last executing test programs: 34.793385527s ago: executing program 0 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={0x2c, r1, 0x189, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 34.497007392s ago: executing program 0 (id=1597): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x120, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x1, 0x0, 0x7, 0x3ff}}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) 34.477395384s ago: executing program 0 (id=1598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6c}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3e, 0x0, "cfaa02de0b42430606ba0a01e0d2669e8b9a9025903f0b05c311b240e623031da74b8ea6de52db9e0b56436ca0c8a9237bd3c12be9e2ebb6e829bfb5b928193e9db3fe74f8f5640f4016d64a50bcfba0"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0xd}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8914, &(0x7f0000001440)={'bridge0\x00', 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./bus\x00', 0x1a08886, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1, 0x2ca, &(0x7f0000000540)="$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") bpf$BPF_LINK_UPDATE(0xf, 0x0, 0x0) setrlimit(0x0, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 33.615484844s ago: executing program 0 (id=1606): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181041, 0x0) process_madvise(r0, 0x0, 0x0, 0x0, 0x0) 33.18226616s ago: executing program 0 (id=1608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001440)={0x2c, r1, 0x189, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 33.148125633s ago: executing program 0 (id=1609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b810"], 0x0) mkdir(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028004001200050016000a00000091824b1ddfca32ca0052de1af8225fa54456bd5cc0e8e9e4ba306789d4"], 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 12.676448341s ago: executing program 4 (id=1722): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x4020072, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@ptr, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000100)=""/226, 0x3e, 0xe2, 0x1}, 0x20) 11.281724075s ago: executing program 4 (id=1726): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, "ccf5"}, @selector_unit={0x5}, @feature_unit={0xd, 0x24, 0x6, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0]}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "caaf1a346379"}, @mixer_unit={0x5}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x7f}}}}}}}]}}, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="b00000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/105, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000088be000039dd564720460000000000000099d1ebd8fd4fd5ff"], 0xb0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x1, 0x1, 0x1, 0x1, 0x1]}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) 9.732065002s ago: executing program 3 (id=1729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='net/protocols\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381", 0xb}, {&(0x7f00000005c0)="c2c10b", 0x3}], 0x2) 8.077716898s ago: executing program 3 (id=1732): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 8.077081408s ago: executing program 4 (id=1733): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000fc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2e2caa", 0x0, 0x32, 0x0, @remote, @mcast2}}}}, 0x0) 6.323293412s ago: executing program 1 (id=1734): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000580)={0x50}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x180c00, 0x0) 6.322254202s ago: executing program 3 (id=1736): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x90) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000000001000000851000000600000018140000", @ANYRES32=r7, @ANYBLOB="00000000000000003500000000000000180000000000000000000000000000009500000000000000360a000000000000180200002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000720afbff0000000485000000060000009500000000000000d582a27ce32b3947c7c45798672fcaf17e2b51e4404c630e959cc93ee9330cfe642b3f8ba76956f1fc3004640135562bf8621156cc6699e3075b151c08388c0ca3aeff2b52cdca7798f1354cf55fc4a3dcec3062ac8d686ad3dd8a4b4a7fda190a97bea718"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x78) 6.321817342s ago: executing program 4 (id=1737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, 0x0, &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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") syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) io_setup(0x2, &(0x7f0000000180)) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='kfree\x00', 0x0) 6.268307686s ago: executing program 2 (id=1738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x3d8, 0x0, 0x1c0, 0x3d8, 0x1c0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [], [], 'batadv_slave_1\x00', 'lo\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @dev, [], [], 'veth1_macvtap\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xee00, r3) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.197828592s ago: executing program 1 (id=1739): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x2c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 6.111655939s ago: executing program 1 (id=1740): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003f00000000003"], 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 4.202232905s ago: executing program 2 (id=1741): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000001c0)=@req3, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x80000000, @link='syz1\x00'}}}}, 0x68}}, 0x0) 4.201559505s ago: executing program 3 (id=1742): syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0xd7, 0xdd, 0xa4, 0x10, 0x1189, 0x893, 0x736, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x0, 0x0, 0x6e, 0x2, 0xc0}}, {{0x9, 0x4, 0x68, 0x0, 0x1, 0x5, 0x3e, 0x53, 0x0, [], [{}]}}]}}]}}, 0x0) 4.200445295s ago: executing program 4 (id=1743): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x14103e, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ftruncate(r0, 0x20cf01) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000001100)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0xffffffff, 0x2, 0x81, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xb, 0x0, 0xffffffff, 0x1501, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_es_find_extent_range_exit\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) timerfd_settime(r1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) bind$bt_l2cap(r6, &(0x7f0000000300)={0x1f, 0x0, @none}, 0xe) listen(r6, 0x0) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) read$FUSE(r4, &(0x7f0000008580)={0x2020}, 0x2020) 4.171189218s ago: executing program 2 (id=1744): socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x54, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="278d10637d2d", {0xc}, @value}, 0x0, 0x0, @default, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x56}, 0x20) waitid(0x1, 0x0, &(0x7f0000001300), 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) 2.243274496s ago: executing program 1 (id=1745): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0e000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850800"/72], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x3, 0x431, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r5, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) statfs(&(0x7f0000000000)='./file0\x00', 0x0) r6 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000bed264d92839e8d579940c41e7de08e2000000000000000000000061127c00000000009500000000000000d94b9b5e906813decfdc6bc6ef3767d701000000000000008bff737116e102500bb168ceb095a1eb9b"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000080)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c}, 0x1c}}, 0x0) 2.241957436s ago: executing program 2 (id=1746): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)}], 0x1}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.241491976s ago: executing program 3 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.240140246s ago: executing program 4 (id=1748): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 2.207859109s ago: executing program 2 (id=1749): creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(0x0, 0x14103e, 0x0) ftruncate(r0, 0x2008002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6017010000282b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa87000000000000000000020000000000000000000018907804000000000000000000000020000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fchmodat(r4, &(0x7f0000000140)='./file1\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 86.782153ms ago: executing program 1 (id=1750): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000580)={0x50}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x180c00, 0x0) 85.183523ms ago: executing program 2 (id=1751): socket$inet6(0xa, 0x0, 0xfffffff9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$inet(0x2, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'veth1_macvtap\x00'}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000000140)="17000000020001000003be8c5ee176889600330002956019fd6ee17e03000a0002000098fc58d90a00bb6a880000d6c802000037c0274f5233e4aa37f5e02bdba67e06000000e28900000200df0181c8d0bae99dfde06a0755045f3973a803005f1efcd5e6236bd971a54d6f477050956981d7198a02000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc06ea1d003901000000000000ea00000000000000", 0xef) r10 = dup(r8) write$FUSE_INIT(r10, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x10, &(0x7f00000043c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_9p2000}, {@mmap}, {@cache_mmap}, {@privport}, {@aname={'aname', 0x3d, '@#@'}}, {@access_any}, {@cache_none}, {@cache_mmap}, {@dfltgid}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'mounts\x00'}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@euid_gt={'euid>', r6}}, {@dont_hash}, {@dont_appraise}], 0x6b}}) syz_fuse_handle_req(r4, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r4, &(0x7f0000007100)={0x2020}, 0x941f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='sys_exit\x00', r2}, 0x10) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 84.377583ms ago: executing program 3 (id=1752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x520, 0x3d8, 0x0, 0x1c0, 0x3d8, 0x1c0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@private0}}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00', [], [], 'batadv_slave_1\x00', 'lo\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @dev, [], [], 'veth1_macvtap\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xee00, r3) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 1 (id=1753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) kernel console output (not intermixed with test programs): led probing parameters: -71 [ 205.849362][ T20] uclogic: probe of 0003:256C:006D.0021 failed with error -71 [ 205.866317][ T20] usb 5-1: USB disconnect, device number 19 [ 205.874800][ T4517] loop2: detected capacity change from 0 to 16 [ 205.890824][ T4517] erofs: (device loop2): mounted with root inode @ nid 36. [ 205.937582][ T432] tipc: Disabling bearer [ 205.942806][ T432] tipc: Left network mode [ 205.957664][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.964641][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.987381][ T4518] device bridge_slave_0 entered promiscuous mode [ 205.993762][ T4523] loop2: detected capacity change from 0 to 512 [ 206.006702][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.035707][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.043016][ T4518] device bridge_slave_1 entered promiscuous mode [ 206.106820][ T4523] syz.2.1304[4523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.106889][ T4523] syz.2.1304[4523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.177931][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.195897][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.202976][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.209797][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.248391][ T4537] ------------[ cut here ]------------ [ 206.253722][ T30] audit: type=1400 audit(1721947823.750:840): avc: denied { load_policy } for pid=4536 comm="syz.4.1310" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 206.275543][ T4537] WARNING: CPU: 1 PID: 4537 at mm/vmalloc.c:3018 __vmalloc_node_range+0x7ca/0x8d0 [ 206.284715][ T4537] Modules linked in: [ 206.291103][ T4537] CPU: 1 PID: 4537 Comm: syz.4.1310 Not tainted 5.15.151-syzkaller-00059-g5356d2f17edf #0 [ 206.307535][ T4537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 206.317856][ T4537] RIP: 0010:__vmalloc_node_range+0x7ca/0x8d0 [ 206.323697][ T4537] Code: 89 d8 48 81 c4 88 00 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a7 2b c4 ff eb e2 e8 a0 2b c4 ff e9 18 fd ff ff e8 96 2b c4 ff <0f> 0b eb cf e8 8d 2b c4 ff 4c 89 f7 e8 25 eb ff ff eb c0 89 d9 80 [ 206.352761][ T4537] RSP: 0018:ffffc90000c27a88 EFLAGS: 00010283 [ 206.380689][ T4537] RAX: ffffffff81ac153a RBX: 0000000000000000 RCX: 0000000000040000 [ 206.457755][ T4537] RDX: ffffc90002ff3000 RSI: 00000000000003b2 RDI: 00000000000003b3 [ 206.465650][ T4537] RBP: ffffc90000c27b38 R08: ffffffff81ac0daa R09: 8000000000000163 [ 206.473406][ T4537] R10: fffff52000184e64 R11: dffffc0000000001 R12: 0000000000000001 [ 206.481520][ T4537] R13: 0000000000000000 R14: ffffe8ffffffffff R15: ffffc90000000000 [ 206.489393][ T4537] FS: 00007f1a1a8dd6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 206.498348][ T4537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.504760][ T4537] CR2: 0000000020000000 CR3: 0000000118d3c000 CR4: 00000000003506b0 [ 206.512609][ T4537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.520415][ T4537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.523386][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.528197][ T4537] Call Trace: [ 206.528205][ T4537] [ 206.528213][ T4537] ? show_regs+0x58/0x60 [ 206.545344][ T4537] ? __warn+0x160/0x2f0 [ 206.549377][ T4537] ? __vmalloc_node_range+0x7ca/0x8d0 [ 206.549643][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.554520][ T4537] ? report_bug+0x3d9/0x5b0 [ 206.554545][ T4537] ? __vmalloc_node_range+0x7ca/0x8d0 [ 206.571008][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.571174][ T4537] ? handle_bug+0x41/0x70 [ 206.581967][ T4537] ? exc_invalid_op+0x1b/0x50 [ 206.590982][ T4537] ? asm_exc_invalid_op+0x1b/0x20 [ 206.597740][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.610688][ T4537] ? __vmalloc_node_range+0x3a/0x8d0 [ 206.616603][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.623433][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.630651][ T4537] ? __vmalloc_node_range+0x7ca/0x8d0 [ 206.636494][ T4537] ? __vmalloc_node_range+0x7ca/0x8d0 [ 206.641725][ T4537] ? __vmalloc_node_range+0x7ca/0x8d0 [ 206.647013][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.654889][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.661735][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.668870][ T4537] ? avc_has_perm_noaudit+0x430/0x430 [ 206.674062][ T4537] ? sel_write_load+0x282/0x580 [ 206.678830][ T4537] vmalloc+0x78/0x90 [ 206.682478][ T4537] ? sel_write_load+0x282/0x580 [ 206.687204][ T4537] sel_write_load+0x282/0x580 [ 206.691695][ T4537] ? avc_policy_seqno+0x1b/0x70 [ 206.696731][ T4537] ? sel_make_dir+0x270/0x270 [ 206.707034][ T4537] ? fsnotify_perm+0x6a/0x5d0 [ 206.711535][ T4537] ? security_file_permission+0x86/0xb0 [ 206.717379][ T4537] ? sel_make_dir+0x270/0x270 [ 206.721914][ T4537] vfs_write+0x406/0x1110 [ 206.727072][ T4537] ? kmem_cache_free+0x116/0x2e0 [ 206.731837][ T4537] ? file_end_write+0x1c0/0x1c0 [ 206.737064][ T4537] ? __kasan_check_write+0x14/0x20 [ 206.742010][ T4537] ? mutex_lock+0xb6/0x1e0 [ 206.746345][ T4537] ? wait_for_completion_killable_timeout+0x10/0x10 [ 206.752752][ T4537] ? __fdget_pos+0x2e7/0x3a0 [ 206.757527][ T4537] ? ksys_write+0x77/0x2c0 [ 206.761774][ T4537] ksys_write+0x199/0x2c0 [ 206.766093][ T4537] ? __ia32_sys_read+0x90/0x90 [ 206.770664][ T4537] ? __kasan_check_read+0x11/0x20 [ 206.775586][ T4537] __x64_sys_write+0x7b/0x90 [ 206.780045][ T4537] do_syscall_64+0x3d/0xb0 [ 206.784286][ T4537] ? sysvec_call_function_single+0x52/0xb0 [ 206.789974][ T4537] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 206.796420][ T4537] RIP: 0033:0x7f1a1bc5d299 [ 206.800836][ T4537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.801105][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.820287][ T4537] RSP: 002b:00007f1a1a8dd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 206.820311][ T4537] RAX: ffffffffffffffda RBX: 00007f1a1bdebf80 RCX: 00007f1a1bc5d299 [ 206.820325][ T4537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 206.820336][ T4537] RBP: 00007f1a1bcca8e6 R08: 0000000000000000 R09: 0000000000000000 [ 206.820349][ T4537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.868058][ T4537] R13: 000000000000000b R14: 00007f1a1bdebf80 R15: 00007ffcf49472d8 [ 206.876272][ T4537] [ 206.878437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.879101][ T4537] ---[ end trace f794f1afb829204e ]--- [ 206.902506][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.920772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.995971][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.002949][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.030001][ T4534] device bridge_slave_0 entered promiscuous mode [ 207.045647][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.054208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.087205][ T4518] device veth0_vlan entered promiscuous mode [ 207.095297][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.102816][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.112011][ T4534] device bridge_slave_1 entered promiscuous mode [ 207.169551][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.177360][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.722786][ T4566] loop2: detected capacity change from 0 to 256 [ 207.749126][ T4518] device veth1_macvtap entered promiscuous mode [ 207.755825][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.763682][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.770963][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.779418][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.781037][ T4566] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 207.787524][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.805883][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.815419][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.823619][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.830468][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.842932][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.853355][ T4569] loop4: detected capacity change from 0 to 128 [ 207.895236][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.903502][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.911917][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.919923][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.927479][ T4561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1316'. [ 207.945405][ T432] device bridge_slave_1 left promiscuous mode [ 207.951451][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.959044][ T432] device bridge_slave_0 left promiscuous mode [ 208.141812][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.223694][ T432] device veth1_macvtap left promiscuous mode [ 208.366552][ T432] device veth0_vlan left promiscuous mode [ 208.396004][ T4575] loop1: detected capacity change from 0 to 512 [ 208.446087][ T4575] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1320: Invalid inode bitmap blk 4 in block_group 0 [ 208.462860][ T4575] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 208.483478][ T4575] syz.1.1320[4575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.483545][ T4575] syz.1.1320[4575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.588444][ T4534] device veth0_vlan entered promiscuous mode [ 208.609339][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.617056][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.628447][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.637437][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.653699][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.806392][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.848853][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.857381][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.865374][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.873498][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.881539][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.900413][ T30] audit: type=1400 audit(1721947826.400:841): avc: denied { ioctl } for pid=4589 comm="syz.4.1323" path="socket:[42311]" dev="sockfs" ino=42311 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 208.901386][ T4590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1323'. [ 208.928145][ T4534] device veth1_macvtap entered promiscuous mode [ 208.940987][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.948977][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.957496][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.970879][ T4592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1323'. [ 208.990251][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.998257][ T30] audit: type=1400 audit(1721947826.510:842): avc: denied { ioctl } for pid=4589 comm="syz.4.1323" path="socket:[42315]" dev="sockfs" ino=42315 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 209.024577][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.045728][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.064385][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.098647][ T4602] loop2: detected capacity change from 0 to 1024 [ 209.179440][ T30] audit: type=1400 audit(1721947826.680:843): avc: denied { getopt } for pid=4599 comm="syz.4.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 209.371978][ T4627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1336'. [ 209.390436][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'. [ 209.465999][ T30] audit: type=1400 audit(1721947826.970:844): avc: denied { execute } for pid=4632 comm="syz.0.1338" path="/6/file0/bus" dev="ramfs" ino=42436 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 209.531165][ T4635] loop3: detected capacity change from 0 to 512 [ 209.538986][ T30] audit: type=1400 audit(1721947827.000:845): avc: denied { unmount } for pid=4518 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 209.568970][ T4635] EXT4-fs (loop3): Ignoring removed orlov option [ 209.579123][ T4635] EXT4-fs (loop3): Test dummy encryption mode enabled [ 209.585906][ T315] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 209.603362][ T4635] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 209.659135][ T4635] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002] [ 209.686815][ T4635] System zones: 1-12 [ 209.698267][ T4635] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1340: casefold flag without casefold feature [ 209.714077][ T4635] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1340: missing EA_INODE flag [ 209.728166][ T4635] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1340: error while reading EA inode 12 err=-117 [ 209.741674][ T4635] EXT4-fs (loop3): 1 orphan inode deleted [ 209.747432][ T4635] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none. [ 209.786646][ T4635] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 209.829476][ T4655] loop1: detected capacity change from 0 to 512 [ 209.883796][ T4655] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1348: Invalid inode bitmap blk 4 in block_group 0 [ 209.897526][ T432] device bridge_slave_1 left promiscuous mode [ 209.915682][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.948235][ T4655] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 209.969448][ T432] device bridge_slave_0 left promiscuous mode [ 209.974341][ T4655] syz.1.1348[4655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.975370][ T4655] syz.1.1348[4655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.987444][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.006858][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.018119][ T30] audit: type=1326 audit(1721947827.520:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.4.1353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc5d299 code=0x0 [ 210.041111][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.050846][ T315] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.064115][ T315] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.073121][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.084820][ T315] usb 3-1: config 0 descriptor?? [ 210.090439][ T432] device veth1_macvtap left promiscuous mode [ 210.096627][ T432] device veth0_vlan left promiscuous mode [ 210.158568][ T4677] overlayfs: missing 'lowerdir' [ 210.422488][ T20] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 210.685627][ T315] usbhid 3-1:0.0: can't add hid device: -71 [ 210.691405][ T315] usbhid: probe of 3-1:0.0 failed with error -71 [ 210.698500][ T315] usb 3-1: USB disconnect, device number 26 [ 210.805643][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.827726][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.839409][ T4682] loop1: detected capacity change from 0 to 2048 [ 210.845732][ T20] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 210.854705][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.863684][ T20] usb 1-1: config 0 descriptor?? [ 210.906384][ T30] audit: type=1326 audit(1721947828.410:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.1358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc5d299 code=0x0 [ 210.930539][ T4682] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 211.076181][ T30] audit: type=1326 audit(1721947828.580:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4696 comm="syz.1.1362" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f533f062299 code=0x0 [ 211.820342][ T4715] loop4: detected capacity change from 0 to 512 [ 211.910169][ T4715] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1367: Invalid inode bitmap blk 4 in block_group 0 [ 211.925755][ T4715] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 211.963168][ T4722] loop1: detected capacity change from 0 to 128 [ 211.974304][ T4715] syz.4.1367[4715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.974355][ T4715] syz.4.1367[4715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.034877][ T30] audit: type=1400 audit(1721947829.530:849): avc: denied { mounton } for pid=4721 comm="syz.1.1369" path="/18/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 212.103278][ T4724] loop2: detected capacity change from 0 to 2048 [ 212.426546][ T4727] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1369'. [ 212.821669][ T4731] loop2: detected capacity change from 0 to 1024 [ 213.665574][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 213.671584][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 213.684975][ T20] usb 1-1: USB disconnect, device number 26 [ 213.691326][ T30] audit: type=1326 audit(1721947831.200:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4742 comm="syz.0.1376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x0 [ 213.720863][ T4747] loop1: detected capacity change from 0 to 512 [ 213.766125][ T4747] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 213.812806][ T4747] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 213.814611][ T4754] loop4: detected capacity change from 0 to 128 [ 213.820598][ T4747] System zones: 0-2, 18-18, 34-34 [ 213.832571][ T4747] EXT4-fs (loop1): 1 orphan inode deleted [ 213.838387][ T4747] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x000000000000000a,nolazytime,noquota,jqfmt=vfsold,minixdf,init_itable=0x0000000000000002,grpid,debug,,errors=continue. Quota mode: writeback. [ 213.861656][ T4747] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 214.033177][ T4762] loop2: detected capacity change from 0 to 512 [ 214.334191][ T30] audit: type=1326 audit(1721947831.830:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc5d299 code=0x7ffc0000 [ 214.360958][ T4766] loop4: detected capacity change from 0 to 512 [ 214.367500][ T30] audit: type=1326 audit(1721947831.860:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1a1bc5d299 code=0x7ffc0000 [ 214.390714][ T30] audit: type=1326 audit(1721947831.860:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a1bc5d2d3 code=0x7ffc0000 [ 214.413732][ T30] audit: type=1326 audit(1721947831.860:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1a1bc5be1f code=0x7ffc0000 [ 214.436737][ T30] audit: type=1326 audit(1721947831.860:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1a1bc5d327 code=0x7ffc0000 [ 214.459742][ T30] audit: type=1326 audit(1721947831.860:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a1bc5bcd0 code=0x7ffc0000 [ 214.490447][ T30] audit: type=1326 audit(1721947831.860:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a1bc5ce9b code=0x7ffc0000 [ 214.529237][ T4766] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.548810][ T30] audit: type=1326 audit(1721947831.870:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4765 comm="syz.4.1382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1a1bc5bfca code=0x7ffc0000 [ 214.581112][ T4766] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 214.604551][ T4766] EXT4-fs (loop4): 1 truncate cleaned up [ 214.614587][ T4766] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 214.785532][ T477] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 215.215770][ T477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.241393][ T477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.331355][ T477] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 215.539693][ T477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.549004][ T477] usb 2-1: config 0 descriptor?? [ 215.710412][ T4792] overlayfs: missing 'lowerdir' [ 215.734675][ T4770] loop0: detected capacity change from 0 to 131072 [ 215.786746][ T4770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.865770][ T4770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.129870][ T4796] loop2: detected capacity change from 0 to 131072 [ 217.160652][ T4796] F2FS-fs (loop2): Test dummy encryption mode enabled [ 217.185895][ T4796] F2FS-fs (loop2): invalid crc value [ 217.197406][ T4814] loop4: detected capacity change from 0 to 1024 [ 217.205900][ T4796] F2FS-fs (loop2): Invalid segment type: 16, segno: 21 [ 217.212726][ T4796] F2FS-fs (loop2): f2fs_commit_super fails to record errors:7, err:-30 [ 217.221684][ T4796] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 217.652850][ T477] usbhid 2-1:0.0: can't add hid device: -71 [ 217.670624][ T477] usbhid: probe of 2-1:0.0 failed with error -71 [ 217.685684][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 217.685725][ T30] audit: type=1326 audit(1721947835.130:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.751823][ T4826] loop1: detected capacity change from 0 to 512 [ 217.775407][ T603] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 217.782887][ T30] audit: type=1326 audit(1721947835.130:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.794050][ T477] usb 2-1: USB disconnect, device number 32 [ 217.806182][ T30] audit: type=1326 audit(1721947835.130:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.835353][ T30] audit: type=1326 audit(1721947835.130:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.866438][ T30] audit: type=1326 audit(1721947835.130:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.891644][ T30] audit: type=1326 audit(1721947835.130:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.916584][ T30] audit: type=1326 audit(1721947835.130:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.940720][ T30] audit: type=1326 audit(1721947835.130:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.964447][ T30] audit: type=1326 audit(1721947835.140:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 217.988922][ T30] audit: type=1326 audit(1721947835.140:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4817 comm="syz.0.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 218.073618][ T4826] EXT4-fs (loop1): Ignoring removed nobh option [ 218.080962][ T4826] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 218.093424][ T4826] EXT4-fs (loop1): 1 truncate cleaned up [ 218.098914][ T4826] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 218.168729][ T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.197634][ T4840] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1404'. [ 218.509799][ T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.520187][ T603] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.533000][ T603] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.541907][ T603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.550481][ T603] usb 5-1: config 0 descriptor?? [ 218.658417][ T4846] loop1: detected capacity change from 0 to 512 [ 218.688645][ T4846] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 218.717304][ T4846] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 218.725007][ T4846] System zones: 0-2, 18-18, 34-34 [ 218.731134][ T4846] EXT4-fs (loop1): 1 orphan inode deleted [ 218.736831][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x000000000000000a,nolazytime,noquota,jqfmt=vfsold,minixdf,init_itable=0x0000000000000002,grpid,debug,,errors=continue. Quota mode: writeback. [ 218.760095][ T4846] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff) [ 218.803605][ T26] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 218.844007][ T4853] loop2: detected capacity change from 0 to 2048 [ 219.185592][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.203616][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.222933][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.248592][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00 [ 219.265635][ T603] usbhid 5-1:0.0: can't add hid device: -71 [ 219.266136][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.272064][ T603] usbhid: probe of 5-1:0.0 failed with error -71 [ 219.287496][ T603] usb 5-1: USB disconnect, device number 20 [ 219.303103][ T26] usb 1-1: config 0 descriptor?? [ 219.539778][ T4856] loop2: detected capacity change from 0 to 131072 [ 219.682397][ T4856] F2FS-fs (loop2): Test dummy encryption mode enabled [ 219.714287][ T4856] F2FS-fs (loop2): invalid crc value [ 219.829082][ T4856] F2FS-fs (loop2): Invalid segment type: 16, segno: 21 [ 219.844109][ T4856] F2FS-fs (loop2): f2fs_commit_super fails to record errors:7, err:-30 [ 219.852354][ T4856] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 219.859083][ T26] wacom 0003:056A:00D5.0022: unknown main item tag 0x0 [ 219.869994][ T26] wacom 0003:056A:00D5.0022: item fetching failed at offset 4/7 [ 219.877734][ T26] wacom 0003:056A:00D5.0022: parse failed [ 219.883304][ T26] wacom: probe of 0003:056A:00D5.0022 failed with error -22 [ 220.063060][ T26] usb 1-1: USB disconnect, device number 27 [ 220.671888][ T4870] loop4: detected capacity change from 0 to 131072 [ 220.716686][ T4870] F2FS-fs (loop4): Test dummy encryption mode enabled [ 220.840839][ T4870] F2FS-fs (loop4): invalid crc value [ 220.982532][ T4870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 221.075564][ T4870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 221.234656][ T4899] loop2: detected capacity change from 0 to 128 [ 221.341852][ T4881] loop1: detected capacity change from 0 to 131072 [ 221.505968][ T4904] syz.0.1426[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.506043][ T4904] syz.0.1426[4904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.521850][ T4881] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.606106][ T4908] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1425'. [ 221.787579][ T4881] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 222.239211][ T4921] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1431'. [ 222.491198][ T4936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1436'. [ 222.523178][ T4940] syz.1.1438[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.523266][ T4940] syz.1.1438[4940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.614984][ T4948] loop1: detected capacity change from 0 to 1024 [ 222.773908][ T4950] syz.0.1443[4950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.773980][ T4950] syz.0.1443[4950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.796755][ T4950] syz.0.1443[4950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.825591][ T4950] syz.0.1443[4950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.101907][ T4969] syz.0.1450[4969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.114332][ T4969] syz.0.1450[4969] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.325671][ T4987] loop2: detected capacity change from 0 to 512 [ 223.668844][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 223.668859][ T30] audit: type=1400 audit(1721947841.170:941): avc: denied { write } for pid=4991 comm="syz.1.1460" path="socket:[43049]" dev="sockfs" ino=43049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.769988][ T30] audit: type=1326 audit(1721947841.240:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4994 comm="syz.4.1462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc5d299 code=0x0 [ 223.854687][ T5003] loop2: detected capacity change from 0 to 2048 [ 223.904789][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.919325][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.934343][ T5000] device bridge_slave_0 entered promiscuous mode [ 223.949211][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.963717][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.978650][ T5000] device bridge_slave_1 entered promiscuous mode [ 224.121932][ T5009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'. [ 224.238877][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.245840][ T5000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.252937][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.259745][ T5000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.328551][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.346312][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.353774][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.361363][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.387496][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.396023][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.402967][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.410614][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.419095][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.425960][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.443618][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.463639][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.481927][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.504613][ T5000] device veth0_vlan entered promiscuous mode [ 224.536000][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.543861][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.570426][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.584001][ T5020] loop2: detected capacity change from 0 to 1024 [ 224.584522][ T5000] device veth1_macvtap entered promiscuous mode [ 224.615562][ T5023] x_tables: unsorted underflow at hook 3 [ 224.632111][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.632155][ T5021] loop1: detected capacity change from 0 to 128 [ 224.667551][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.676638][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.761636][ T5021] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.775902][ T5033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1472'. [ 224.787397][ T5021] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 224.853157][ T30] audit: type=1326 audit(1721947842.350:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 224.934267][ T30] audit: type=1326 audit(1721947842.380:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 225.013004][ T5043] loop0: detected capacity change from 0 to 2048 [ 225.025845][ T30] audit: type=1326 audit(1721947842.380:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 225.091440][ T30] audit: type=1326 audit(1721947842.380:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 225.121803][ T30] audit: type=1326 audit(1721947842.380:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5035 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff247968299 code=0x7ffc0000 [ 225.145557][ T603] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 225.154303][ T5043] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.385542][ T603] usb 2-1: Using ep0 maxpacket: 8 [ 225.505605][ T603] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 225.515697][ T603] usb 2-1: config 179 has no interface number 0 [ 225.531480][ T603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 225.549189][ T603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 225.568033][ T603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.584733][ T319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 225.599615][ T603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 225.609798][ T319] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 225.622103][ T603] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 225.635454][ T319] EXT4-fs (loop0): This should not happen!! Data will be lost [ 225.635454][ T319] [ 225.645075][ T603] usb 2-1: config 179 interface 65 has no altsetting 0 [ 225.651929][ T319] EXT4-fs (loop0): Total free blocks count 0 [ 225.657852][ T603] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 225.666993][ T319] EXT4-fs (loop0): Free/Dirty block details [ 225.672725][ T319] EXT4-fs (loop0): free_blocks=2415919104 [ 225.678529][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.686459][ T319] EXT4-fs (loop0): dirty_blocks=8192 [ 225.705610][ T5021] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 225.713196][ T319] EXT4-fs (loop0): Block reservation details [ 225.723075][ T319] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 225.730432][ T603] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input24 [ 225.779106][ T30] audit: type=1400 audit(1721947843.280:948): avc: denied { write } for pid=5058 comm="syz.4.