last executing test programs: 5.355076133s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000066c0)={0x0, 0x0, &(0x7f0000006600)=[{&(0x7f00000001c0)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\\\x00'}]}]}, 0x20}], 0x1}, 0x0) 5.327446727s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kvm_userspace_exit\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.294142872s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.270359956s ago: executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x5a2, 0x0) ppoll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r2 = dup(r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x10007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.265192191s ago: executing program 3: syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000000c0)='./file0\x00', 0x2008410, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x5543, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2}) 2.235381085s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r5, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00', 0x2) 1.709165026s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001c80)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.699417628s ago: executing program 0: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e85f5e", 0x18, 0x0, 0x0, @local, @private1, {[@routing={0x0, 0x2, 0x31, 0x9, 0x0, [@empty]}]}}}}}, 0x0) 1.691954359s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x1a, 0x0, &(0x7f0000000280)) 1.689049739s ago: executing program 1: write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 1.6826148s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r1, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) 1.570598328s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat(r2, &(0x7f0000000140)='./file0/file0\x00', 0xa4b40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 1.174989149s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r3, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1}, 0x6e) 1.10677993s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 1.097742341s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}}, 0x0) 1.054136677s ago: executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463ff0f46002829"], 0xffdd) 1.033946441s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 1.015647844s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000e006"]) 946.764174ms ago: executing program 2: syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e85f5e", 0x18, 0x0, 0x0, @local, @private1, {[@routing={0x0, 0x2, 0x31, 0x9, 0x0, [@empty]}]}}}}}, 0x0) 932.156936ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000003920207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 917.705569ms ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r5, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r5, &(0x7f0000000200)='./file0\x00', 0x2) 781.02067ms ago: executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setxattr$incfs_id(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), &(0x7f0000000640), 0x20, 0x0) llistxattr(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) 563.820893ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x60600) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat(r2, &(0x7f0000000140)='./file0/file0\x00', 0xa4b40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 374.696393ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r4) 315.952682ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 298.961534ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 258.178951ms ago: executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x1e54, 0x3) ioperm(0x0, 0x4a, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r5, &(0x7f00000008c0)={0x10}, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002540)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, '-\'-]\'+(*!'}}]}, 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4400, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r1, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) 109.814643ms ago: executing program 1: syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000000c0)='./file0\x00', 0x2008410, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x5543, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2}) 37.548095ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') pread64(r2, &(0x7f0000000240)=""/206, 0xce, 0x80000000) 0s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000003c0)=[{0x5, 0x1, 0x2, 0x3}, {0x0, 0x4, 0x0, 0xb}, {0x0, 0x0, 0xb, 0x3}, {0x0, 0x0, 0x5}]}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r0}, 0x38) kernel console output (not intermixed with test programs): rt 1(bridge_slave_0) entered blocking state [ 24.811881][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.819019][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.827182][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.835128][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.841975][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.849111][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.857251][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.865328][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.873320][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.881248][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.889148][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.896886][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.904670][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.912658][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.920056][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.932963][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.940446][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.959985][ T309] device veth0_vlan entered promiscuous mode [ 24.969313][ T312] device veth1_macvtap entered promiscuous mode [ 24.978010][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.986224][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.994272][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.001124][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.008357][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.016397][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.024392][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.031239][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.038446][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.046239][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.054013][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.061646][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.069509][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.077486][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.085335][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.093924][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.101256][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.115479][ T308] device veth0_vlan entered promiscuous mode [ 25.127247][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.135104][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.142918][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.151336][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.159475][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.167129][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.174810][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.183024][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.192028][ T309] device veth1_macvtap entered promiscuous mode [ 25.204858][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.212360][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.219621][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.227223][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.235304][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.243730][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.251785][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.259856][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.267816][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.283941][ T308] device veth1_macvtap entered promiscuous mode [ 25.290830][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.298448][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.306611][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.317947][ T311] device veth0_vlan entered promiscuous mode [ 25.341838][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.351576][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.360372][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.368487][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.376597][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.384732][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.392916][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.401151][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.411199][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.419361][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.435926][ T307] device veth0_vlan entered promiscuous mode [ 25.448529][ T311] device veth1_macvtap entered promiscuous mode [ 25.460879][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.468070][ T338] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 25.477267][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.485850][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.494050][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.502242][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.509959][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.517849][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.525771][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.533770][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.547677][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.569174][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.583579][ T341] loop1: detected capacity change from 0 to 2048 [ 25.600614][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.610505][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.618827][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.634988][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.644024][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.653777][ T307] device veth1_macvtap entered promiscuous mode [ 25.678978][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.683867][ T341] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 25.687340][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.715043][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.724705][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.733025][ T341] ext4 filesystem being mounted at /root/syzkaller-testdir3300441616/syzkaller.sEFUHB/0/file0 supports timestamps until 2038 (0x7fffffff) [ 25.761668][ T341] fs-verity: sha512 using implementation "sha512-avx2" [ 25.802021][ T357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.840964][ T341] syz-executor.1 (341) used greatest stack depth: 20176 bytes left [ 26.027149][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.267302][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 26.311650][ T414] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 26.339622][ T416] loop3: detected capacity change from 0 to 512 [ 26.376664][ T416] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 26.389648][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 26.389778][ T416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 26.404033][ T6] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 26.411078][ T416] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 26.432295][ T416] EXT4-fs (loop3): 1 orphan inode deleted [ 26.438012][ T416] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 26.439274][ T6] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 26.465782][ T6] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.479440][ T6] usb 5-1: config 1 interface 0 has no altsetting 0 [ 26.488556][ T6] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 26.497635][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.537592][ T6] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 26.560524][ T429] process 'syz-executor.2' launched '/dev/fd/5' with NULL argv: empty string added [ 26.660675][ T442] device pim6reg1 entered promiscuous mode [ 27.730602][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 27.730690][ T30] audit: type=1400 audit(1718454437.759:153): avc: denied { read } for pid=82 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 27.794815][ T30] audit: type=1400 audit(1718454437.799:154): avc: denied { read write } for pid=351 comm="syz-executor.4" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.829930][ T30] audit: type=1400 audit(1718454437.799:155): avc: denied { open } for pid=351 comm="syz-executor.4" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.131682][ T30] audit: type=1400 audit(1718454438.159:156): avc: denied { create } for pid=467 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.152505][ T30] audit: type=1400 audit(1718454438.169:157): avc: denied { read } for pid=467 comm="syz-executor.2" name="/" dev="configfs" ino=12150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.238642][ T470] syz-executor.1[470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.238763][ T470] syz-executor.1[470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 28.477158][ T30] audit: type=1400 audit(1718454438.169:158): avc: denied { open } for pid=467 comm="syz-executor.2" path="/sys/kernel/config" dev="configfs" ino=12150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 28.549856][ T30] audit: type=1400 audit(1718454438.389:159): avc: denied { mount } for pid=458 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.611644][ T30] audit: type=1400 audit(1718454438.559:160): avc: denied { map } for pid=471 comm="syz-executor.3" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.656808][ T30] audit: type=1400 audit(1718454438.569:161): avc: denied { read } for pid=475 comm="syz-executor.0" name="event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.705543][ T30] audit: type=1400 audit(1718454438.569:162): avc: denied { open } for pid=475 comm="syz-executor.0" path="/dev/input/event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.866165][ T499] bpf: Bad value for 'defcontext' [ 28.872207][ T60] usb 5-1: USB disconnect, device number 2 [ 28.909288][ T504] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 28.950209][ T501] kvm: emulating exchange as write [ 28.993459][ T514] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 29.320117][ T528] SELinux: security_context_str_to_sid(ÕÂ'ÉZ ·„bWðzrÂ4fL [ 29.320117][ T528] ù6 [ 29.320117][ T528] z^k`q0ÈŸÀÁ‹…2‰Ð¢zè°ž) failed for (dev ?, type ?) errno=-22 [ 29.338164][ T528] SELinux: security_context_str_to_sid(ÕÂ'ÉZ ·„bWðzrÂ4fL [ 29.338164][ T528] ù6 [ 29.338164][ T528] z^k`q0ÈŸÀÁ‹…2‰Ð¢zè°ž) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 29.391356][ T532] syzkaller0: refused to change device tx_queue_len [ 29.477385][ T546] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 29.510166][ T548] loop3: detected capacity change from 0 to 2048 [ 29.569516][ T548] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 8192 [ 29.580247][ T548] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 29.697096][ T313] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.796598][ T563] overlayfs: './file2' not a directory [ 30.067027][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 30.187064][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 30.195853][ T313] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 30.205366][ T313] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 30.215257][ T313] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.227964][ T313] usb 2-1: config 1 interface 0 has no altsetting 0 [ 30.236934][ T313] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 30.245872][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.287977][ T313] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 31.057668][ T612] loop0: detected capacity change from 0 to 40427 [ 31.156478][ T612] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.517836][ T641] loop4: detected capacity change from 0 to 128 [ 31.528243][ T612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.605395][ T641] FAT-fs (loop4): Directory bread(block 160) failed [ 31.614060][ T641] FAT-fs (loop4): Directory bread(block 161) failed [ 31.621400][ T641] FAT-fs (loop4): Directory bread(block 162) failed [ 31.641402][ T641] FAT-fs (loop4): Directory bread(block 163) failed [ 31.675324][ T641] FAT-fs (loop4): Directory bread(block 164) failed [ 31.701131][ T641] FAT-fs (loop4): Directory bread(block 165) failed [ 31.734144][ T641] FAT-fs (loop4): Directory bread(block 166) failed [ 31.752876][ T641] FAT-fs (loop4): Directory bread(block 167) failed [ 31.811544][ T641] tipc: Started in network mode [ 31.832092][ T641] tipc: Node identity f0, cluster identity 4711 [ 31.840149][ T641] tipc: Node number set to 240 [ 31.867998][ T652] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 31.957889][ T658] loop4: detected capacity change from 0 to 128 [ 32.045203][ T664] syz-executor.0[664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.045468][ T664] syz-executor.0[664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.224839][ T658] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.248234][ T658] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.387265][ T669] loop3: detected capacity change from 0 to 40427 [ 32.477572][ T669] F2FS-fs (loop3): quotafile must be on filesystem root [ 32.577052][ T333] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.684978][ T681] loop3: detected capacity change from 0 to 128 [ 32.728463][ T681] FAT-fs (loop3): Directory bread(block 160) failed [ 32.735008][ T681] FAT-fs (loop3): Directory bread(block 161) failed [ 32.741858][ T681] FAT-fs (loop3): Directory bread(block 162) failed [ 32.748361][ T681] FAT-fs (loop3): Directory bread(block 163) failed [ 32.754752][ T681] FAT-fs (loop3): Directory bread(block 164) failed [ 32.761344][ T681] FAT-fs (loop3): Directory bread(block 165) failed [ 32.768343][ T681] FAT-fs (loop3): Directory bread(block 166) failed [ 32.775121][ T681] FAT-fs (loop3): Directory bread(block 167) failed [ 32.786759][ T681] tipc: Started in network mode [ 32.793693][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 32.793706][ T30] audit: type=1400 audit(1718454442.819:212): avc: denied { mounton } for pid=684 comm="syz-executor.2" path="/proc/684/cgroup" dev="proc" ino=14744 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 32.805460][ T681] tipc: Node identity f0, cluster identity 4711 [ 32.830283][ T681] tipc: Node number set to 240 [ 32.924975][ T30] audit: type=1400 audit(1718454442.949:213): avc: denied { map } for pid=695 comm="syz-executor.3" path="/dev/hwrng" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 32.937118][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.965193][ T30] audit: type=1400 audit(1718454442.949:214): avc: denied { execute } for pid=695 comm="syz-executor.3" path="/dev/hwrng" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 32.989131][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.004835][ T30] audit: type=1400 audit(1718454442.989:215): avc: denied { read } for pid=688 comm="syz-executor.2" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.012741][ T333] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 33.051411][ T698] device syzkaller0 entered promiscuous mode [ 33.062668][ T30] audit: type=1400 audit(1718454442.989:216): avc: denied { open } for pid=688 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.068022][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.117908][ T30] audit: type=1400 audit(1718454443.029:217): avc: denied { ioctl } for pid=688 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.156241][ T333] usb 5-1: config 0 descriptor?? [ 33.164725][ T313] usb 2-1: USB disconnect, device number 2 [ 33.199981][ T30] audit: type=1400 audit(1718454443.029:218): avc: denied { set_context_mgr } for pid=688 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 33.227942][ T30] audit: type=1400 audit(1718454443.149:219): avc: denied { create } for pid=702 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.229961][ T718] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 33.248235][ T30] audit: type=1400 audit(1718454443.169:220): avc: denied { bind } for pid=702 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.280793][ T720] loop0: detected capacity change from 0 to 128 [ 33.291283][ T30] audit: type=1400 audit(1718454443.169:221): avc: denied { setopt } for pid=702 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.362047][ T724] device syzkaller0 entered promiscuous mode [ 33.388605][ T720] FAT-fs (loop0): Directory bread(block 160) failed [ 33.395637][ T720] FAT-fs (loop0): Directory bread(block 161) failed [ 33.405640][ T720] FAT-fs (loop0): Directory bread(block 162) failed [ 33.426545][ T720] FAT-fs (loop0): Directory bread(block 163) failed [ 33.440717][ T720] FAT-fs (loop0): Directory bread(block 164) failed [ 33.447444][ T673] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 33.456146][ T720] FAT-fs (loop0): Directory bread(block 165) failed [ 33.471973][ T720] FAT-fs (loop0): Directory bread(block 166) failed [ 33.479504][ T720] FAT-fs (loop0): Directory bread(block 167) failed [ 33.519826][ T720] tipc: Started in network mode [ 33.530815][ T720] tipc: Node identity f0, cluster identity 4711 [ 33.538777][ T720] tipc: Node number set to 240 [ 33.554638][ T748] loop1: detected capacity change from 0 to 2048 [ 33.571399][ T750] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.605485][ T748] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz-executor.1: bad orphan inode 8192 [ 33.667287][ T748] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 33.707318][ T333] hid (null): bogus close delimiter [ 33.738087][ T744] loop3: detected capacity change from 0 to 40427 [ 34.354269][ T333] usb 5-1: language id specifier not provided by device, defaulting to English [ 34.358160][ T763] overlayfs: './file2' not a directory [ 34.629957][ T744] ======================================================= [ 34.629957][ T744] WARNING: The mand mount option has been deprecated and [ 34.629957][ T744] and is ignored by this kernel. Remove the mand [ 34.629957][ T744] option from the mount to silence this warning. [ 34.629957][ T744] ======================================================= [ 34.824452][ T767] xt_bpf: check failed: parse error [ 34.867564][ T744] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 34.876783][ T744] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.889047][ T744] F2FS-fs (loop3): invalid crc value [ 34.918297][ T744] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.962382][ T744] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 34.969336][ T744] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.031784][ T788] loop1: detected capacity change from 0 to 128 [ 35.094763][ T788] FAT-fs (loop1): Directory bread(block 160) failed [ 35.104821][ T788] FAT-fs (loop1): Directory bread(block 161) failed [ 35.111976][ T788] FAT-fs (loop1): Directory bread(block 162) failed [ 35.118642][ T788] FAT-fs (loop1): Directory bread(block 163) failed [ 35.125113][ T788] FAT-fs (loop1): Directory bread(block 164) failed [ 35.131530][ T788] FAT-fs (loop1): Directory bread(block 165) failed [ 35.137942][ T788] FAT-fs (loop1): Directory bread(block 166) failed [ 35.144325][ T788] FAT-fs (loop1): Directory bread(block 167) failed [ 35.157048][ T333] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 35.185255][ T788] tipc: Started in network mode [ 35.190294][ T798] loop0: detected capacity change from 0 to 2048 [ 35.191227][ T333] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 35.199117][ T788] tipc: Node identity f0, cluster identity 4711 [ 35.205029][ T333] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 35.210617][ T788] tipc: Node number set to 240 [ 35.218839][ T333] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 35.230588][ T333] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 35.539172][ T333] usb 5-1: USB disconnect, device number 3 [ 35.567600][ T798] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz-executor.0: bad orphan inode 8192 [ 35.578283][ T798] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 35.668854][ T312] attempt to access beyond end of device [ 35.668854][ T312] loop3: rw=2051, want=53248, limit=40427 [ 35.686850][ T312] attempt to access beyond end of device [ 35.686850][ T312] loop3: rw=2051, want=77824, limit=40427 [ 35.699096][ T312] attempt to access beyond end of device [ 35.699096][ T312] loop3: rw=2051, want=86016, limit=40427 [ 35.710903][ T312] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 35.710934][ T312] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 35.718706][ T312] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 35.774939][ T816] overlayfs: './file2' not a directory [ 36.166110][ T848] syz-executor.0[848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.166176][ T848] syz-executor.0[848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.216561][ T850] overlayfs: statfs failed on './file0' [ 36.256188][ T855] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 36.303077][ T862] loop3: detected capacity change from 0 to 2048 [ 36.525483][ T862] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 8192 [ 36.618358][ T862] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.687050][ T6] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.744900][ T886] loop1: detected capacity change from 0 to 512 [ 36.754122][ T886] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 36.763999][ T886] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086 [ 36.777490][ T886] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 36.808123][ T886] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 36.819820][ T886] ext2 filesystem being mounted at /root/syzkaller-testdir3300441616/syzkaller.sEFUHB/37/file0 supports timestamps until 2038 (0x7fffffff) [ 36.851155][ T888] overlayfs: './file2' not a directory [ 37.415169][ T903] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.426277][ T903] FAT-fs (loop1): unable to read boot sector [ 37.432379][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.442923][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.527208][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 37.546944][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 37.555081][ T6] usb 5-1: SerialNumber: syz [ 37.938560][ T6] usb 5-1: 0:2 : does not exist [ 37.947405][ T6] usb 5-1: USB disconnect, device number 4 [ 37.972359][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.155990][ T918] loop1: detected capacity change from 0 to 512 [ 38.199650][ T918] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.212700][ T918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.223033][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 38.223075][ T30] audit: type=1400 audit(1718454448.159:252): avc: denied { remount } for pid=915 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.284039][ T918] EXT4-fs (loop1): 1 orphan inode deleted [ 38.289630][ T918] EXT4-fs (loop1): 1 truncate cleaned up [ 38.295320][ T918] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 38.545293][ T943] loop3: detected capacity change from 0 to 128 [ 38.657079][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.868016][ T30] audit: type=1400 audit(1718454448.899:253): avc: denied { ioctl } for pid=948 comm="syz-executor.1" path="socket:[16620]" dev="sockfs" ino=16620 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.897064][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 39.177063][ T6] usb 1-1: New USB device found, idVendor=23a7, idProduct=fedc, bcdDevice=e0.0b [ 39.186064][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.193858][ T6] usb 1-1: Product: syz [ 39.198082][ T6] usb 1-1: Manufacturer: syz [ 39.202405][ T6] usb 1-1: SerialNumber: syz [ 39.207498][ T6] usb 1-1: config 0 descriptor?? [ 39.357051][ T333] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.414720][ T968] syz-executor.4[968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.414783][ T968] syz-executor.4[968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.463885][ T30] audit: type=1400 audit(1718454449.489:254): avc: denied { bind } for pid=969 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.547286][ T984] incfs: Error accessing: ./file0/file0. [ 39.552901][ T984] incfs: mount failed -2 [ 39.687167][ T6] usb 1-1: MIDIStreaming interface descriptor not found [ 39.728529][ T333] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.738477][ T333] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 39.827063][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 39.834515][ T333] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 39.843377][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 39.851173][ T333] usb 2-1: SerialNumber: syz [ 39.889500][ T42] usb 1-1: USB disconnect, device number 2 [ 40.127661][ T333] usb 2-1: 0:2 : does not exist [ 40.136641][ T333] usb 2-1: USB disconnect, device number 3 [ 40.144498][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.187117][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.200250][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.210035][ T313] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 40.219040][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.227745][ T313] usb 5-1: config 0 descriptor?? [ 40.265918][ T999] loop2: detected capacity change from 0 to 128 [ 40.437386][ T30] audit: type=1400 audit(1718454450.469:255): avc: denied { read } for pid=1012 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.460367][ T30] audit: type=1400 audit(1718454450.469:256): avc: denied { open } for pid=1012 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 40.544379][ T1020] loop3: detected capacity change from 0 to 512 [ 40.555161][ T30] audit: type=1400 audit(1718454450.579:257): avc: denied { name_bind } for pid=1021 comm="syz-executor.0" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 40.577859][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 40.618530][ T1020] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.629252][ T30] audit: type=1400 audit(1718454450.659:258): avc: denied { write } for pid=1023 comm="syz-executor.1" name="001" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.682349][ T1020] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 16 [ 40.693047][ T1020] ext4_test_bit(bit=15, block=4) = 0 [ 40.699006][ T1020] EXT4-fs (loop3): 1 orphan inode deleted [ 40.699731][ T30] audit: type=1400 audit(1718454450.729:259): avc: denied { read } for pid=1029 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.704700][ T1020] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 40.737284][ T313] hid (null): bogus close delimiter [ 40.901467][ T30] audit: type=1326 audit(1718454450.929:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc98aba0ea9 code=0x7ffc0000 [ 40.925283][ T30] audit: type=1326 audit(1718454450.929:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fc98aba0ea9 code=0x7ffc0000 [ 40.957375][ T313] usb 5-1: language id specifier not provided by device, defaulting to English [ 41.002407][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 41.107451][ T1056] cgroup: fork rejected by pids controller in /syz0 [ 41.117113][ T332] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.178507][ T10] tipc: Left network mode [ 41.294065][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.301077][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.315188][ T1064] device bridge_slave_0 entered promiscuous mode [ 41.322181][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.329253][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.336541][ T1064] device bridge_slave_1 entered promiscuous mode [ 41.377017][ T332] usb 2-1: Using ep0 maxpacket: 16 [ 41.405415][ T1075] syz-executor.3[1075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.405489][ T1075] syz-executor.3[1075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.439550][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.457866][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.464955][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.471758][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.497096][ T332] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 41.505986][ T332] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.510805][ T1077] device syzkaller0 entered promiscuous mode [ 41.515555][ T313] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 41.535893][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.537006][ T332] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 41.552440][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 41.552514][ T914] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.559700][ T313] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 41.574503][ T332] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.574541][ T914] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.587102][ T313] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 41.601811][ T332] usb 2-1: config 1 interface 0 has no altsetting 0 [ 41.608462][ T332] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 41.617376][ T313] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 41.624606][ T313] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 41.633838][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.642329][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.643651][ T313] usb 5-1: USB disconnect, device number 5 [ 41.654334][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.662657][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.670235][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.677553][ T332] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 41.678297][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.691573][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.717744][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.725484][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.738932][ T1064] device veth0_vlan entered promiscuous mode [ 41.748964][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.757197][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.764914][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.772562][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.779907][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.789070][ T1064] device veth1_macvtap entered promiscuous mode [ 41.801285][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.820720][ T1084] mmap: syz-executor.3 (1084) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 41.838091][ T1086] loop0: detected capacity change from 0 to 256 [ 41.850671][ T914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.881335][ T10] device bridge_slave_1 left promiscuous mode [ 41.888392][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.895839][ T10] device bridge_slave_0 left promiscuous mode [ 41.901915][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.910040][ T10] device veth1_macvtap left promiscuous mode [ 41.915979][ T10] device veth0_vlan left promiscuous mode [ 41.927075][ T6] usb 3-1: New USB device found, idVendor=12d1, idProduct=1420, bcdDevice= 0.00 [ 41.935937][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.953437][ T6] usb 3-1: config 0 descriptor?? [ 41.966021][ T1092] loop0: detected capacity change from 0 to 2048 [ 41.997384][ T6] hub 3-1:0.0: bad descriptor, ignoring hub [ 42.003309][ T6] hub: probe of 3-1:0.0 failed with error -5 [ 42.017186][ T6] usb-storage 3-1:0.0: USB Mass Storage device detected [ 42.061257][ T1092] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz-executor.0: bad orphan inode 8192 [ 42.068833][ T1092] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 42.171841][ T914] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.203298][ T1107] loop4: detected capacity change from 0 to 16 [ 42.262534][ T1107] erofs: (device loop4): mounted with root inode @ nid 36. [ 42.294598][ T1108] overlayfs: './file2' not a directory [ 42.350500][ T1107] attempt to access beyond end of device [ 42.350500][ T1107] loop4: rw=0, want=1049304, limit=16 [ 42.361329][ T330] usb 3-1: USB disconnect, device number 2 [ 42.374451][ T1107] attempt to access beyond end of device [ 42.374451][ T1107] loop4: rw=0, want=40, limit=16 [ 42.392789][ T1107] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 42.403096][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 42.412852][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 42.422556][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 42.432167][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 42.441772][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 42.451415][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 42.461083][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8200 @ nid 36 [ 42.470684][ T1107] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 42.478702][ T1109] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 42.488350][ T1109] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 42.497954][ T1109] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 42.507572][ T1109] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 42.517192][ T1109] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 42.526790][ T1109] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 42.536458][ T1109] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8200 @ nid 36 [ 42.546075][ T1109] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 42.554188][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 42.563937][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 42.567113][ T1109] attempt to access beyond end of device [ 42.567113][ T1109] loop4: rw=0, want=1049304, limit=16 [ 42.573626][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 42.584981][ T1109] attempt to access beyond end of device [ 42.584981][ T1109] loop4: rw=0, want=40, limit=16 [ 42.593925][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8203 @ nid 36 [ 42.604597][ T1109] erofs: (device loop4): erofs_readdir: fail to readdir of logical block 16 of nid 36 [ 42.613800][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8202 @ nid 36 [ 42.623619][ T914] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.633109][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8201 @ nid 36 [ 42.653248][ T1107] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8200 @ nid 36 [ 42.662915][ T1107] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 42.827313][ T914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 42.836471][ T914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.846200][ T1124] loop2: detected capacity change from 0 to 256 [ 42.852655][ T914] usb 4-1: Product: syz [ 42.856633][ T914] usb 4-1: Manufacturer: syz [ 42.861329][ T914] usb 4-1: SerialNumber: syz [ 43.010697][ T1123] loop4: detected capacity change from 0 to 40427 [ 43.112419][ T1123] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 43.160312][ T1123] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.205494][ T1123] F2FS-fs (loop4): invalid crc value [ 43.260781][ T1123] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.287846][ T1139] device syzkaller0 entered promiscuous mode [ 43.308685][ T1123] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 43.317158][ T1123] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.417047][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 43.417062][ T30] audit: type=1400 audit(1718454453.439:268): avc: denied { read } for pid=1143 comm="syz-executor.0" path="socket:[17011]" dev="sockfs" ino=17011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.911214][ T42] usb 2-1: USB disconnect, device number 4 [ 43.961307][ T307] attempt to access beyond end of device [ 43.961307][ T307] loop4: rw=2051, want=53248, limit=40427 [ 43.977969][ T307] attempt to access beyond end of device [ 43.977969][ T307] loop4: rw=2051, want=77824, limit=40427 [ 43.996351][ T307] attempt to access beyond end of device [ 43.996351][ T307] loop4: rw=2051, want=86016, limit=40427 [ 44.012289][ T1167] fuse: Unknown parameter 'group_i00000000000000000000' [ 44.012496][ T307] F2FS-fs (loop4): Issue discard(6144, 6144, 512) failed, ret: -5 [ 44.019115][ T307] F2FS-fs (loop4): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 44.027636][ T307] F2FS-fs (loop4): Issue discard(10240, 10240, 512) failed, ret: -5 [ 44.032353][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 44.123580][ T30] audit: type=1400 audit(1718454454.149:269): avc: denied { mounton } for pid=1173 comm="syz-executor.1" path="/root/syzkaller-testdir3300441616/syzkaller.sEFUHB/54/file0" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 44.482545][ T1181] cgroup: fork rejected by pids controller in /syz4 [ 44.497085][ T914] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 44.510473][ T914] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 44.548251][ T8] tipc: Left network mode [ 44.626914][ T1185] loop0: detected capacity change from 0 to 40427 [ 