last executing test programs: 29.187644215s ago: executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1458, 0x0) mount$9p_tcp(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x44000, &(0x7f0000000440)) 29.152919691s ago: executing program 0: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000af00)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) fstat(r2, 0x0) 29.016857702s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 28.798304126s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$cont(0x1f, r2, 0x0, 0x4000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000900000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='kmem_cache_free\x00', r5}, 0x10) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x431, &(0x7f0000000940)="$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") r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.873054984s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000040), 0x7, 0x50d, &(0x7f00000006c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002802c000180140003002001000000000000000000000000000014000400fe88000000000000000000000000000104000280"], 0x50}}, 0x0) 3.738731365s ago: executing program 0: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) 3.58244287s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x2}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f00000001c0), 0x20000000}, 0x20) 3.473920587s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x60142, 0x0) socket(0x0, 0x80002, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000280)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB=',wfd', @ANYBLOB=',privpo']) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.488971661s ago: executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket(0x10, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x0, 0x8) splice(r0, 0x0, r1, 0x0, 0x204, 0x0) 2.478011412s ago: executing program 2: syz_usb_connect(0x0, 0xc3, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100006e093540d21914046f1c010203010902b10003ffffffd3092101001f0122af0203219f09050000000000000009050f0000020940400725010000000009050000ff030101000905000020004e00c909050c00000209003509040000060206"], 0x0) 2.318175547s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 2.099544052s ago: executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000041, 0x0, 0x0, 0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000)={'veth0_to_bond'}, 0x10) io_setup(0x9, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xfdfe}]) 1.85438064s ago: executing program 1: r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)="a83d6b7f48576708", 0x8}], 0x1}}], 0x2, 0x0) 1.697565524s ago: executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) fadvise64(r0, 0x0, 0x0, 0x0) 1.684736627s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) chdir(&(0x7f0000000540)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc1}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac60300804454746569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x18}, 0x48, 0xffffffffffffffff) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 1.655478271s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x256c, 0x6d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7f, {0x9}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f00000011c0)={0x2c, 0x0, &(0x7f0000000ec0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002240)={0x24, 0x0, &(0x7f00000020c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, 0x0, 0x0}, 0x0) 1.34226432s ago: executing program 0: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$peeksig(0x4209, r1, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000000140)=[{}]) 795.335406ms ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000004c0)={'mangle\x00'}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0c010000160001000000000000000000fc01000000000000000000000000000000000000000000000000ffffac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00l\x00'/86], 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 336.972017ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000040)='.\x00', r2, &(0x7f0000000140)='./file0\x00') mount_setattr(r2, &(0x7f0000000200)='./file0\x00', 0x1100, &(0x7f0000000300)={0x0, 0x0, 0x20000}, 0x20) 296.018673ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x5d) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) 281.110236ms ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)="a83d6b7f48576708", 0x8}], 0x1}}], 0x2, 0x0) 267.971918ms ago: executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x60680) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x178, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffff7a, 0xffffffff, 0x248, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pimreg0\x00', 'veth0_macvtap\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000300)={0xff}, 0x0, 0x0, 0x0, 0x0) 263.034619ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000010000000000000000850000009e00000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='jbd2_handle_stats\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 247.671601ms ago: executing program 3: r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 230.314554ms ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "c678f5f51bbce35015ce70e27725156603f2d3560b617b2106a43d0ff372c2ea", "39fe5728cf8ceb86c96a35df5764eb6b", {"ea3dae90c277e9e21d505517930c4285", "ca42d917352f96bd20b9feae4b21add4"}}}}}}}, 0x0) 228.102934ms ago: executing program 3: gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000740)="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", 0xfffffea5, 0xc000, 0x0, 0x8202b526) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000d00)=""/4104, 0x1008}], 0x1}}], 0x1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000340), 0xffffff46) dup3(r4, r3, 0x0) sendmsg$netlink(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001340)=ANY=[], 0x10}], 0x1}, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{}, {r5, r6+60000000}}, 0x0) rt_sigreturn() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r7, &(0x7f0000000000)={0xb}, 0xffffff54) dup3(r1, r0, 0x0) getsockname$unix(r0, 0x0, 0x0) 170.438663ms ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) chdir(&(0x7f0000000540)='./file0\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc1}) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac60300804454746569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x18}, 0x48, 0xffffffffffffffff) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') 155.857916ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 101.574534ms ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17320000000000000109022400010000b415090400000103000000092100000001220b00090581030000"], 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000040) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x800, &(0x7f0000000440)={[{@test_dummy_encryption}, {@usrquota}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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") ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000820000008200b7cb8a63a2db76d800c0745a04a9216c94675db1447ad1a6e333e5ac8fcd49d93581b263f44439f553d32f40ae5e580a3d53a5f91493f9766ad0077b22708a6912146bf11b558c5c9ba1beecb4a50b6bfc45a66a36bb64dafcdc570da81e4fe54f5c1ac48fbb95fe3e9b23276ca7dd87d7abdf6db1ebbee1808d"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) accept4$inet6(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x1c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 0s ago: executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002380)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/33, 0x21}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000002240), 0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)='\v\x00\x00\x00', 0x4}], 0x1) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = gettid() tkill(r1, 0x15) kernel console output (not intermixed with test programs): sysadm_t msg='' [ 218.291784][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.298843][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.306848][ T7123] device bridge_slave_0 entered promiscuous mode [ 218.314131][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.321870][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.329456][ T7123] device bridge_slave_1 entered promiscuous mode [ 218.348238][ T30] audit: type=1326 audit(1718506640.682:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1626c52ea9 code=0x0 [ 218.447649][ T7141] loop2: detected capacity change from 0 to 2048 [ 218.458875][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.465750][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.472870][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.479640][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.526805][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.536224][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.543961][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.550887][ T7145] Invalid ELF section header overflow [ 218.553102][ T7141] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nombcache,stripe=0x0000000000000020,,errors=continue. Quota mode: none. [ 218.579321][ T378] device bridge_slave_1 left promiscuous mode [ 218.585637][ T7141] ext4 filesystem being mounted at /root/syzkaller-testdir1827412671/syzkaller.51EJ6H/77/file0 supports timestamps until 2038 (0x7fffffff) [ 218.598861][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.605117][ T7141] fs-verity: sha256 using implementation "sha256-avx2" [ 218.613672][ T378] device bridge_slave_0 left promiscuous mode [ 218.614020][ T7141] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 345: padding at end of block bitmap is not set [ 218.620802][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.634968][ T7141] fs-verity (loop2, inode 13): Error -117 writing Merkle tree block 0 [ 218.649555][ T7141] fs-verity (loop2, inode 13): Error -117 building Merkle tree [ 218.666670][ T378] device veth1_macvtap left promiscuous mode [ 218.672556][ T378] device veth0_vlan left promiscuous mode [ 218.853179][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.861557][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.868424][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.876117][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.884207][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.891150][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.911324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.921060][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.951122][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.039556][ T7123] device veth0_vlan entered promiscuous mode [ 219.058838][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.070731][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.080841][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.135061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.156027][ T7123] device veth1_macvtap entered promiscuous mode [ 219.171695][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 219.188790][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.273440][ T7166] fuse: Bad value for 'fd' [ 219.698962][ T30] audit: type=1326 audit(1718506642.032:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78b739ea9 code=0x7ffc0000 [ 219.722883][ T342] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 219.723474][ T30] audit: type=1326 audit(1718506642.042:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7172 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78b739ea9 code=0x7ffc0000 [ 219.799823][ T7179] loop2: detected capacity change from 0 to 512 [ 219.831365][ T7179] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.842358][ T7179] ext4 filesystem being mounted at /root/syzkaller-testdir1827412671/syzkaller.51EJ6H/85/file0 supports timestamps until 2038 (0x7fffffff) [ 219.986345][ T7190] loop2: detected capacity change from 0 to 1024 [ 220.039841][ T7190] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 220.088829][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.099824][ T7195] netem: incorrect ge model size [ 220.104605][ T7195] netem: change failed [ 220.111617][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.123791][ T342] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.133148][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.146610][ T342] usb 5-1: config 0 descriptor?? [ 220.191595][ T7213] loop2: detected capacity change from 0 to 256 [ 220.213578][ T7217] fuse: Bad value for 'fd' [ 220.222895][ T7213] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 220.285736][ T7221] loop2: detected capacity change from 0 to 256 [ 220.606434][ T7226] loop2: detected capacity change from 0 to 1024 [ 220.649547][ T7226] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 220.749588][ T7229] netem: incorrect ge model size [ 220.754403][ T7229] netem: change failed [ 220.800850][ T7233] gretap0: refused to change device tx_queue_len [ 220.807262][ T7233] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 220.948826][ T342] usb 5-1: string descriptor 0 read error: -71 [ 220.968809][ T342] uclogic 0003:256C:006D.0031: failed retrieving string descriptor #200: -71 [ 220.977493][ T342] uclogic 0003:256C:006D.0031: failed retrieving pen parameters: -71 [ 220.985361][ T342] uclogic 0003:256C:006D.0031: failed probing pen v2 parameters: -71 [ 220.993251][ T342] uclogic 0003:256C:006D.0031: failed probing parameters: -71 [ 221.000508][ T342] uclogic: probe of 0003:256C:006D.0031 failed with error -71 [ 221.008524][ T342] usb 5-1: USB disconnect, device number 13 [ 221.137396][ T639] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 221.154584][ T7240] loop3: detected capacity change