last executing test programs: 21.176629506s ago: executing program 0: syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @local, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x7, 0x3, 0x0, [{}, {@remote}]}, @ssrr={0x89, 0xf, 0xce, [@empty, @remote, @rand_addr]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 21.169806247s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x8) 21.15843881s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000002000018010000202070250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc}}}, 0x0) 19.327048004s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="180300000000000000000000000000001801000020646c250000000000202020db13f8fff1000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xa7, &(0x7f00000008c0)=""/167}, 0x90) 19.317687725s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) 19.194375504s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550d, &(0x7f0000000a40)="$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") 6.508354954s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 6.435629976s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 5.413138039s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 5.348191379s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) inotify_init() socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x30}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000580)={0x6, 0x0, 0x1000}) 4.440313535s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.187248273s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, 0x0, 0x0) 3.154255967s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000060001c0"]) 3.036022335s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00222200000006231307f7940ef7070c00000006b8ef0a1a7083"], 0x0}, 0x0) 2.887765107s ago: executing program 3: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB=' '], 0x120) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x6d, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.786273172s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2.716560663s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x8, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.659478571s ago: executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x2}}) 2.636679655s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2da7]}) lchown(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.614103638s ago: executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000fb7030000000007008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) 2.477303129s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="0001"], 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc1, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) sendto$inet6(r2, &(0x7f0000000280)="03", 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000f0ff0000b7080000000006007b8af8ff00000000bfa200000007020000f8ffffffb7030000080000000020850000000191a026676f2612bd259475e2e616090fc404b45b2613fb22356b355477fd21a9983e81e02be69319e6a4a01a054be292f6d2582f009a046806b9b9260795872c6caf88000000002148f46cf5aadeccd0d511a8bca586449a56d4cd233436ac8d108ef98371f3f1c64d73bb3a870c831dde37a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES64=r3, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0xfffffe00, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2000) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x71, &(0x7f00000002c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e29655f663ee844da60be22bf21472b1e7f49ad068c4e1c0a9573325f36784ffffce4c6b81fdb183acf730ddbf395346f7fd23f2e176b224e7ea1deb33c697884689393c15d155a710eb972acd778cd33d4d8a9cf9d6707a57") ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) 2.091313557s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.114005493s ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xff}}, {@remote}, {@multicast2}, {@private=0xa010100}, {@rand_addr, 0x800}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 987.221032ms ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) symlink(0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 847.836653ms ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) close(r0) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) close(0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 818.190647ms ago: executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000002280)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0}) 184.536692ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x0, 0x8}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2388a8"], 0xffdd) 97.544715ms ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) inotify_init() socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x30}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000580)={0x6, 0x0, 0x1000}) 7.853419ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_newnexthop={0x18, 0x21, 0x1}, 0x18}}, 0x0) 0s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/40, 0x28}}, 0x120) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) kernel console output (not intermixed with test programs): [ 3.800399][ T85] acpid (85) used greatest stack depth: 23408 bytes left [ 4.123409][ T100] udevd[100]: starting version 3.2.11 [ 4.195608][ T101] udevd[101]: starting eudev-3.2.11 [ 4.196956][ T100] udevd (100) used greatest stack depth: 22288 bytes left [ 12.413941][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 12.413956][ T28] audit: type=1400 audit(1718090746.659:61): avc: denied { transition } for pid=224 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.420690][ T28] audit: type=1400 audit(1718090746.659:62): avc: denied { noatsecure } for pid=224 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.425205][ T28] audit: type=1400 audit(1718090746.659:63): avc: denied { write } for pid=224 comm="sh" path="pipe:[6948]" dev="pipefs" ino=6948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.429552][ T28] audit: type=1400 audit(1718090746.659:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.435335][ T28] audit: type=1400 audit(1718090746.659:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. 2024/06/11 07:25:54 fuzzer started 2024/06/11 07:25:54 dialing manager at 10.128.0.163:30012 [ 19.920643][ T28] audit: type=1400 audit(1718090754.159:66): avc: denied { node_bind } for pid=283 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 19.925524][ T28] audit: type=1400 audit(1718090754.159:67): avc: denied { name_bind } for pid=283 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 19.957047][ T28] audit: type=1400 audit(1718090754.199:68): avc: denied { mounton } for pid=292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.967217][ T291] cgroup: Unknown subsys name 'net' [ 19.987552][ T291] cgroup: Unknown subsys name 'devices' [ 20.001499][ T28] audit: type=1400 audit(1718090754.199:69): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.029661][ T28] audit: type=1400 audit(1718090754.199:70): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.032740][ T295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.052706][ T28] audit: type=1400 audit(1718090754.199:71): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.082602][ T28] audit: type=1400 audit(1718090754.229:72): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.102435][ T28] audit: type=1400 audit(1718090754.239:73): avc: denied { setattr } for pid=296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.125525][ T28] audit: type=1400 audit(1718090754.309:74): avc: denied { relabelto } for pid=295 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.130216][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.151000][ T28] audit: type=1400 audit(1718090754.309:75): avc: denied { write } for pid=295 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.223006][ T291] cgroup: Unknown subsys name 'hugetlb' [ 20.228523][ T291] cgroup: Unknown subsys name 'rlimit' 2024/06/11 07:25:54 starting 5 executor processes [ 21.409865][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.416754][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.424116][ T308] device bridge_slave_0 entered promiscuous mode [ 21.441154][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.447983][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.455189][ T308] device bridge_slave_1 entered promiscuous mode [ 21.507562][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.514527][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.521815][ T309] device bridge_slave_0 entered promiscuous mode [ 21.529507][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.536377][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.543740][ T309] device bridge_slave_1 entered promiscuous mode [ 21.582714][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.589568][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.596798][ T313] device bridge_slave_0 entered promiscuous mode [ 21.603468][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.610300][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.617762][ T313] device bridge_slave_1 entered promiscuous mode [ 21.672697][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.679529][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.686977][ T316] device bridge_slave_0 entered promiscuous mode [ 21.695239][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.702117][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.709268][ T316] device bridge_slave_1 entered promiscuous mode [ 21.715728][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.722597][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.729800][ T311] device bridge_slave_0 entered promiscuous mode [ 21.750627][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.757534][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.764801][ T311] device bridge_slave_1 entered promiscuous mode [ 21.869373][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.876359][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.883488][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.890234][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.941119][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.947967][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.955086][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.961867][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.975032][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.981878][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.988969][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.995900][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.025170][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.032029][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.039101][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.045926][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.060759][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.067604][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.074707][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.081587][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.095216][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.102244][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.109182][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.116431][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.123507][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.130526][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.137635][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.144598][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.151588][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.158503][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.166078][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.173319][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.204873][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.212232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.220172][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.227006][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.234642