44.647129][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.654139][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.661404][ T1188] device bridge_slave_0 entered promiscuous mode [ 44.668347][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.675198][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.682441][ T1188] device bridge_slave_1 entered promiscuous mode [ 44.693205][ T1185] F2FS-fs (loop0): invalid crc value [ 44.703034][ T1185] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.717056][ T914] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 44.728165][ T914] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 44.740500][ T914] usb 4-1: USB disconnect, device number 2 [ 44.746413][ T914] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 44.751184][ T1185] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.767684][ T30] audit: type=1400 audit(1718454454.799:270): avc: denied { lock } for pid=1184 comm="syz-executor.0" path="/root/syzkaller-testdir2890162226/syzkaller.22hlpU/15/file2/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.795579][ T30] audit: type=1400 audit(1718454454.799:271): avc: denied { link } for pid=1184 comm="syz-executor.0" name="file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.819699][ T1064] attempt to access beyond end of device [ 44.819699][ T1064] loop0: rw=2049, want=45112, limit=40427 [ 44.830320][ T30] audit: type=1400 audit(1718454454.859:272): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 44.908966][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.915846][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.922938][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.929733][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.969783][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.977470][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.985483][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.018628][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.026783][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.033653][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.040832][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.049280][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.056109][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.063305][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.086095][ T1188] device veth0_vlan entered promiscuous mode [ 45.092318][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.100592][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.108895][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.116096][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.123369][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.137166][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.148243][ T1188] device veth1_macvtap entered promiscuous mode [ 45.159331][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.176700][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.197834][ T8] device bridge_slave_1 left promiscuous mode [ 45.203769][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.216298][ T1203] syz-executor.4 (pid 1203) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 45.219712][ T8] device bridge_slave_0 left promiscuous mode [ 45.232992][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.241215][ T8] device veth1_macvtap left promiscuous mode [ 45.247366][ T8] device veth0_vlan left promiscuous mode [ 45.262794][ T1201] loop0: detected capacity change from 0 to 40427 [ 45.277019][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 45.309264][ T1201] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 45.316814][ T1201] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 45.326649][ T1201] F2FS-fs (loop0): invalid crc value [ 45.337646][ T1201] F2FS-fs (loop0): Found nat_bits in checkpoint [ 45.384800][ T1201] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 45.394688][ T1201] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 45.467975][ T1220] loop4: detected capacity change from 0 to 4096 [ 45.478269][ T1220] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 45.494835][ T1220] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,usrquota,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 45.517057][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 45.522763][ T30] audit: type=1400 audit(1718454455.549:273): avc: denied { remove_name } for pid=1219 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.541686][ T1220] EXT4-fs error (device loop4): ext4_empty_dir:3108: inode #12: block 80: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.565403][ T30] audit: type=1400 audit(1718454455.549:274): avc: denied { rmdir } for pid=1219 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.569553][ T1220] EXT4-fs warning (device loop4): ext4_empty_dir:3110: inode #12: comm syz-executor.4: directory missing '..' [ 45.647122][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 45.656045][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 45.679553][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 45.689193][ T6] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.701808][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 45.708180][ T6] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 45.717029][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.032636][ T6] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 46.083508][ T1229] device syzkaller0 entered promiscuous mode [ 46.116850][ T1064] attempt to access beyond end of device [ 46.116850][ T1064] loop0: rw=2051, want=53248, limit=40427 [ 46.137155][ T1064] attempt to access beyond end of device [ 46.137155][ T1064] loop0: rw=2051, want=77824, limit=40427 [ 46.152850][ T1064] F2FS-fs (loop0): Issue discard(6144, 6144, 512) failed, ret: -5 [ 46.152877][ T1064] F2FS-fs (loop0): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 46.167052][ T1064] F2FS-fs (loop0): Issue discard(10240, 10240, 512) failed, ret: -5 [ 46.414128][ T1244] loop3: detected capacity change from 0 to 512 [ 46.459143][ T1244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.566869][ T1244] EXT4-fs (loop3): 1 orphan inode deleted [ 46.572676][ T1244] EXT4-fs (loop3): 1 truncate cleaned up [ 46.578198][ T1244] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 46.666993][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 46.700671][ T332] usb 3-1: USB disconnect, device number 3 [ 46.751567][ T1255] loop2: detected capacity change from 0 to 256 [ 46.982972][ T30] audit: type=1326 audit(1718454457.009:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1254 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22caa1ea9 code=0x0 [ 47.195575][ T1260] loop3: detected capacity change from 0 to 512 [ 47.237059][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.278549][ T1260] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 47.289567][ T1260] ext4 filesystem being mounted at /root/syzkaller-testdir3285856964/syzkaller.u60rq3/73/bus supports timestamps until 2038 (0x7fffffff) [ 47.312486][ T30] audit: type=1400 audit(1718454457.339:276): avc: denied { setattr } for pid=1259 comm="syz-executor.3" path="/root/syzkaller-testdir3285856964/syzkaller.u60rq3/73/bus/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.362893][ T30] audit: type=1400 audit(1718454457.389:277): avc: denied { mount } for pid=1265 comm="syz-executor.1" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 47.417080][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 47.435126][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.443733][ T6] usb 5-1: Product: syz [ 47.448218][ T6] usb 5-1: Manufacturer: syz [ 47.452631][ T6] usb 5-1: SerialNumber: syz [ 47.936017][ T1288] device syzkaller0 entered promiscuous mode [ 48.038701][ T1294] loop2: detected capacity change from 0 to 512 [ 48.067052][ T333] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 48.067096][ T313] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 48.098438][ T1294] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.109314][ T1294] ext4 filesystem being mounted at /root/syzkaller-testdir593432231/syzkaller.WVB0B5/66/bus supports timestamps until 2038 (0x7fffffff) [ 48.317023][ T333] usb 1-1: Using ep0 maxpacket: 16 [ 48.642627][ T1308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 48.742848][ T1310] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 48.752669][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 48.752681][ T30] audit: type=1400 audit(1718454458.779:279): avc: denied { ioctl } for pid=1309 comm="syz-executor.3" path="socket:[18479]" dev="sockfs" ino=18479 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.784242][ T313] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 48.794135][ T333] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 48.803058][ T333] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 48.812653][ T313] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 48.821328][ T333] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 48.830821][ T333] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.843330][ T333] usb 1-1: config 1 interface 0 has no altsetting 0 [ 48.849886][ T333] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 48.858741][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.896635][ T1317] loop3: detected capacity change from 0 to 4096 [ 48.907089][ T313] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.915929][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 48.924142][ T333] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 48.930914][ T313] usb 2-1: SerialNumber: syz [ 48.977489][ T1317] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 48.986822][ T1317] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,usrquota,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 49.005085][ T1317] EXT4-fs error (device loop3): ext4_empty_dir:3108: inode #12: block 80: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 49.024758][ T1317] EXT4-fs warning (device loop3): ext4_empty_dir:3110: inode #12: comm syz-executor.3: directory missing '..' [ 49.077358][ T30] audit: type=1400 audit(1718454459.109:280): avc: denied { write } for pid=1323 comm="syz-executor.3" name="uinput" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.079770][ T1324] input: syz1 as /devices/virtual/input/input4 [ 49.162436][ T1329] loop2: detected capacity change from 0 to 512 [ 49.217803][ T6] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 49.225087][ T313] usb 2-1: 0:2 : does not exist [ 49.232701][ T6] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 49.250900][ T313] usb 2-1: USB disconnect, device number 5 [ 49.266084][ T1329] EXT4-fs (loop2): 1 orphan inode deleted [ 49.397263][ T1329] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 49.437884][ T1329] ext4 filesystem being mounted at /root/syzkaller-testdir593432231/syzkaller.WVB0B5/70/file1 supports timestamps until 2038 (0x7fffffff) [ 49.499138][ T6] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 49.506382][ T6] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 49.528575][ T30] audit: type=1400 audit(1718454459.559:281): avc: denied { mounton } for pid=1328 comm="syz-executor.2" path="/root/syzkaller-testdir593432231/syzkaller.WVB0B5/70/file1/bus" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.532268][ T6] usb 5-1: USB disconnect, device number 6 [ 49.566545][ T1329] EXT4-fs error (device loop2): ext4_ext_remove_space:2840: inode #16: comm syz-executor.2: path[1].p_hdr == NULL [ 49.594308][ T1329] EXT4-fs (loop2): Remounting filesystem read-only [ 49.607059][ T1329] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 49.616525][ T6] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 49.626704][ T1329] EXT4-fs error (device loop2): ext4_punch_hole:4132: inode #16: comm syz-executor.2: mark_inode_dirty error [ 49.652159][ T1328] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 49.673292][ T1328] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 49.700539][ T1328] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 49.727790][ T1328] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 49.761366][ T1328] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 49.795801][ T1328] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 49.827545][ T1328] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 49.863510][ T30] audit: type=1400 audit(1718454459.889:282): avc: denied { unmount } for pid=308 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.954628][ T1355] loop1: detected capacity change from 0 to 512 [ 50.176373][ T1355] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.188605][ T1355] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 50.212750][ T1355] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e11c, mo2=0002] [ 50.220793][ T1355] System zones: 1-12 [ 50.224961][ T1355] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.231319][ T1355] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 50.246506][ T1355] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6153: Corrupt filesystem [ 50.257326][ T1355] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 50.271413][ T1355] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1811939328 (level 0) [ 50.285697][ T1355] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 2 (level 2) [ 50.299476][ T1355] EXT4-fs (loop1): 1 truncate cleaned up [ 50.304927][ T1355] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,dioread_lock,discard,dioread_nolock,inode_readahead_blks=0x0000000000000000,errors=continue. Quota mode: none. [ 50.323017][ T30] audit: type=1400 audit(1718454460.349:283): avc: denied { mount } for pid=1346 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.787939][ T313] usb 1-1: USB disconnect, device number 3 [ 50.957721][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.964661][ T1387] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.972068][ T1387] device bridge_slave_0 entered promiscuous mode [ 50.979655][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.986612][ T1387] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.994220][ T1387] device bridge_slave_1 entered promiscuous mode [ 51.057529][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.064399][ T1387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.071530][ T1387] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.078392][ T1387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.212892][ T1399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 51.402447][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.410806][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.418261][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.438156][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.446454][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.453362][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.460770][ T30] audit: type=1400 audit(1718454461.489:284): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.461265][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.484971][ T30] audit: type=1400 audit(1718454461.489:285): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.495558][ T1408] loop3: detected capacity change from 0 to 512 [ 51.515976][ T30] audit: type=1400 audit(1718454461.489:286): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.519366][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.545664][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.561903][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.569712][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.579160][ T10] device bridge_slave_1 left promiscuous mode [ 51.585093][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.592676][ T10] device bridge_slave_0 left promiscuous mode [ 51.598686][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.606474][ T10] device veth1_macvtap left promiscuous mode [ 51.613239][ T10] device veth0_vlan left promiscuous mode [ 51.629743][ T1408] EXT4-fs (loop3): 1 orphan inode deleted [ 51.635394][ T1408] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 51.656469][ T1408] ext4 filesystem being mounted at /root/syzkaller-testdir3285856964/syzkaller.u60rq3/89/file1 supports timestamps until 2038 (0x7fffffff) [ 51.687903][ T1408] EXT4-fs error (device loop3): ext4_ext_remove_space:2840: inode #16: comm syz-executor.3: path[1].p_hdr == NULL [ 51.700025][ T1408] EXT4-fs (loop3): Remounting filesystem read-only [ 51.706351][ T1408] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 51.716190][ T1408] EXT4-fs error (device loop3): ext4_punch_hole:4132: inode #16: comm syz-executor.3: mark_inode_dirty error [ 51.732374][ T1407] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 51.748209][ T1407] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 51.780421][ T1407] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 51.793380][ T1413] syz-executor.4[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.794365][ T1413] syz-executor.4[1413] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.801080][ T1407] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 51.841900][ T1407] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 51.859616][ T1407] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 51.874147][ T1407] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 51.897381][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.902331][ T1414] fuse: Unknown parameter 'group_i00000000000000000000' [ 51.910743][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.922560][ T1387] device veth0_vlan entered promiscuous mode [ 51.929196][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.937381][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.953991][ T1387] device veth1_macvtap entered promiscuous mode [ 51.962751][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.970323][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.981179][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.989492][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.997584][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.031902][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.040084][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.056059][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.065017][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.213544][ T1443] syz-executor.4[1443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.213611][ T1443] syz-executor.4[1443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.228043][ T10] tipc: Left network mode [ 53.264875][ T1445] loop2: detected capacity change from 0 to 512 [ 53.320710][ T1445] EXT4-fs (loop2): 1 orphan inode deleted [ 53.333982][ T1445] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 53.355422][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.362884][ T1445] ext4 filesystem being mounted at /root/syzkaller-testdir424446214/syzkaller.C7mcKG/2/file1 supports timestamps until 2038 (0x7fffffff) [ 53.372440][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.391360][ T1446] device bridge_slave_0 entered promiscuous mode [ 53.404775][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.411920][ T1445] EXT4-fs error (device loop2): ext4_ext_remove_space:2840: inode #16: comm syz-executor.2: path[1].p_hdr == NULL [ 53.423804][ T1446] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.431663][ T1446] device bridge_slave_1 entered promiscuous mode [ 53.437996][ T1445] EXT4-fs (loop2): Remounting filesystem read-only [ 53.444338][ T1445] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 53.448156][ T1448] loop4: detected capacity change from 0 to 40427 [ 53.454816][ T1445] EXT4-fs error (device loop2): ext4_punch_hole:4132: inode #16: comm syz-executor.2: mark_inode_dirty error [ 53.471493][ T1444] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 53.485740][ T1444] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 53.499950][ T1444] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 53.514909][ T1448] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 53.522701][ T1448] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 53.530814][ T1444] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 53.536729][ T1448] F2FS-fs (loop4): invalid crc value [ 53.545478][ T1444] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 53.551590][ T1448] F2FS-fs (loop4): Found nat_bits in checkpoint [ 53.564699][ T1444] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 53.585552][ T1444] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 53.612085][ T1448] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 53.622428][ T1448] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 53.682987][ T1446] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.690060][ T1446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.694376][ T1448] handle_bad_sector: 1 callbacks suppressed [ 53.694393][ T1448] attempt to access beyond end of device [ 53.694393][ T1448] loop4: rw=0, want=88192, limit=40427 [ 53.697190][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.720425][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.732607][ T1188] attempt to access beyond end of device [ 53.732607][ T1188] loop4: rw=2049, want=40968, limit=40427 [ 53.751006][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.759540][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.774450][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.803619][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.813267][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.820172][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.828297][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.836750][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.843617][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.860189][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.868124][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.888389][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.915414][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.923503][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.930913][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.938987][ T1446] device veth0_vlan entered promiscuous mode [ 53.981428][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.011886][ T1446] device veth1_macvtap entered promiscuous mode [ 54.027898][ T1460] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.034870][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.064226][ T1460] device bridge_slave_0 entered promiscuous mode [ 54.118021][ T10] device bridge_slave_1 left promiscuous mode [ 54.123984][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.144699][ T10] device bridge_slave_0 left promiscuous mode [ 54.162777][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.338277][ T10] device veth1_macvtap left promiscuous mode [ 54.370879][ T10] device veth0_vlan left promiscuous mode [ 54.499546][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.506394][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.513692][ T1460] device bridge_slave_1 entered promiscuous mode [ 54.570600][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.578962][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.587825][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.592579][ T1494] loop3: detected capacity change from 0 to 16 [ 54.595917][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.619277][ T1498] loop1: detected capacity change from 0 to 256 [ 54.688217][ T30] audit: type=1400 audit(1718454464.719:287): avc: denied { append } for pid=1507 comm="syz-executor.0" name="001" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 54.691996][ T1494] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 54.741370][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.748673][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.758315][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.771658][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.779687][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.786528][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.813252][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.848215][ T30] audit: type=1400 audit(1718454464.879:288): avc: denied { block_suspend } for pid=1509 comm="syz-executor.0" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 54.871551][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.882470][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.893282][ T1519] loop1: detected capacity change from 0 to 256 [ 54.902160][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.909166][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.937108][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.973953][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.051456][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.075998][ T1460] device veth0_vlan entered promiscuous mode [ 55.096111][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.104682][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.112126][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.186150][ T30] audit: type=1326 audit(1718454465.209:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1518 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e2ca6bea9 code=0x0 [ 55.237122][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 55.383775][ T1460] device veth1_macvtap entered promiscuous mode [ 55.414503][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.437135][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.457397][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.491527][ T1531] fuse: Unknown parameter 'group_i00000000000000000000' [ 56.167736][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.183173][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.193813][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 56.202816][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.279663][ T1540] input: syz0 as /devices/virtual/input/input5 [ 56.301246][ T30] audit: type=1400 audit(1718454466.329:290): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=465 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.501238][ T60] usb 5-1: config 0 descriptor?? [ 56.726420][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 56.740001][ T30] audit: type=1400 audit(1718454466.459:291): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=465 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.773082][ T30] audit: type=1400 audit(1718454466.459:292): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=465 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 56.876022][ T1551] syz-executor.0[1551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.876090][ T1551] syz-executor.0[1551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.959507][ T10] device bridge_slave_1 left promiscuous mode [ 57.133543][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.145249][ T10] device bridge_slave_0 left promiscuous mode [ 57.191975][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.203286][ T10] device veth1_macvtap left promiscuous mode [ 57.209292][ T10] device veth0_vlan left promiscuous mode [ 57.377068][ T6] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.467212][ T60] hid (null): bogus close delimiter [ 57.517356][ T1572] fuse: Unknown parameter 'group_i00000000000000000000' [ 57.547071][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.556101][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.564221][ T6] usb 4-1: Product: syz [ 57.568512][ T6] usb 4-1: Manufacturer: syz [ 57.572969][ T6] usb 4-1: SerialNumber: syz [ 57.640936][ T1577] loop2: detected capacity change from 0 to 256 [ 57.697245][ T60] usb 5-1: language id specifier not provided by device, defaulting to English [ 57.745583][ T1577] FAT-fs (loop2): Directory bread(block 64) failed [ 57.815231][ T1577] FAT-fs (loop2): Directory bread(block 65) failed [ 57.832099][ T1577] FAT-fs (loop2): Directory bread(block 66) failed [ 57.839184][ T1577] FAT-fs (loop2): Directory bread(block 67) failed [ 57.855755][ T1577] FAT-fs (loop2): Directory bread(block 68) failed [ 57.865810][ T1577] FAT-fs (loop2): Directory bread(block 69) failed [ 57.882533][ T1577] FAT-fs (loop2): Directory bread(block 70) failed [ 57.910386][ T1577] FAT-fs (loop2): Directory bread(block 71) failed [ 57.916861][ T1577] FAT-fs (loop2): Directory bread(block 72) failed [ 57.924365][ T1577] FAT-fs (loop2): Directory bread(block 73) failed [ 57.991534][ T1581] loop1: detected capacity change from 0 to 40427 [ 57.998781][ T1577] attempt to access beyond end of device [ 57.998781][ T1577] loop2: rw=0, want=1772, limit=256 [ 58.040993][ T1581] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 58.067234][ T1581] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 58.076798][ T1581] F2FS-fs (loop1): invalid crc value [ 58.084331][ T1581] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.101087][ T30] audit: type=1400 audit(1718454468.129:293): avc: denied { connect } for pid=1594 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.132331][ T1581] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 58.139906][ T1581] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.246462][ T60] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 58.277039][ T332] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 58.302802][ T60] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 58.310773][ T60] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 58.319370][ T60] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 58.326932][ T60] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 58.336286][ T60] usb 5-1: USB disconnect, device number 7 [ 58.754185][ T309] attempt to access beyond end of device [ 58.754185][ T309] loop1: rw=2051, want=53248, limit=40427 [ 58.765476][ T309] attempt to access beyond end of device [ 58.765476][ T309] loop1: rw=2051, want=77824, limit=40427 [ 58.777848][ T309] attempt to access beyond end of device [ 58.777848][ T309] loop1: rw=2051, want=86016, limit=40427 [ 58.789498][ T309] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 58.789527][ T309] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 58.797338][ T309] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 59.171251][ T6] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.185438][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.196120][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.205832][ T6] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 59.211523][ T332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.224242][ T332] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 59.246344][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.254317][ T6] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 59.262862][ T6] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 59.275284][ T332] usb 1-1: config 0 descriptor?? [ 59.290267][ T6] usb 4-1: USB disconnect, device number 3 [ 59.298486][ T6] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 59.433364][ T1638] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 4095 (only 8 groups) [ 59.466633][ T1640] syz-executor.1[1640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.466707][ T1640] syz-executor.1[1640] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.481558][ T30] audit: type=1400 audit(1718454469.509:294): avc: denied { shutdown } for pid=1641 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.566467][ T1649] loop4: detected capacity change from 0 to 1024 [ 59.603352][ T1656] loop1: detected capacity change from 0 to 256 [ 59.668131][ T1656] FAT-fs (loop1): Directory bread(block 64) failed [ 59.676122][ T1656] FAT-fs (loop1): Directory bread(block 65) failed [ 59.682663][ T1656] FAT-fs (loop1): Directory bread(block 66) failed [ 59.683110][ T1649] EXT4-fs (loop4): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 59.689107][ T1656] FAT-fs (loop1): Directory bread(block 67) failed [ 59.706657][ T1656] FAT-fs (loop1): Directory bread(block 68) failed [ 59.713162][ T1656] FAT-fs (loop1): Directory bread(block 69) failed [ 59.722361][ T1656] FAT-fs (loop1): Directory bread(block 70) failed [ 59.730816][ T1656] FAT-fs (loop1): Directory bread(block 71) failed [ 59.737463][ T1656] FAT-fs (loop1): Directory bread(block 72) failed [ 59.743844][ T1656] FAT-fs (loop1): Directory bread(block 73) failed [ 59.764592][ T332] betop 0003:11C2:2208.0004: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.0-1/input0 [ 59.776914][ T332] betop 0003:11C2:2208.0004: no inputs found [ 59.853818][ T1656] attempt to access beyond end of device [ 59.853818][ T1656] loop1: rw=0, want=1772, limit=256 [ 59.932480][ T1671] loop1: detected capacity change from 0 to 512 [ 59.955323][ T1674] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 59.968289][ T1537] usb 1-1: USB disconnect, device number 4 [ 60.185528][ T1671] EXT4-fs (loop1): Ignoring removed oldalloc option [ 60.219792][ T1671] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,dioread_lock,delalloc,oldalloc,usrquota,discard,init_itable=0x0000000000000001,max_batch_time=0x0000000000000020,resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 60.243883][ T1671] ext4 filesystem being mounted at /root/syzkaller-testdir3300441616/syzkaller.sEFUHB/76/file0 supports timestamps until 2038 (0x7fffffff) [ 60.273083][ T30] audit: type=1400 audit(1718454470.299:295): avc: denied { setattr } for pid=1669 comm="syz-executor.1" path="/root/syzkaller-testdir3300441616/syzkaller.sEFUHB/76/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.485959][ T30] audit: type=1400 audit(1718454470.509:296): avc: denied { audit_write } for pid=1680 comm="syz-executor.1" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.569751][ T30] audit: type=1107 audit(1718454470.539:297): pid=1680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 60.741569][ T30] audit: type=1400 audit(1718454470.769:298): avc: denied { listen } for pid=1703 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.762106][ T30] audit: type=1400 audit(1718454470.789:299): avc: denied { accept } for pid=1703 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.857048][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 60.864813][ T30] audit: type=1400 audit(1718454470.889:300): avc: denied { read write } for pid=1710 comm="syz-executor.1" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.899103][ T30] audit: type=1400 audit(1718454470.889:301): avc: denied { open } for pid=1710 comm="syz-executor.1" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 60.938066][ T30] audit: type=1400 audit(1718454470.919:302): avc: denied { write } for pid=1710 comm="syz-executor.1" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 60.967028][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 61.183196][ T1716] loop3: detected capacity change from 0 to 1024 [ 61.257463][ T1716] EXT4-fs (loop3): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 61.267696][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.347109][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.357953][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.370970][ T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.380053][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.409035][ T20] usb 3-1: config 0 descriptor?? [ 61.457129][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.467436][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.475414][ T6] usb 5-1: Product: syz [ 61.479815][ T6] usb 5-1: Manufacturer: syz [ 61.484241][ T6] usb 5-1: SerialNumber: syz [ 61.540433][ T1721] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 61.941466][ T20] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 61.977184][ T20] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 62.148851][ T30] audit: type=1400 audit(1718454472.179:303): avc: denied { create } for pid=1738 comm="syz-executor.3" name="#10" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 62.170508][ T30] audit: type=1400 audit(1718454472.179:304): avc: denied { link } for pid=1738 comm="syz-executor.3" name="#10" dev="sda1" ino=1972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 62.282714][ T1740] loop2: detected capacity change from 0 to 8192 [ 62.423744][ T330] usb 3-1: USB disconnect, device number 4 [ 62.604364][ T1750] loop3: detected capacity change from 0 to 40427 [ 62.659043][ T1750] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 62.666671][ T1750] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 62.675966][ T1750] F2FS-fs (loop3): invalid crc value [ 62.683665][ T1750] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.717257][ T1750] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 62.724288][ T1750] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 62.817057][ T6] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 62.823324][ T6] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 63.223679][ T1762] syz-executor.0[1762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.223756][ T1762] syz-executor.0[1762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.252469][ T1762] overlayfs: failed to resolve './file0': -2 [ 63.538289][ T6] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 63.546334][ T6] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 63.560189][ T6] usb 5-1: USB disconnect, device number 8 [ 63.566099][ T6] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 63.664954][ T1446] attempt to access beyond end of device [ 63.664954][ T1446] loop3: rw=2051, want=53248, limit=40427 [ 63.689811][ T1446] attempt to access beyond end of device [ 63.689811][ T1446] loop3: rw=2051, want=77824, limit=40427 [ 63.702800][ T1446] attempt to access beyond end of device [ 63.702800][ T1446] loop3: rw=2051, want=86016, limit=40427 [ 63.758694][ T1446] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 63.758726][ T1446] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 63.773703][ T1446] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 64.069740][ T1785] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 64.127866][ T1792] loop0: detected capacity change from 0 to 2048 [ 64.221335][ T1792] EXT4-fs (loop0): Ignoring removed orlov option [ 64.267461][ T1792] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 64.293006][ T1792] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.316413][ T1792] EXT4-fs (loop0): Remounting filesystem read-only [ 64.357508][ T1796] loop1: detected capacity change from 0 to 40427 [ 64.410707][ T1796] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 64.418442][ T1796] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 64.428035][ T1796] F2FS-fs (loop1): invalid crc value [ 64.446360][ T1796] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.481112][ T1796] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 64.488131][ T1796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.084669][ T1840] binder: BINDER_SET_CONTEXT_MGR already set [ 65.102948][ T1842] incfs: Options parsing error. -22 [ 65.110158][ T1840] binder: 1839:1840 ioctl 4018620d 200001c0 returned -16 [ 65.110496][ T1842] incfs: mount failed -22 [ 65.129017][ T309] attempt to access beyond end of device [ 65.129017][ T309] loop1: rw=2051, want=53248, limit=40427 [ 65.201670][ T309] attempt to access beyond end of device [ 65.201670][ T309] loop1: rw=2051, want=77824, limit=40427 [ 65.212792][ T309] attempt to access beyond end of device [ 65.212792][ T309] loop1: rw=2051, want=86016, limit=40427 [ 65.224194][ T309] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 65.224221][ T309] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 65.231895][ T309] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 65.527083][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 65.527105][ T30] audit: type=1326 audit(1718454475.469:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1852 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f6a3eea9 code=0x7ffc0000 [ 65.612190][ T1856] loop2: detected capacity change from 0 to 1024 [ 65.618560][ T30] audit: type=1326 audit(1718454475.479:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1852 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f36f6a3eea9 code=0x7ffc0000 [ 65.648153][ T30] audit: type=1326 audit(1718454475.479:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1852 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36f6a3eea9 code=0x7ffc0000 [ 65.713597][ T1856] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 65.732319][ T30] audit: type=1400 audit(1718454475.759:314): avc: denied { bind } for pid=1864 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.753406][ T30] audit: type=1400 audit(1718454475.759:315): avc: denied { setopt } for pid=1864 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.756510][ T1856] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.781078][ T30] audit: type=1400 audit(1718454475.759:316): avc: denied { ioctl } for pid=1864 comm="syz-executor.3" path="socket:[20955]" dev="sockfs" ino=20955 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 65.829722][ T1856] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 65.843077][ T1856] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 65.870537][ T1856] EXT4-fs error (device loop2): ext4_quota_write:6570: inode #3: comm syz-executor.2: mark_inode_dirty error [ 65.882272][ T1856] Quota error (device loop2): write_blk: dquota write failed [ 65.889661][ T1856] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 65.900572][ T1856] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 65.913729][ T1856] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 66.378589][ T1856] EXT4-fs error (device loop2): ext4_ext_truncate:4431: inode #15: comm syz-executor.2: mark_inode_dirty error [ 66.469970][ T1856] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 66.483012][ T1856] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 66.506401][ T1856] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 66.519265][ T1856] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 66.532547][ T1856] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 66.542070][ T1856] EXT4-fs error (device loop2): ext4_truncate:4292: inode #15: comm syz-executor.2: mark_inode_dirty error [ 66.546988][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.553766][ T1856] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 66.607413][ T1872] loop3: detected capacity change from 0 to 40427 [ 66.623835][ T1856] EXT4-fs (loop2): 1 truncate cleaned up [ 66.632968][ T1872] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 66.641283][ T1872] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 66.642126][ T1856] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.668106][ T1872] F2FS-fs (loop3): invalid crc value [ 66.682543][ T30] audit: type=1400 audit(1718454476.709:317): avc: denied { read } for pid=1884 comm="syz-executor.1" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.708806][ T1872] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.736304][ T30] audit: type=1400 audit(1718454476.709:318): avc: denied { open } for pid=1884 comm="syz-executor.1" path="net:[4026532301]" dev="nsfs" ino=4026532301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.772499][ T1872] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 66.779482][ T1872] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 66.832919][ T1898] loop2: detected capacity change from 0 to 1024 [ 66.839142][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 66.861196][ T1898] EXT4-fs (loop2): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 67.259358][ T1903] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 67.643348][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 67.654308][ T6] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 67.664320][ T6] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 67.679734][ T6] usb 1-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.693017][ T6] usb 1-1: config 1 interface 0 has no altsetting 0 [ 67.699613][ T6] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 67.708725][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.767506][ T6] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 67.965671][ T1922] device veth0_vlan left promiscuous mode [ 68.092292][ T1446] attempt to access beyond end of device [ 68.092292][ T1446] loop3: rw=2051, want=53248, limit=40427 [ 68.117322][ T1446] attempt to access beyond end of device [ 68.117322][ T1446] loop3: rw=2051, want=77824, limit=40427 [ 68.131579][ T1446] attempt to access beyond end of device [ 68.131579][ T1446] loop3: rw=2051, want=86016, limit=40427 [ 68.142973][ T1446] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 68.143002][ T1446] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 68.150751][ T1446] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5 [ 68.277060][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 68.459540][ T1932] loop2: detected capacity change from 0 to 40427 [ 68.537283][ T1932] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 68.556999][ T1932] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 68.567924][ T1932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.611970][ T1932] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.619179][ T1932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.689944][ T1460] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 68.689964][ T1460] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 68.697587][ T1460] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 68.704955][ T1460] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 68.712396][ T1460] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 68.719819][ T1460] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 68.727132][ T1460] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 69.017937][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.036023][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.045874][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.050726][ T1952] loop3: detected capacity change from 0 to 1024 [ 69.054848][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.069497][ T6] usb 2-1: config 0 descriptor?? [ 69.138177][ T1952] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 69.146438][ T1952] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.154129][ T1952] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 69.167770][ T1952] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.177305][ T1952] EXT4-fs error (device loop3): ext4_quota_write:6570: inode #3: comm syz-executor.3: mark_inode_dirty error [ 69.188924][ T1952] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 69.206121][ T1952] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.215597][ T1952] EXT4-fs error (device loop3): ext4_ext_truncate:4431: inode #15: comm syz-executor.3: mark_inode_dirty error [ 69.227385][ T1952] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 69.240481][ T1952] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.249821][ T1952] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 69.258297][ T1952] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor.3: Invalid inode table block 0 in block_group 0 [ 69.273316][ T1952] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.284478][ T1952] EXT4-fs error (device loop3): ext4_truncate:4292: inode #15: comm syz-executor.3: mark_inode_dirty error [ 69.295860][ T1952] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 69.304706][ T1952] EXT4-fs (loop3): 1 truncate cleaned up [ 69.317057][ T1952] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.503621][ T26] usb 1-1: USB disconnect, device number 5 [ 69.543380][ T1979] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 69.574603][ T1985] loop0: detected capacity change from 0 to 1024 [ 69.650201][ T1985] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 69.660846][ T1985] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.667663][ T1985] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 69.680797][ T1985] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.690996][ T1985] EXT4-fs error (device loop0): ext4_quota_write:6570: inode #3: comm syz-executor.0: mark_inode_dirty error [ 69.702686][ T1985] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 69.715551][ T760] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 69.723007][ T1985] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.732569][ T1985] EXT4-fs error (device loop0): ext4_ext_truncate:4431: inode #15: comm syz-executor.0: mark_inode_dirty error [ 69.744432][ T1985] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 69.757424][ T1985] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.766714][ T1985] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 69.775217][ T1985] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor.0: Invalid inode table block 0 in block_group 0 [ 69.788379][ T1985] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 69.797778][ T1985] EXT4-fs error (device loop0): ext4_truncate:4292: inode #15: comm syz-executor.0: mark_inode_dirty error [ 69.810094][ T1985] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 69.819106][ T1985] EXT4-fs (loop0): 1 truncate cleaned up [ 69.831051][ T1985] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.943821][ T2003] incfs: Options parsing error. -22 [ 69.948982][ T2003] incfs: mount failed -22 [ 69.962983][ T2005] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.107086][ T760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.117916][ T760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.127438][ T760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.140059][ T760] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 70.148871][ T760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.157533][ T760] usb 4-1: config 0 descriptor?? [ 70.207052][ T1923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.397057][ T6] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 70.407784][ T6] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 70.415682][ T6] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 70.423683][ T6] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 70.430901][ T6] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 70.439807][ T6] usb 2-1: USB disconnect, device number 6 [ 70.597068][ T1923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.608118][ T1923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.617692][ T1923] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.626515][ T1923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.635249][ T1923] usb 3-1: config 0 descriptor?? [ 70.640780][ T760] betop 0003:11C2:2208.0007: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.3-1/input0 [ 70.651760][ T760] betop 0003:11C2:2208.0007: no inputs found [ 70.840885][ T6] usb 4-1: USB disconnect, device number 4 [ 70.909947][ T2020] cgroup: Unexpected value for 'cpuset_v2_mode' [ 71.147279][ T1923] hid (null): bogus close delimiter [ 71.357057][ T1923] usb 3-1: language id specifier not provided by device, defaulting to English [ 71.383208][ T2034] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 71.667038][ T20] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 71.754711][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.897124][ T1923] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 71.905731][ T1923] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 71.913859][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 71.919456][ T1923] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 71.927862][ T1923] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 71.935206][ T1923] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 71.947616][ T1923] usb 3-1: USB disconnect, device number 5 [ 72.025339][ T2057] loop0: detected capacity change from 0 to 512 [ 72.057091][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 72.065918][ T20] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 72.075754][ T20] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 72.085303][ T20] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.098056][ T20] usb 5-1: config 1 interface 0 has no altsetting 0 [ 72.104444][ T20] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 72.113316][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.137048][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 72.138025][ T2057] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.152119][ T2057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 72.159933][ T2057] System zones: 0-1, 15-15, 18-18, 34-34 [ 72.165831][ T2057] EXT4-fs (loop0): orphan cleanup on readonly fs [ 72.168404][ T20] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 72.173709][ T2057] __quota_error: 20 callbacks suppressed [ 72.173725][ T2057] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 72.193269][ T2057] EXT4-fs warning (device loop0): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 72.207715][ T2057] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 72.214407][ T2057] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 72.229044][ T2057] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6153: Corrupt filesystem [ 72.237727][ T2057] EXT4-fs (loop0): 1 truncate cleaned up [ 72.243157][ T2057] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.261260][ T30] audit: type=1400 audit(1718454482.289:335): avc: denied { read } for pid=2056 comm="syz-executor.0" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 72.261311][ T2057] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 72.366898][ T2068] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 72.436057][ T2075] cgroup: Unexpected value for 'cpuset_v2_mode' [ 72.497067][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.507909][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.517638][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.790200][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.801478][ T6] usb 2-1: config 0 descriptor?? [ 73.286454][ T2082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.157045][ T6] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #100: -71 [ 74.165714][ T6] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 74.187000][ T6] uclogic 0003:256C:006D.0009: failed probing pen v1 parameters: -71 [ 74.195124][ T6] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 74.202616][ T6] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 74.213107][ T6] usb 2-1: USB disconnect, device number 7 [ 74.278930][ T2102] loop2: detected capacity change from 0 to 256 [ 74.306287][ T2098] loop0: detected capacity change from 0 to 512 [ 74.340492][ T2102] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 74.354335][ T30] audit: type=1400 audit(1718454484.379:336): avc: denied { write } for pid=2101 comm="syz-executor.2" path="/root/syzkaller-testdir2441926453/syzkaller.q5Ub5o/53/file0/file0" dev="loop2" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.383175][ T30] audit: type=1400 audit(1718454484.379:337): avc: denied { setattr } for pid=2101 comm="syz-executor.2" name="file0" dev="loop2" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.414259][ T760] usb 5-1: USB disconnect, device number 9 [ 74.421935][ T2098] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.429779][ T2098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 