from 0 to 16 [ 221.189926][ T7240] erofs: (device loop3): mounted with root inode @ nid 36. [ 221.529925][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 221.529946][ T30] audit: type=1400 audit(1718506643.852:3995): avc: denied { call } for pid=7245 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 221.578843][ T639] usb 3-1: not running at top speed; connect to a high speed hub [ 221.669322][ T639] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 221.707367][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.721804][ T639] usb 3-1: config 1 interface 0 has no altsetting 0 [ 221.929092][ T639] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.938225][ T639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.946106][ T639] usb 3-1: Product: syz [ 221.950199][ T639] usb 3-1: Manufacturer: syz [ 221.954656][ T639] usb 3-1: SerialNumber: syz [ 221.978869][ T7233] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 222.047424][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 222.090983][ T7286] device pim6reg1 entered promiscuous mode [ 222.130205][ T30] audit: type=1326 audit(1718506644.472:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1626c52ea9 code=0x7ffc0000 [ 222.158351][ T30] audit: type=1326 audit(1718506644.472:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1626c52ea9 code=0x7ffc0000 [ 222.184648][ T30] audit: type=1326 audit(1718506644.492:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f1626c52ea9 code=0x7ffc0000 [ 222.209386][ T30] audit: type=1326 audit(1718506644.492:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1626c52ea9 code=0x7ffc0000 [ 222.233506][ T30] audit: type=1326 audit(1718506644.492:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1626c52ea9 code=0x7ffc0000 [ 222.392557][ T639] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8 [ 222.432900][ T7305] loop3: detected capacity change from 0 to 256 [ 222.440134][ T639] usb 3-1: USB disconnect, device number 20 [ 222.450247][ T639] usblp0: removed [ 222.769543][ T7317] device pim6reg1 entered promiscuous mode [ 222.861841][ T7322] loop4: detected capacity change from 0 to 1024 [ 222.890825][ T7322] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.923378][ T7123] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #2: block 16: comm syz-executor.4: lblock 0 mapped to illegal pblock 16 (length 1) [ 222.938188][ T7123] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 222.947720][ T7123] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz-executor.4: mark_inode_dirty error [ 223.141752][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.148748][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.156351][ T7327] device bridge_slave_0 entered promiscuous mode [ 223.166739][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.173725][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.181273][ T7327] device bridge_slave_1 entered promiscuous mode [ 223.257849][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.264741][ T7327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.271841][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.278594][ T7327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.623493][ T428] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.631574][ T428] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.639498][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.647001][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.667536][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.687670][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.694588][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.702238][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.710472][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.717321][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.737376][ T7327] device veth0_vlan entered promiscuous mode [ 223.792476][ T7327] device veth1_macvtap entered promiscuous mode [ 224.055577][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.064637][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.074145][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.083027][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.092052][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.099947][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.107500][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.115772][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.123745][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.132256][ T903] device bridge_slave_1 left promiscuous mode [ 224.139552][ T903] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.147174][ T903] device bridge_slave_0 left promiscuous mode [ 224.153396][ T903] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.161618][ T903] device veth1_macvtap left promiscuous mode [ 224.167567][ T903] device veth0_vlan left promiscuous mode [ 224.296562][ T7352] loop4: detected capacity change from 0 to 512 [ 224.320371][ T7350] loop3: detected capacity change from 0 to 40427 [ 224.330899][ T7352] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 224.341932][ T7352] ext4 filesystem being mounted at /root/syzkaller-testdir542665942/syzkaller.TQidku/0/file0 supports timestamps until 2038 (0x7fffffff) [ 224.345984][ T7350] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.395428][ T7350] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 224.420597][ T6668] attempt to access beyond end of device [ 224.420597][ T6668] loop3: rw=2049, want=45104, limit=40427 [ 224.522813][ T7368] overlayfs: statfs failed on './file0' [ 224.688924][ T30] audit: type=1326 audit(1718506646.972:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeee22ea9 code=0x7ffc0000 [ 224.850075][ T30] audit: type=1326 audit(1718506646.972:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeee22ea9 code=0x7ffc0000 [ 224.889769][ T30] audit: type=1326 audit(1718506646.972:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7febeee22ea9 code=0x7ffc0000 [ 224.916291][ T30] audit: type=1326 audit(1718506646.982:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7363 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeee22ea9 code=0x7ffc0000 [ 225.008724][ T342] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 225.117669][ T7386] loop3: detected capacity change from 0 to 40427 [ 225.173025][ T7386] F2FS-fs (loop3): Found nat_bits in checkpoint [ 225.218909][ T7386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.247114][ T6668] attempt to access beyond end of device [ 225.247114][ T6668] loop3: rw=2049, want=45104, limit=40427 [ 225.368826][ T342] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.386587][ T342] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 225.403197][ T342] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 225.418690][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.427357][ T342] usb 3-1: config 0 descriptor?? [ 225.966202][ T7414] syz-executor.0[7414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.966261][ T7414] syz-executor.0[7414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.288640][ T7432] loop3: detected capacity change from 0 to 128 [ 226.384831][ T7444] syz-executor.0[7444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.384919][ T7444] syz-executor.0[7444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.373189][ T7478] fuse: Bad value for 'fd' [ 227.483888][ T39] usb 3-1: USB disconnect, device number 21 [ 227.777578][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 227.777596][ T30] audit: type=1326 audit(1718506650.112:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff827973ea9 code=0x7ffc0000 [ 228.403263][ T30] audit: type=1326 audit(1718506650.112:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff827973ea9 code=0x7ffc0000 [ 228.429389][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.441650][ T30] audit: type=1326 audit(1718506650.112:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff827973ea9 code=0x7ffc0000 [ 228.468807][ T30] audit: type=1326 audit(1718506650.132:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff827973ea9 code=0x7ffc0000 [ 228.503825][ T30] audit: type=1326 audit(1718506650.132:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff827973ea9 code=0x7ffc0000 [ 228.527753][ T30] audit: type=1326 audit(1718506650.132:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff827973ea9 code=0x7ffc0000 [ 228.551783][ T30] audit: type=1326 audit(1718506650.152:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff827973ea9 code=0x7ffc0000 [ 228.576553][ T30] audit: type=1326 audit(1718506650.712:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff827971627 code=0x7ffc0000 [ 228.600303][ T30] audit: type=1326 audit(1718506650.712:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff827937309 code=0x7ffc0000 [ 228.633351][ T30] audit: type=1326 audit(1718506650.712:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7498 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff827971627 code=0x7ffc0000 [ 229.386989][ T7540] loop3: detected capacity change from 0 to 256 [ 230.191445][ T7594] loop4: detected capacity change from 0 to 256 [ 230.271148][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.278043][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.287876][ T7580] device bridge_slave_0 entered promiscuous mode [ 230.407840][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.414867][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.427574][ T7580] device bridge_slave_1 entered promiscuous mode [ 230.511302][ T7580] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.518146][ T7580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.525280][ T7580] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.532246][ T7580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.562618][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.571303][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.578763][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.600990][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.609531][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.616406][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.629724][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.637804][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.644662][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.658241][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.674552][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.690208][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.705620][ T7580] device veth0_vlan entered promiscuous mode [ 230.712234][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.721853][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.729970][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.749099][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.793352][ T7580] device veth1_macvtap entered promiscuous mode [ 230.810576][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.867228][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 230.875906][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 230.895601][ T378] device bridge_slave_1 left promiscuous mode [ 230.901940][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.911472][ T378] device bridge_slave_0 left promiscuous mode [ 230.917976][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.926767][ T378] device veth1_macvtap left promiscuous mode [ 230.932729][ T378] device veth0_vlan left promiscuous mode [ 231.090801][ T7636] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 231.133057][ T7636] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.140295][ T7636] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.156925][ T7636] device wg2 left promiscuous mode [ 231.284985][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.742512][ T7679] loop3: detected capacity change from 0 to 512 [ 231.767360][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.777468][ T7679] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.802655][ T7687] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 231.807711][ T7679] EXT4-fs (loop3): 1 truncate cleaned up [ 231.812251][ T7687] SELinux: security_context_str_to_sid(system_u) failed for (dev configfs, type configfs) errno=-22 [ 231.828702][ T7679] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 232.148499][ T7705] device wg2 entered promiscuous mode [ 232.390413][ T7714] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 232.400437][ T7714] SELinux: security_context_str_to_sid(system_u) failed for (dev configfs, type configfs) errno=-22 [ 233.104536][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.117543][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.125444][ T7731] device bridge_slave_0 entered promiscuous mode [ 233.135061][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.142039][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.149460][ T7731] device bridge_slave_1 entered promiscuous mode [ 233.240029][ T7731] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.246948][ T7731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.254085][ T7731] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.261043][ T7731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.292681][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.301526][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.309721][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.329907][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.338089][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.345067][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.352621][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.360787][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.367645][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.375963][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.427925][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.445930][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.471398][ T7731] device veth0_vlan entered promiscuous mode [ 233.479999][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.519513][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 233.526929][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 233.549508][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 233.559198][ T7731] device veth1_macvtap entered promiscuous mode [ 233.805181][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.813809][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.109175][ T903] device bridge_slave_1 left promiscuous mode [ 234.115261][ T903] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.122613][ T903] device bridge_slave_0 left promiscuous mode [ 234.128561][ T903] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.136471][ T903] device veth1_macvtap left promiscuous mode [ 234.142475][ T903] device veth0_vlan left promiscuous mode [ 234.158767][ T639] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 234.585701][ T7757] loop4: detected capacity change from 0 to 40427 [ 234.631000][ T7757] F2FS-fs (loop4): Unrecognized mount option "ifline_xattr" or missing value [ 234.709213][ T639] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.719285][ T639] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.728560][ T639] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 234.737502][ T639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.746515][ T639] usb 2-1: config 0 descriptor?? [ 235.249579][ T7763] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 235.258342][ T7763] device syzkaller0 entered promiscuous mode [ 235.378138][ T7769] gretap0: refused to change device tx_queue_len [ 235.384947][ T7769] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 235.678852][ T39] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 236.138817][ T39] usb 1-1: not running at top speed; connect to a high speed hub [ 236.218902][ T39] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 236.229515][ T39] usb 1-1: config 1 interface 0 has no altsetting 0 [ 236.418810][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.427714][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.437663][ T39] usb 1-1: Product: syz [ 236.441745][ T39] usb 1-1: Manufacturer: syz [ 236.446087][ T39] usb 1-1: SerialNumber: syz [ 236.488911][ T7769] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 236.549549][ T7793] loop4: detected capacity change from 0 to 40427 [ 236.589926][ T7793] F2FS-fs (loop4): Unrecognized mount option "ifline_xattr" or missing value [ 236.823742][ T300] usb 2-1: USB disconnect, device number 19 [ 236.992705][ T39] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8 [ 237.119836][ T39] usb 1-1: USB disconnect, device number 24 [ 237.129783][ T39] usblp0: removed [ 237.159688][ T7802] input: syz0 as /devices/virtual/input/input44 [ 237.327363][ T7807] loop4: detected capacity change from 0 to 256 [ 237.584823][ T7826] loop4: detected capacity change from 0 to 512 [ 237.630966][ T7826] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 237.642038][ T7826] ext4 filesystem being mounted at /root/syzkaller-testdir542665942/syzkaller.TQidku/47/file0 supports timestamps until 2038 (0x7fffffff) [ 237.772991][ T7845] input: syz0 as /devices/virtual/input/input45 [ 237.902864][ T30] kauditd_printk_skb: 125 callbacks suppressed [ 237.902882][ T30] audit: type=1400 audit(1718506660.242:4147): avc: denied { listen } for pid=7852 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.928576][ T30] audit: type=1400 audit(1718506660.242:4148): avc: denied { accept } for pid=7852 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 237.982777][ T7856] gretap0: refused to change device tx_queue_len [ 237.989381][ T7856] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 238.008829][ T331] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 238.087669][ T7867] loop1: detected capacity change from 0 to 512 [ 238.141106][ T7867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.152315][ T7867] ext4 filesystem being mounted at /root/syzkaller-testdir2791324923/syzkaller.qNfTGj/9/bus supports timestamps until 2038 (0x7fffffff) [ 238.169292][ T30] audit: type=1326 audit(1718506660.512:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.193545][ T30] audit: type=1326 audit(1718506660.512:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.217611][ T30] audit: type=1326 audit(1718506660.532:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.241643][ T30] audit: type=1326 audit(1718506660.542:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.265615][ T30] audit: type=1326 audit(1718506660.542:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.289843][ T39] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 238.297364][ T30] audit: type=1326 audit(1718506660.542:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.321510][ T30] audit: type=1326 audit(1718506660.542:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.345485][ T30] audit: type=1326 audit(1718506660.542:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f91685ea9 code=0x7ffc0000 [ 238.408882][ T331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.418942][ T331] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.428041][ T331] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 238.437242][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.445784][ T331] usb 5-1: config 0 descriptor?? [ 238.489537][ T7873] input: syz0 as /devices/virtual/input/input47 [ 238.509103][ T7875] loop1: detected capacity change from 0 to 256 [ 238.539553][ T7875] exfat: Unknown parameter '0xffffffffffffffff' [ 238.709085][ T39] usb 1-1: not running at top speed; connect to a high speed hub [ 238.800030][ T39] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 238.810743][ T39] usb 1-1: config 1 interface 0 has no altsetting 0 [ 238.978860][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 238.988464][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.996328][ T39] usb 1-1: Product: syz [ 239.000355][ T39] usb 1-1: Manufacturer: syz [ 239.004748][ T39] usb 1-1: SerialNumber: syz [ 239.038862][ T7856] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 239.359276][ T39] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8 [ 239.370737][ T39] usb 1-1: USB disconnect, device number 25 [ 239.377375][ T39] usblp0: removed [ 239.521921][ T7891] loop1: detected capacity change from 0 to 512 [ 239.549491][ T7891] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 239.559419][ T7891] EXT4-fs (loop1): Unrecognized mount option "obj_type=T/" or missing value [ 239.771396][ T7901] loop1: detected capacity change from 0 to 512 [ 239.801088][ T7901] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz-executor.1: bad orphan inode 15 [ 239.811603][ T7901] ext4_test_bit(bit=14, block=5) = 0 [ 239.816910][ T7901] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 240.043612][ T7904] EXT4-fs error (device loop1): __ext4_new_inode:1072: comm syz-executor.1: reserved inode found cleared - inode=1 [ 240.688071][ T7908] loop1: detected capacity change from 0 to 512 [ 240.729882][ T7908] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.742196][ T342] usb 5-1: USB disconnect, device number 14 [ 240.750615][ T7908] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 240.759021][ T7908] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1) [ 240.773606][ T7908] EXT4-fs (loop1): Remounting filesystem read-only [ 240.780253][ T7908] EXT4-fs (loop1): 1 truncate cleaned up [ 240.785893][ T7908] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 241.148757][ T342] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 241.388728][ T300] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 241.508822][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.519761][ T342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.529336][ T342] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 241.538159][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.546600][ T342] usb 5-1: config 0 descriptor?? [ 241.758831][ T300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.769733][ T300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.779290][ T300] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 241.789808][ T300] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 241.878831][ T300] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.898154][ T300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.908252][ T300] usb 1-1: SerialNumber: syz [ 241.938853][ T7932] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 241.959338][ T300] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 241.967318][ T300] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 242.029013][ T342] hid (null): bogus close delimiter [ 242.040245][ T7948] gretap0: refused to change device tx_queue_len [ 242.046624][ T7948] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.161370][ T39] usb 1-1: USB disconnect, device number 26 [ 242.238826][ T342] usb 5-1: language id specifier not provided by device, defaulting to English [ 242.328773][ T300] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 242.718868][ T342] uclogic 0003:256C:006D.0032: interface is invalid, ignoring [ 242.728784][ T300] usb 2-1: not running at top speed; connect to a high speed hub [ 242.810527][ T300] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 242.821610][ T300] usb 2-1: config 1 interface 0 has no altsetting 0 [ 242.922280][ T39] usb 5-1: USB disconnect, device number 15 [ 242.978953][ T300] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.988132][ T300] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.996098][ T300] usb 2-1: Product: syz [ 243.000155][ T300] usb 2-1: Manufacturer: syz [ 243.004648][ T300] usb 2-1: SerialNumber: syz [ 243.028825][ T7948] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 243.349487][ T300] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8 [ 243.361107][ T300] usb 2-1: USB disconnect, device number 20 [ 243.367443][ T300] usblp0: removed [ 244.171557][ T7966] loop1: detected capacity change from 0 to 40427 [ 244.210938][ T7966] F2FS-fs (loop1): invalid crc value [ 244.217877][ T7966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 244.249781][ T7966] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 244.256754][ T7966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 244.273571][ T7966] attempt to access beyond end of device [ 244.273571][ T7966] loop1: rw=0, want=45072, limit=40427 [ 244.462253][ T7974] loop4: detected capacity change from 0 to 40427 [ 244.500763][ T7974] F2FS-fs (loop4): invalid crc value [ 244.507460][ T7974] F2FS-fs (loop4): Found nat_bits in checkpoint [ 244.538286][ T7974] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 244.545438][ T7974] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 244.559994][ T7974] attempt to access beyond end of device [ 244.559994][ T7974] loop4: rw=2049, want=45104, limit=40427 [ 244.642209][ T7327] attempt to access beyond end of device [ 244.642209][ T7327] loop4: rw=524288, want=45072, limit=40427 [ 244.653516][ T7327] attempt to access beyond end of device [ 244.653516][ T7327] loop4: rw=0, want=45072, limit=40427 [ 244.688818][ T331] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 244.891228][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.898079][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.905440][ T7984] device bridge_slave_0 entered promiscuous mode [ 244.912286][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.919343][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.926537][ T7984] device bridge_slave_1 entered promiscuous mode [ 244.980720][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.987568][ T7984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.994699][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.001469][ T7984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.025340][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.033822][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.041207][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.052588][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.060674][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.067503][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.074867][ T331] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 245.084687][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.095422][ T331] usb 2-1: config 0 descriptor?? [ 245.101488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.109906][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.116738][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.124022][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.139315][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.150423][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.162720][ T7984] device veth0_vlan entered promiscuous mode [ 245.169407][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.177418][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.184766][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.192708][ T45] device bridge_slave_1 left promiscuous mode [ 245.198739][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.206268][ T45] device bridge_slave_0 left promiscuous mode [ 245.212539][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.220860][ T45] device veth1_macvtap left promiscuous mode [ 245.226697][ T45] device veth0_vlan left promiscuous mode [ 245.305451][ T7984] device veth1_macvtap entered