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.243071][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.249909][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.274727][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.282011][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.289712][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.297958][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.305991][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.312832][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.329803][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.338085][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.346121][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.352955][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.360108][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.368165][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.374994][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.382463][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.390383][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.397411][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.416625][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.424485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.432335][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.440461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.452759][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.460709][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.468554][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.476424][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.484453][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.492207][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.499941][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.508134][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.516114][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.523130][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.530437][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.537798][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.546561][ T308] device veth0_vlan entered promiscuous mode [ 22.562918][ T308] device veth1_macvtap entered promiscuous mode [ 22.577611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.585789][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.594168][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.601014][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.608126][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.615913][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.624302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.632301][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.640199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.647659][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.654845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.662103][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.670186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.678204][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.685030][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.692227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.700437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.708495][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.715339][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.727555][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.735493][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.757908][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.766310][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.774512][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.782818][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.790896][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.799071][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.807237][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.815101][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.822839][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.830717][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.857538][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.867285][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.886403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.894801][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.903050][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.913129][ T311] device veth0_vlan entered promiscuous mode [ 22.922380][ T309] device veth0_vlan entered promiscuous mode [ 22.934385][ T313] device veth0_vlan entered promiscuous mode [ 22.942721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.950500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.958513][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.966746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.974662][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.987559][ T311] device veth1_macvtap entered promiscuous mode [ 22.999125][ T316] device veth0_vlan entered promiscuous mode [ 23.007947][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.016368][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.025554][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.032966][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.040423][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.047879][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.055266][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.062729][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.070675][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.081610][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.089515][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.098223][ T309] device veth1_macvtap entered promiscuous mode [ 23.110385][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.118265][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.125684][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.143180][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.151134][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.159111][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.167557][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.179767][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.188513][ T313] device veth1_macvtap entered promiscuous mode [ 23.262415][ T316] device veth1_macvtap entered promiscuous mode [ 23.279653][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.298666][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.306987][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.506365][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.514620][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.522780][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.544895][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.559866][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.584799][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.593281][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.607294][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.615641][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.724055][ T382] loop0: detected capacity change from 0 to 512 [ 23.753441][ T382] EXT4-fs: Ignoring removed orlov option [ 23.781498][ T382] EXT4-fs error (device loop0): dx_probe:822: inode #2: comm syz-executor.0: Attempting to read directory block (0) that is past i_size (256) [ 23.802002][ T382] EXT4-fs (loop0): Remounting filesystem read-only [ 23.813526][ T382] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 23.829088][ T382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 23.849848][ T316] EXT4-fs (loop0): unmounting filesystem. [ 23.874316][ T389] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.892711][ T368] syz-executor.2 (368) used greatest stack depth: 20624 bytes left [ 24.097775][ T413] device syzkaller0 entered promiscuous mode [ 24.186067][ T425] process 'syz-executor.2' launched './file1' with NULL argv: empty string added [ 24.478354][ T465] loop1: detected capacity change from 0 to 512 [ 24.566166][ T461] kvm: emulating exchange as write [ 24.572610][ T465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 24.600931][ T465] ext4 filesystem being mounted at /root/syzkaller-testdir2703316617/syzkaller.dBM6Ru/5/file0 supports timestamps until 2038 (0x7fffffff) [ 24.648699][ T452] loop3: detected capacity change from 0 to 40427 [ 24.661497][ T452] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 24.669172][ T452] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 24.701696][ T311] EXT4-fs (loop1): unmounting filesystem. [ 24.733765][ T452] F2FS-fs (loop3): Found nat_bits in checkpoint [ 24.821988][ T452] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 24.864635][ T452] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 24.877571][ T452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 24.927602][ T489] loop4: detected capacity change from 0 to 1024 [ 24.953032][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 24.953048][ T28] audit: type=1400 audit(1718090759.199:129): avc: denied { write } for pid=450 comm="syz-executor.3" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 24.968219][ T489] EXT4-fs: Ignoring removed oldalloc option [ 25.006975][ T452] syz-executor.3: attempt to access beyond end of device [ 25.006975][ T452] loop3: rw=2049, sector=77824, nr_sectors = 544 limit=40427 [ 25.021359][ T489] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 25.039669][ T489] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 25.052159][ T489] EXT4-fs (loop4): orphan cleanup on readonly fs [ 25.058865][ T489] EXT4-fs error (device loop4): ext4_free_blocks:6197: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 25.060137][ T28] audit: type=1400 audit(1718090759.199:130): avc: denied { add_name } for pid=450 comm="syz-executor.3" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.072626][ T497] syz-executor.3: attempt to access beyond end of device [ 25.072626][ T497] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.094687][ T489] EXT4-fs (loop4): Remounting filesystem read-only [ 25.125000][ T28] audit: type=1400 audit(1718090759.199:131): avc: denied { create } for pid=450 comm="syz-executor.3" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.142299][ T489] EXT4-fs (loop4): 1 orphan inode deleted [ 25.146014][ T28] audit: type=1400 audit(1718090759.239:132): avc: denied { append open } for pid=450 comm="syz-executor.3" path="/root/syzkaller-testdir3315250148/syzkaller.Hcd302/9/bus/memory.events" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.167355][ T489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.181997][ T28] audit: type=1400 audit(1718090759.239:133): avc: denied { read write } for pid=450 comm="syz-executor.3" name="memory.events" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 25.289605][ T308] EXT4-fs (loop4): unmounting filesystem. [ 25.312521][ T502] loop0: detected capacity change from 0 to 1024 [ 25.326754][ T502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.361263][ T502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.369952][ T28] audit: type=1400 audit(1718090759.609:134): avc: denied { read } for pid=507 comm="syz-executor.4" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.392836][ T28] audit: type=1400 audit(1718090759.609:135): avc: denied { open } for pid=507 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.418045][ T28] audit: type=1400 audit(1718090759.609:136): avc: denied { ioctl } for pid=507 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.444051][ T28] audit: type=1400 audit(1718090759.609:137): avc: denied { set_context_mgr } for pid=507 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 25.480646][ T28] audit: type=1400 audit(1718090759.609:138): avc: denied { map } for pid=507 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 25.481657][ T316] EXT4-fs (loop0): unmounting filesystem. [ 25.636887][ T530] loop0: detected capacity change from 0 to 128 [ 25.653654][ T530] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.667748][ T530] ext4 filesystem being mounted at /root/syzkaller-testdir613754790/syzkaller.0Ohnu8/16/mnt supports timestamps until 2038 (0x7fffffff) [ 25.698057][ T530] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 25.706625][ T530] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 25.723432][ T316] EXT4-fs (loop0): unmounting filesystem. [ 25.802480][ T565] loop4: detected capacity change from 0 to 256 [ 25.862112][ T569] loop0: detected capacity change from 0 to 1024 [ 25.879971][ T569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 25.925362][ T569] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.988420][ T316] EXT4-fs (loop0): unmounting filesystem. [ 26.009846][ T592] input: syz0 as /devices/virtual/input/input4 [ 26.056024][ T597] syz-executor.0[597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.056097][ T597] syz-executor.0[597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 26.246500][ T609] loop0: detected capacity change from 0 to 512 [ 26.310197][ T609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 26.324376][ T609] ext4 filesystem being mounted at /root/syzkaller-testdir613754790/syzkaller.0Ohnu8/23/file0 supports timestamps until 2038 (0x7fffffff) [ 26.353296][ T316] EXT4-fs (loop0): unmounting filesystem. [ 26.420872][ T320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.680893][ T320] usb 2-1: Using ep0 maxpacket: 32 [ 26.752251][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.801197][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 26.815512][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 26.827251][ T320] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 26.836741][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.850303][ T320] usb 2-1: config 0 descriptor?? [ 26.870909][ T602] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 26.885423][ T641] loop4: detected capacity change from 0 to 1024 [ 26.892594][ T641] EXT4-fs: Ignoring removed oldalloc option [ 26.901561][ T320] hub 2-1:0.0: USB hub found [ 26.908450][ T641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 26.932415][ T641] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 26.940666][ T641] EXT4-fs (loop4): orphan cleanup on readonly fs [ 26.947432][ T641] EXT4-fs error (device loop4): ext4_free_blocks:6197: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 26.961476][ T641] EXT4-fs (loop4): Remounting filesystem read-only [ 26.968265][ T641] EXT4-fs (loop4): 1 orphan inode deleted [ 26.974601][ T641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.000736][ T308] EXT4-fs (loop4): unmounting filesystem. [ 27.011686][ T654] loop2: detected capacity change from 0 to 16 [ 27.022719][ T654] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.029947][ T656] loop4: detected capacity change from 0 to 16 [ 27.041878][ T656] erofs: (device loop4): mounted with root inode @ nid 36. [ 27.053519][ T658] loop2: detected capacity change from 0 to 16 [ 27.062371][ T658] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.083148][ T662] loop2: detected capacity change from 0 to 16 [ 27.089722][ T662] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.120971][ T320] hub 2-1:0.0: 2 ports detected [ 27.121573][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 27.134605][ T666] loop2: detected capacity change from 0 to 512 [ 27.139145][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 27.153829][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.167352][ T19] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.176288][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.324876][ T19] usb 1-1: config 0 descriptor?? [ 27.346122][ T666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.356963][ T666] ext4 filesystem being mounted at /root/syzkaller-testdir2816660626/syzkaller.70xX60/46/file0 supports timestamps until 2038 (0x7fffffff) [ 27.371712][ T617] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 27.388018][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.407255][ T673] loop2: detected capacity change from 0 to 1024 [ 27.416386][ T673] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.430757][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.451420][ T676] loop2: detected capacity change from 0 to 512 [ 27.462359][ T676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.471216][ T676] ext4 filesystem being mounted at /root/syzkaller-testdir2816660626/syzkaller.70xX60/48/file0 supports timestamps until 2038 (0x7fffffff) [ 27.490099][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.506554][ T680] loop2: detected capacity change from 0 to 1024 [ 27.515885][ T680] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.530213][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.548066][ T683] loop2: detected capacity change from 0 to 1024 [ 27.562031][ T683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.570467][ T683] ext4 filesystem being mounted at /root/syzkaller-testdir2816660626/syzkaller.70xX60/50/file0 supports timestamps until 2038 (0x7fffffff) [ 27.591581][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.607413][ T687] loop2: detected capacity change from 0 to 1024 [ 27.621828][ T687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.636387][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.649259][ T691] loop2: detected capacity change from 0 to 16 [ 27.656309][ T691] erofs: (device loop2): mounted with root inode @ nid 36. [ 27.677829][ T694] loop2: detected capacity change from 0 to 512 [ 27.686126][ T694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.700285][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.717659][ T697] loop2: detected capacity change from 0 to 2048 [ 27.726705][ T697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.741129][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.758109][ T700] loop2: detected capacity change from 0 to 1024 [ 27.772038][ T700] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.780438][ T700] ext4 filesystem being mounted at /root/syzkaller-testdir2816660626/syzkaller.70xX60/55/file0 supports timestamps until 2038 (0x7fffffff) [ 27.799886][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.817219][ T704] loop2: detected capacity change from 0 to 2048 [ 27.832138][ T19] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 27.834610][ T704] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.842291][ T19] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 27.847842][ T704] ext4 filesystem being mounted at /root/syzkaller-testdir2816660626/syzkaller.70xX60/56/file0 supports timestamps until 2038 (0x7fffffff) [ 27.856823][ T19] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 27.889258][ T313] EXT4-fs (loop2): unmounting filesystem. [ 27.999053][ T711] loop2: detected capacity change from 0 to 512 [ 28.012738][ T711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.031912][ T313] EXT4-fs (loop2): unmounting filesystem. [ 28.131393][ T331] usb 1-1: USB disconnect, device number 2 [ 28.356676][ T714] loop2: detected capacity change from 0 to 131072 [ 28.385610][ T714] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.426318][ T714] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.450917][ T320] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 28.652031][ T670] usb 2-1: USB disconnect, device number 2 [ 29.224793][ T726] loop2: detected capacity change from 0 to 131072 [ 29.271643][ T726] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.330892][ T726] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 29.589713][ T720] loop4: detected capacity change from 0 to 262144 [ 29.652981][ T720] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.760914][ T720] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 29.802685][ T747] loop2: detected capacity change from 0 to 512 [ 29.839498][ T747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.877461][ T313] EXT4-fs (loop2): unmounting filesystem. [ 29.996107][ T753] loop2: detected capacity change from 0 to 4096 [ 30.026637][ T753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.059941][ T313] EXT4-fs (loop2): unmounting filesystem. [ 30.097924][ T731] loop1: detected capacity change from 0 to 131072 [ 30.156077][ T731] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.240321][ T731] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.406869][ T728] loop0: detected capacity change from 0 to 262144 [ 30.471078][ T728] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.561266][ T728] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.660291][ T770] loop1: detected capacity change from 0 to 128 [ 30.729121][ T773] loop1: detected capacity change from 0 to 256 [ 30.805597][ T775] loop1: detected capacity change from 0 to 512 [ 30.854789][ T764] loop4: detected capacity change from 0 to 65536 [ 30.898292][ T779] loop4: detected capacity change from 0 to 256 [ 30.949833][ T781] loop4: detected capacity change from 0 to 128 [ 31.282388][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 31.282448][ T28] audit: type=1400 audit(1718090765.499:180): avc: denied { ioctl } for pid=782 comm="syz-executor.4" path="socket:[15592]" dev="sockfs" ino=15592 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.442178][ T788] loop0: detected capacity change from 0 to 128 [ 31.826664][ T810] loop0: detected capacity change from 0 to 128 [ 31.889375][ T812] loop4: detected capacity change from 0 to 128 [ 31.937069][ T814] loop0: detected capacity change from 0 to 512 [ 32.020233][ T818] loop0: detected capacity change from 0 to 2048 [ 32.092111][ T820] loop0: detected capacity change from 0 to 128 [ 32.152269][ T822] loop0: detected capacity change from 0 to 256 [ 32.165291][ T816] loop4: detected capacity change from 0 to 32768 [ 32.215487][ T824] loop0: detected capacity change from 0 to 128 [ 32.272415][ T826] loop0: detected capacity change from 0 to 512 [ 32.338399][ T828] loop4: detected capacity change from 0 to 2048 [ 32.347523][ T757] loop2: detected capacity change from 0 to 262144 [ 32.386006][ T757] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.483117][ T838] loop0: detected capacity change from 0 to 512 [ 32.603123][ T838] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 32.617754][ T838] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 32.631886][ T838] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.644822][ T838] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 32.659171][ T838] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 32.672487][ T838] EXT4-fs (loop0): 1 orphan inode deleted [ 32.678060][ T838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.752115][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.796559][ T757] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.914596][ T777] loop1: detected capacity change from 0 to 262144 [ 33.151031][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.185850][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.202378][ T845] loop2: detected capacity change from 0 to 8192 [ 33.206050][ T39] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 33.217454][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.226150][ T39] usb 5-1: config 0 descriptor?? [ 33.238881][ T316] EXT4-fs (loop0): unmounting filesystem. [ 33.244843][ T845] loop2: p1 p2 p3 [ 33.295371][ T28] audit: type=1400 audit(1718090767.539:181): avc: denied { create } for pid=848 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.321433][ T313] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 33.322328][ T353] I/O error, dev loop2, sector 4118 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.328339][ T846] I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.338660][ T353] I/O error, dev loop2, sector 4118 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.349822][ T603] I/O error, dev loop2, sector 4097 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 33.366151][ T28] audit: type=1400 audit(1718090767.539:182): avc: denied { connect } for pid=848 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.385284][ T846] I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.403236][ T603] I/O error, dev loop2, sector 4097 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.404067][ T353] Buffer I/O error on dev loop2p2, logical block 8, async page read [ 33.425665][ T353] I/O error, dev loop2, sector 4119 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.428636][ T846] Buffer I/O error on dev loop2p1, logical block 8, async page read [ 33.435418][ T353] Buffer I/O error on dev loop2p2, logical block 9, async page read [ 33.443814][ T603] Buffer I/O error on dev loop2p3, logical block 0, async page read [ 33.450752][ T353] I/O error, dev loop2, sector 4120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.479195][ T353] Buffer I/O error on dev loop2p2, logical block 10, async page read [ 33.479576][ T846] I/O error, dev loop2, sector 2057 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.487459][ T353] I/O error, dev loop2, sector 4121 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 33.506244][ T353] Buffer I/O error on dev loop2p2, logical block 11, async page read [ 33.507387][ T846] Buffer I/O error on dev loop2p1, logical block 9, async page read [ 33.514932][ T28] audit: type=1400 audit(1718090767.759:183): avc: denied { read } for pid=862 comm="syz-executor.1" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 33.522302][ T846] Buffer I/O error on dev loop2p1, logical block 10, async page read [ 33.546550][ T353] Buffer I/O error on dev loop2p2, logical block 12, async page read [ 33.554331][ T846] Buffer I/O error on dev loop2p1, logical block 11, async page read [ 33.564657][ T28] audit: type=1400 audit(1718090767.759:184): avc: denied { open } for pid=862 comm="syz-executor.1" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 33.585244][ T846] udevd[846]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.596877][ T860] udevd[860]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 33.605154][ T28] audit: type=1400 audit(1718090767.799:185): avc: denied { ioctl } for pid=862 comm="syz-executor.1" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 33.615470][ T353] udevd[353]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.653668][ T860] udevd[860]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 33.658247][ T846] udevd[846]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 33.670473][ T353] udevd[353]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 33.712513][ T39] hid-rmi 0003:06CB:81A7.0002: item fetching failed at offset 3/5 [ 33.722543][ T39] hid-rmi 0003:06CB:81A7.0002: parse failed [ 33.728303][ T39] hid-rmi: probe of 0003:06CB:81A7.0002 failed with error -22 [ 33.790871][ T670] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.956094][ T19] usb 5-1: USB disconnect, device number 2 [ 34.070983][ T670] usb 3-1: Using ep0 maxpacket: 8 [ 34.199432][ T28] audit: type=1400 audit(1718090768.439:186): avc: denied { ioctl } for pid=871 comm="syz-executor.0" path="socket:[15775]" dev="sockfs" ino=15775 ioctlcmd=0x8920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.231876][ T874] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 34.350909][ T670] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 34.359764][ T670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 34.367777][ T670] usb 3-1: SerialNumber: syz [ 34.373197][ T670] usb 3-1: config 0 descriptor?? [ 34.411506][ T670] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 34.418194][ T670] usb 3-1: No valid video chain found. [ 34.612514][ T39] usb 3-1: USB disconnect, device number 2 [ 34.776374][ T28] audit: type=1400 audit(1718090769.019:187): avc: denied { getopt } for pid=894 comm="syz-executor.0" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.797261][ T895] loop0: detected capacity change from 0 to 256 [ 34.803840][ T895] ======================================================= [ 34.803840][ T895] WARNING: The mand mount option has been deprecated and [ 34.803840][ T895] and is ignored by this kernel. Remove the mand [ 34.803840][ T895] option from the mount to silence this warning. [ 34.803840][ T895] ======================================================= [ 34.841867][ T895] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 34.866577][ T28] audit: type=1400 audit(1718090769.109:188): avc: denied { read } for pid=896 comm="syz-executor.0" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.890089][ T28] audit: type=1400 audit(1718090769.109:189): avc: denied { open } for pid=896 comm="syz-executor.0" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.917779][ T901] input: syz0 as /devices/virtual/input/input7 [ 34.936672][ T903] loop0: detected capacity change from 0 to 256 [ 34.950994][ T320] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.994571][ T908] loop0: detected capacity change from 0 to 256 [ 35.001154][ T908] exfat: Deprecated parameter 'namecase' [ 35.006637][ T908] exfat: Deprecated parameter 'utf8' [ 35.012024][ T908] exfat: Deprecated parameter 'namecase' [ 35.019672][ T908] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 35.064076][ T914] syz-executor.0[914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.064126][ T914] syz-executor.0[914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.152004][ T922] loop2: detected capacity change from 0 to 128 [ 35.170185][ T922] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 35.309033][ T932] loop2: detected capacity change from 0 to 512 [ 35.310947][ T320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.315591][ T932] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.329771][ T320] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.346587][ T932] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 35.349353][ T320] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.355633][ T932] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 35.363595][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.371511][ T932] System zones: 1-12 [ 35.383609][ T320] usb 2-1: config 0 descriptor?? [ 35.389348][ T932] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 35.401515][ T331] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.401686][ T932] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 35.420936][ T932] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.438038][ T313] EXT4-fs (loop2): unmounting filesystem. [ 35.450628][ T935] loop2: detected capacity change from 0 to 256 [ 35.472969][ T935] exfat: Deprecated parameter 'namecase' [ 35.483109][ T935] exfat: Deprecated parameter 'utf8' [ 35.488228][ T935] exfat: Deprecated parameter 'namecase' [ 35.496287][ T935] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d) [ 35.621750][ T941] loop4: detected capacity change from 0 to 40427 [ 35.638185][ T941] F2FS-fs (loop4): invalid crc value [ 35.643469][ T331] usb 1-1: Using ep0 maxpacket: 32 [ 35.649963][ T941] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.683215][ T941] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.762221][ T331] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.774739][ T331] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.861951][ T320] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 35.863882][ T965] loop2: detected capacity change from 0 to 512 [ 35.869172][ T320] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description [ 35.887018][ T320] plantronics 0003:047F:FFFF.0003: parse failed [ 35.893336][ T320] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 35.905340][ T331] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 35.914362][ T331] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 35.923862][ T331] usb 1-1: Product: syz [ 35.927893][ T331] usb 1-1: Manufacturer: syz [ 35.929063][ T965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.942419][ T965] ext4 filesystem being mounted at /root/syzkaller-testdir2816660626/syzkaller.70xX60/84/file0 supports timestamps until 2038 (0x7fffffff) [ 35.965772][ T313] EXT4-fs (loop2): unmounting filesystem. [ 35.971993][ T331] hub 1-1:4.0: USB hub found [ 36.062806][ T320] usb 2-1: USB disconnect, device number 3 [ 36.230900][ T331] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 36.550931][ T331] usb 1-1: USB disconnect, device number 3 [ 36.582174][ T978] device pim6reg1 entered promiscuous mode [ 36.930915][ T331] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.954083][ T994] loop0: detected capacity change from 0 to 512 [ 36.982785][ T994] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.991567][ T994] ext4 filesystem being mounted at /root/syzkaller-testdir613754790/syzkaller.0Ohnu8/76/file1 supports timestamps until 2038 (0x7fffffff) [ 37.007724][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 37.007735][ T28] audit: type=1400 audit(1718090771.249:199): avc: denied { mounton } for pid=993 comm="syz-executor.0" path="/root/syzkaller-testdir613754790/syzkaller.0Ohnu8/76/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.044618][ T28] audit: type=1400 audit(1718090771.249:200): avc: denied { setattr } for pid=993 comm="syz-executor.0" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.070250][ T28] audit: type=1400 audit(1718090771.309:201): avc: denied { rmdir } for pid=316 comm="syz-executor.0" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.093916][ T316] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor.0: path /root/syzkaller-testdir613754790/syzkaller.0Ohnu8/76/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 37.119746][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.170855][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 37.450915][ T331] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 37.459934][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.467959][ T331] usb 2-1: Product: syz [ 37.472083][ T331] usb 2-1: Manufacturer: syz [ 37.476506][ T331] usb 2-1: SerialNumber: syz [ 37.481069][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 37.492420][ T331] usb 2-1: config 0 descriptor?? [ 37.497207][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.508257][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.517926][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 37.530938][ T24] usb 3-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 37.539798][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.548872][ T24] usb 3-1: config 0 descriptor?? [ 37.683078][ T28] audit: type=1400 audit(1718090771.929:202): avc: denied { ioctl } for pid=1002 comm="syz-executor.4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17241 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.856902][ T28] audit: type=1400 audit(1718090772.099:203): avc: denied { write } for pid=1006 comm="syz-executor.4" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.883715][ T28] audit: type=1400 audit(1718090772.099:204): avc: denied { open } for pid=1006 comm="syz-executor.4" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 37.910168][ T28] audit: type=1400 audit(1718090772.119:205): avc: denied { ioctl } for pid=1006 comm="syz-executor.4" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 38.033977][ T24] a4tech 0003:09DA:0006.0004: hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.2-1/input0 [ 38.200920][ T331] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:d5:00:22:2d:9d [ 38.213383][ T331] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 38.228236][ T28] audit: type=1400 audit(1718090772.469:206): avc: denied { read } for pid=139 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 38.252743][ T332] usb 3-1: USB disconnect, device number 3 [ 38.413759][ T331] usb 2-1: USB disconnect, device number 4 [ 38.421073][ T139] net eth1: rx_urb submit failed: -19 [ 39.120866][ T331] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.274239][ T1059] Driver unsupported XDP return value 0 on prog (id 103) dev N/A, expect packet loss! [ 39.341207][ T1065] loop1: detected capacity change from 0 to 512 [ 39.354344][ T1065] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.361175][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 39.366215][ T1065] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 