74.443350][ T2098] System zones: 0-1, 15-15, 18-18, 34-34 [ 74.449678][ T2098] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.450567][ T2107] syz-executor.2[2107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.457213][ T2098] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 74.470823][ T2107] syz-executor.2[2107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.490495][ T2098] EXT4-fs warning (device loop0): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 74.516603][ T2098] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 74.527034][ T2098] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 74.541747][ T2098] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6153: Corrupt filesystem [ 74.550535][ T2098] EXT4-fs (loop0): 1 truncate cleaned up [ 74.556091][ T2098] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 74.614185][ T2098] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 74.641242][ T2114] cgroup: Unexpected value for 'cpuset_v2_mode' [ 74.971768][ T2118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.994450][ T2111] loop3: detected capacity change from 0 to 40427 [ 75.044815][ T2135] syz-executor.0[2135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.044878][ T2135] syz-executor.0[2135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.058003][ T2135] SELinux: Context @ is not valid (left unmapped). [ 75.090935][ T2111] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 75.101699][ T30] audit: type=1400 audit(1718454485.109:338): avc: denied { relabelto } for pid=2134 comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 75.102637][ T2111] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 75.155343][ T30] audit: type=1400 audit(1718454485.179:339): avc: denied { unlink } for pid=1064 comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 75.181607][ T2111] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.191156][ T30] audit: type=1400 audit(1718454485.219:340): avc: denied { mounton } for pid=2138 comm="syz-executor.0" path="/root/syzkaller-testdir2890162226/syzkaller.22hlpU/96/file0" dev="incremental-fs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.240413][ T2111] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 75.247867][ T2111] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.593839][ T2146] syz-executor.4[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.593908][ T2146] syz-executor.4[2146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.630542][ T2150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.688017][ T2156] device syzkaller0 entered promiscuous mode [ 75.689277][ T1446] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 75.694661][ T1446] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 75.702581][ T1446] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 75.710111][ T1446] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 75.717802][ T1446] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 75.725202][ T1446] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 75.732658][ T1446] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 75.801061][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x1 [ 75.815850][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.823178][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.830537][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.837983][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.845221][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.852813][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.860272][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.867729][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.889571][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.896863][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.916300][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.923619][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 75.931430][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.939074][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.946376][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.953763][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.961167][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.968405][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.975606][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 75.982948][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.307345][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.314661][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.322218][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.329559][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.336800][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.344112][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.351567][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.358915][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.366148][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.373774][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.381286][ T20] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 76.388974][ T20] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 76.409482][ T2174] device pim6reg1 entered promiscuous mode [ 76.432684][ T2178] loop2: detected capacity change from 0 to 1024 [ 76.477816][ T2178] EXT4-fs (loop2): Ignoring removed orlov option [ 76.484208][ T2178] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 76.498036][ T2180] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 76.500193][ T2178] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 76.508795][ T2180] incfs_lookup_dentry err:-5 [ 76.537355][ T2180] incfs: Can't find or create .index dir in ./file0 [ 76.538044][ T30] audit: type=1400 audit(1718454486.569:341): avc: denied { map } for pid=2177 comm="syz-executor.2" path="/root/syzkaller-testdir2441926453/syzkaller.q5Ub5o/62/file1/file0/bus" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 76.543891][ T2180] incfs: mount failed -5 [ 76.572989][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.593079][ T2178] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.2: corrupt xattr in inline inode [ 76.606673][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.612758][ T2178] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.2: corrupted in-inode xattr [ 76.616526][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 76.637364][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.647336][ T6] usb 1-1: config 0 descriptor?? [ 76.687792][ T30] audit: type=1400 audit(1718454486.709:342): avc: denied { unlink } for pid=1460 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.695926][ T1460] ================================================================== [ 76.718083][ T1460] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 76.725906][ T1460] Read of size 4 at addr ffff888133203000 by task syz-executor.2/1460 [ 76.733880][ T1460] [ 76.736052][ T1460] CPU: 1 PID: 1460 Comm: syz-executor.2 Not tainted 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 76.746118][ T1460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 76.756029][ T1460] Call Trace: [ 76.759140][ T1460] [ 76.761913][ T1460] dump_stack_lvl+0x151/0x1b7 [ 76.766430][ T1460] ? io_uring_drop_tctx_refs+0x190/0x190 [ 76.771905][ T1460] ? panic+0x751/0x751 [ 76.775800][ T1460] print_address_description+0x87/0x3b0 [ 76.781188][ T1460] kasan_report+0x179/0x1c0 [ 76.785519][ T1460] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 76.790993][ T1460] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 76.796458][ T1460] __asan_report_load4_noabort+0x14/0x20 [ 76.801925][ T1460] ext4_xattr_delete_inode+0xcd0/0xce0 [ 76.807222][ T1460] ? sb_end_intwrite+0x120/0x120 [ 76.811991][ T1460] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 76.817892][ T1460] ? ext4_journal_check_start+0x16c/0x230 [ 76.823446][ T1460] ? __kasan_check_read+0x11/0x20 [ 76.828319][ T1460] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 76.834034][ T1460] ? ext4_evict_inode+0xb8d/0x14e0 [ 76.838988][ T1460] ext4_evict_inode+0xea1/0x14e0 [ 76.843769][ T1460] ? _raw_spin_unlock+0x4d/0x70 [ 76.848446][ T1460] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 76.854175][ T1460] ? _raw_spin_unlock+0x4d/0x70 [ 76.858858][ T1460] ? inode_io_list_del+0x18b/0x1a0 [ 76.863803][ T1460] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 76.869536][ T1460] evict+0x2a3/0x630 [ 76.873269][ T1460] iput+0x63b/0x7e0 [ 76.876911][ T1460] vfs_rmdir+0x359/0x470 [ 76.880994][ T1460] do_rmdir+0x3ab/0x630 [ 76.884985][ T1460] ? d_delete_notify+0x160/0x160 [ 76.889760][ T1460] __x64_sys_unlinkat+0xdf/0xf0 [ 76.894445][ T1460] do_syscall_64+0x3d/0xb0 [ 76.898696][ T1460] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 76.904432][ T1460] RIP: 0033:0x7fe997551687 [ 76.908687][ T1460] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 76.928119][ T1460] RSP: 002b:00007ffc4352f128 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 76.936361][ T1460] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe997551687 [ 76.944175][ T1460] RDX: 0000000000000200 RSI: 00007ffc435302d0 RDI: 00000000ffffff9c [ 76.951985][ T1460] RBP: 00007fe9975ae636 R08: 0000000000000000 R09: 0000000000000000 [ 76.959796][ T1460] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc435302d0 [ 76.967624][ T1460] R13: 00007fe9975ae636 R14: 0000000000012a82 R15: 0000000000000008 [ 76.975423][ T1460] [ 76.978284][ T1460] [ 76.980454][ T1460] Allocated by task 100: [ 76.984542][ T1460] __kasan_slab_alloc+0xb1/0xe0 [ 76.989221][ T1460] slab_post_alloc_hook+0x53/0x2c0 [ 76.994168][ T1460] kmem_cache_alloc+0xf5/0x200 [ 76.998766][ T1460] flock_lock_inode+0x38a/0x14c0 [ 77.003541][ T1460] locks_lock_inode_wait+0xf3/0x410 [ 77.008575][ T1460] __se_sys_flock+0x473/0x5a0 [ 77.013087][ T1460] __x64_sys_flock+0x5b/0x70 [ 77.017515][ T1460] do_syscall_64+0x3d/0xb0 [ 77.021764][ T1460] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 77.027497][ T1460] [ 77.029666][ T1460] Freed by task 100: [ 77.033398][ T1460] kasan_set_track+0x4b/0x70 [ 77.037822][ T1460] kasan_set_free_info+0x23/0x40 [ 77.042594][ T1460] ____kasan_slab_free+0x126/0x160 [ 77.047547][ T1460] __kasan_slab_free+0x11/0x20 [ 77.052142][ T1460] slab_free_freelist_hook+0xbd/0x190 [ 77.057349][ T1460] kmem_cache_free+0x116/0x2e0 [ 77.061951][ T1460] flock_lock_inode+0x1113/0x14c0 [ 77.066813][ T1460] locks_remove_file+0x43b/0x1180 [ 77.071673][ T1460] __fput+0x365/0x910 [ 77.075489][ T1460] ____fput+0x15/0x20 [ 77.079310][ T1460] task_work_run+0x129/0x190 [ 77.083734][ T1460] exit_to_user_mode_loop+0xc4/0xe0 [ 77.088768][ T1460] exit_to_user_mode_prepare+0x5a/0xa0 [ 77.094064][ T1460] syscall_exit_to_user_mode+0x26/0x160 [ 77.099446][ T1460] do_syscall_64+0x49/0xb0 [ 77.103695][ T1460] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 77.109424][ T1460] [ 77.111604][ T1460] The buggy address belongs to the object at ffff888133203000 [ 77.111604][ T1460] which belongs to the cache file_lock_cache of size 248 [ 77.125831][ T1460] The buggy address is located 0 bytes inside of [ 77.125831][ T1460] 248-byte region [ffff888133203000, ffff8881332030f8) [ 77.138762][ T1460] The buggy address belongs to the page: [ 77.144237][ T1460] page:ffffea0004cc80c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133203 [ 77.154298][ T1460] flags: 0x4000000000000200(slab|zone=1) [ 77.159775][ T1460] raw: 4000000000000200 ffffea0004a28e80 0000000a0000000a ffff888107f99380 [ 77.168191][ T1460] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 77.176605][ T1460] page dumped because: kasan: bad access detected [ 77.182861][ T1460] page_owner tracks the page as allocated [ 77.188435][ T1460] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1325, ts 64138444209, free_ts 64135203234 [ 77.204205][ T1460] post_alloc_hook+0x1a3/0x1b0 [ 77.208803][ T1460] prep_new_page+0x1b/0x110 [ 77.213143][ T1460] get_page_from_freelist+0x3550/0x35d0 [ 77.218525][ T1460] __alloc_pages+0x27e/0x8f0 [ 77.222953][ T1460] new_slab+0x9a/0x4e0 [ 77.226860][ T1460] ___slab_alloc+0x39e/0x830 [ 77.231295][ T1460] __slab_alloc+0x4a/0x90 [ 77.235449][ T1460] kmem_cache_alloc+0x134/0x200 [ 77.240139][ T1460] flock_lock_inode+0x38a/0x14c0 [ 77.244910][ T1460] locks_lock_inode_wait+0xf3/0x410 [ 77.249947][ T1460] __se_sys_flock+0x473/0x5a0 [ 77.254457][ T1460] __x64_sys_flock+0x5b/0x70 [ 77.258882][ T1460] do_syscall_64+0x3d/0xb0 [ 77.263134][ T1460] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 77.268864][ T1460] page last free stack trace: [ 77.273376][ T1460] free_unref_page_prepare+0x7c8/0x7d0 [ 77.278670][ T1460] free_unref_page+0xe8/0x750 [ 77.283205][ T1460] __free_pages+0x61/0xf0 [ 77.287351][ T1460] __vunmap+0x7bc/0x8f0 [ 77.291345][ T1460] vfree+0x7f/0xb0 [ 77.294901][ T1460] bpf_jit_free+0x1e3/0x240 [ 77.299244][ T1460] bpf_prog_free_deferred+0x61e/0x730 [ 77.304447][ T1460] process_one_work+0x6bb/0xc10 [ 77.309138][ T1460] worker_thread+0xad5/0x12a0 [ 77.313651][ T1460] kthread+0x421/0x510 [ 77.317556][ T1460] ret_from_fork+0x1f/0x30 [ 77.321822][ T1460] [ 77.323977][ T1460] Memory state around the buggy address: [ 77.329454][ T1460] ffff888133202f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2024/06/15 12:28:07 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 77.337348][ T1460] ffff888133202f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.345255][ T1460] >ffff888133203000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 77.353142][ T1460] ^ [ 77.357049][ T1460] ffff888133203080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 77.364948][ T1460] ffff888133203100: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb [ 77.372843][ T1460] ================================================================== [ 77.380741][ T1460] Disabling lock debugging due to kernel taint