promiscuous mode [ 245.312883][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.324225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.335237][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.359694][ T7989] loop4: detected capacity change from 0 to 512 [ 245.401332][ T7989] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz-executor.4: bad orphan inode 15 [ 245.411879][ T7989] ext4_test_bit(bit=14, block=5) = 0 [ 245.417021][ T7989] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 245.649250][ T7993] EXT4-fs error (device loop4): __ext4_new_inode:1072: comm syz-executor.4: reserved inode found cleared - inode=1 [ 246.230236][ T333] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 246.446946][ T7999] gretap0: refused to change device tx_queue_len [ 246.453481][ T7999] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.568821][ T331] usb 2-1: Cannot set autoneg [ 246.573448][ T331] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 246.582220][ T331] usb 2-1: USB disconnect, device number 21 [ 246.588831][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.600099][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.609857][ T333] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 246.618804][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.627268][ T333] usb 1-1: config 0 descriptor?? [ 246.738798][ T428] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 247.063577][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 247.063595][ T30] audit: type=1400 audit(1718506669.402:4208): avc: denied { mount } for pid=8001 comm="syz-executor.1" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 247.092677][ T8002] loop1: detected capacity change from 0 to 512 [ 247.110703][ T333] hid (null): bogus close delimiter [ 247.139011][ T30] audit: type=1400 audit(1718506669.482:4209): avc: denied { mounton } for pid=8001 comm="syz-executor.1" path="/root/syzkaller-testdir2791324923/syzkaller.qNfTGj/38/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 247.166413][ T428] usb 5-1: not running at top speed; connect to a high speed hub [ 247.170822][ T8002] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 247.184939][ T8002] ext4 filesystem being mounted at /root/syzkaller-testdir2791324923/syzkaller.qNfTGj/38/file0 supports timestamps until 2038 (0x7fffffff) [ 247.256516][ T30] audit: type=1400 audit(1718506669.592:4210): avc: denied { getopt } for pid=8001 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.276512][ T428] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 247.287062][ T428] usb 5-1: config 1 interface 0 has no altsetting 0 [ 247.318838][ T333] usb 1-1: language id specifier not provided by device, defaulting to English [ 247.448845][ T428] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.457862][ T428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.465659][ T428] usb 5-1: Product: syz [ 247.469778][ T428] usb 5-1: Manufacturer: syz [ 247.474101][ T428] usb 5-1: SerialNumber: syz [ 247.498864][ T7999] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 247.799061][ T333] uclogic 0003:256C:006D.0033: interface is invalid, ignoring [ 247.839332][ T428] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8 [ 247.850639][ T428] usb 5-1: USB disconnect, device number 16 [ 247.856990][ T428] usblp0: removed [ 248.003054][ T342] usb 1-1: USB disconnect, device number 27 [ 248.058869][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.065756][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.073901][ T8009] device bridge_slave_0 entered promiscuous mode [ 248.080898][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.087758][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.095327][ T8009] device bridge_slave_1 entered promiscuous mode [ 248.147549][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.154414][ T8009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.161526][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.168284][ T8009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.194605][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.202448][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.209755][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.221209][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.229454][ T428] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.236290][ T428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.249711][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.257804][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.264750][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.275399][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.294888][ T8009] device veth0_vlan entered promiscuous mode [ 248.301961][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.310236][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.318164][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.325673][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.332993][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.348686][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.357982][ T8009] device veth1_macvtap entered promiscuous mode [ 248.368338][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.381740][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.489466][ T45] device bridge_slave_1 left promiscuous mode [ 248.495594][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.503244][ T45] device bridge_slave_0 left promiscuous mode [ 248.509570][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.517488][ T45] device veth1_macvtap left promiscuous mode [ 248.526039][ T45] device veth0_vlan left promiscuous mode [ 248.658431][ T8020] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.667849][ T8020] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.678047][ T8020] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 248.686051][ T8020] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.022287][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.246713][ T8034] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 249.429299][ T428] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 249.909209][ T428] usb 1-1: Using ep0 maxpacket: 32 [ 249.938773][ T331] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 250.208821][ T428] usb 1-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 250.217796][ T428] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.225809][ T428] usb 1-1: Product: syz [ 250.230171][ T428] usb 1-1: Manufacturer: syz [ 250.236923][ T428] usb 1-1: SerialNumber: syz [ 250.243008][ T428] usb 1-1: config 0 descriptor?? [ 250.279569][ T428] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 250.318884][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.329705][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.339422][ T331] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 250.348563][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.357233][ T331] usb 5-1: config 0 descriptor?? [ 250.443659][ T8048] loop1: detected capacity change from 0 to 512 [ 250.489290][ T300] usb 1-1: USB disconnect, device number 28 [ 250.490681][ T8048] EXT4-fs (loop1): failed to initialize system zone (-117) [ 250.502162][ T8048] EXT4-fs (loop1): mount failed [ 250.600396][ T8051] loop1: detected capacity change from 0 to 512 [ 250.631551][ T8051] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz-executor.1: bad orphan inode 15 [ 250.641984][ T8051] ext4_test_bit(bit=14, block=5) = 0 [ 250.647092][ T8051] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 250.878096][ T8055] EXT4-fs error (device loop1): __ext4_new_inode:1072: comm syz-executor.1: reserved inode found cleared - inode=1 [ 251.002828][ T331] hid (null): bogus close delimiter [ 251.108811][ T331] usb 5-1: language id specifier not provided by device, defaulting to English [ 251.516281][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.598898][ T331] uclogic 0003:256C:006D.0034: interface is invalid, ignoring [ 251.801719][ T331] usb 5-1: USB disconnect, device number 17 [ 252.139051][ T30] audit: type=1400 audit(1718506674.482:4211): avc: denied { nlmsg_write } for pid=8068 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 252.162103][ T30] audit: type=1400 audit(1718506674.502:4212): avc: denied { mounton } for pid=8068 comm="syz-executor.1" path="/root/syzkaller-testdir3995290739/syzkaller.qjf9UE/11/file0" dev="configfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 252.162251][ T8069] overlayfs: missing 'lowerdir' [ 252.261648][ T8077] loop1: detected capacity change from 0 to 512 [ 252.301031][ T8077] EXT4-fs (loop1): failed to initialize system zone (-117) [ 252.308098][ T8077] EXT4-fs (loop1): mount failed [ 252.321403][ T8080] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 252.331093][ T8080] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 252.351086][ T8082] binder: 8081:8082 ioctl c0306201 200001c0 returned -14 [ 252.454384][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.978742][ T333] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 253.243112][ T8111] loop1: detected capacity change from 0 to 512 [ 253.290723][ T8111] EXT4-fs (loop1): failed to initialize system zone (-117) [ 253.297805][ T8111] EXT4-fs (loop1): mount failed [ 253.338826][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.349799][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.359376][ T333] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 253.368184][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.378064][ T333] usb 5-1: config 0 descriptor?? [ 253.387768][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.449109][ T30] audit: type=1400 audit(1718506675.792:4213): avc: denied { read } for pid=8123 comm="syz-executor.1" path="socket:[49757]" dev="sockfs" ino=49757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.848977][ T333] hid (null): bogus close delimiter [ 254.058813][ T333] usb 5-1: language id specifier not provided by device, defaulting to English [ 254.304567][ T8129] loop1: detected capacity change from 0 to 128 [ 254.350556][ T8129] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.361164][ T8129] ext4 filesystem being mounted at /proc/8128/cgroup supports timestamps until 2038 (0x7fffffff) [ 254.514212][ T30] audit: type=1326 audit(1718506676.852:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 254.538213][ T30] audit: type=1326 audit(1718506676.852:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 254.565203][ T333] uclogic 0003:256C:006D.0035: interface is invalid, ignoring [ 254.578320][ T30] audit: type=1326 audit(1718506676.852:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 254.603552][ T30] audit: type=1326 audit(1718506676.872:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 254.627421][ T30] audit: type=1326 audit(1718506676.882:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 254.651912][ T30] audit: type=1326 audit(1718506676.892:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 254.676034][ T30] audit: type=1326 audit(1718506676.902:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8147 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 254.779288][ T428] usb 5-1: USB disconnect, device number 18 [ 254.992153][ T8190] tipc: Failed to remove unknown binding: 66,1,1/0:1789927574/1789927576 [ 255.000762][ T8190] tipc: Failed to remove unknown binding: 66,1,1/0:1789927574/1789927576 [ 255.111732][ T8190] loop1: detected capacity change from 0 to 40427 [ 255.149545][ T8190] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 255.157137][ T8190] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 255.166343][ T8190] F2FS-fs (loop1): invalid crc value [ 255.173199][ T8190] F2FS-fs (loop1): Found nat_bits in checkpoint [ 255.205031][ T8190] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 255.212032][ T8190] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 255.339032][ T26] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 255.578863][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 255.818349][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.825526][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.832985][ T8217] device bridge_slave_0 entered promiscuous mode [ 255.840803][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.848714][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.856232][ T8217] device bridge_slave_1 entered promiscuous mode [ 255.858861][ T26] usb 1-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 255.871396][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.879750][ T26] usb 1-1: Product: syz [ 255.886390][ T26] usb 1-1: Manufacturer: syz [ 255.899294][ T26] usb 1-1: SerialNumber: syz [ 255.909405][ T26] usb 1-1: config 0 descriptor?? [ 255.958609][ T45] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 255.972570][ T26] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 255.985951][ T45] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 256.071924][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.078836][ T8217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.085944][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.092839][ T8217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.125012][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.132847][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.149959][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.174699][ T39] usb 1-1: USB disconnect, device number 29 [ 256.192022][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.209446][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.216344][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.223650][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 