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 225.804725][ T319] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 225.826221][ T319] EXT4-fs (loop0): This should not happen!! Data will be lost [ 225.826221][ T319] [ 225.841737][ T5061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1485'. [ 225.911615][ T30] audit: type=1326 audit(1721947843.410:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc5d299 code=0x7ffc0000 [ 225.936477][ T30] audit: type=1326 audit(1721947843.410:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5062 comm="syz.4.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a1bc5d299 code=0x7ffc0000 [ 225.968341][ T5021] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz.1.1468: No space for directory leaf checksum. Please run e2fsck -D. [ 226.038808][ T603] usb 2-1: USB disconnect, device number 33 [ 226.055616][ T603] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 226.092522][ T5071] loop0: detected capacity change from 0 to 256 [ 226.149749][ T5078] loop4: detected capacity change from 0 to 1024 [ 226.607751][ T6] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 226.647961][ T5057] loop2: detected capacity change from 0 to 131072 [ 226.825941][ T4459] EXT4-fs error (device loop1): htree_dirblock_to_tree:1111: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=1012, inode=0, rec_len=12, size=1024 fake=0 [ 226.848960][ T4459] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 226.863582][ T4459] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 226.878496][ T4459] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 226.892831][ T4459] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 226.905901][ T4459] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 226.919819][ T4459] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 226.936343][ T4459] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 226.950655][ T4459] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #11: comm syz-executor: Directory block failed checksum [ 226.963208][ T4459] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0 [ 226.980994][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.997803][ T603] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 227.015020][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.108206][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 227.117285][ T6] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 227.125459][ T6] usb 4-1: Product: syz [ 227.134725][ T6] usb 4-1: config 0 descriptor?? [ 227.315613][ T477] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 227.551498][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.558644][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.565935][ T5091] device bridge_slave_0 entered promiscuous mode [ 227.572760][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.579774][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.587071][ T5091] device bridge_slave_1 entered promiscuous mode [ 227.595591][ T603] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 227.603504][ T603] usb 3-1: config 0 has no interface number 0 [ 227.670758][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.677610][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.684737][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.691500][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.706600][ T6] konepure 0003:1E7D:2DB4.0023: unknown main item tag 0x0 [ 227.714571][ T6] konepure 0003:1E7D:2DB4.0023: collection stack underflow [ 227.721268][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.721707][ T6] konepure 0003:1E7D:2DB4.0023: item 0 2 0 12 parsing failed [ 227.736074][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.736262][ T6] konepure 0003:1E7D:2DB4.0023: parse failed [ 227.748866][ T6] konepure: probe of 0003:1E7D:2DB4.0023 failed with error -22 [ 227.748908][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.775604][ T603] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=56.f7 [ 227.784577][ T603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.793220][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.801373][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.805668][ T477] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 227.808222][ T529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.808918][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.822392][ T477] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.827367][ T603] usb 3-1: Product: syz [ 227.835415][ T477] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 227.845276][ T529] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.868538][ T529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.910139][ T603] usb 3-1: Manufacturer: syz [ 227.918093][ T603] usb 3-1: SerialNumber: syz [ 227.924002][ T603] usb 3-1: config 0 descriptor?? [ 227.933113][ T312] usb 4-1: USB disconnect, device number 27 [ 227.939215][ T319] device bridge_slave_1 left promiscuous mode [ 227.945137][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.960198][ T319] device bridge_slave_0 left promiscuous mode [ 227.968848][ T603] usb_ehset_test: probe of 3-1:0.34 failed with error -32 [ 227.983453][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.005775][ T319] device veth1_macvtap left promiscuous mode [ 228.011623][ T319] device veth0_vlan left promiscuous mode [ 228.055657][ T477] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 228.064932][ T477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.072799][ T477] usb 1-1: Product: syz [ 228.077741][ T477] usb 1-1: Manufacturer: syz [ 228.082185][ T477] usb 1-1: SerialNumber: syz [ 228.090955][ T477] usb 1-1: config 0 descriptor?? [ 228.136046][ T477] usb-storage 1-1:0.0: USB Mass Storage device detected [ 228.157063][ T477] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 228.239205][ T529] usb 3-1: USB disconnect, device number 27 [ 228.246776][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.254532][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.273637][ T5091] device veth0_vlan entered promiscuous mode [ 228.304312][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 228.313038][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 228.322059][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 228.329950][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 228.343795][ T5091] device veth1_macvtap entered promiscuous mode [ 228.358073][ T338] usb 1-1: USB disconnect, device number 28 [ 228.366864][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 228.374095][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 228.382124][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 228.390206][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 228.398644][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 228.425276][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.433573][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.442286][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.450475][ T603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.588531][ T5098] loop4: detected capacity change from 0 to 131072 [ 228.608074][ T5117] loop1: detected capacity change from 0 to 256 [ 228.743078][ T5098] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.074690][ T5098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 229.117649][ T5121] loop3: detected capacity change from 0 to 40427 [ 229.145123][ T5121] F2FS-fs (loop3): Unrecognized mount option "background_" or missing value [ 229.221948][ T5139] loop2: detected capacity change from 0 to 512 [ 230.095763][ T5169] loop3: detected capacity change from 0 to 256 [ 230.123268][ T5173] loop1: detected capacity change from 0 to 256 [ 230.126492][ T5175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1527'. [ 230.146510][ T5169] exfat: Deprecated parameter 'namecase' [ 230.189572][ T5169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 231.513419][ T5195] loop1: detected capacity change from 0 to 512 [ 231.525369][ T5193] loop2: detected capacity change from 0 to 1024 [ 231.533542][ T5195] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 231.576713][ T5195] EXT4-fs (loop1): 1 orphan inode deleted [ 231.582262][ T5195] EXT4-fs (loop1): 1 truncate cleaned up [ 231.595606][ T5195] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 231.709795][ T5197] loop4: detected capacity change from 0 to 40427 [ 231.734241][ T5195] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 231.769038][ T5197] F2FS-fs (loop4): Unrecognized mount option "background_" or missing value [ 231.802132][ T5195] EXT4-fs (loop1): Remounting filesystem read-only [ 231.879196][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.904830][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.931706][ T5201] device bridge_slave_0 entered promiscuous mode [ 231.940086][ T5209] loop1: detected capacity change from 0 to 2048 [ 231.971975][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.980394][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.993071][ T5201] device bridge_slave_1 entered promiscuous mode [ 232.018317][ T5209] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 232.621118][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 232.621136][ T30] audit: type=1400 audit(1721947849.820:978): avc: denied { mounton } for pid=5208 comm="syz.1.1540" path="/10/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.679946][ T432] device bridge_slave_1 left promiscuous mode [ 232.702248][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.727090][ T432] device bridge_slave_0 left promiscuous mode [ 233.028438][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.097842][ T432] device veth1_macvtap left promiscuous mode [ 233.103778][ T432] device veth0_vlan left promiscuous mode [ 233.236413][ T477] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 233.543687][ T5235] loop4: detected capacity change from 0 to 256 [ 233.586980][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.595785][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.606099][ T5235] exfat: Deprecated parameter 'namecase' [ 233.615578][ T477] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 233.617519][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.628700][ T477] usb 3-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 233.650847][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.662185][ T5235] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 233.664494][ T476] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.680852][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.712254][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.725861][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.744673][ T476] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.751544][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.783740][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.798908][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.815888][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.831925][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.845598][ T477] usb 3-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 233.846091][ T476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.854552][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.870374][ T477] usb 3-1: Product: syz [ 233.874372][ T477] usb 3-1: Manufacturer: syz [ 233.881948][ T477] usb 3-1: SerialNumber: syz [ 233.888819][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 233.889436][ T477] usb 3-1: config 0 descriptor?? [ 233.900189][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 233.917987][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 233.964334][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 233.987003][ T5201] device veth0_vlan entered promiscuous mode [ 234.017941][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 234.025305][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 234.059707][ T5201] device veth1_macvtap entered promiscuous mode [ 234.076927][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.084876][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.103020][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.133872][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.145856][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.163372][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.180044][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.276888][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.292209][ T5239] loop1: detected capacity change from 0 to 40427 [ 234.299611][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.318669][ T30] audit: type=1400 audit(1721947851.820:979): avc: denied { nlmsg_read } for pid=5243 comm="syz.3.