39.375121][ T1065] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 39.382974][ T1065] System zones: 1-12 [ 39.387313][ T1065] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 39.399694][ T1065] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 39.411887][ T1065] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.435710][ T311] EXT4-fs (loop1): unmounting filesystem. [ 39.453134][ T28] audit: type=1400 audit(1718090773.699:207): avc: denied { create } for pid=1068 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 39.493030][ T1069] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 39.530887][ T331] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.532588][ T1069] kvm: pic: non byte read [ 39.541749][ T331] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.555620][ T1069] kvm: pic: level sensitive irq not supported [ 39.555679][ T1069] kvm: pic: non byte read [ 39.566104][ T1069] kvm: pic: level sensitive irq not supported [ 39.566153][ T1069] kvm: pic: non byte read [ 39.576769][ T1069] kvm: pic: level sensitive irq not supported [ 39.576816][ T1069] kvm: pic: non byte read [ 39.680922][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 39.698078][ T331] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 39.706776][ T331] usb 5-1: Product: syz [ 39.716396][ T331] usb 5-1: Manufacturer: syz [ 39.771546][ T331] hub 5-1:4.0: USB hub found [ 40.040929][ T331] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 40.360934][ T332] usb 5-1: USB disconnect, device number 3 [ 40.643127][ T1085] loop2: detected capacity change from 0 to 16 [ 40.664204][ T1085] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.719488][ T1097] serio: Serial port ptm0 [ 40.765005][ T28] audit: type=1400 audit(1718090775.009:208): avc: denied { create } for pid=1098 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.823997][ T1104] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 40.851888][ T1104] kvm: pic: non byte read [ 40.856352][ T1104] kvm: pic: level sensitive irq not supported [ 40.856398][ T1104] kvm: pic: non byte read [ 40.866951][ T1104] kvm: pic: level sensitive irq not supported [ 40.866999][ T1104] kvm: pic: non byte read [ 40.877527][ T1104] kvm: pic: level sensitive irq not supported [ 40.877580][ T1104] kvm: pic: non byte read [ 40.980847][ T332] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.059261][ T1118] loop1: detected capacity change from 0 to 256 [ 41.220850][ T332] usb 3-1: Using ep0 maxpacket: 16 [ 41.340993][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.360480][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.370288][ T332] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.384559][ T332] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.393631][ T1133] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 41.399106][ T1133] pim6reg0: linktype set to 776 [ 41.404324][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.424383][ T332] usb 3-1: config 0 descriptor?? [ 41.604081][ T1143] binder: BC_ACQUIRE_RESULT not supported [ 41.609701][ T1143] binder: 1142:1143 ioctl c0306201 200002c0 returned -22 [ 41.924133][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 41.931208][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 41.938272][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 41.945550][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 41.952742][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 41.959760][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 41.967030][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 42.116445][ T331] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.313693][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 42.320753][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 42.327806][ T332] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 42.335074][ T332] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 42.353531][ T332] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 42.364768][ T332] microsoft 0003:045E:07DA.0005: no inputs found [ 42.370917][ T332] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 42.384553][ T332] usb 3-1: USB disconnect, device number 4 [ 42.520881][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.531755][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.541479][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 42.554263][ T331] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.563292][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.574679][ T331] usb 2-1: config 0 descriptor?? [ 42.677107][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 42.677120][ T28] audit: type=1400 audit(1718090776.919:214): avc: denied { mounton } for pid=1161 comm="syz-executor.2" path="/root/syzkaller-testdir2816660626/syzkaller.70xX60/94/file0" dev="sda1" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 43.019017][ T28] audit: type=1400 audit(1718090777.239:215): avc: denied { create } for pid=1170 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.125712][ T28] audit: type=1400 audit(1718090777.249:216): avc: denied { write } for pid=1170 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.190077][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.198341][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.205589][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.212916][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.222573][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.230255][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.237740][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.240373][ T28] audit: type=1400 audit(1718090777.249:217): avc: denied { read } for pid=1170 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.247427][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.273555][ T1182] syz-executor.4[1182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.273623][ T1182] syz-executor.4[1182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.289139][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.310533][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.318050][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.327640][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.335229][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.347113][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.354543][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.361875][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.369083][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.377006][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.384369][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.392243][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.399451][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.406800][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.414122][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.421528][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.428737][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.436064][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.443410][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.450594][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.457990][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.465285][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.472510][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.479690][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.487073][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.494373][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.501797][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.508979][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.516394][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.523697][ T331] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 43.531199][ T331] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 43.539806][ T331] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 43.557741][ T331] usb 2-1: USB disconnect, device number 5 [ 43.982239][ T1168] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.240888][ T1168] usb 5-1: Using ep0 maxpacket: 16 [ 44.360898][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.371683][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.381168][ T1168] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 44.393806][ T1168] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 44.403605][ T1168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.412089][ T1168] usb 5-1: config 0 descriptor?? [ 44.469869][ T28] audit: type=1400 audit(1718090778.709:218): avc: denied { map } for pid=1208 comm="syz-executor.1" path="/dev/ashmem" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.589605][ T1213] serio: Serial port ptm0 [ 44.781005][ T1223] tipc: Trying to set illegal importance in message [ 44.891886][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 44.909152][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 44.916409][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.257275][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.264587][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.271629][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.278639][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.285742][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.300862][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.307887][ T1168] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 45.315201][ T1168] microsoft 0003:045E:07DA.0007: No inputs registered, leaving [ 45.331385][ T1168] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 45.350858][ T1168] microsoft 0003:045E:07DA.0007: no inputs found [ 45.364661][ T1168] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 45.381575][ T1168] usb 5-1: USB disconnect, device number 4 [ 45.519736][ T1230] loop2: detected capacity change from 0 to 2048 [ 45.529521][ T1230] EXT4-fs: Ignoring removed nobh option [ 45.542350][ T1230] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.565400][ T1230] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 2: invalid block bitmap [ 45.577984][ T1230] EXT4-fs (loop2): Remounting filesystem read-only [ 45.585074][ T28] audit: type=1400 audit(1718090779.829:219): avc: denied { ioctl } for pid=1229 comm="syz-executor.2" path="/root/syzkaller-testdir2816660626/syzkaller.70xX60/101/file1/cpuset.effective_cpus" dev="loop2" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.617833][ T313] EXT4-fs (loop2): unmounting filesystem. [ 46.637022][ T1168] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.885933][ T670] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.150901][ T670] usb 3-1: Using ep0 maxpacket: 32 [ 47.320879][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.331661][ T1168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.341550][ T1168] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 47.350429][ T1168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.359028][ T1168] usb 5-1: config 0 descriptor?? [ 47.500932][ T670] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 47.509862][ T670] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.517823][ T670] usb 3-1: Product: syz [ 47.521961][ T670] usb 3-1: Manufacturer: syz [ 47.526357][ T670] usb 3-1: SerialNumber: syz [ 47.534922][ T670] usb 3-1: config 0 descriptor?? [ 47.842329][ T1168] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 47.849204][ T1168] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 47.856904][ T1168] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 47.864129][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 47.871752][ T1168] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 47.878589][ T1168] uclogic 0003:5543:0781.0008: unknown main item tag 0x0 [ 47.885818][ T1168] uclogic 0003:5543:0781.0008: No inputs registered, leaving [ 47.901602][ T1168] uclogic 0003:5543:0781.0008: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input0 [ 48.044837][ T19] usb 5-1: USB disconnect, device number 5 [ 48.110856][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 