256.233783][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.240664][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.257150][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.270793][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.298732][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.317363][ T8217] device veth0_vlan entered promiscuous mode [ 256.324095][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.332080][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.339421][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.346975][ T8237] tipc: Started in network mode [ 256.351879][ T8237] tipc: Node identity 7f000001, cluster identity 4711 [ 256.359079][ T8237] tipc: Enabled bearer , priority 10 [ 256.375475][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 256.385672][ T8217] device veth1_macvtap entered promiscuous mode [ 256.397498][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 256.422454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 256.429877][ T8250] syz-executor.4[8250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.430424][ T8250] syz-executor.4[8250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.471488][ T378] device bridge_slave_1 left promiscuous mode [ 256.509006][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.516570][ T378] device bridge_slave_0 left promiscuous mode [ 256.528847][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.537106][ T378] device veth1_macvtap left promiscuous mode [ 256.550142][ T378] device veth0_vlan left promiscuous mode [ 256.600428][ T8265] loop4: detected capacity change from 0 to 512 [ 256.630137][ T8265] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.651247][ T8265] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 256.668508][ T8265] EXT4-fs (loop4): 1 truncate cleaned up [ 256.674761][ T8265] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 256.704972][ T8271] tipc: Started in network mode [ 256.713985][ T8271] tipc: Node identity 7f000001, cluster identity 4711 [ 256.723171][ T8271] tipc: Enabled bearer , priority 10 [ 256.737859][ T8265] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 256.758692][ T8265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 256.769679][ T8265] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 256.787985][ T8265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 256.797582][ T8279] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 256.811543][ T8279] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 256.821429][ T8279] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 256.834370][ T8279] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 256.877947][ T8293] syz-executor.0[8293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.878041][ T8293] syz-executor.0[8293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.045051][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.064913][ T8302] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.072592][ T8302] device bridge_slave_0 entered promiscuous mode [ 257.080163][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.087715][ T8302] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.097657][ T8302] device bridge_slave_1 entered promiscuous mode [ 257.134501][ T8320] loop2: detected capacity change from 0 to 512 [ 257.176180][ T8302] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.183147][ T8302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.190274][ T8302] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.197244][ T8302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.208776][ T39] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 257.208959][ T8320] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 257.231073][ T8320] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 257.246747][ T8320] EXT4-fs (loop2): 1 truncate cleaned up [ 257.253225][ T8320] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.253401][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.272002][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.273880][ T8320] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor.2: corrupted xattr block 19 [ 257.280577][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.292752][ T8320] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 257.309247][ T8320] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor.2: corrupted xattr block 19 [ 257.321466][ T8320] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 257.330760][ T8323] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor.2: corrupted xattr block 19 [ 257.344116][ T8323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 257.354203][ T8323] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor.2: corrupted xattr block 19 [ 257.366662][ T428] tipc: Node number set to 2130706433 [ 257.368506][ T8323] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 257.389318][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.400630][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.417728][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 257.432544][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 257.442468][ T8302] device veth0_vlan entered promiscuous mode [ 257.448884][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 257.450730][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 257.461577][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 257.529015][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.539417][ T8302] device veth1_macvtap entered promiscuous mode [ 257.553206][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 257.563774][ T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.747461][ T378] device bridge_slave_1 left promiscuous mode [ 257.754461][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.765475][ T378] device bridge_slave_0 left promiscuous mode [ 257.772513][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.799057][ T39] usb 2-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 257.834357][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.895359][ T342] tipc: Node number set to 2130706433 [ 257.912855][ T8335] loop3: detected capacity change from 0 to 512 [ 257.913344][ T39] usb 2-1: Product: syz [ 257.926571][ T39] usb 2-1: Manufacturer: syz [ 257.932815][ T39] usb 2-1: SerialNumber: syz [ 257.945961][ T39] usb 2-1: config 0 descriptor?? [ 257.961097][ T8335] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.972617][ T8335] ext4 filesystem being mounted at /root/syzkaller-testdir1952569529/syzkaller.VmberX/2/file0 supports timestamps until 2038 (0x7fffffff) [ 257.989803][ T39] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 257.991735][ T8335] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz-executor.3: corrupted inode contents [ 258.008913][ T8335] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor.3: mark_inode_dirty error [ 258.020710][ T8335] EXT4-fs error (device loop3): ext4_do_update_inode:5191: inode #2: comm syz-executor.3: corrupted inode contents [ 258.033201][ T8335] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz-executor.3: mark_inode_dirty error [ 258.194343][ T39] usb 2-1: USB disconnect, device number 22 [ 258.358171][ T8350] syz-executor.2[8350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.358233][ T8350] syz-executor.2[8350] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.438797][ T333] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 258.808782][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.819578][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.829130][ T333] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 258.838085][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.854660][ T333] usb 4-1: config 0 descriptor?? [ 259.046231][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 259.046248][ T30] audit: type=1400 audit(1718506681.382:4284): avc: denied { create } for pid=8367 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.072599][ T30] audit: type=1400 audit(1718506681.382:4285): avc: denied { write } for pid=8367 comm="syz-executor.1" path="socket:[51585]" dev="sockfs" ino=51585 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.558834][ T333] hid-led: probe of 0003:27B8:01ED.0036 failed with error -71 [ 259.566949][ T333] usb 4-1: USB disconnect, device number 16 [ 259.972607][ T30] audit: type=1326 audit(1718506682.312:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 259.997132][ T30] audit: type=1326 audit(1718506682.312:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 260.021054][ T30] audit: type=1326 audit(1718506682.322:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 260.044977][ T30] audit: type=1326 audit(1718506682.332:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 260.069103][ T30] audit: type=1326 audit(1718506682.342:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 260.093153][ T30] audit: type=1326 audit(1718506682.362:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 260.119395][ T30] audit: type=1326 audit(1718506682.362:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae1bc1c627 code=0x7ffc0000 [ 260.143288][ T30] audit: type=1326 audit(1718506682.372:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8386 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1bbe2309 code=0x7ffc0000 [ 261.163301][ T8413] loop1: detected capacity change from 0 to 128 [ 261.210996][ T8413] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.221502][ T8413] ext4 filesystem being mounted at /proc/8410/cgroup supports timestamps until 2038 (0x7fffffff) [ 261.300712][ T8425] loop2: detected capacity change from 0 to 40427 [ 261.353514][ T8425] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.385164][ T8425] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.408704][ T333] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 261.769260][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.781059][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.791208][ T333] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 261.800530][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.809302][ T333] usb 5-1: config 0 descriptor?? [ 262.376762][ T8458] syz-executor.2[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.376824][ T8458] syz-executor.2[8458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.509234][ T333] hid-led: probe of 0003:27B8:01ED.0037 failed with error -71 [ 262.531617][ T333] usb 5-1: USB disconnect, device number 19 [ 262.581601][ T8464] loop2: detected capacity change from 0 to 40427 [ 262.622521][ T8464] F2FS-fs (loop2): Found nat_bits in checkpoint [ 262.654644][ T8464] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 262.677740][ T8470] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 262.688426][ T8470] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 262.715925][ T8472] loop1: detected capacity change from 0 to 512 [ 262.751738][ T8472] EXT4-fs (loop1): Test dummy encryption mode enabled [ 262.759753][ T8472] EXT4-fs (loop1): Test dummy encryption mode enabled [ 262.766514][ T8472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.776483][ T8472] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (20423!=33349) [ 262.785981][ T8472] EXT4-fs (loop1): group descriptors corrupted! [ 262.800290][ T8476] gretap0: refused to change device tx_queue_len [ 262.806684][ T8476] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 263.088759][ T300] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 263.148739][ T331] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 263.278793][ T333] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 263.398700][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 263.488920][ T300] usb 3-1: not running at top speed; connect to a high speed hub [ 263.568856][ T300] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 263.579441][ T300] usb 3-1: config 1 interface 0 has no altsetting 0 [ 263.638871][ T333] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.649135][ T333] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 263.658003][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.666789][ T333] usb 5-1: config 0 descriptor?? [ 263.698846][ T331] usb 2-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 263.708094][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.716136][ T331] usb 2-1: Product: syz [ 263.720120][ T331] usb 2-1: Manufacturer: syz [ 263.724479][ T331] usb 2-1: SerialNumber: syz [ 263.729522][ T331] usb 2-1: config 0 descriptor?? [ 263.748798][ T300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 263.757689][ T300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.765631][ T300] usb 3-1: Product: syz [ 263.770275][ T331] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 263.777425][ T300] usb 3-1: Manufacturer: syz [ 263.781846][ T300] usb 3-1: SerialNumber: syz [ 263.798829][ T8476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 263.911239][ T331] usb 5-1: USB disconnect, device number 20 [ 263.971035][ T342] usb 2-1: USB disconnect, device number 23 [ 264.119492][ T300] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 1 proto 3 vid 0x0525 pid 0xA4A8 [ 264.131490][ T300] usb 3-1: USB disconnect, device number 22 [ 264.138118][ T300] usblp0: removed [ 264.423123][ T8488] loop4: detected capacity change from 0 to 512 [ 264.449651][ T8488] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 264.449651][ T8488] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 264.449651][ T8488] [ 264.467910][ T8488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.490786][ T8488] EXT4-fs (loop4): 1 truncate cleaned up [ 264.496333][ T8488] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouser_xattr,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 264.520529][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 