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 234.321743][ T5239] F2FS-fs (loop1): invalid crc value [ 234.353299][ T5241] device bridge_slave_0 entered promiscuous mode [ 234.365355][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.375514][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.383654][ T5239] F2FS-fs (loop1): Found nat_bits in checkpoint [ 234.393095][ T5241] device bridge_slave_1 entered promiscuous mode [ 234.429839][ T5239] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 234.455929][ T5239] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 234.473495][ T5239] attempt to access beyond end of device [ 234.473495][ T5239] loop1: rw=2049, want=45112, limit=40427 [ 234.485712][ T5239] attempt to access beyond end of device [ 234.485712][ T5239] loop1: rw=0, want=45104, limit=40427 [ 234.497529][ T5238] attempt to access beyond end of device [ 234.497529][ T5238] loop1: rw=0, want=45104, limit=40427 [ 234.508736][ T5238] attempt to access beyond end of device [ 234.508736][ T5238] loop1: rw=0, want=45104, limit=40427 [ 234.527699][ T5238] attempt to access beyond end of device [ 234.527699][ T5238] loop1: rw=0, want=45104, limit=40427 [ 234.538926][ T5256] loop0: detected capacity change from 0 to 2048 [ 234.545126][ T5238] attempt to access beyond end of device [ 234.545126][ T5238] loop1: rw=0, want=45104, limit=40427 [ 234.556233][ T5239] attempt to access beyond end of device [ 234.556233][ T5239] loop1: rw=0, want=45104, limit=40427 [ 234.567232][ T5239] attempt to access beyond end of device [ 234.567232][ T5239] loop1: rw=0, want=45104, limit=40427 [ 234.578250][ T5239] attempt to access beyond end of device [ 234.578250][ T5239] loop1: rw=0, want=45104, limit=40427 [ 234.589243][ T5239] attempt to access beyond end of device [ 234.589243][ T5239] loop1: rw=0, want=45104, limit=40427 [ 234.623713][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.630589][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.637672][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.644437][ T5241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.666418][ T5256] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.686649][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.761185][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.817928][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.828473][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.124260][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.136532][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.156761][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.163605][ T529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.192404][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.200730][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.208914][ T529] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.215770][ T529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.248760][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.256625][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.264385][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.272360][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.280753][ T432] device bridge_slave_1 left promiscuous mode [ 235.287250][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.294630][ T432] device bridge_slave_0 left promiscuous mode [ 235.302161][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.314809][ T432] device veth1_macvtap left promiscuous mode [ 235.320851][ T432] device veth0_vlan left promiscuous mode [ 235.687672][ T39] usb 3-1: USB disconnect, device number 28 [ 235.800559][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 235.816846][ T5277] loop0: detected capacity change from 0 to 512 [ 235.826800][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.852444][ T5241] device veth0_vlan entered promiscuous mode [ 235.865232][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 235.875943][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.891870][ T5241] device veth1_macvtap entered promiscuous mode [ 235.903188][ T5277] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.1556: invalid block [ 235.930881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.938528][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.946195][ T5277] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1556: Invalid block bitmap block 0 in block_group 0 [ 235.960360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 235.968492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.976742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.992088][ T5277] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 236.015388][ T5276] loop2: detected capacity change from 0 to 40427 [ 236.023232][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.031783][ T5277] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1556: attempt to clear invalid blocks 983261 len 1 [ 236.045278][ T5277] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1556: invalid indirect mapped block 2683928664 (level 0) [ 236.059276][ T5277] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.1556: Invalid inode table block 0 in block_group 0 [ 236.071831][ T5277] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 236.083076][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.098613][ T5277] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 236.113382][ T5277] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.1556: Invalid inode table block 0 in block_group 0 [ 236.147076][ T5277] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 236.166350][ T5277] EXT4-fs error (device loop0): ext4_truncate:4292: inode #13: comm syz.0.1556: mark_inode_dirty error [ 236.168610][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.186008][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 236.207682][ T5277] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 236.209625][ T5286] loop3: detected capacity change from 0 to 256 [ 236.222883][ T5277] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.1556: Invalid inode table block 0 in block_group 0 [ 236.338791][ T5277] EXT4-fs (loop0): 1 truncate cleaned up [ 236.352964][ T5277] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 236.646882][ T30] audit: type=1400 audit(1721947854.150:980): avc: denied { append } for pid=5296 comm="syz.2.1563" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 236.652484][ T5298] loop0: detected capacity change from 0 to 256 [ 236.676873][ T529] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 236.676901][ T30] audit: type=1400 audit(1721947854.180:981): avc: denied { open } for pid=5296 comm="syz.2.1563" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 236.713553][ T5301] loop2: detected capacity change from 0 to 256 [ 236.733614][ T5298] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 236.756022][ T30] audit: type=1400 audit(1721947854.260:982): avc: denied { rmdir } for pid=4518 comm="syz-executor" name=".index" dev="loop0" ino=1048830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.778739][ T5301] exfat: Deprecated parameter 'utf8' [ 236.783872][ T5301] exfat: Deprecated parameter 'namecase' [ 236.794104][ T5301] exfat: Deprecated parameter 'utf8' [ 236.799830][ T5301] exfat: Deprecated parameter 'namecase' [ 236.908430][ T5301] /dev/loop2: Can't open blockdev [ 237.536362][ T5311] loop1: detected capacity change from 0 to 512 [ 237.565727][ T529] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 237.583860][ T529] usb 5-1: config 0 has no interface number 0 [ 237.610062][ T5311] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 237.627084][ T5311] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff) [ 237.755785][ T529] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=56.f7 [ 237.774788][ T529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.798560][ T5332] loop1: detected capacity change from 0 to 256 [ 237.811729][ T529] usb 5-1: Product: syz [ 237.816375][ T5324] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.825527][ T529] usb 5-1: Manufacturer: syz [ 237.829627][ T5324] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.837240][ T5324] device bridge_slave_0 entered promiscuous mode [ 237.844864][ T5324] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.850888][ T5335] loop3: detected capacity change from 0 to 128 [ 237.851897][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.859707][ T529] usb 5-1: SerialNumber: syz [ 237.865081][ T5324] device bridge_slave_1 entered promiscuous mode [ 237.870777][ T5332] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 237.910520][ T529] usb 5-1: config 0 descriptor?? [ 237.961308][ T529] usb_ehset_test: probe of 5-1:0.34 failed with error -32 [ 238.066080][ T432] device bridge_slave_1 left promiscuous mode [ 238.076271][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.084257][ T432] device bridge_slave_0 left promiscuous mode [ 238.093165][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.104878][ T432] device veth1_macvtap left promiscuous mode [ 238.110803][ T432] device veth0_vlan left promiscuous mode [ 238.350048][ T39] usb 5-1: USB disconnect, device number 21 [ 238.469469][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.477170][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 238.486036][ T312] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 238.500422][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.509101][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.517259][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.524125][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.531542][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.540275][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.548547][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.555391][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.577868][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.585370][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.593519][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.615628][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 238.634672][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.642250][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.649603][ T5342] device bridge_slave_0 entered promiscuous mode [ 238.658057][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 238.667265][ T5324] device veth0_vlan entered promiscuous mode [ 238.675541][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 238.683021][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 238.706694][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.713545][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.724640][ T5342] device bridge_slave_1 entered promiscuous mode [ 238.736500][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 238.751800][ T5324] device veth1_macvtap entered promiscuous mode [ 238.811442][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.885127][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.915594][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.935860][ T312] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.943114][ T5357] loop4: detected capacity change from 0 to 512 [ 238.944570][ T312] usb 3-1: config 1 has no interface number 0 [ 238.975837][ T312] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.280011][ T5357] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 239.316443][ T5357] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff) [ 239.375914][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.383514][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.395626][ T312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.408094][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.416323][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.423056][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.426002][ T529] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.438793][ T529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.441220][ T312] usb 3-1: Product: syz [ 239.446963][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.462829][ T312] usb 3-1: Manufacturer: syz [ 239.463878][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.472389][ T312] usb 3-1: SerialNumber: syz [ 239.479625][ T529] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.486481][ T529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.500569][ T30] audit: type=1400 audit(1721947857.000:983): avc: denied { lock } for pid=5364 comm="syz.4.1590" path="socket:[45593]" dev="sockfs" ino=45593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 239.534824][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 239.542211][ T312] usb 3-1: selecting invalid altsetting 1 [ 239.562442][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.570159][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.579307][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.589249][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.599141][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.620422][ T5355] loop0: detected capacity change from 0 to 40427 [ 239.631814][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.640436][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.655662][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.663652][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.674676][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.684563][ T5342] device veth0_vlan entered promiscuous mode [ 239.715789][ T5342] device veth1_macvtap entered promiscuous mode [ 239.722503][ T529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.739425][ T5355] F2FS-fs (loop0): Found nat_bits in checkpoint [ 239.747602][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 239.766156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 239.786705][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 239.794875][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 239.820539][ T5355] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 239.856320][ T432] device bridge_slave_1 left promiscuous mode [ 239.865635][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.875933][ T432] device bridge_slave_0 left promiscuous mode [ 239.881813][ T30] audit: type=1400 audit(1721947857.380:984): avc: denied { lock } for pid=5354 comm="syz.0.1574" path="/0/file2/file0" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 239.908080][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.910269][ T5324] handle_bad_sector: 