0 [ 533.621478][ C1] ? __pfx_panic+0x10/0x10 [ 533.625989][ C1] ? rcu_is_watching+0x12/0xc0 [ 533.630860][ C1] ? __pfx_lock_release+0x10/0x10 [ 533.636016][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 533.641140][ C1] check_panic_on_warn+0xab/0xb0 [ 533.646127][ C1] end_report+0x117/0x180 [ 533.650643][ C1] kasan_report+0xe9/0x110 [ 533.655167][ C1] ? do_raw_spin_lock+0x271/0x2c0 [ 533.660194][ C1] ? do_raw_spin_lock+0x271/0x2c0 [ 533.665481][ C1] do_raw_spin_lock+0x271/0x2c0 [ 533.670334][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 533.675711][ C1] ? __usb_hcd_giveback_urb+0x466/0x6e0 [ 533.681258][ C1] ? __pfx_lock_release+0x10/0x10 [ 533.686291][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 533.691579][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 533.696841][ C1] ? __wake_up+0x1c/0x60 [ 533.701091][ C1] __wake_up+0x1c/0x60 [ 533.705277][ C1] usb_anchor_resume_wakeups+0xc2/0xe0 [ 533.710749][ C1] __usb_hcd_giveback_urb+0x3b7/0x6e0 [ 533.716123][ C1] usb_hcd_giveback_urb+0x396/0x450 [ 533.721499][ C1] dummy_timer+0x17f6/0x3900 [ 533.726131][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 533.731344][ C1] ? __hrtimer_run_queues+0x5a7/0xcc0 [ 533.736720][ C1] ? __pfx_lock_release+0x10/0x10 [ 533.741759][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 533.746718][ C1] ? timerqueue_del+0x83/0x150 [ 533.751496][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 533.756435][ C1] __hrtimer_run_queues+0x20c/0xcc0 [ 533.761639][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 533.767363][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 533.773444][ C1] hrtimer_interrupt+0x31b/0x800 [ 533.778394][ C1] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 533.784481][ C1] sysvec_apic_timer_interrupt+0x90/0xb0 [ 533.790121][ C1] [ 533.793049][ C1] [ 533.795973][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.801976][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 533.808396][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 f7 80 f6 48 89 df e8 ee 73 81 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 b6 72 f6 65 8b 05 f6 04 19 75 85 c0 74 16 5b [ 533.828095][ C1] RSP: 0018:ffffc90004337638 EFLAGS: 00000246 [ 533.834163][ C1] RAX: 0000000000000006 RBX: ffffffff8dbbce98 RCX: 1ffffffff2854f2e [ 533.842304][ C1] RDX: 0000000000000000 RSI: ffffffff8b2caf60 RDI: ffffffff8b8ff400 [ 533.850444][ C1] RBP: 0000000000000282 R08: 0000000000000001 R09: fffffbfff284cc6c [ 533.858412][ C1] R10: ffffffff94266367 R11: 0000000000000000 R12: 0000000000000001 [ 533.866480][ C1] R13: 0000000000000000 R14: 000000000000c76d R15: ffffffff8dbbc940 [ 533.874479][ C1] rcu_preempt_deferred_qs_irqrestore+0x8a9/0xb80 [ 533.880929][ C1] ? rcu_is_watching+0x12/0xc0 [ 533.885696][ C1] __rcu_read_unlock+0x2b4/0x580 [ 533.890644][ C1] page_ext_put+0x48/0xd0 [ 533.895000][ C1] __reset_page_owner+0x28d/0x400 [ 533.900053][ C1] free_unref_folios+0x991/0x1310 [ 533.905099][ C1] folios_put_refs+0x487/0x6d0 [ 533.909900][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 533.915228][ C1] ? __pfx_workingset_update_node+0x10/0x10 [ 533.921314][ C1] ? __pfx_ext4_invalidate_folio+0x10/0x10 [ 533.927125][ C1] ? folio_flags.constprop.0+0x56/0x150 [ 533.932763][ C1] truncate_inode_pages_range+0x334/0xe80 [ 533.938488][ C1] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 533.944728][ C1] ? hlock_class+0x4e/0x130 [ 533.949234][ C1] ? mark_lock+0xb5/0xc60 [ 533.953574][ C1] ? hlock_class+0x4e/0x130 [ 533.958082][ C1] ? mark_lock+0xb5/0xc60 [ 533.962417][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 533.967630][ C1] ? hlock_class+0x4e/0x130 [ 533.972150][ C1] ? mark_held_locks+0x9f/0xe0 [ 533.976924][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 533.982143][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.987430][ C1] ext4_evict_inode+0x2cc/0x17d0 [ 533.992377][ C1] ? evict+0x2b7/0x6c0 [ 533.996451][ C1] ? __pfx_lock_release+0x10/0x10 [ 534.001479][ C1] ? __pfx_wake_bit_function+0x10/0x10 [ 534.006948][ C1] ? __pfx_ext4_evict_inode+0x10/0x10 [ 534.012326][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 534.017789][ C1] ? __pfx_ext4_evict_inode+0x10/0x10 [ 534.023239][ C1] evict+0x2ed/0x6c0 [ 534.027149][ C1] iput.part.0+0x5a8/0x7f0 [ 534.031574][ C1] ? __pfx_ext4_drop_inode+0x10/0x10 [ 534.036859][ C1] iput+0x5c/0x80 [ 534.040501][ C1] do_unlinkat+0x613/0x750 [ 534.044936][ C1] ? __pfx_do_unlinkat+0x10/0x10 [ 534.049888][ C1] ? __check_object_size+0x48e/0x720 [ 534.055189][ C1] ? getname_flags.part.0+0x1e1/0x4f0 [ 534.060567][ C1] __x64_sys_unlink+0xc7/0x110 [ 534.065349][ C1] do_syscall_64+0xcd/0x250 [ 534.069858][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.075761][ C1] RIP: 0033:0x7f9261c7c6d7 [ 534.080258][ C1] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 534.099880][ C1] RSP: 002b:00007ffdb07ac818 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 534.108393][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9261c7c6d7 [ 534.116365][ C1] RDX: 00007ffdb07ac840 RSI: 00007ffdb07ac8d0 RDI: 00007ffdb07ac8d0 [ 534.124334][ C1] RBP: 00007ffdb07ac8d0 R08: 0000000000000000 R09: 0000000000000000 [ 534.132301][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdb07ad980 [ 534.140268][ C1] R13: 00007f9261cd96c6 R14: 0000000000081a2c R15: 0000000000000019 [ 534.148416][ C1] [ 534.151783][ C1] Kernel Offset: disabled [ 534.156103][ C1] Rebooting in 86400 seconds..