last executing test programs: 5.304901936s ago: executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@weak_handle, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 5.293993087s ago: executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0xc, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2716764c88d0c8f4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.434629259s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r2) 4.353390751s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000e40)={0x0, 0x4b, 0x20}) 4.337791694s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000000), 0x400000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r6, &(0x7f0000000980), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ppoll(&(0x7f0000000040)=[{r7, 0x40}, {}, {r7, 0x600}, {r7, 0x1}, {r8, 0x180}, {r8, 0x208}, {r8, 0x4}, {r8, 0x342c}], 0x8, &(0x7f0000000080), &(0x7f0000000140)={[0x1]}, 0x8) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 3.433405363s ago: executing program 3: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESOCT], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0xf6ffffff) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a9f15000000000109022d0001000000000904000005030000000921000000012205000905810300000000007c050203000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x4a141) syz_usb_control_io(r0, 0x0, 0x0) write$hidraw(r1, &(0x7f0000000180), 0x0) 1.379031749s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.253790758s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000005700000000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.233711711s ago: executing program 0: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='ext4_request_inode\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x50}, {0x6}]}, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r11], 0x20}}, 0x0) 888.893894ms ago: executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) 761.700704ms ago: executing program 4: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x1000840, &(0x7f00000001c0)={[{@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_lower}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000c00)="$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") io_uring_setup(0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 623.208745ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='+', 0x1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x5, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB='^'], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 560.674144ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000ffffffff00000000000045008500000053000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 550.212867ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000006f69d6cd3beba42b89000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 543.564127ms ago: executing program 1: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) 534.695978ms ago: executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x3e) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x400445a0, &(0x7f0000000040)=""/226) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x14) 483.239267ms ago: executing program 1: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0) 472.013198ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llx}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) 457.649061ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c614b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd4a}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) ioprio_get$uid(0x3, 0x0) 450.925912ms ago: executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x1000840, &(0x7f00000001c0)={[{@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_lower}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000c00)="$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") io_uring_setup(0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 436.274314ms ago: executing program 2: socket(0x10, 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x2) fchmod(r1, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x20052fe}) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 423.305405ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 402.895299ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r0, 0x0, 0xda00) 351.945827ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 337.585499ms ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 333.654689ms ago: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, [{}]}) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f0000000700)={[{@oldalloc}, {@min_batch_time}, {@min_batch_time={'min_batch_time', 0x3d, 0x8e}}, {@errors_remount}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@debug}, {@nombcache}, {@data_err_abort}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nogrpid}], [], 0x2c}, 0x0, 0x4bb, &(0x7f0000000140)="$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") socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x0) 332.261719ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0xfff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:crypt_device_t:s0\x00', 0x24, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_es_find_extent_range_enter\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) write$cgroup_subtree(r5, 0x0, 0x7ffffffff000) 315.586042ms ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000080)={0xd4}) 