48.230889][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.243744][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.253585][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 48.260942][ T670] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1a:35:85:89:77:ec [ 48.266418][ T39] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 48.284909][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.298303][ T670] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 48.301212][ T39] usb 2-1: config 0 descriptor?? [ 48.472337][ T19] usb 3-1: USB disconnect, device number 5 [ 48.490901][ T139] net eth1: rx_urb submit failed: -19 [ 48.795458][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.806635][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.808916][ T1311] loop4: detected capacity change from 0 to 16 [ 48.813790][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.827401][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.838548][ T1311] erofs: (device loop4): mounted with root inode @ nid 36. [ 48.847286][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.859171][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.866311][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.873470][ T1311] erofs: (device loop4): z_erofs_fill_inode_lazy: unknown HEAD1 format 15 for nid 36, please upgrade kernel [ 48.885069][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.892162][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.899107][ T39] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 48.916558][ T39] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 48.933413][ T39] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 48.944636][ T39] microsoft 0003:045E:07DA.0009: no inputs found [ 48.950770][ T39] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 49.006908][ T19] usb 2-1: USB disconnect, device number 6 [ 49.031470][ T1318] loop4: detected capacity change from 0 to 1024 [ 49.045566][ T1318] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.071059][ T1318] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 49.087678][ T28] audit: type=1400 audit(1718090783.329:220): avc: denied { setattr } for pid=1317 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.112956][ T28] audit: type=1400 audit(1718090783.359:221): avc: denied { mounton } for pid=1317 comm="syz-executor.4" path="/root/syzkaller-testdir868596543/syzkaller.PaZKCY/98/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.160861][ T1318] loop4: detected capacity change from 1024 to 0 [ 49.168748][ C0] blk_print_req_error: 10 callbacks suppressed [ 49.168762][ C0] I/O error, dev loop4, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 49.184053][ C0] I/O error, dev loop4, sector 46 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.190848][ T1323] EXT4-fs error (device loop4): ext4_get_inode_loc:4635: inode #12: block 16: comm syz-executor.4: unable to read itable block [ 49.193424][ C0] I/O error, dev loop4, sector 44 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.215727][ C0] I/O error, dev loop4, sector 42 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.225102][ C0] I/O error, dev loop4, sector 40 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.234473][ C0] I/O error, dev loop4, sector 38 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.243845][ C0] I/O error, dev loop4, sector 36 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.244569][ T363] loop: Write error at byte offset 9223372036854776831, length 1024. [ 49.253217][ C0] I/O error, dev loop4, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.270474][ C0] I/O error, dev loop4, sector 30 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.272044][ C1] I/O error, dev loop4, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 49.289151][ C1] buffer_io_error: 7 callbacks suppressed [ 49.289163][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 49.303229][ T1323] EXT4-fs (loop4): I/O error while writing superblock [ 49.326354][ T1326] loop2: detected capacity change from 0 to 16 [ 49.329171][ T308] EXT4-fs error (device loop4): ext4_get_inode_loc:4635: inode #2: block 6: comm syz-executor.4: unable to read itable block [ 49.345763][ T43] loop: Write error at byte offset 9223372036854776831, length 1024. [ 49.345846][ T1326] erofs: (device loop2): mounted with root inode @ nid 36. [ 49.353898][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 49.368888][ T308] EXT4-fs (loop4): I/O error while writing superblock [ 49.376332][ T308] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: IO failure [ 49.385187][ T363] loop: Write error at byte offset 9223372036854776831, length 1024. [ 49.396713][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 49.404932][ T308] EXT4-fs (loop4): I/O error while writing superblock [ 49.411641][ T308] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor.4: mark_inode_dirty error [ 49.421444][ T28] audit: type=1400 audit(1718090783.659:222): avc: denied { map } for pid=1327 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 49.423333][ T363] loop: Write error at byte offset 9223372036854776831, length 1024. [ 49.455075][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 49.463224][ T308] EXT4-fs (loop4): I/O error while writing superblock [ 49.470637][ T363] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4620: inode #12: block 16: comm kworker/u4:4: unable to read itable block [ 49.484690][ T43] loop: Write error at byte offset 9223372036854776831, length 1024. [ 49.484831][ T28] audit: type=1400 audit(1718090783.699:223): avc: denied { call } for pid=1327 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.511620][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 49.519687][ T363] EXT4-fs (loop4): I/O error while writing superblock [ 49.526782][ T363] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4620: inode #2: block 6: comm kworker/u4:4: unable to read itable block [ 49.539495][ T28] audit: type=1400 audit(1718090783.699:224): avc: denied { transfer } for pid=1327 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 49.540476][ T43] loop: Write error at byte offset 9223372036854776831, length 1024. [ 49.569689][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 49.577843][ T363] EXT4-fs (loop4): I/O error while writing superblock [ 49.585270][ T28] audit: type=1400 audit(1718090783.829:225): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.599180][ T308] EXT4-fs (loop4): unmounting filesystem. [ 49.628821][ T28] audit: type=1400 audit(1718090783.829:226): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.650987][ T28] audit: type=1400 audit(1718090783.829:227): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 49.671632][ T363] loop: Write error at byte offset 9223372036854776831, length 1024. [ 49.679514][ C1] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 49.687769][ T308] EXT4-fs (loop4): I/O error while writing superblock [ 49.741999][ T308] syz-executor.4 (308) used greatest stack depth: 20488 bytes left [ 50.050945][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.059181][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.068393][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.088980][ T1343] device bridge_slave_0 entered promiscuous mode [ 50.098113][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.110840][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.121265][ T1343] device bridge_slave_1 entered promiscuous mode [ 50.205430][ T1348] loop2: detected capacity change from 0 to 256 [ 50.241895][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.248865][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.255990][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.262772][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.275809][ T363] device bridge_slave_1 left promiscuous mode [ 50.283300][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.290647][ T363] device bridge_slave_0 left promiscuous mode [ 50.297148][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.304846][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 50.310724][ T363] device veth1_macvtap left promiscuous mode [ 50.316765][ T363] device veth0_vlan left promiscuous mode [ 50.414285][ T1351] loop2: detected capacity change from 0 to 1024 [ 50.423388][ T39] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.445942][ T1351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.464541][ T39] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.482383][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.490043][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.499756][ T1351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.517071][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.541641][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.549862][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.558004][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.569033][ T1343] device veth0_vlan entered promiscuous mode [ 50.578395][ T1351] loop2: detected capacity change from 1024 to 0 [ 50.593150][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.603604][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 50.613597][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.621033][ T39] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 50.629978][ T1353] EXT4-fs error (device loop2): ext4_get_inode_loc:4635: inode #12: block 16: comm syz-executor.2: unable to read itable block [ 50.643338][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.650583][ T39] usb 2-1: Product: syz [ 50.655836][ T39] usb 2-1: Manufacturer: syz [ 50.663634][ T8] loop: Write error at byte offset 9223372036854776831, length 1024. [ 50.668369][ T1343] device veth1_macvtap entered promiscuous mode [ 50.677693][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 50.688962][ T1353] EXT4-fs (loop2): I/O error while writing superblock [ 50.697396][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.718880][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.721454][ T39] hub 2-1:4.0: USB hub found [ 50.727859][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.739998][ T313] EXT4-fs error (device loop2): ext4_get_inode_loc:4635: inode #2: block 6: comm syz-executor.2: unable to read itable block [ 50.753631][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.761788][ T8] loop: Write error at byte offset 9223372036854776831, length 1024. [ 50.769982][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.778032][ C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 50.786246][ T313] EXT4-fs (loop2): I/O error while writing superblock [ 50.792885][ T313] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: IO failure [ 50.804236][ T43] loop: Write error at byte offset 9223372036854776831, length 1024. [ 50.816482][ T28] audit: type=1400 audit(1718090785.059:228): avc: denied { mounton } for pid=1343 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.817819][ C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 50.850887][ T313] EXT4-fs (loop2): I/O error while writing superblock [ 50.857457][ T313] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor.2: mark_inode_dirty error [ 50.869302][ T313] EXT4-fs (loop2): I/O error while writing superblock [ 50.879159][ T43] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4620: inode #12: block 16: comm kworker/u4:2: unable to read itable block [ 50.904912][ T43] EXT4-fs (loop2): I/O error while writing superblock [ 50.921052][ T43] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4620: inode #2: block 6: comm kworker/u4:2: unable to read itable block [ 50.982234][ T43] EXT4-fs (loop2): I/O error while writing superblock [ 51.010950][ T39] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 51.021006][ T313] EXT4-fs (loop2): unmounting filesystem. [ 51.043813][ T1355] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.050704][ T1355] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.058395][ T1355] device bridge_slave_0 entered promiscuous mode [ 51.137699][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.167825][ T1355] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.211339][ T1355] device bridge_slave_1 entered promiscuous mode [ 51.401391][ T313] EXT4-fs (loop2): I/O error while writing superblock [ 51.471953][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.478833][ T1355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.485922][ T1355] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.492710][ T1355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.510970][ T6] usb 2-1: USB disconnect, device number 7 [ 51.529929][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.537845][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.545509][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.566426][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.577755][ T670] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.584612][ T670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.596709][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.605747][ T670] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.612613][ T670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.631042][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.638961][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.653643][ T1355] device veth0_vlan entered promiscuous mode [ 51.660698][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.669240][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.678004][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.685766][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.703137][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.722120][ T1355] device veth1_macvtap entered promiscuous mode [ 51.735296][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.743682][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.756173][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.765019][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.866574][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.873874][ T1368] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.881209][ T1368] device bridge_slave_0 entered promiscuous mode [ 51.888084][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.896060][ T1368] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.904992][ T1368] device bridge_slave_1 entered promiscuous mode [ 51.948199][ T28] audit: type=1400 audit(1718090786.189:229): avc: denied { name_bind } for pid=1376 comm="syz-executor.3" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 51.984115][ T1378] loop3: detected capacity change from 0 to 512 [ 51.992511][ T363] device bridge_slave_1 left promiscuous mode [ 51.999138][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.027329][ T363] device bridge_slave_0 left promiscuous mode [ 52.040230][ T1378] EXT4-fs: Ignoring removed bh option [ 52.045910][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.054230][ T1378] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.068109][ T363] device veth1_macvtap left promiscuous mode [ 52.075838][ T1378] EXT4-fs (loop3): 1 truncate cleaned up [ 52.077102][ T1385] loop1: detected capacity change from 0 to 1024 [ 52.081497][ T363] device veth0_vlan left promiscuous mode [ 52.093167][ T1378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 52.125581][ T1385] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 52.151038][ T1378] loop3: detected capacity change from 512 to 64 [ 52.186152][ T19] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.196923][ T1355] EXT4-fs (loop3): unmounting filesystem. [ 52.228343][ T1388] loop1: detected capacity change from 0 to 256 [ 52.369437][ T1392] loop3: detected capacity change from 0 to 512 [ 52.376412][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.383266][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.390343][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.397153][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.419067][ T1392] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 52.430311][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.440448][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.458414][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.480992][ T1392] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 52.512156][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.520298][ T670] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.527162][ T670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.535000][ T1392] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 52.549196][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.567337][ T670] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.574307][ T670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.581876][ T1392] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 52.621350][ T19] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 52.633203][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.641629][ T19] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 52.653162][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.661379][ T1392] EXT4-fs (loop3): 1 orphan inode deleted [ 52.670216][ T1392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.679236][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.686811][ T19] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 52.704066][ T1368] device veth0_vlan entered promiscuous mode [ 52.720864][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.732104][ T1368] device veth1_macvtap entered promiscuous mode [ 52.749959][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.762052][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.780871][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.788148][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.805490][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.816964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.850441][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.862224][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.117952][ T1355] EXT4-fs (loop3): unmounting filesystem. [ 53.148877][ T1416] loop1: detected capacity change from 0 to 512 [ 53.156207][ T1410] kvm [1409]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x0 [ 53.180281][ T1416] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 53.188859][ T1416] EXT4-fs (loop1): 1 truncate cleaned up [ 53.194614][ T1416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.398635][ T363] device bridge_slave_1 left promiscuous mode [ 53.407400][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.428561][ T363] device bridge_slave_0 left promiscuous mode [ 53.436343][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.437768][ T1426] overlayfs: statfs failed on './file0' [ 53.456492][ T363] device veth1_macvtap left promiscuous mode [ 53.462363][ T363] device veth0_vlan left promiscuous mode [ 53.510912][ T331] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.553455][ T311] EXT4-fs (loop1): unmounting filesystem. [ 53.690917][ T19] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 53.698477][ T19] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input12 [ 53.719699][ T19] input: failed to attach handler kbd to device input12, error: -5 [ 53.760907][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 53.880893][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.892033][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.901934][ T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.914808][ T331] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.923800][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.931959][ T320] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.944709][ T331] usb 3-1: config 0 descriptor?? [ 54.090858][ T1168] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 54.170305][ T19] usb 5-1: USB disconnect, device number 6 [ 54.171605][ T320] usb 4-1: Using ep0 maxpacket: 16 [ 54.310892][ T320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.321623][ T320] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 54.331209][ T320] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 54.340914][ T320] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 54.421835][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.430766][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.437932][ T320] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 54.446848][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.453907][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.464689][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 54.472434][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.479475][ T1168] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 54.488305][ T320] usb 4-1: SerialNumber: syz [ 54.492867][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.499815][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.507261][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.518100][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.525580][ T1168] usb 2-1: config 0 descriptor?? [ 54.530550][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.537688][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.546083][ T331] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 54.553653][ T320] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 54.564781][ T331] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 54.572611][ T320] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 54.584725][ T331] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 54.596412][ T331] microsoft 0003:045E:07DA.000A: no inputs found [ 54.602752][ T331] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 54.625177][ T670] usb 3-1: USB disconnect, device number 6 [ 54.630916][ T19] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 54.758513][ T310] usb 4-1: USB disconnect, device number 2 [ 55.001501][ T1168] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 55.010919][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.011486][ T1168] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input14 [ 55.112093][ T1168] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 55.210912][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.223608][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.231549][ T19] usb 5-1: Product: syz [ 55.231571][ T19] usb 5-1: Manufacturer: syz [ 55.231588][ T19] usb 5-1: SerialNumber: syz [ 55.715386][ T1394] usb 2-1: USB disconnect, device number 8 [ 55.730984][ T1168] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 55.981061][ T1168] usb 4-1: Using ep0 maxpacket: 32 [ 56.107615][ T1458] device syzkaller0 entered promiscuous mode [ 56.275110][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 56.275127][ T28] audit: type=1400 audit(1718090790.519:247): avc: denied { read write } for pid=1464 comm="syz-executor.1" name="uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.277066][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.290934][ T1168] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 56.305152][ T28] audit: type=1400 audit(1718090790.519:248): avc: denied { open } for pid=1464 comm="syz-executor.1" path="/dev/uhid" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.322287][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.344271][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.361054][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.405447][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.413918][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.421846][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.429425][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.437720][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.445791][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.453721][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.462028][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.469349][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.491068][ T19] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 56.507495][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.517254][ T19] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 56.554128][ T1168] usb 4-1: Product: syz [ 56.558117][ T1168] usb 4-1: Manufacturer: syz [ 56.562597][ T1168] usb 4-1: SerialNumber: syz [ 56.569372][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.576773][ T19] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 56.581100][ T1168] usb 4-1: config 0 descriptor?? [ 56.582544][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.594581][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.601928][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.609203][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.616545][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.623982][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.631316][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.638584][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.645888][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.653270][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.660489][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.667953][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.675257][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.682824][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.690069][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.697481][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.706430][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.713952][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.721356][ T19] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 56.727833][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.739616][ T19] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 56.750433][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.761002][ T19] usb 5-1: USB disconnect, device number 7 [ 56.767121][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.777720][ T19] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 56.787195][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.794516][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.805517][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.818270][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.828862][ T670] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 56.846322][ T670] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 56.860421][ T670] ================================================================== [ 56.868294][ T670] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 56.875933][ T670] Read of size 8 at addr ffff888139d90cf0 by task kworker/0:4/670 [ 56.883577][ T670] [ 56.885739][ T670] CPU: 0 PID: 670 Comm: kworker/0:4 Not tainted 6.1.78-syzkaller-00164-gac9706483e98 #0 [ 56.895282][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 2024/06/11 07:26:31 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 56.905278][ T670] Workqueue: events bpf_prog_free_deferred [ 56.910927][ T670] Call Trace: [ 56.914044][ T670] [ 56.916820][ T670] dump_stack_lvl+0x151/0x1b7 [ 56.921341][ T670] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 56.926712][ T670] ? _printk+0xd1/0x111 [ 56.930705][ T670] ? __virt_addr_valid+0x242/0x2f0 [ 56.935655][ T670] print_report+0x158/0x4e0 [ 56.939998][ T670] ? __virt_addr_valid+0x242/0x2f0 [ 56.944941][ T670] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 56.951018][ T670] ? __list_del_entry_valid+0xa6/0x130 [ 56.956308][ T670] kasan_report+0x13c/0x170 [ 56.960652][ T670] ? __list_del_entry_valid+0xa6/0x130 [ 56.965946][ T670] __asan_report_load8_noabort+0x14/0x20 [ 56.971413][ T670] __list_del_entry_valid+0xa6/0x130 [ 56.976531][ T670] process_one_work+0x4d7/0xcb0 [ 56.981222][ T670] worker_thread+0xa60/0x1260 [ 56.985743][ T670] kthread+0x26d/0x300 [ 56.989637][ T670] ? worker_clr_flags+0x1a0/0x1a0 [ 56.994507][ T670] ? kthread_blkcg+0xd0/0xd0 [ 56.998925][ T670] ret_from_fork+0x1f/0x30 [ 57.003181][ T670] [ 57.006041][ T670] [ 57.008211][ T670] Allocated by task 19: [ 57.012204][ T670] kasan_set_track+0x4b/0x70 [ 57.016630][ T670] kasan_save_alloc_info+0x1f/0x30 [ 57.021574][ T670] __kasan_kmalloc+0x9c/0xb0 [ 57.026009][ T670] __kmalloc_node+0xb4/0x1e0 [ 57.030422][ T670] kvmalloc_node+0x221/0x640 [ 57.034850][ T670] alloc_netdev_mqs+0x8c/0xf90 [ 57.039449][ T670] alloc_etherdev_mqs+0x36/0x40 [ 57.044138][ T670] usbnet_probe+0x207/0x27c0 [ 57.048564][ T670] usb_probe_interface+0x5b6/0xa90 [ 57.053514][ T670] really_probe+0x2b8/0x920 [ 57.057858][ T670] __driver_probe_device+0x1a0/0x310 [ 57.062972][ T670] driver_probe_device+0x54/0x3d0 [ 57.067840][ T670] __device_attach_driver+0x2e3/0x490 [ 57.073127][ T670] bus_for_each_drv+0x183/0x200 [ 57.077818][ T670] __device_attach+0x312/0x510 [ 57.082413][ T670] device_initial_probe+0x1a/0x20 [ 57.087273][ T670] bus_probe_device+0xbe/0x1e0 [ 57.091870][ T670] device_add+0xb60/0xf10 [ 57.096038][ T670] usb_set_configuration+0x190f/0x1e80 [ 57.101332][ T670] usb_generic_driver_probe+0x8b/0x150 [ 57.106637][ T670] usb_probe_device+0x144/0x260 [ 57.111313][ T670] really_probe+0x2b8/0x920 [ 57.115654][ T670] __driver_probe_device+0x1a0/0x310 [ 57.120772][ T670] driver_probe_device+0x54/0x3d0 [ 57.125634][ T670] __device_attach_driver+0x2e3/0x490 [ 57.130847][ T670] bus_for_each_drv+0x183/0x200 [ 57.135527][ T670] __device_attach+0x312/0x510 [ 57.140127][ T670] device_initial_probe+0x1a/0x20 [ 57.144989][ T670] bus_probe_device+0xbe/0x1e0 [ 57.149589][ T670] device_add+0xb60/0xf10 [ 57.153756][ T670] usb_new_device+0xf32/0x1810 [ 57.158355][ T670] hub_event+0x2db1/0x4830 [ 57.162608][ T670] process_one_work+0x73d/0xcb0 [ 57.167294][ T670] worker_thread+0xa60/0x1260 [ 57.171806][ T670] kthread+0x26d/0x300 [ 57.175711][ T670] ret_from_fork+0x1f/0x30 [ 57.179966][ T670] [ 57.182134][ T670] Freed by task 19: [ 57.185783][ T670] kasan_set_track+0x4b/0x70 [ 57.190206][ T670] kasan_save_free_info+0x2b/0x40 [ 57.195067][ T670] ____kasan_slab_free+0x131/0x180 [ 57.200029][ T670] __kasan_slab_free+0x11/0x20 [ 57.204614][ T670] __kmem_cache_free+0x218/0x3b0 [ 57.209386][ T670] kfree+0x7a/0xf0 [ 57.212948][ T670] kvfree+0x35/0x40 [ 57.216604][ T670] netdev_freemem+0x3f/0x60 [ 57.220929][ T670] netdev_release+0x7f/0xb0 [ 57.225269][ T670] device_release+0x95/0x1c0 [ 57.229695][ T670] kobject_put+0x178/0x260 [ 57.233950][ T670] put_device+0x1f/0x30 [ 57.237941][ T670] free_netdev+0x393/0x480 [ 57.242195][ T670] usbnet_disconnect+0x245/0x390 [ 57.246969][ T670] usb_unbind_interface+0x1fa/0x8c0 [ 57.252004][ T670] device_release_driver_internal+0x53e/0x870 [ 57.257903][ T670] device_release_driver+0x19/0x20 [ 57.262850][ T670] bus_remove_device+0x2fa/0x360 [ 57.267623][ T670] device_del+0x663/0xe90 [ 57.271788][ T670] usb_disable_device+0x380/0x720 [ 57.276651][ T670] usb_disconnect+0x32a/0x890 [ 57.281162][ T670] hub_event+0x1ed8/0x4830 [ 57.285419][ T670] process_one_work+0x73d/0xcb0 [ 57.290101][ T670] worker_thread+0xd71/0x1260 [ 57.294617][ T670] kthread+0x26d/0x300 [ 57.298522][ T670] ret_from_fork+0x1f/0x30 [ 57.302774][ T670] [ 57.304944][ T670] Last potentially related work creation: [ 57.310500][ T670] kasan_save_stack+0x3b/0x60 [ 57.315012][ T670] __kasan_record_aux_stack+0xb4/0xc0 [ 57.320219][ T670] kasan_record_aux_stack_noalloc+0xb/0x10 [ 57.325861][ T670] insert_work+0x56/0x310 [ 57.330026][ T670] __queue_work+0x9b6/0xd70 [ 57.334367][ T670] queue_work_on+0x105/0x170 [ 57.338795][ T670] usbnet_link_change+0xeb/0x100 [ 57.343572][ T670] usbnet_probe+0x1dbe/0x27c0 [ 57.348078][ T670] usb_probe_interface+0x5b6/0xa90 [ 57.353025][ T670] really_probe+0x2b8/0x920 [ 57.357366][ T670] __driver_probe_device+0x1a0/0x310 [ 57.362487][ T670] driver_probe_device+0x54/0x3d0 [ 57.367349][ T670] __device_attach_driver+0x2e3/0x490 [ 57.372554][ T670] bus_for_each_drv+0x183/0x200 [ 57.377240][ T670] __device_attach+0x312/0x510 [ 57.381842][ T670] device_initial_probe+0x1a/0x20 [ 57.386705][ T670] bus_probe_device+0xbe/0x1e0 [ 57.391302][ T670] device_add+0xb60/0xf10 [ 57.395471][ T670] usb_set_configuration+0x190f/0x1e80 [ 57.400763][ T670] usb_generic_driver_probe+0x8b/0x150 [ 57.406056][ T670] usb_probe_device+0x144/0x260 [ 57.410741][ T670] really_probe+0x2b8/0x920 [ 57.415083][ T670] __driver_probe_device+0x1a0/0x310 [ 57.420205][ T670] driver_probe_device+0x54/0x3d0 [ 57.425063][ T670] __device_attach_driver+0x2e3/0x490 [ 57.430271][ T670] bus_for_each_drv+0x183/0x200 [ 57.434959][ T670] __device_attach+0x312/0x510 [ 57.439557][ T670] device_initial_probe+0x1a/0x20 [ 57.444421][ T670] bus_probe_device+0xbe/0x1e0 [ 57.449018][ T670] device_add+0xb60/0xf10 [ 57.453184][ T670] usb_new_device+0xf32/0x1810 [ 57.457783][ T670] hub_event+0x2db1/0x4830 [ 57.462038][ T670] process_one_work+0x73d/0xcb0 [ 57.466725][ T670] worker_thread+0xa60/0x1260 [ 57.471235][ T670] kthread+0x26d/0x300 [ 57.475142][ T670] ret_from_fork+0x1f/0x30 [ 57.479393][ T670] [ 57.481564][ T670] The buggy address belongs to the object at ffff888139d90000 [ 57.481564][ T670] which belongs to the cache kmalloc-4k of size 4096 [ 57.495478][ T670] The buggy address is located 3312 bytes inside of [ 57.495478][ T670] 4096-byte region [ffff888139d90000, ffff888139d91000) [ 57.508730][ T670] [ 57.510899][ T670] The buggy address belongs to the physical page: [ 57.517160][ T670] page:ffffea0004e76400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x139d90 [ 57.527217][ T670] head:ffffea0004e76400 order:3 compound_mapcount:0 compound_pincount:0 [ 57.535376][ T670] flags: 0x4000000000010200(slab|head|zone=1) [ 57.541282][ T670] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 57.549700][ T670] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 57.558117][ T670] page dumped because: kasan: bad access detected [ 57.564372][ T670] page_owner tracks the page as allocated [ 57.569918][ T670] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 846, tgid 846 (udevd), ts 55234841021, free_ts 55233372696 [ 57.591705][ T670] post_alloc_hook+0x213/0x220 [ 57.596302][ T670] prep_new_page+0x1b/0x110 [ 57.600642][ T670] get_page_from_freelist+0x27ea/0x2870 [ 57.606023][ T670] __alloc_pages+0x3a1/0x780 [ 57.610452][ T670] alloc_slab_page+0x6c/0xf0 [ 57.614878][ T670] new_slab+0x90/0x3e0 [ 57.618782][ T670] ___slab_alloc+0x6f9/0xb80 [ 57.623207][ T670] __slab_alloc+0x5d/0xa0 [ 57.627377][ T670] __kmem_cache_alloc_node+0x1af/0x250 [ 57.632668][ T670] __kmalloc_node+0xa3/0x1e0 [ 57.637094][ T670] kvmalloc_node+0x221/0x640 [ 57.641520][ T670] seq_read_iter+0x1ff/0xd00 [ 57.645947][ T670] kernfs_fop_read_iter+0x145/0x470 [ 57.650981][ T670] vfs_read+0x771/0xad0 [ 57.654975][ T670] ksys_read+0x199/0x2c0 [ 57.659052][ T670] __x64_sys_read+0x7b/0x90 [ 57.663393][ T670] page last free stack trace: [ 57.667905][ T670] free_unref_page_prepare+0x83d/0x850 [ 57.673199][ T670] free_unref_page+0xb2/0x5c0 [ 57.677713][ T670] __free_pages+0x61/0xf0 [ 57.681881][ T670] __free_slab+0xce/0x1a0 [ 57.686043][ T670] __unfreeze_partials+0x165/0x1a0 [ 57.690993][ T670] put_cpu_partial+0xa9/0x100 [ 57.695507][ T670] __slab_free+0x1c8/0x280 [ 57.699756][ T670] ___cache_free+0xc6/0xd0 [ 57.704015][ T670] qlist_free_all+0xc5/0x140 [ 57.708439][ T670] kasan_quarantine_reduce+0x15a/0x180 [ 57.713745][ T670] __kasan_slab_alloc+0x24/0x80 [ 57.718418][ T670] slab_post_alloc_hook+0x53/0x2c0 [ 57.723368][ T670] kmem_cache_alloc+0x175/0x2c0 [ 57.728051][ T670] getname_flags+0xba/0x520 [ 57.732391][ T670] __se_sys_newfstatat+0xe2/0x7b0 [ 57.737252][ T670] __x64_sys_newfstatat+0x9b/0xb0 [ 57.742111][ T670] [ 57.744283][ T670] Memory state around the buggy address: [ 57.749753][ T670] ffff888139d90b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.757652][ T670] ffff888139d90c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.765551][ T670] >ffff888139d90c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.773447][ T670] ^ [ 57.780996][ T670] ffff888139d90d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.788893][ T670] ffff888139d90d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 57.796791][ T670] ================================================================== [ 57.804691][ T670] Disabling lock debugging due to kernel taint