264.520547][ T30] audit: type=1400 audit(1718506686.862:4435): avc: denied { setattr } for pid=8487 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.584613][ T8490] loop3: detected capacity change from 0 to 40427 [ 264.608010][ T8497] tipc: Failed to remove unknown binding: 66,1,1/2130706433:464152104/464152106 [ 264.617776][ T8497] tipc: Failed to remove unknown binding: 66,1,1/2130706433:464152104/464152106 [ 264.629890][ T8490] F2FS-fs (loop3): invalid crc value [ 264.649724][ T8490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 264.689643][ T8490] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 264.696432][ T8490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 264.723279][ T8302] attempt to access beyond end of device [ 264.723279][ T8302] loop3: rw=2049, want=45104, limit=40427 [ 264.782846][ T8497] loop4: detected capacity change from 0 to 40427 [ 264.829778][ T8497] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 264.837625][ T8497] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 264.847033][ T8497] F2FS-fs (loop4): invalid crc value [ 264.853751][ T8497] F2FS-fs (loop4): Found nat_bits in checkpoint [ 264.897525][ T8497] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 264.904697][ T8497] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 264.991224][ T8503] loop3: detected capacity change from 0 to 40427 [ 265.030811][ T8503] F2FS-fs (loop3): invalid crc value [ 265.037424][ T8503] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.095952][ T8503] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.800011][ T378] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 265.809478][ T378] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 266.272568][ T300] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 266.528769][ T300] usb 4-1: Using ep0 maxpacket: 16 [ 266.678850][ T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.690017][ T300] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 266.708012][ T300] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 266.717427][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.726547][ T300] usb 4-1: config 0 descriptor?? [ 266.898714][ T331] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 267.298864][ T331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.309094][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 267.318008][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.336303][ T331] usb 5-1: config 0 descriptor?? [ 267.354969][ T8544] tipc: Failed to remove unknown binding: 66,1,1/0:1923410389/1923410391 [ 267.363969][ T8544] tipc: Failed to remove unknown binding: 66,1,1/0:1923410389/1923410391 [ 267.468592][ T8544] loop2: detected capacity change from 0 to 40427 [ 267.519618][ T8544] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 267.527574][ T8544] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 267.537421][ T8544] F2FS-fs (loop2): invalid crc value [ 267.544994][ T8544] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.581711][ T333] usb 5-1: USB disconnect, device number 21 [ 267.600583][ T8544] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 267.607517][ T8544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.719925][ T8557] loop1: detected capacity change from 0 to 40427 [ 267.852542][ T8557] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 267.860318][ T8557] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 267.876098][ T8557] F2FS-fs (loop1): invalid crc value [ 267.917377][ T8557] F2FS-fs (loop1): Found nat_bits in checkpoint [ 267.999487][ T8557] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 268.006600][ T8557] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 268.023855][ T8302] attempt to access beyond end of device [ 268.023855][ T8302] loop3: rw=2049, want=45104, limit=40427 [ 268.118754][ T300] usbhid 4-1:0.0: can't add hid device: -71 [ 268.124754][ T300] usbhid: probe of 4-1:0.0 failed with error -71 [ 268.139375][ T300] usb 4-1: USB disconnect, device number 17 [ 268.239431][ T8574] loop1: detected capacity change from 0 to 512 [ 268.296365][ T8574] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 268.310928][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 268.356398][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 268.372393][ T378] tipc: Disabling bearer [ 268.387720][ T378] tipc: Left network mode [ 268.461084][ T8574] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 268.553026][ T8574] EXT4-fs (loop1): 1 truncate cleaned up [ 268.558763][ T8574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 268.578922][ T8574] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 268.591235][ T8574] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 268.600294][ T8574] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 268.612733][ T8574] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 268.622502][ T8574] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 268.634699][ T8574] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 268.644336][ T8574] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 268.656866][ T8574] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 268.717923][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.724979][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.732577][ T8579] device bridge_slave_0 entered promiscuous mode [ 268.739960][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.746906][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.754673][ T8579] device bridge_slave_1 entered promiscuous mode [ 268.768126][ T8586] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 268.849962][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.856881][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.863996][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.870858][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.151209][ T8592] syz-executor.3[8592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.151294][ T8592] syz-executor.3[8592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 269.155121][ T2823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.187644][ T2823] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.195617][ T2823] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.206178][ T8596] loop2: detected capacity change from 0 to 512 [ 269.217517][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.225944][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.232917][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.248383][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.257146][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.264154][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.275097][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.284905][ T8596] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 269.284905][ T8596] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 269.284905][ T8596] [ 269.304253][ T8596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 269.316952][ T8596] EXT4-fs (loop2): 1 truncate cleaned up [ 269.318885][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.330256][ T8596] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouser_xattr,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 269.331573][ T8598] loop3: detected capacity change from 0 to 512 [ 269.368007][ T8579] device veth0_vlan entered promiscuous mode [ 269.375248][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.383706][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.393849][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.401331][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.412400][ T8598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 269.431410][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.439945][ T8598] ext4 filesystem being mounted at /root/syzkaller-testdir1952569529/syzkaller.VmberX/20/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 269.465655][ T8579] device veth1_macvtap entered promiscuous mode [ 269.486750][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.510580][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.519765][ T378] device bridge_slave_1 left promiscuous mode [ 269.525829][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.573572][ T8601] loop2: detected capacity change from 0 to 40427 [ 269.580882][ T378] device bridge_slave_0 left promiscuous mode [ 269.586956][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.595252][ T378] device veth1_macvtap left promiscuous mode [ 269.604626][ T378] device veth0_vlan left promiscuous mode [ 269.620587][ T8601] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 269.628376][ T8601] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 269.639465][ T8601] F2FS-fs (loop2): invalid crc value [ 269.652518][ T8601] F2FS-fs (loop2): Found nat_bits in checkpoint [ 269.698406][ T8601] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 269.705549][ T8601] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 269.764490][ T30] audit: type=1326 audit(1718506692.102:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.788749][ T30] audit: type=1326 audit(1718506692.102:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.813487][ T30] audit: type=1326 audit(1718506692.102:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.837962][ T30] audit: type=1326 audit(1718506692.102:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.866274][ T30] audit: type=1326 audit(1718506692.102:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.890995][ T26] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 269.900856][ T30] audit: type=1326 audit(1718506692.102:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.925774][ T30] audit: type=1326 audit(1718506692.102:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.950794][ T30] audit: type=1326 audit(1718506692.102:4443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 269.975515][ T333] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 269.985610][ T30] audit: type=1326 audit(1718506692.102:4444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 270.023235][ T30] audit: type=1326 audit(1718506692.102:4445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8614 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddfbcc3ea9 code=0x7ffc0000 [ 270.359376][ T26] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.370268][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.398529][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 270.427420][ T8631] syz-executor.2[8631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.427508][ T8631] syz-executor.2[8631] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.427502][ T333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 270.427536][ T333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 270.474433][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.482896][ T333] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 270.492238][ T26] usb 4-1: config 0 descriptor?? [ 270.497857][ T333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.507980][ T333] usb 2-1: config 0 descriptor?? [ 270.528795][ T8612] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 270.736856][ T26] usb 4-1: USB disconnect, device number 18 [ 270.811484][ T8639] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 270.822050][ T8639] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 271.050303][ T8647] loop4: detected capacity change from 0 to 40427 [ 271.081066][ T8647] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 271.088924][ T8647] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 271.098345][ T8647] F2FS-fs (loop4): invalid crc value [ 271.103655][ T8660] syz-executor.2[8660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.103737][ T8660] syz-executor.2[8660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.112810][ T8647] F2FS-fs (loop4): Found nat_bits in checkpoint [ 271.117574][ T333] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x4 [ 271.158173][ T333] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 271.166349][ T8647] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 271.167934][ T333] plantronics 0003:047F:FFFF.0038: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 271.173607][ T8647] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 271.259071][ T8672] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.309987][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.908884][ T2823] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 271.928750][ T333] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 272.175634][ T333] usb 3-1: Using ep0 maxpacket: 32 [ 272.318895][ T2823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.329756][ T2823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.339621][ T2823] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 272.348705][ T2823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.357914][ T2823] usb 5-1: config 0 descriptor?? [ 272.599703][ T333] usb 3-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 272.609375][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.617564][ T333] usb 3-1: Product: syz [ 272.622318][ T333] usb 3-1: Manufacturer: syz [ 272.626891][ T333] usb 3-1: SerialNumber: syz [ 272.665044][ T333] usb 3-1: config 0 descriptor?? [ 272.719488][ T333] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 272.919906][ T8686] loop4: detected capacity change from 0 to 4096 [ 272.926696][ T333] usb 3-1: USB disconnect, device number 23 [ 272.969812][ T8686] EXT4-fs (loop4): Test dummy encryption mode enabled [ 272.979351][ T8686] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue. Quota mode: writeback. [ 273.010622][ T2823] waltop 0003:172F:0032.0039: hidraw1: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.4-1/input0 [ 273.213945][ T8686] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 273.223557][ T2823] usb 5-1: USB disconnect, device number 22 [ 273.224024][ T8705] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 273.336035][ T8710] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 273.347073][ T8710] incfs_lookup_dentry err:-5 [ 273.351660][ T8710] incfs: Can't find or create .index dir in ./file0 [ 273.358176][ T8710] incfs: mount failed -5 [ 273.409048][ T428] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 273.440873][ T8718] loop2: detected capacity change from 0 to 256 [ 273.470396][ T8718] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 274.055235][ T428] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.065597][ T331] usb 2-1: USB disconnect, device number 24 [ 274.072445][ T428] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 274.082122][ T428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.091217][ T428] usb 4-1: config 0 descriptor?? [ 274.238741][ T331] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 274.238741][ T333] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 274.330986][ T428] usb 4-1: USB disconnect, device number 19 [ 274.483346][ T333] usb 5-1: Using ep0 maxpacket: 8 [ 274.598890][ T333] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.609757][ T333] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.619370][ T333] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.628925][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.643186][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.652950][ T331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 274.665894][ T331] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 274.674680][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.683379][ T331] usb 2-1: config 0 descriptor?? [ 274.789096][ T333] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.40 [ 274.798425][ T333] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.806490][ T26] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 274.814283][ T333] usb 5-1: Product: syz [ 274.818496][ T333] usb 5-1: Manufacturer: syz [ 274.823226][ T333] usb 5-1: SerialNumber: syz [ 274.905614][ T8740] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 274.916058][ T8740] incfs_lookup_dentry err:-5 [ 274.921572][ T8740] incfs: Can't find or create .index dir in ./file0 [ 274.928145][ T8740] incfs: mount failed -5 [ 274.989616][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 274.989634][ T30] audit: type=1326 audit(1718506697.332:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.019812][ T30] audit: type=1326 audit(1718506697.332:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.044755][ T30] audit: type=1326 audit(1718506697.332:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.069248][ T30] audit: type=1326 audit(1718506697.332:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.094072][ T30] audit: type=1326 audit(1718506697.332:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.119202][ T30] audit: type=1326 audit(1718506697.332:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.143641][ T30] audit: type=1326 audit(1718506697.332:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.167787][ T30] audit: type=1326 audit(1718506697.332:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.192632][ T30] audit: type=1326 audit(1718506697.332:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.193976][ T331] wacom 0003:056A:0317.003A: unknown main item tag 0x0 [ 275.216903][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.223739][ T331] wacom 0003:056A:0317.003A: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 275.234298][ T30] audit: type=1326 audit(1718506697.332:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd6e69ea9 code=0x7ffc0000 [ 275.244969][ T331] wacom 0003:056A:0317.003A: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 275.270648][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 275.283061][ T331] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.003A/input/input48 [ 275.293047][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.319191][ T333] usbhid 5-1:1.0: can't add hid device: -22 [ 275.325291][ T333] usbhid: probe of 5-1:1.0 failed with error -22 [ 275.331988][ T26] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.341951][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.350910][ T26] usb 3-1: config 0 descriptor?? [ 275.368882][ T8733] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 275.388797][ T342] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 275.404535][ T8716] loop1: detected capacity change from 0 to 512 [ 275.461717][ T8716] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.473234][ T8716] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 275.483364][ T8716] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 275.496683][ T8716] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 275.504831][ T8716] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 275.517804][ T8716] EXT4-fs (loop1): Remounting filesystem read-only [ 275.524354][ T8716] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 275.524625][ T331] usb 5-1: USB disconnect, device number 23 [ 275.539371][ T8716] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x0000000000000001,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 275.566413][ T8716] UDC core: couldn't find an available UDC or it's busy: -16 [ 275.573921][ T8716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.581676][ T8716] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.593060][ T8716] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 275.603297][ T8716] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 275.616646][ T8716] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 275.628406][ T8716] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 275.638500][ T8716] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 275.651763][ T342] usb 4-1: Using ep0 maxpacket: 32 [ 275.651824][ T8716] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 275.676270][ T8716] EXT4-fs (loop1): Remounting filesystem read-only [ 275.686963][ T39] usb 2-1: USB disconnect, device number 25 [ 275.909661][ T26] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x4 [ 275.917209][ T26] plantronics 0003:047F:FFFF.003B: No inputs registered, leaving [ 275.925762][ T26] plantronics 0003:047F:FFFF.003B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 275.948829][ T342] usb 4-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 275.957965][ T342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.966116][ T342] usb 4-1: Product: syz [ 275.970154][ T342] usb 4-1: Manufacturer: syz [ 275.974682][ T342] usb 4-1: SerialNumber: syz [ 275.979930][ T342] usb 4-1: config 0 descriptor?? [ 276.019621][ T342] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 276.057457][ T8749] loop4: detected capacity change from 0 to 256 [ 276.100032][ T8749] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 276.221469][ T39] usb 4-1: USB disconnect, device number 20 [ 276.508744][ T26] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 276.999424][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.050848][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.092811][ T26] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 277.117391][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.126286][ T26] usb 2-1: config 0 descriptor?? [ 277.368732][ T342] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 277.605384][ T8754] loop1: detected capacity change from 0 to 4096 [ 277.631192][ T8754] EXT4-fs (loop1): Test dummy encryption mode enabled [ 277.640198][ T8754] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue. Quota mode: writeback. [ 277.670889][ T26] waltop 0003:172F:0032.003C: hidraw1: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 277.717228][ T8771] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 277.728497][ T8771] incfs_lookup_dentry err:-5 [ 277.733156][ T8771] incfs: Can't find or create .index dir in ./file0 [ 277.740441][ T8771] incfs: mount failed -5 [ 277.778809][ T342] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.789151][ T342] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 277.798283][ T342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.806980][ T342] usb 5-1: config 0 descriptor?? [ 277.859847][ T8783] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.875751][ T342] usb 2-1: USB disconnect, device number 26 [ 277.878037][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.999037][ T331] usb 3-1: USB disconnect, device number 24 [ 278.008726][ T333] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 278.051142][ T39] usb 5-1: USB disconnect, device number 24 [ 278.248771][ T333] usb 4-1: Using ep0 maxpacket: 8 [ 278.368838][ T333] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.379699][ T333] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.389607][ T333] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.448209][ T8787] syz-executor.1[8787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.448275][ T8787] syz-executor.1[8787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.558839][ T333] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.40 [ 278.581410][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.589290][ T333] usb 4-1: Product: syz [ 278.593276][ T333] usb 4-1: Manufacturer: syz [ 278.597656][ T333] usb 4-1: SerialNumber: syz [ 278.667176][ T8808] loop1: detected capacity change from 0 to 2048 [ 278.715028][ T8808] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.725604][ T8808] ext4 filesystem being mounted at /root/syzkaller-testdir3995290739/syzkaller.qjf9UE/96/bus supports timestamps until 2038 (0x7fffffff) [ 278.808269][ T8815] syz-executor.1[8815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.808375][ T8815] syz-executor.1[8815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.839123][ T8817] xt_ecn: cannot match TCP bits for non-tcp packets [ 279.038802][ T331] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 279.118894][ T333] usbhid 4-1:1.0: can't add hid device: -22 [ 279.124704][ T333] usbhid: probe of 4-1:1.0 failed with error -22 [ 279.376890][ T313] usb 4-1: USB disconnect, device number 21 [ 279.518061][ T8837] loop1: detected capacity change from 0 to 256 [ 279.550017][ T8837] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 279.758816][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.769948][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.779835][ T331] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 279.789334][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.797791][ T331] usb 3-1: config 0 descriptor?? [ 279.877522][ T8845] tipc: Failed to remove unknown binding: 66,1,1/0:1717667210/1717667212 [ 279.886617][ T8845] tipc: Failed to remove unknown binding: 66,1,1/0:1717667210/1717667212 [ 280.080130][ T8845] loop4: detected capacity change from 0 to 40427 [ 280.119809][ T8845] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 280.131313][ T8845] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 280.152163][ T8845] F2FS-fs (loop4): invalid crc value [ 280.172090][ T8845] F2FS-fs (loop4): Found nat_bits in checkpoint [ 280.215859][ T8845] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 280.222949][ T8845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 280.288882][ T8813] loop2: detected capacity change from 0 to 4096 [ 280.335647][ T8813] EXT4-fs (loop2): Test dummy encryption mode enabled [ 280.344801][ T8813] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue. Quota mode: writeback. [ 280.680628][ T331] waltop 0003:172F:0032.003D: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 280.697002][ T8865] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 280.707580][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 280.707598][ T30] audit: type=1326 audit(1718506703.052:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.737877][ T30] audit: type=1326 audit(1718506703.052:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.763724][ T30] audit: type=1326 audit(1718506703.052:4553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.769506][ T313] usb 3-1: USB disconnect, device number 25 [ 280.787810][ T30] audit: type=1326 audit(1718506703.052:4554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.817306][ T30] audit: type=1326 audit(1718506703.052:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.842057][ T30] audit: type=1326 audit(1718506703.052:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.867251][ T30] audit: type=1326 audit(1718506703.052:4557): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.891691][ T30] audit: type=1326 audit(1718506703.052:4558): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.915905][ T30] audit: type=1326 audit(1718506703.052:4559): auid=4294967295 uid=255 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8867 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1bc1eea9 code=0x7ffc0000 [ 280.994767][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 281.004147][ T45] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 281.511150][ T8889] syz-executor.1[8889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.511215][ T8889] syz-executor.1[8889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.926854][ T8901] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3897922797/3897922799 [ 281.959417][ T8901] tipc: Failed to remove unknown binding: 66,1,1/2130706433:3897922797/3897922799 [ 282.044513][ T8909] loop2: detected capacity change from 0 to 512 [ 282.120413][ T8909] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 282.170587][ T8909] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #17: comm syz-executor.2: iget: bad i_size value: -6917529027641081756 [ 282.214982][ T8909] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 17 (err -117) [ 282.219636][ T8901] loop1: detected capacity change from 0 to 40427 [ 282.237421][ T8909] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 282.271875][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.276717][ T8901] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 282.299054][ T8901] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 282.333399][ T8901] F2FS-fs (loop1): invalid crc value [ 282.356612][ T30] audit: type=1400 audit(1718506704.692:4560): avc: denied { create } for pid=8920 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 282.371399][ T8901] F2FS-fs (loop1): Found nat_bits in checkpoint [ 282.426100][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.433120][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.440648][ T8916] device bridge_slave_0 entered promiscuous mode [ 282.447783][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.454821][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.462469][ T8916] device bridge_slave_1 entered promiscuous mode [ 282.515102][ T8901] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 282.522138][ T8901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 283.150766][ T8943] xt_ecn: cannot match TCP bits for non-tcp packets [ 283.198811][ T39] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 283.566575][ T378] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 283.584344][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.591596][ T378] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 283.600673][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.616012][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.634708][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.691567][ T333] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 283.699304][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.706165][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.713910][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.722501][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.730502][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.741514][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.748362][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.755742][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.807603][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.815606][ T39] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 283.824995][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.833342][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.842735][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.854627][ T39] usb 4-1: config 0 descriptor?? [ 283.862701][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.872909][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.995361][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 284.034296][ T639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.087212][ T8916] device veth0_vlan entered promiscuous mode [ 284.099364][ T333] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 284.103476][ T8916] device veth1_macvtap entered promiscuous mode [ 284.110207][ T333] usb 3-1: config 255 has 1 interface, different from the descriptor's value: 3 [ 284.124878][ T333] usb 3-1: config 255 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 284.141082][ T45] device bridge_slave_1 left promiscuous mode [ 284.147333][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.155344][ T45] device bridge_slave_0 left promiscuous mode [ 284.161436][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.170127][ T45] device veth1_macvtap left promiscuous mode [ 284.176048][ T45] device veth0_vlan left promiscuous mode [ 284.210276][ T8965] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 284.288878][ T333] usb 3-1: New USB device found, idVendor=19d2, idProduct=0414, bcdDevice=1c.6f [ 284.297900][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.305869][ T333] usb 3-1: Product: syz [ 284.309991][ T333] usb 3-1: Manufacturer: syz [ 284.314605][ T333] usb 3-1: SerialNumber: syz [ 284.423386][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.431440][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.440077][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.448268][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.456508][ T8925] loop3: detected capacity change from 0 to 4096 [ 284.456547][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.481478][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.489821][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.498008][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.506001][ T313] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 284.514075][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.521551][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.544077][ T8925] EXT4-fs (loop3): Test dummy encryption mode enabled [ 284.557485][ T8925] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue. Quota mode: writeback. [ 284.590744][ T39] waltop 0003:172F:0032.003E: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.3-1/input0 [ 284.609262][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.614812][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.620424][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.626395][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.632115][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.636273][ T8976] xt_ecn: cannot match TCP bits for non-tcp packets [ 284.638019][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.649888][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.655208][ T333] cdc_ether 3-1:255.0: skipping garbage [ 284.660803][ T333] usb 3-1: bad CDC descriptors [ 284.666551][ T333] usb 3-1: USB disconnect, device number 26 [ 284.768766][ T313] usb 2-1: Using ep0 maxpacket: 8 [ 284.903526][ T313] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.914938][ T313] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.925810][ T313] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.003542][ T333] usb 4-1: USB disconnect, device number 22 [ 285.137802][ T313] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.40 [ 285.147057][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.155076][ T313] usb 2-1: Product: syz [ 285.159335][ T313] usb 2-1: Manufacturer: syz [ 285.163792][ T313] usb 2-1: SerialNumber: syz [ 285.270879][ T8984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.596125][ T8992] syz-executor.4[8992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.596216][ T8992] syz-executor.4[8992] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 285.669179][ T313] usbhid 2-1:1.0: can't add hid device: -22 [ 285.686711][ T313] usbhid: probe of 2-1:1.0 failed with error -22 [ 285.733000][ T9011] loop4: detected capacity change from 0 to 1024 [ 285.760189][ T9011] EXT4-fs (loop4): Ignoring removed orlov option [ 285.766579][ T9011] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 285.781144][ T9011] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 285.807156][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 285.807172][ T30] audit: type=1400 audit(1718506708.152:4565): avc: denied { map } for pid=9010 comm="syz-executor.4" path="/root/syzkaller-testdir1873817700/syzkaller.YvQEzW/37/file1/file0/bus" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 285.818298][ T9011] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.4: corrupt xattr in inline inode [ 285.856619][ T9011] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.4: corrupted in-inode xattr [ 285.872170][ T342] usb 2-1: USB disconnect, device number 27 [ 285.881768][ T30] audit: type=1400 audit(1718506708.222:4566): avc: denied { rmdir } for pid=8579 comm="syz-executor.4" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 285.904772][ T30] audit: type=1400 audit(1718506708.222:4567): avc: denied { unlink } for pid=8579 comm="syz-executor.4" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 285.905224][ T8579] ================================================================== [ 285.935426][ T8579] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 285.943228][ T8579] Read of size 4 at addr ffff88812ed37000 by task syz-executor.4/8579 [ 285.951346][ T8579] [ 285.953466][ T8579] CPU: 0 PID: 8579 Comm: syz-executor.4 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 285.965306][ T8579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 285.975709][ T8579] Call Trace: [ 285.978829][ T8579] [ 285.981737][ T8579] dump_stack_lvl+0x151/0x1b7 [ 285.986249][ T8579] ? io_uring_drop_tctx_refs+0x190/0x190 [ 285.991726][ T8579] ? panic+0x751/0x751 [ 285.995625][ T8579] print_address_description+0x87/0x3b0 [ 286.001015][ T8579] kasan_report+0x179/0x1c0 [ 286.005360][ T8579] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 286.010814][ T8579] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 286.016280][ T8579] __asan_report_load4_noabort+0x14/0x20 [ 286.021836][ T8579] ext4_xattr_delete_inode+0xcd0/0xce0 [ 286.027218][ T8579] ? sb_end_intwrite+0x120/0x120 [ 286.031990][ T8579] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 286.037896][ T8579] ? ext4_journal_check_start+0x16c/0x230 [ 286.043543][ T8579] ? __kasan_check_read+0x11/0x20 [ 286.049558][ T8579] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 286.055292][ T8579] ? ext4_evict_inode+0xb8d/0x14e0 [ 286.060317][ T8579] ext4_evict_inode+0xea1/0x14e0 [ 286.065258][ T8579] ? _raw_spin_unlock+0x4d/0x70 [ 286.070068][ T8579] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 286.075792][ T8579] ? _raw_spin_unlock+0x4d/0x70 [ 286.080489][ T8579] ? inode_io_list_del+0x18b/0x1a0 [ 286.085422][ T8579] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 286.091407][ T8579] evict+0x2a3/0x630 [ 286.095132][ T8579] iput+0x63b/0x7e0 [ 286.098773][ T8579] vfs_rmdir+0x359/0x470 [ 286.102855][ T8579] do_rmdir+0x3ab/0x630 [ 286.106847][ T8579] ? d_delete_notify+0x160/0x160 [ 286.111710][ T8579] __x64_sys_unlinkat+0xdf/0xf0 [ 286.116535][ T8579] do_syscall_64+0x3d/0xb0 [ 286.120873][ T8579] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 286.126599][ T8579] RIP: 0033:0x7fddfbcc3687 [ 286.131017][ T8579] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 286.150636][ T8579] RSP: 002b:00007ffda4598f58 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 286.158962][ T8579] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fddfbcc3687 [ 286.166774][ T8579] RDX: 0000000000000200 RSI: 00007ffda459a100 RDI: 00000000ffffff9c [ 286.175031][ T8579] RBP: 00007fddfbd20636 R08: 0000000000000000 R09: 0000000000000000 [ 286.182925][ T8579] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffda459a100 [ 286.190734][ T8579] R13: 00007fddfbd20636 R14: 0000000000045c0d R15: 0000000000000008 [ 286.198565][ T8579] [ 286.201417][ T8579] [ 286.203574][ T8579] The buggy address belongs to the page: [ 286.209057][ T8579] page:ffffea0004bb4dc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12ed37 [ 286.219113][ T8579] flags: 0x4000000000000000(zone=1) [ 286.224192][ T8579] raw: 4000000000000000 ffffea0004e17308 ffffea0004baedc8 0000000000000000 [ 286.232609][ T8579] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 286.241278][ T8579] page dumped because: kasan: bad access detected [ 286.247709][ T8579] page_owner tracks the page as freed [ 286.252962][ T8579] page last allocated via order 0, migratetype Movable, gfp_mask 0x100cca(GFP_HIGHUSER_MOVABLE), pid 9004, ts 285657309341, free_ts 285776638329 [ 286.267652][ T8579] post_alloc_hook+0x1a3/0x1b0 [ 286.272620][ T8579] prep_new_page+0x1b/0x110 [ 286.276948][ T8579] get_page_from_freelist+0x3550/0x35d0 [ 286.282398][ T8579] __alloc_pages+0x27e/0x8f0 [ 286.287229][ T8579] wp_page_copy+0x200/0x1b00 [ 286.291667][ T8579] do_wp_page+0x6fa/0xb60 [ 286.295814][ T8579] handle_pte_fault+0x7c0/0x24d0 [ 286.300708][ T8579] do_handle_mm_fault+0x1ea9/0x23a0 [ 286.305823][ T8579] exc_page_fault+0x3b5/0x830 [ 286.310615][ T8579] asm_exc_page_fault+0x27/0x30 [ 286.315518][ T8579] page last free stack trace: [ 286.320143][ T8579] free_unref_page_prepare+0x7c8/0x7d0 [ 286.325415][ T8579] free_unref_page_list+0x14b/0xa60 [ 286.330703][ T8579] release_pages+0x1310/0x1370 [ 286.335297][ T8579] free_pages_and_swap_cache+0x8a/0xa0 [ 286.340678][ T8579] tlb_finish_mmu+0x177/0x320 [ 286.345187][ T8579] exit_mmap+0x40d/0x940 [ 286.349285][ T8579] __mmput+0x95/0x310 [ 286.353088][ T8579] mmput+0x5b/0x170 [ 286.356737][ T8579] do_exit+0xb9c/0x2ca0 [ 286.360729][ T8579] do_group_exit+0x141/0x310 [ 286.365154][ T8579] get_signal+0x7a3/0x1630 [ 286.369405][ T8579] arch_do_signal_or_restart+0xbd/0x1680 [ 286.375079][ T8579] exit_to_user_mode_loop+0xa0/0xe0 [ 286.380122][ T8579] exit_to_user_mode_prepare+0x5a/0xa0 [ 286.385409][ T8579] syscall_exit_to_user_mode+0x26/0x160 [ 286.390788][ T8579] do_syscall_64+0x49/0xb0 [ 286.395043][ T8579] [ 286.397219][ T8579] Memory state around the buggy address: [ 286.402687][ T8579] ffff88812ed36f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 286.410585][ T8579] ffff88812ed36f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 286.418482][ T8579] >ffff88812ed37000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 286.426392][ T8579] ^ 2024/06/16 02:58:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 286.430304][ T8579] ffff88812ed37080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 286.438280][ T8579] ffff88812ed37100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 286.446168][ T8579] ================================================================== [ 286.454430][ T8579] Disabling lock debugging due to kernel taint