12.696799ms ago: executing program 1: setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000980), 0x76, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000136f56e8d5ad8bec40cd95a8208b407200004000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200002d454ca6639661e100b7030000000000208500006994b79ef951f29c90e55e16d53300"], &(0x7f0000000840)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)={0x3, 0x0, [{0x2, 0x86, &(0x7f0000000280)=""/134}, {0x4000, 0x80, &(0x7f0000000400)=""/128}, {0xd000, 0xc3, &(0x7f00000004c0)=""/195}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r1, r1) readv(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/125, 0x48}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) capset(&(0x7f0000000080)={0x20071026}, 0x0) r4 = getpid() prlimit64(r4, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x5}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="98ade6d81acbfa3ac76feaefb4c7585a5edd027d603699693fb8b7848826496459fc1c305bcb0f70137cd6545d6597a679e4133d88f9643cbdb4fcef6f703a19c5ffa60875363f12f7b332cab241c554140f85032088d8ee1b7d88eb1ab88f66560aa13807d38b34776b7dac87bf773af438f69c39317cbddb99467505cd86d570612692b017d0c9be32dc657100dc140116a814d8d56a68452dd4bbec", @ANYRES16=r2, @ANYRES16=r4], &(0x7f0000000040)='syzkaller\x00', 0xd1d4, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x2}, 0x90) 0s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): for pid=311 comm="syz-executor.3" name="file0" dev="sda1" ino=1965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 61.045021][ T554] usb 3-1: USB disconnect, device number 6 [ 61.051419][ T554] ftdi_sio 3-1:0.0: device disconnected [ 61.060396][ T1745] loop1: detected capacity change from 0 to 1024 [ 61.070777][ T1745] EXT4-fs: Ignoring removed nobh option [ 61.078341][ T1745] EXT4-fs: Ignoring removed orlov option [ 61.083965][ T1745] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.094521][ T24] lenovo 0003:17EF:6067.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 61.118388][ T1745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.154097][ T312] EXT4-fs (loop1): unmounting filesystem. [ 61.184810][ T1747] loop3: detected capacity change from 0 to 40427 [ 61.192131][ T1747] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 61.200542][ T1747] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 61.211824][ T1747] F2FS-fs (loop3): Found nat_bits in checkpoint [ 61.243996][ T1747] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 61.266852][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.274734][ T1747] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 61.286850][ T1747] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 61.313329][ T19] usb 1-1: USB disconnect, device number 8 [ 61.406167][ T1757] loop1: detected capacity change from 0 to 40427 [ 61.413313][ T1757] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 61.421610][ T1757] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 61.437730][ T1757] F2FS-fs (loop1): invalid crc value [ 61.457738][ T1757] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.505225][ T28] audit: type=1400 audit(1718451274.292:265): avc: denied { link } for pid=1761 comm="syz-executor.3" name="file0" dev="incremental-fs" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.533737][ T1757] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 61.541252][ T1757] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 61.576227][ T28] audit: type=1400 audit(1718451274.362:266): avc: denied { setopt } for pid=1768 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.577985][ T1757] syz-executor.1: attempt to access beyond end of device [ 61.577985][ T1757] loop1: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 61.610892][ T28] audit: type=1400 audit(1718451274.402:267): avc: denied { bind } for pid=1768 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.632175][ T28] audit: type=1400 audit(1718451274.402:268): avc: denied { listen } for pid=1768 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.655576][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.668663][ T1771] device pim6reg1 entered promiscuous mode [ 61.677630][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.687834][ T312] syz-executor.1: attempt to access beyond end of device [ 61.687834][ T312] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 61.688774][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 61.711939][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.728192][ T24] usb 5-1: config 0 descriptor?? [ 61.782064][ T1776] loop3: detected capacity change from 0 to 512 [ 61.788866][ T1776] EXT4-fs: Ignoring removed orlov option [ 61.798074][ T1776] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.817523][ T1776] EXT4-fs (loop3): 1 truncate cleaned up [ 61.823277][ T1776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.888196][ T28] audit: type=1400 audit(1718451274.682:269): avc: denied { setattr } for pid=1775 comm="syz-executor.3" path="/root/syzkaller-testdir1184156324/syzkaller.s7jwWd/137/bus/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.918651][ T28] audit: type=1400 audit(1718451274.682:270): avc: denied { getopt } for pid=1780 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.938619][ T28] audit: type=1400 audit(1718451274.712:271): avc: denied { read } for pid=1786 comm="syz-executor.1" path="socket:[20901]" dev="sockfs" ino=20901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.942525][ T311] EXT4-fs (loop3): unmounting filesystem. [ 62.045050][ T1803] loop0: detected capacity change from 0 to 1024 [ 62.079979][ T1803] EXT4-fs: Ignoring removed nobh option [ 62.095651][ T1803] EXT4-fs: Ignoring removed orlov option [ 62.111500][ T1803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.129006][ T1803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 62.199910][ T24] wacom 0003:056A:0331.000E: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 62.221279][ T1797] loop1: detected capacity change from 0 to 40427 [ 62.237579][ T314] EXT4-fs (loop0): unmounting filesystem. [ 62.243313][ T1797] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 62.251406][ T1797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.253951][ T1819] loop2: detected capacity change from 0 to 256 [ 62.281366][ T1797] F2FS-fs (loop1): invalid crc value [ 62.303660][ T1797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.305429][ T1819] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 62.331038][ T1828] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.401074][ T333] usb 5-1: USB disconnect, device number 5 [ 62.426894][ T1797] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 62.447268][ T1797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 62.482412][ T1797] syz-executor.1: attempt to access beyond end of device [ 62.482412][ T1797] loop1: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 62.517541][ T312] syz-executor.1: attempt to access beyond end of device [ 62.517541][ T312] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.541701][ T1852] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.583691][ T1856] loop3: detected capacity change from 0 to 256 [ 62.613580][ T1856] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 62.830686][ T1882] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.1'. [ 62.988545][ T1876] loop0: detected capacity change from 0 to 40427 [ 63.039518][ T1876] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 63.055636][ T1895] loop4: detected capacity change from 0 to 256 [ 63.065174][ T1876] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.085207][ T1876] F2FS-fs (loop0): invalid crc value [ 63.102330][ T1895] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 63.116014][ T1876] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.220976][ T1876] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.228752][ T1876] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 63.319925][ T1911] loop3: detected capacity change from 0 to 256 [ 63.564628][ T1876] syz-executor.0: attempt to access beyond end of device [ 63.564628][ T1876] loop0: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 63.607321][ T314] syz-executor.0: attempt to access beyond end of device [ 63.607321][ T314] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.651768][ T1919] incfs: Options parsing error. -22 [ 63.657527][ T1919] incfs: mount failed -22 [ 63.936200][ T1938] loop1: detected capacity change from 0 to 256 [ 63.949993][ T1938] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 63.996838][ T313] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.161257][ T1945] loop0: detected capacity change from 0 to 40427 [ 65.185532][ T1961] loop4: detected capacity change from 0 to 8192 [ 65.198902][ T1945] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 65.208700][ T1945] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 65.227451][ T1945] F2FS-fs (loop0): invalid crc value [ 65.264700][ T1945] F2FS-fs (loop0): Found nat_bits in checkpoint [ 65.286974][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.313632][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.329402][ T313] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 65.338638][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.346859][ T1945] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 65.352879][ T313] usb 3-1: config 0 descriptor?? [ 65.353851][ T1945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 65.387524][ T1945] syz-executor.0: attempt to access beyond end of device [ 65.387524][ T1945] loop0: rw=2049, sector=77824, nr_sectors = 512 limit=40427 [ 65.419252][ T314] syz-executor.0: attempt to access beyond end of device [ 65.419252][ T314] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 65.536859][ T333] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 65.605813][ T1980] loop0: detected capacity change from 0 to 512 [ 65.627040][ T1980] EXT4-fs: Ignoring removed orlov option [ 65.632977][ T1980] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.644734][ T1980] EXT4-fs (loop0): 1 truncate cleaned up [ 65.650512][ T1980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 65.717850][ T314] EXT4-fs (loop0): unmounting filesystem. [ 65.839499][ T313] wacom 0003:056A:0331.000F: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0 [ 66.571208][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 66.581943][ T313] usb 3-1: USB disconnect, device number 7 [ 66.589991][ T333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 66.599483][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 66.608950][ T333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 66.711790][ T2002] loop1: detected capacity change from 0 to 8192 [ 66.778631][ T333] usb 4-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 66.791813][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.799797][ T333] usb 4-1: Product: syz [ 66.803805][ T333] usb 4-1: Manufacturer: syz [ 66.808412][ T333] usb 4-1: SerialNumber: syz [ 66.813718][ T333] usb 4-1: config 0 descriptor?? [ 66.866068][ T333] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 66.873770][ T333] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 67.159974][ T24] usb 4-1: USB disconnect, device number 5 [ 67.171659][ T24] ftdi_sio 4-1:0.0: device disconnected [ 67.259287][ T2027] loop2: detected capacity change from 0 to 512 [ 67.283536][ T2027] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 67.296907][ T2027] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 67.306889][ T2027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.330056][ T800] EXT4-fs (loop2): unmounting filesystem. [ 67.434509][ T2031] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.441497][ T2031] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.449379][ T2031] device bridge_slave_0 entered promiscuous mode [ 67.456096][ T2031] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.463090][ T2031] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.473292][ T2031] device bridge_slave_1 entered promiscuous mode [ 67.814627][ T2046] loop0: detected capacity change from 0 to 512 [ 67.822629][ T2046] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.840105][ T2046] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.853542][ T2046] EXT4-fs (loop0): 1 truncate cleaned up [ 67.859725][ T2046] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.898768][ T314] EXT4-fs (loop0): unmounting filesystem. [ 67.922740][ T2031] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.923450][ T2056] loop3: detected capacity change from 0 to 256 [ 67.929627][ T2031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.929708][ T2031] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.949598][ T2031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.961140][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 67.961154][ T28] audit: type=1400 audit(1718451280.752:274): avc: denied { remount } for pid=2053 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.991233][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.012545][ T554] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.021227][ T554] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.047789][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.055977][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.056866][ T313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 68.064217][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.077912][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.085422][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.095090][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.101962][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.109239][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.117080][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.131306][ T2031] device veth0_vlan entered promiscuous mode [ 68.140628][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.149192][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.156731][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.170522][ T2031] device veth1_macvtap entered promiscuous mode [ 68.178821][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.192296][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.200736][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.240267][ T2066] loop1: detected capacity change from 0 to 256 [ 68.256408][ T2066] exfat: Deprecated parameter 'utf8' [ 68.262558][ T2066] exfat: Deprecated parameter 'namecase' [ 68.275280][ T2066] exfat: Deprecated parameter 'utf8' [ 68.284252][ T2066] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 68.346864][ T313] usb 5-1: Using ep0 maxpacket: 32 [ 68.364350][ T2066] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 68.377799][ T2066] exFAT-fs (loop1): hint_cluster is invalid (1) [ 68.384208][ T2066] exFAT-fs (loop1): error, invalid access to exfat cache (entry 0x00000000) [ 68.393121][ T2066] exFAT-fs (loop1): error, failed to bmap (inode : ffff888133deb670 iblock : 9, err : -5) [ 68.404112][ T2066] exFAT-fs (loop1): error, tried to truncate zeroed cluster. [ 68.411394][ T2066] syz-executor.1: attempt to access beyond end of device [ 68.411394][ T2066] loop1: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 68.443128][ T8] device bridge_slave_1 left promiscuous mode [ 68.455797][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.464535][ T8] device bridge_slave_0 left promiscuous mode [ 68.472234][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.656220][ T333] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 68.664755][ T313] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.676089][ T313] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.685921][ T313] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 68.697251][ T8] device veth1_macvtap left promiscuous mode [ 68.703934][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.704740][ T8] device veth0_vlan left promiscuous mode [ 68.739020][ T2081] loop1: detected capacity change from 0 to 512 [ 68.746698][ T2081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.757374][ T313] hub 5-1:4.0: USB hub found [ 68.765784][ T2081] EXT4-fs (loop1): 1 truncate cleaned up [ 68.776662][ T2081] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.796275][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 68.812999][ T2085] syz-executor.1[2085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.813069][ T2085] syz-executor.1[2085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.869169][ T2085] bridge: RTM_NEWNEIGH with invalid ether address [ 68.919188][ T28] audit: type=1400 audit(1718451281.712:275): avc: denied { read } for pid=2108 comm="syz-executor.1" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.945336][ T28] audit: type=1400 audit(1718451281.712:276): avc: denied { open } for pid=2108 comm="syz-executor.1" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 68.977579][ T28] audit: type=1400 audit(1718451281.762:277): avc: denied { shutdown } for pid=2108 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.985974][ T2111] loop0: detected capacity change from 0 to 512 [ 68.997915][ T313] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 69.035854][ T2111] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.050763][ T2111] ext4 filesystem being mounted at /root/syzkaller-testdir3770892637/syzkaller.5vShkm/118/bus supports timestamps until 2038 (0x7fffffff) [ 69.065010][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 69.077375][ T333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 69.087119][ T333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 69.103172][ T333] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 69.225935][ T28] audit: type=1400 audit(1718451282.012:278): avc: denied { setopt } for pid=2114 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.296937][ T333] usb 3-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 69.306884][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.314794][ T333] usb 3-1: Product: syz [ 69.319163][ T333] usb 3-1: Manufacturer: syz [ 69.323593][ T333] usb 3-1: SerialNumber: syz [ 69.334573][ T333] usb 3-1: config 0 descriptor?? [ 69.346931][ T554] usb 5-1: USB disconnect, device number 6 [ 69.378620][ T333] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 69.387696][ T333] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 69.431434][ T28] audit: type=1326 audit(1718451282.222:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2126 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4bc067cea9 code=0x0 [ 69.582176][ T554] usb 3-1: USB disconnect, device number 8 [ 69.588246][ T554] ftdi_sio 3-1:0.0: device disconnected [ 69.690261][ T314] EXT4-fs (loop0): unmounting filesystem. [ 69.715175][ T2137] syz-executor.0[2137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.715245][ T2137] syz-executor.0[2137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.728268][ T2137] bridge: RTM_NEWNEIGH with invalid ether address [ 70.586883][ T332] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 70.627621][ T2176] loop3: detected capacity change from 0 to 40427 [ 70.648860][ T28] audit: type=1400 audit(1718451283.442:280): avc: denied { setopt } for pid=2181 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.650745][ T2182] incfs: ino conflict with backing FS 1 [ 70.683201][ T28] audit: type=1400 audit(1718451283.442:281): avc: denied { mounton } for pid=2181 comm="syz-executor.0" path="/root/syzkaller-testdir3770892637/syzkaller.5vShkm/122/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.711343][ T2176] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.720933][ T2182] incfs: ino conflict with backing FS 2 [ 70.727943][ T28] audit: type=1400 audit(1718451283.522:282): avc: denied { ioctl } for pid=2181 comm="syz-executor.0" path="socket:[21677]" dev="sockfs" ino=21677 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.754603][ T2176] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.775918][ T28] audit: type=1326 audit(1718451283.562:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2187 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc41187cea9 code=0x0 [ 70.800180][ T311] syz-executor.3: attempt to access beyond end of device [ 70.800180][ T311] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.817085][ T554] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 70.856964][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 71.006877][ T332] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.017633][ T332] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.027147][ T332] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 71.035956][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.097654][ T332] hub 2-1:4.0: USB hub found [ 71.206884][ T554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 71.216439][ T554] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 71.225825][ T554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 71.235315][ T554] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 71.306913][ T332] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 71.426908][ T554] usb 3-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 71.435845][ T554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.443674][ T554] usb 3-1: Product: syz [ 71.447652][ T554] usb 3-1: Manufacturer: syz [ 71.452074][ T554] usb 3-1: SerialNumber: syz [ 71.457004][ T554] usb 3-1: config 0 descriptor?? [ 71.497367][ T554] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 71.504913][ T554] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 71.610930][ T2204] loop0: detected capacity change from 0 to 512 [ 71.620203][ T2204] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 71.633357][ T2204] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 71.642947][ T554] usb 2-1: USB disconnect, device number 10 [ 71.651515][ T2204] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.667452][ T314] EXT4-fs (loop0): unmounting filesystem. [ 71.702602][ T554] usb 3-1: USB disconnect, device number 9 [ 71.709254][ T554] ftdi_sio 3-1:0.0: device disconnected [ 72.851944][ T2221] loop3: detected capacity change from 0 to 40427 [ 72.877645][ T2221] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.895731][ T2235] loop0: detected capacity change from 0 to 256 [ 72.924425][ T2238] loop2: detected capacity change from 0 to 512 [ 72.931240][ T2235] exfat: Deprecated parameter 'namecase' [ 72.932480][ T2238] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 72.940467][ T2221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.950340][ T2238] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 72.957064][ T2235] exfat: Deprecated parameter 'utf8' [ 72.967471][ T2238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 72.991787][ T2235] exfat: Deprecated parameter 'namecase' [ 73.005356][ T2235] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 73.005539][ T311] syz-executor.3: attempt to access beyond end of device [ 73.005539][ T311] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.033314][ T800] EXT4-fs (loop2): unmounting filesystem. [ 73.150395][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 73.150410][ T28] audit: type=1400 audit(1718451285.942:285): avc: denied { write } for pid=2249 comm="syz-executor.2" path="socket:[20393]" dev="sockfs" ino=20393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 73.178588][ T2252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.231279][ T2254] loop0: detected capacity change from 0 to 8192 [ 73.350319][ T2267] loop2: detected capacity change from 0 to 512 [ 73.376966][ T2267] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 73.396922][ T554] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 73.400164][ T2267] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 73.435449][ T2267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.453687][ T2264] loop3: detected capacity change from 0 to 40427 [ 73.476856][ T800] EXT4-fs (loop2): unmounting filesystem. [ 73.485973][ T2264] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.521245][ T2273] loop2: detected capacity change from 0 to 256 [ 73.539003][ T2273] exfat: Deprecated parameter 'namecase' [ 73.544687][ T2273] exfat: Deprecated parameter 'utf8' [ 73.550519][ T2273] exfat: Deprecated parameter 'namecase' [ 73.554159][ T2264] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.558809][ T2273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 73.599827][ T311] syz-executor.3: attempt to access beyond end of device [ 73.599827][ T311] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.733858][ T2286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.769780][ T2293] loop3: detected capacity change from 0 to 512 [ 73.963111][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 73.976613][ T554] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 73.988817][ T554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 74.023521][ T554] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 74.044006][ T2293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 74.052820][ T2293] ext4 filesystem being mounted at /root/syzkaller-testdir1184156324/syzkaller.s7jwWd/193/bus supports timestamps until 2038 (0x7fffffff) [ 74.187051][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 74.302890][ T554] usb 2-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 74.312174][ T554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.321078][ T554] usb 2-1: Product: syz [ 74.325085][ T554] usb 2-1: Manufacturer: syz [ 74.332490][ T554] usb 2-1: SerialNumber: syz [ 74.345769][ T554] usb 2-1: config 0 descriptor?? [ 74.431618][ T554] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 74.439285][ T554] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 74.640434][ T311] EXT4-fs (loop3): unmounting filesystem. [ 74.646643][ T2305] loop2: detected capacity change from 0 to 8192 [ 74.647398][ T19] usb 2-1: USB disconnect, device number 11 [ 74.662213][ T19] ftdi_sio 2-1:0.0: device disconnected [ 74.676963][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 74.686425][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 74.916968][ T24] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 74.926342][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.977153][ T24] usb 1-1: Product: syz [ 75.199047][ T24] usb 1-1: Manufacturer: syz [ 75.203560][ T24] usb 1-1: SerialNumber: syz [ 75.215558][ T24] usb 1-1: config 0 descriptor?? [ 75.248988][ T2330] syz-executor.1[2330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.249037][ T2330] syz-executor.1[2330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.650501][ T24] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 75.669517][ T24] usb 1-1: USB disconnect, device number 9 [ 75.676613][ T1638] udevd[1638]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.772204][ T2344] loop2: detected capacity change from 0 to 8192 [ 75.845664][ T2349] device pim6reg1 entered promiscuous mode [ 76.018778][ T2357] syz-executor.2[2357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.018826][ T2357] syz-executor.2[2357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.077965][ T2367] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.144340][ T28] audit: type=1326 audit(1718451288.932:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 76.156866][ T333] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 76.168121][ T28] audit: type=1326 audit(1718451288.932:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 76.220664][ T28] audit: type=1326 audit(1718451288.932:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 76.244615][ T2382] Driver unsupported XDP return value 0 on prog (id 561) dev N/A, expect packet loss! [ 76.248225][ T28] audit: type=1326 audit(1718451288.932:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fccc707ec27 code=0x7ffc0000 [ 76.278078][ T28] audit: type=1326 audit(1718451288.932:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 76.301889][ T28] audit: type=1326 audit(1718451288.932:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 76.325719][ T28] audit: type=1326 audit(1718451288.932:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 76.349620][ T28] audit: type=1326 audit(1718451288.932:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2373 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 76.435898][ T2392] syz-executor.2[2392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.435968][ T2392] syz-executor.2[2392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 76.453950][ T28] audit: type=1400 audit(1718451289.242:294): avc: denied { write } for pid=2391 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 76.556934][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 76.566407][ T333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 76.575926][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 76.585334][ T333] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 76.956924][ T333] usb 4-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 76.965835][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.973629][ T333] usb 4-1: Product: syz [ 76.977624][ T333] usb 4-1: Manufacturer: syz [ 76.981993][ T333] usb 4-1: SerialNumber: syz [ 76.987013][ T333] usb 4-1: config 0 descriptor?? [ 77.006862][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 77.027443][ T333] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 77.034981][ T333] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 77.233920][ T554] usb 4-1: USB disconnect, device number 6 [ 77.241207][ T554] ftdi_sio 4-1:0.0: device disconnected [ 77.401055][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 77.413480][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 77.471143][ T2426] loop1: detected capacity change from 0 to 512 [ 77.489643][ T2426] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 77.498875][ T2426] ext4 filesystem being mounted at /root/syzkaller-testdir462695916/syzkaller.FbzNmJ/26/bus supports timestamps until 2038 (0x7fffffff) [ 78.269054][ T24] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 78.280646][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.311758][ T24] usb 3-1: Product: syz [ 78.400942][ T24] usb 3-1: Manufacturer: syz [ 78.408281][ T24] usb 3-1: SerialNumber: syz [ 78.423840][ T24] usb 3-1: config 0 descriptor?? [ 78.449101][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 78.449115][ T28] audit: type=1326 audit(1718451291.242:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 78.479537][ T28] audit: type=1326 audit(1718451291.242:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 78.503426][ T28] audit: type=1326 audit(1718451291.242:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 78.535783][ T28] audit: type=1326 audit(1718451291.242:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc41187ec27 code=0x7ffc0000 [ 78.562314][ T28] audit: type=1326 audit(1718451291.242:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 78.562822][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 78.586274][ T28] audit: type=1326 audit(1718451291.242:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 78.615180][ T28] audit: type=1326 audit(1718451291.242:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 78.641709][ T28] audit: type=1326 audit(1718451291.242:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 78.770317][ T24] snd-usb-audio: probe of 3-1:0.0 failed with error -12 [ 78.787565][ T24] usb 3-1: USB disconnect, device number 10 [ 78.787942][ T1638] udevd[1638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.908797][ T28] audit: type=1400 audit(1718451291.702:312): avc: denied { write } for pid=2478 comm="syz-executor.3" path="socket:[22716]" dev="sockfs" ino=22716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.936922][ T28] audit: type=1400 audit(1718451291.702:313): avc: denied { nlmsg_write } for pid=2478 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.976933][ T554] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 79.360887][ T2494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.376984][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 79.387000][ T554] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 79.399615][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 79.409562][ T554] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 79.618042][ T2511] input: syz0 as /devices/virtual/input/input10 [ 79.636977][ T554] usb 1-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 