1 callbacks suppressed [ 239.910285][ T5324] attempt to access beyond end of device [ 239.910285][ T5324] loop0: rw=2049, want=45112, limit=40427 [ 239.933286][ T432] device veth1_macvtap left promiscuous mode [ 239.939811][ T432] device veth0_vlan left promiscuous mode [ 239.975598][ T529] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 239.975649][ T312] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 239.995605][ T312] cdc_ncm 3-1:1.1: bind() failure [ 240.016363][ T312] usb 3-1: USB disconnect, device number 29 [ 240.031055][ T5385] loop1: detected capacity change from 0 to 4096 [ 240.123590][ T5385] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.283944][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.291091][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.326985][ T5394] loop0: detected capacity change from 0 to 128 [ 240.335670][ T529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.347520][ T529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.357362][ T529] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 240.366744][ T529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.377342][ T529] usb 5-1: config 0 descriptor?? [ 240.383491][ T30] audit: type=1326 audit(1721947857.880:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.432153][ T30] audit: type=1326 audit(1721947857.890:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.478693][ T30] audit: type=1326 audit(1721947857.920:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.517351][ T30] audit: type=1326 audit(1721947857.920:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.550023][ T5400] loop1: detected capacity change from 0 to 512 [ 240.563135][ T5402] loop2: detected capacity change from 0 to 256 [ 240.569238][ T30] audit: type=1326 audit(1721947857.920:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.569268][ T30] audit: type=1326 audit(1721947857.930:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.569292][ T30] audit: type=1326 audit(1721947857.940:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.640435][ T5400] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.649835][ T30] audit: type=1326 audit(1721947857.940:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.3.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 240.693996][ T5400] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 240.715263][ T5400] EXT4-fs (loop1): 1 truncate cleaned up [ 240.730973][ T5400] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 240.830046][ T5370] loop4: detected capacity change from 0 to 512 [ 240.878873][ T5415] loop3: detected capacity change from 0 to 512 [ 240.928226][ T5370] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.1592: casefold flag without casefold feature [ 240.957022][ T5370] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #3: comm syz.4.1592: corrupted inode contents [ 240.985931][ T5370] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #3: comm syz.4.1592: mark_inode_dirty error [ 241.094629][ T5370] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1592: bg 0: block 64: padding at end of block bitmap is not set [ 241.126944][ T5370] EXT4-fs (loop4): 1 orphan inode deleted [ 241.265604][ T5370] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.318913][ T5370] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 241.338971][ T5415] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.1603: invalid block [ 241.496276][ T529] logitech-hidpp-device 0003:046D:C086.0024: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 241.519312][ T5415] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1603: Invalid block bitmap block 0 in block_group 0 [ 241.561628][ T5415] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 241.597988][ T5430] loop1: detected capacity change from 0 to 256 [ 241.610274][ T5417] loop2: detected capacity change from 0 to 40427 [ 241.622540][ T5415] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1603: attempt to clear invalid blocks 983261 len 1 [ 241.641870][ T5417] syz.2.1605[5417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.641944][ T5417] syz.2.1605[5417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.655107][ T5417] overlayfs: failed to resolve './file0': -2 [ 241.659010][ T5430] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 241.688118][ T529] usb 5-1: USB disconnect, device number 22 [ 241.694132][ T5415] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1603: invalid indirect mapped block 2683928664 (level 0) [ 241.747666][ T5415] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.1603: Invalid inode table block 0 in block_group 0 [ 241.771849][ T5432] device syzkaller0 entered promiscuous mode [ 241.777880][ T5415] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 241.795796][ T5415] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 241.812435][ T5415] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.1603: Invalid inode table block 0 in block_group 0 [ 241.826845][ T5415] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 241.836677][ T312] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 241.844594][ T5415] EXT4-fs error (device loop3): ext4_truncate:4292: inode #13: comm syz.3.1603: mark_inode_dirty error [ 241.857353][ T5415] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 241.881721][ T5415] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.1603: Invalid inode table block 0 in block_group 0 [ 241.905903][ T5415] EXT4-fs (loop3): 1 truncate cleaned up [ 241.911373][ T5415] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 241.938826][ T5438] loop2: detected capacity change from 0 to 256 [ 242.031529][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.038591][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.046971][ T5439] device bridge_slave_0 entered promiscuous mode [ 242.070160][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.084116][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.100234][ T5439] device bridge_slave_1 entered promiscuous mode [ 242.138158][ T312] usb 1-1: device descriptor read/64, error -71 [ 242.535543][ T312] usb 1-1: device descriptor read/64, error -71 [ 242.568856][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.575720][ T5439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.582834][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.589625][ T5439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.814489][ T453] device bridge_slave_1 left promiscuous mode [ 242.828954][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.862139][ T5455] loop4: detected capacity change from 0 to 512 [ 242.888247][ T453] device bridge_slave_0 left promiscuous mode [ 242.935338][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.944326][ T453] device veth1_macvtap left promiscuous mode [ 242.951290][ T5455] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.955558][ T312] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 242.961130][ T453] device veth0_vlan left promiscuous mode [ 242.990744][ T5455] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 243.005388][ T5455] EXT4-fs (loop4): 1 truncate cleaned up [ 243.011086][ T5455] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 243.176501][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.191731][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.207611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.215171][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.223014][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.231412][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.239464][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.246402][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.253638][ T312] usb 1-1: device descriptor read/64, error -71 [ 243.259855][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.268139][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.276362][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.283201][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.306763][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.388016][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.411565][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.419724][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.427988][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.436161][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.753336][ T5439] device veth0_vlan entered promiscuous mode [ 243.759572][ T312] usb 1-1: device descriptor read/64, error -71 [ 243.766148][ T5439] device veth1_macvtap entered promiscuous mode [ 243.797802][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.828164][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.837006][ T5470] loop1: detected capacity change from 0 to 256 [ 243.850176][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.866067][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.878710][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.886454][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.893412][ T5461] loop3: detected capacity change from 0 to 40427 [ 243.896417][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.908915][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.917539][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.925899][ T312] usb usb1-port1: attempt power cycle [ 243.926463][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.938654][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.043027][ T5482] loop2: detected capacity change from 0 to 256 [ 244.049406][ T5461] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 244.061408][ T5461] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 244.072394][ T5461] F2FS-fs (loop3): Found nat_bits in checkpoint [ 244.087083][ T5482] exfat: Deprecated parameter 'utf8' [ 244.103640][ T5482] exfat: Deprecated parameter 'namecase' [ 244.288517][ T5482] exfat: Deprecated parameter 'utf8' [ 244.293635][ T5482] exfat: Deprecated parameter 'namecase' [ 244.300981][ T5461] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 244.322348][ T5461] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 244.329387][ T5461] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.340463][ T5482] /dev/loop2: Can't open blockdev [ 244.393462][ T5461] syz.3.1620[5461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.393532][ T5461] syz.3.1620[5461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.396402][ T5489] loop2: detected capacity change from 0 to 1024 [ 244.405244][ T312] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 244.446418][ T5461] overlayfs: failed to resolve './file0': -2 [ 244.495518][ T39] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 244.513306][ T30] kauditd_printk_skb: 132 callbacks suppressed [ 244.513320][ T30] audit: type=1400 audit(1721947862.010:1119): avc: denied { getopt } for pid=5488 comm="syz.2.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.673836][ T5495] loop3: detected capacity change from 0 to 512 [ 244.695711][ T312] usb 1-1: device descriptor read/8, error -71 [ 244.757297][ T5495] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 244.946772][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.958530][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.960705][ T5495] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1628: casefold flag without casefold feature [ 244.968615][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 244.981079][ T5495] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1628: missing EA_INODE flag [ 244.989384][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.001736][ T5495] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1628: error while reading EA inode 12 err=-117 [ 245.128586][ T39] usb 5-1: config 0 descriptor?? [ 245.165689][ T312] usb 1-1: device descriptor read/8, error -71 [ 245.177337][ T5495] EXT4-fs (loop3): 1 orphan inode deleted [ 245.247859][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,journal_dev=0x0000000000000007,quota,mblk_io_submit,errors=continue,errors=continue,data_err=ignore,delalloc,jqfmt=vfsold,norecovery,errors=continue,nouid32,,errors=continue. Quota mode: writeback. [ 245.395457][ T30] audit: type=1326 audit(1721947862.890:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 245.437696][ T5507] loop3: detected capacity change from 0 to 512 [ 245.443824][ T30] audit: type=1326 audit(1721947862.930:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f214016f299 code=0x7ffc0000 [ 245.471368][ T30] audit: type=1326 audit(1721947862.930:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f214016f2d3 code=0x7ffc0000 [ 245.472470][ T312] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.494708][ T30] audit: type=1326 audit(1721947862.930:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f214016de1f code=0x7ffc0000 [ 245.526730][ T5507] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.529302][ T30] audit: type=1326 audit(1721947862.940:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f214016f327 code=0x7ffc0000 [ 245.599245][ T30] audit: type=1326 audit(1721947862.940:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f214016dcd0 code=0x7ffc0000 [ 245.628274][ T30] audit: type=1326 audit(1721947862.940:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f214016ee9b code=0x7ffc0000 [ 245.845658][ T312] usb 1-1: device descriptor read/8, error -71 [ 245.915600][ T30] audit: type=1326 audit(1721947862.970:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f214016dfca code=0x7ffc0000 [ 245.939202][ T30] audit: type=1326 audit(1721947862.970:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5506 comm="syz.3.1632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f214016dfca code=0x7ffc0000 [ 245.965253][ T5507] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 245.990119][ T5507] EXT4-fs (loop3): 1 truncate cleaned up [ 246.007752][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 246.175619][ T312] usb 1-1: device descriptor read/8, error -71 [ 246.360764][ T312] usb usb1-port1: unable to enumerate USB device [ 246.375655][ T39] usb 5-1: string descriptor 0 read error: -71 [ 246.395651][ T39] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #200: -71 [ 246.405128][ T39] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71 [ 246.423308][ T39] uclogic 0003:256C:006D.0025: failed probing pen v2 parameters: -71 [ 246.433185][ T39] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 246.441313][ T39] uclogic: probe of 0003:256C:006D.0025 failed with error -71 [ 246.453833][ T39] usb 5-1: USB disconnect, device number 23 [ 246.839423][ T5534] loop3: detected capacity change from 0 to 128 [ 247.299311][ T5532] loop2: detected capacity change from 0 to 40427 [ 247.315556][ T5532] syz.2.1639[5532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.315613][ T5532] syz.2.1639[5532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.337929][ T5532] overlayfs: failed to resolve './file0': -2 [ 247.925529][ T63] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 248.501763][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 248.525289][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1653'. [ 248.545527][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 248.595554][ T26] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 248.675611][ T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 248.705757][ T5589] loop1: detected capacity change from 0 to 512 [ 248.746908][ T5589] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.757334][ T5589] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.1660: invalid block [ 248.768322][ T5589] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1660: couldn't read orphan inode 11 (err -117) [ 248.780172][ T5589] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 248.894917][ T63] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 248.905134][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.913180][ T63] usb 3-1: Product: syz [ 248.917290][ T63] usb 3-1: Manufacturer: syz [ 248.921730][ T63] usb 3-1: SerialNumber: syz [ 248.935103][ T63] usb 3-1: config 0 descriptor?? [ 248.996010][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 249.137127][ T26] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 249.218518][ T477] usb 3-1: USB disconnect, device number 30 [ 249.375628][ T26] usb 4-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 249.384973][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.393563][ T26] usb 4-1: Product: syz [ 249.397730][ T26] usb 4-1: Manufacturer: syz [ 249.402168][ T26] usb 4-1: SerialNumber: syz [ 249.411610][ T26] usb 4-1: config 0 descriptor?? [ 249.625117][ T5596] loop1: detected capacity change from 0 to 512 [ 249.676888][ T5596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 249.688365][ T5596] EXT4-fs (loop1): 1 truncate cleaned up [ 249.693832][ T5596] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.474908][ T5595] EXT4-fs error (device loop1): ext4_discard_preallocations:5119: comm syz.1.1661: Error -117 loading buddy information for 4294821812 [ 250.497131][ T5439] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 250.512249][ T5439] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5820: Out of memory [ 250.522663][ T5439] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 250.555061][ T5619] loop4: detected capacity change from 0 to 256 [ 250.986003][ T39] usb 4-1: USB disconnect, device number 28 [ 251.059200][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.075674][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.090500][ T5638] loop2: detected capacity change from 0 to 128 [ 251.092008][ T5627] device bridge_slave_0 entered promiscuous mode [ 251.114530][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.121858][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.129505][ T5627] device bridge_slave_1 entered promiscuous mode [ 251.296407][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.303281][ T5627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.310400][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.317162][ T5627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.337773][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 251.337787][ T30] audit: type=1404 audit(1721947868.840:1180): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 251.346352][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.368602][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.372981][ T30] audit: type=1404 audit(1721947868.870:1181): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 251.390422][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.418517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.427054][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.433908][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.441237][ T30] audit: type=1400 audit(1721947868.870:1182): avc: denied { module_request } for pid=5627 comm="syz-executor" kmod="netdev-team0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 251.444573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.470892][ T30] audit: type=1400 audit(1721947868.910:1183): avc: denied { read write } for pid=5201 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.495223][ T30] audit: type=1400 audit(1721947868.910:1184): avc: denied { open } for pid=5201 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.496706][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.524319][ T30] audit: type=1400 audit(1721947868.910:1185): avc: denied { ioctl } for pid=5201 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 251.525935][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.559717][ T30] audit: type=1400 audit(1721947868.950:1186): avc: denied { unmount } for pid=5241 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 251.579787][ T30] audit: type=1400 audit(1721947868.970:1187): avc: denied { map_create } for pid=5647 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.599125][ T30] audit: type=1400 audit(1721947868.970:1188): avc: denied { map_read map_write } for pid=5647 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.620113][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.626138][ T30] audit: type=1400 audit(1721947868.990:1189): avc: denied { prog_load } for pid=5647 comm="syz.3.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 251.639568][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.660819][ T20] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 251.687640][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.700815][ T5627] device veth0_vlan entered promiscuous mode [ 251.856005][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.879754][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.987792][ T5627] device veth1_macvtap entered promiscuous mode [ 252.010593][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.019809][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.028844][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.038097][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.147696][ T477] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.254154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.262593][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.270931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.279806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.698206][ T479] device bridge_slave_1 left promiscuous mode [ 252.704361][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.724436][ T479] device bridge_slave_0 left promiscuous mode [ 252.749755][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.752164][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.767366][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.777711][ T20] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 252.794626][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.803449][ T479] device veth1_macvtap left promiscuous mode [ 252.809329][ T477] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 252.817556][ T20] usb 3-1: config 0 descriptor?? [ 252.824282][ T479] device veth0_vlan left promiscuous mode [ 253.819094][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 253.848852][ T5679] netlink: 'syz.4.1687': attribute type 2 has an invalid length. [ 254.205607][ T477] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 254.218527][ T477] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 254.415611][ T477] usb 2-1: New USB device found, idVendor=04ca, idProduct=3008, bcdDevice=5d.6c [ 254.424563][ T477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.432638][ T477] usb 2-1: Product: syz [ 254.436888][ T477] usb 2-1: Manufacturer: syz [ 254.441346][ T477] usb 2-1: SerialNumber: syz [ 254.446834][ T477] usb 2-1: config 0 descriptor?? [ 254.549894][ T5690] device syzkaller0 entered promiscuous mode [ 254.776053][ T479] device bridge_slave_1 left promiscuous mode [ 254.782052][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.789236][ T479] device bridge_slave_0 left promiscuous mode [ 254.795180][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.802821][ T479] device veth1_macvtap left promiscuous mode [ 254.808674][ T479] device veth0_vlan left promiscuous mode [ 255.376505][ T5699] loop4: detected capacity change from 0 to 40427 [ 255.429944][ T5699] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 255.438950][ T5699] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 255.459994][ T5699] F2FS-fs (loop4): Found nat_bits in checkpoint [ 255.487568][ T5699] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 255.499238][ T5699] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 255.506156][ T5699] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 255.524612][ T5699] syz.4.1694[5699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.524663][ T5699] syz.4.1694[5699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.543763][ T5699] overlayfs: failed to resolve './file0': -2 [ 255.545620][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 255.568521][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 255.575639][ T20] usb 3-1: USB disconnect, device number 31 [ 255.606191][ T479] device bridge_slave_1 left promiscuous mode [ 255.612135][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.619495][ T479] device bridge_slave_0 left promiscuous mode [ 255.625408][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.633255][ T479] device veth1_macvtap left promiscuous mode [ 255.639223][ T479] device veth0_vlan left promiscuous mode [ 255.712548][ T338] usb 2-1: USB disconnect, device number 34 [ 256.117239][ T5707] loop1: detected capacity change from 0 to 256 [ 256.186376][ T5707] exfat: Unknown parameter './file0' [ 256.232857][ T5711] loop3: detected capacity change from 0 to 512 [ 256.318017][ T5711] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.1697: invalid block [ 256.330220][ T5711] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1697: Invalid block bitmap block 0 in block_group 0 [ 256.343602][ T5711] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 256.352294][ T5711] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1697: attempt to clear invalid blocks 983261 len 1 [ 256.365512][ T5711] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1697: invalid indirect mapped block 2683928664 (level 0) [ 256.379466][ T5711] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.1697: Invalid inode table block 0 in block_group 0 [ 256.392019][ T5711] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 256.401366][ T5711] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 256.409835][ T5711] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.1697: Invalid inode table block 0 in block_group 0 [ 256.422382][ T5711] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 256.431725][ T5711] EXT4-fs error (device loop3): ext4_truncate:4292: inode #13: comm syz.3.1697: mark_inode_dirty error [ 256.442749][ T5711] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 256.451579][ T5711] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.1697: Invalid inode table block 0 in block_group 0 [ 256.464335][ T5711] EXT4-fs (loop3): 1 truncate cleaned up [ 256.469812][ T5711] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 257.064468][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 257.064485][ T30] audit: type=1400 audit(1721947874.560:1275): avc: denied { read write } for pid=5722 comm="syz.1.1700" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.139215][ T30] audit: type=1400 audit(1721947874.560:1276): avc: denied { open } for pid=5722 comm="syz.1.1700" path="/dev/raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.163980][ T30] audit: type=1400 audit(1721947874.560:1277): avc: denied { ioctl } for pid=5722 comm="syz.1.1700" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 257.190450][ T30] audit: type=1400 audit(1721947874.570:1278): avc: denied { read } for pid=5725 comm="syz.4.1703" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 257.213194][ T30] audit: type=1400 audit(1721947874.570:1279): avc: denied { open } for pid=5725 comm="syz.4.1703" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 257.236399][ T30] audit: type=1400 audit(1721947874.570:1280): avc: denied { ioctl } for pid=5725 comm="syz.4.1703" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 257.321521][ T30] audit: type=1400 audit(1721947874.810:1281): avc: denied { write } for pid=5721 comm="syz.2.1701" name="protocols" dev="proc" ino=4026532635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 257.415552][ T39] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 257.775594][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.786329][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.795846][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.808552][ T39] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 257.817366][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.826440][ T39] usb 2-1: config 0 descriptor?? [ 258.153962][ T5739] loop2: detected capacity change from 0 to 1024 [ 258.306554][ T39] kye 0003:0458:0153.0026: unknown main item tag 0x0 [ 258.311800][ T5746] loop3: detected capacity change from 0 to 40427 [ 258.313153][ T39] kye 0003:0458:0153.0026: item fetching failed at offset 2/5 [ 258.345688][ T39] kye 0003:0458:0153.0026: parse failed [ 258.351142][ T39] kye: probe of 0003:0458:0153.0026 failed with error -22 [ 258.406075][ T5746] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 258.413616][ T5746] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 258.424165][ T5746] F2FS-fs (loop3): Found nat_bits in checkpoint [ 258.449050][ T5746] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 258.542350][ T477] usb 2-1: USB disconnect, device number 35 [ 258.671267][ T5746] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 258.678222][ T5746] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 258.695333][ T5746] syz.3.1708[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.695401][ T5746] syz.3.1708[5746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.713522][ T5746] overlayfs: failed to resolve './file0': -2 [ 259.354256][ T30] audit: type=1400 audit(1721947876.850:1282): avc: denied { read } for pid=5759 comm="syz.1.1709" dev="nsfs" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.397993][ T30] audit: type=1400 audit(1721947876.880:1283): avc: denied { open } for pid=5759 comm="syz.1.1709" path="net:[4026532519]" dev="nsfs" ino=4026532519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.424102][ T30] audit: type=1400 audit(1721947876.880:1284): avc: denied { create } for pid=5759 comm="syz.1.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.473649][ T5762] loop3: detected capacity change from 0 to 256 [ 259.619162][ T5762] exfat: Unknown parameter './file0' [ 259.831252][ T5765] loop2: detected capacity change from 0 to 40427 [ 260.608553][ T5774] loop3: detected capacity change from 0 to 512 [ 262.023862][ T5800] loop3: detected capacity change from 0 to 1024 [ 262.065935][ T5800] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 262.076866][ T5800] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 262.106171][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 262.106184][ T30] audit: type=1400 audit(1721947879.610:1293): avc: denied { read append open } for pid=5799 comm="syz.3.1723" path="/43/file0/file0/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 262.255531][ T26] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 262.615592][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.626273][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.635828][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.648440][ T26] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 262.657259][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.665892][ T26] usb 3-1: config 0 descriptor?? [ 263.136196][ T26] kye 0003:0458:0153.0027: unknown main item tag 0x0 [ 263.142699][ T26] kye 0003:0458:0153.0027: item fetching failed at offset 2/5 [ 263.150233][ T26] kye 0003:0458:0153.0027: parse failed [ 263.155605][ T26] kye: probe of 0003:0458:0153.0027 failed with error -22 [ 263.338746][ T26] usb 3-1: USB disconnect, device number 32 [ 263.455727][ T30] audit: type=1400 audit(1721947880.960:1294): avc: denied { mounton } for pid=5812 comm="syz.3.1727" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 263.685532][ T39] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 263.695638][ T338] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 263.935545][ T338] usb 5-1: Using ep0 maxpacket: 8 [ 264.055606][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.066295][ T338] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 264.076348][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.085912][ T338] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.094608][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 264.103440][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.111778][ T39] usb 2-1: config 0 descriptor?? [ 264.255609][ T338] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.264443][ T338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.272317][ T338] usb 5-1: Product: syz [ 264.276270][ T338] usb 5-1: Manufacturer: syz [ 264.280671][ T338] usb 5-1: SerialNumber: syz [ 264.685576][ T338] usb 5-1: 0:2 : does not exist [ 264.691517][ T338] usb 5-1: USB disconnect, device number 24 [ 264.699129][ T370] udevd[370]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.805575][ T39] usb 2-1: string descriptor 0 read error: -22 [ 265.039457][ T39] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0028/input/input25 [ 265.051621][ T30] audit: type=1400 audit(1721947882.560:1295): avc: denied { read } for pid=85 comm="acpid" name="event3" dev="devtmpfs" ino=1140 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.052463][ T39] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0028/input/input26 [ 265.085654][ T30] audit: type=1400 audit(1721947882.560:1296): avc: denied { open } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1140 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.127474][ T30] audit: type=1400 audit(1721947882.620:1297): avc: denied { ioctl } for pid=85 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1140 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.559027][ T39] uclogic 0003:256C:006D.0028: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 265.572564][ T39] usb 2-1: USB disconnect, device number 36 [ 266.674679][ T5831] loop1: detected capacity change from 0 to 512 [ 268.434045][ T30] audit: type=1326 audit(1721947885.930:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.4.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d878299 code=0x7ffc0000 [ 268.462268][ T30] audit: type=1326 audit(1721947885.970:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.4.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff86d878299 code=0x7ffc0000 [ 268.465404][ T5846] loop4: detected capacity change from 0 to 512 [ 268.543385][ T30] audit: type=1400 audit(1721947885.990:1300): avc: denied { mount } for pid=5847 comm="syz.1.1734" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 268.630457][ T5846] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 268.646774][ T30] audit: type=1400 audit(1721947886.000:1301): avc: denied { unmount } for pid=5627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 268.714217][ T5846] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 268.736080][ T5846] EXT4-fs (loop4): 1 truncate cleaned up [ 268.752646][ T5846] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 268.855521][ T529] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 269.122314][ T30] audit: type=1326 audit(1721947886.610:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5845 comm="syz.4.1737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ff86d878299 code=0x7ffc0000 [ 269.245589][ T529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.256371][ T30] audit: type=1400 audit(1721947886.750:1303): avc: denied { create } for pid=5841 comm="syz.3.1736" dev="anon_inodefs" ino=49165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.304430][ T529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.314279][ T529] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 269.323345][ T30] audit: type=1400 audit(1721947886.750:1304): avc: denied { ioctl } for pid=5841 comm="syz.3.1736" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=49165 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 269.349335][ T529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.361008][ T529] usb 2-1: config 0 descriptor?? [ 270.055581][ T529] usb 2-1: string descriptor 0 read error: -22 [ 270.276553][ T529] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0029/input/input27 [ 270.289549][ T529] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0029/input/input28 [ 270.301943][ T529] uclogic 0003:256C:006D.0029: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 270.479180][ T529] usb 2-1: USB disconnect, device number 37 [ 270.532396][ T5873] loop4: detected capacity change from 0 to 2048 [ 270.577116][ T5873] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.595218][ T30] audit: type=1400 audit(1721947888.090:1305): avc: denied { write } for pid=5872 comm="syz.4.1743" path="/43/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 270.618063][ T30] audit: type=1400 audit(1721947888.090:1306): avc: denied { map } for pid=5872 comm="syz.4.1743" path="/43/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 270.627370][ T5873] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 270.640483][ T30] audit: type=1400 audit(1721947888.090:1307): avc: denied { execute } for pid=5872 comm="syz.4.1743" path="/43/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 270.654855][ T5873] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 270.689315][ T5873] EXT4-fs (loop4): This should not happen!! Data will be lost [ 270.689315][ T5873] [ 270.699521][ T5873] EXT4-fs (loop4): Total free blocks count 0 [ 270.705337][ T5873] EXT4-fs (loop4): Free/Dirty block details [ 270.712413][ T5873] EXT4-fs (loop4): free_blocks=2415919104 [ 270.718467][ T5873] EXT4-fs (loop4): dirty_blocks=32 [ 270.723611][ T5873] EXT4-fs (loop4): Block reservation details [ 270.730429][ T5873] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 270.765618][ T338] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 270.901444][ T319] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 270.914122][ T319] EXT4-fs (loop4): This should not happen!! Data will be lost [ 270.914122][ T319] [ 271.015522][ T338] usb 4-1: Using ep0 maxpacket: 16 [ 271.135561][ T338] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 271.143574][ T338] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 271.151545][ T338] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 271.160228][ T338] usb 4-1: config 0 has no interface number 0 [ 271.166121][ T338] usb 4-1: Duplicate descriptor for config 0 interface 104 altsetting 0, skipping [ 271.325604][ T338] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 271.334647][ T338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.342457][ T338] usb 4-1: Product: syz [ 271.346442][ T338] usb 4-1: Manufacturer: syz [ 271.350843][ T338] usb 4-1: SerialNumber: syz [ 271.357288][ T338] usb 4-1: config 0 descriptor?? [ 271.635573][ T338] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 271.645629][ T338] asix: probe of 4-1:0.104 failed with error -71 [ 271.652376][ T338] usb 4-1: USB disconnect, device number 29 [ 272.468856][ T5886] device pim6reg1 entered promiscuous mode [ 272.470796][ T5892] loop1: detected capacity change from 0 to 512 [ 272.584732][ T5892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.610493][ T5892] EXT4-fs (loop1): 1 truncate cleaned up [ 272.616296][ T5892] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 272.843173][ T5892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5892 comm=syz.1.1745 [ 274.618921][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 274.618954][ T30] audit: type=1400 audit(1721947892.120:1319): avc: denied { mount } for pid=5904 comm="syz.2.1751" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 274.668257][ T30] audit: type=1400 audit(1721947892.120:1320): avc: denied { mounton } for pid=5904 comm="syz.2.1751" path="/159/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 1: Operation not permitted) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=0 req=1683 state=1 status=1 (errno 11: Resource temporarily unavailable) [ 274.753237][ T30] audit: type=1326 audit(1721947892.210:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c266299 code=0x7ffc0000 [ 274.815014][ T30] audit: type=1326 audit(1721947892.220:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c266299 code=0x7ffc0000 [ 274.878058][ T30] audit: type=1326 audit(1721947892.220:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f062c266299 code=0x7ffc0000 [ 274.973129][ T30] audit: type=1326 audit(1721947892.220:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c266299 code=0x7ffc0000 [ 275.005511][ T30] audit: type=1326 audit(1721947892.220:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062c266299 code=0x7ffc0000 [ 275.028972][ T30] audit: type=1400 audit(1721947892.250:1326): avc: denied { write } for pid=280 comm="syz-executor" path="pipe:[13591]" dev="pipefs" ino=13591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 275.557121][ T319] device bridge_slave_1 left promiscuous mode [ 275.563082][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.570788][ T319] device bridge_slave_0 left promiscuous mode [ 275.577979][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.586122][ T319] device veth1_macvtap left promiscuous mode [ 275.591952][ T319] device veth0_vlan left promiscuous mode [ 276.536423][ T319] device bridge_slave_1 left promiscuous mode [ 276.542381][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.550147][ T319] device bridge_slave_0 left promiscuous mode [ 276.559586][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.567737][ T319] device bridge_slave_1 left promiscuous mode [ 276.573669][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.581703][ T319] device bridge_slave_0 left promiscuous mode [ 276.587731][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.596133][ T319] device veth1_macvtap left promiscuous mode [ 276.602145][ T319] device veth1_macvtap left promiscuous mode [ 276.608153][ T319] device veth0_vlan left promiscuous mode [ 281.356141][ T319] device bridge_slave_1 left promiscuous mode [ 281.362064][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.369431][ T319] device bridge_slave_0 left promiscuous mode [ 281.375345][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.383368][ T319] device veth1_macvtap left promiscuous mode [ 281.389215][ T319] device veth0_vlan left promiscuous mode