79.646338][ T554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.658988][ T554] usb 1-1: Product: syz [ 79.667890][ T554] usb 1-1: Manufacturer: syz [ 79.676530][ T554] usb 1-1: SerialNumber: syz [ 79.691079][ T554] usb 1-1: config 0 descriptor?? [ 79.737544][ T554] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 79.745377][ T554] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 79.941133][ T554] usb 1-1: USB disconnect, device number 10 [ 79.948823][ T554] ftdi_sio 1-1:0.0: device disconnected [ 81.086407][ T2577] loop3: detected capacity change from 0 to 256 [ 81.376865][ T554] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 81.612788][ T2585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.776934][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 81.786423][ T554] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 81.796119][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.805641][ T554] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 81.916877][ T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 81.986928][ T554] usb 4-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 81.995826][ T554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.003626][ T554] usb 4-1: Product: syz [ 82.007639][ T554] usb 4-1: Manufacturer: syz [ 82.011996][ T554] usb 4-1: SerialNumber: syz [ 82.016943][ T554] usb 4-1: config 0 descriptor?? [ 82.057493][ T554] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 82.065043][ T554] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 82.261083][ T554] usb 4-1: USB disconnect, device number 7 [ 82.267927][ T554] ftdi_sio 4-1:0.0: device disconnected [ 82.336922][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 82.557013][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 82.565899][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.573695][ T19] usb 2-1: Product: syz [ 82.577865][ T19] usb 2-1: Manufacturer: syz [ 82.582269][ T19] usb 2-1: SerialNumber: syz [ 82.867210][ T19] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 82.874390][ T19] usb 2-1: USB disconnect, device number 12 [ 83.148422][ T2612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.309907][ T2619] loop2: detected capacity change from 0 to 512 [ 83.316656][ T2619] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.331481][ T2619] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 16 [ 83.342294][ T2619] ext4_test_bit(bit=15, block=4) = 0 [ 83.347595][ T2619] EXT4-fs (loop2): 1 orphan inode deleted [ 83.353250][ T2619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.365231][ T2619] EXT4-fs (loop2): unmounting filesystem. [ 83.403852][ T2623] loop1: detected capacity change from 0 to 256 [ 83.710566][ T2645] loop0: detected capacity change from 0 to 512 [ 83.739417][ T2645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.748509][ T2645] ext4 filesystem being mounted at /root/syzkaller-testdir3770892637/syzkaller.5vShkm/161/bus supports timestamps until 2038 (0x7fffffff) [ 84.060023][ T2658] loop2: detected capacity change from 0 to 512 [ 84.069183][ T2658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 84.077206][ T2658] EXT4-fs (loop2): 1 orphan inode deleted [ 84.087819][ T2658] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.100407][ T2658] EXT4-fs (loop2): unmounting filesystem. [ 84.107804][ T2663] loop3: detected capacity change from 0 to 256 [ 84.156008][ T2665] loop2: detected capacity change from 0 to 256 [ 84.374100][ T2680] syz-executor.2 (pid 2680) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 84.576503][ T314] EXT4-fs (loop0): unmounting filesystem. [ 84.720714][ T2691] loop3: detected capacity change from 0 to 512 [ 84.742873][ T2691] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.765361][ T2691] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 16 [ 84.776727][ T2691] ext4_test_bit(bit=15, block=4) = 0 [ 84.782186][ T2691] EXT4-fs (loop3): 1 orphan inode deleted [ 84.788194][ T2691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.818392][ T2691] EXT4-fs (loop3): unmounting filesystem. [ 84.828283][ T2694] loop0: detected capacity change from 0 to 512 [ 84.870119][ T2694] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.882484][ T2694] EXT4-fs (loop0): 1 orphan inode deleted [ 84.907572][ T2694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.918652][ T2694] EXT4-fs (loop0): unmounting filesystem. [ 85.541760][ T2687] loop1: detected capacity change from 0 to 131072 [ 85.617737][ T2687] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.784334][ T2687] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.968693][ T2728] loop3: detected capacity change from 0 to 512 [ 86.040067][ T2728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.056647][ T2728] ext4 filesystem being mounted at /root/syzkaller-testdir1184156324/syzkaller.s7jwWd/240/bus supports timestamps until 2038 (0x7fffffff) [ 86.079995][ T2739] overlayfs: statfs failed on './file0' [ 86.126491][ T2742] loop0: detected capacity change from 0 to 512 [ 86.163021][ T2742] EXT4-fs (loop0): orphan cleanup on readonly fs [ 86.171009][ T2742] EXT4-fs (loop0): 1 orphan inode deleted [ 86.187153][ T2742] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.197510][ T2742] EXT4-fs (loop0): unmounting filesystem. [ 86.279173][ T2745] loop0: detected capacity change from 0 to 128 [ 86.318138][ T2745] syz-executor.0: attempt to access beyond end of device [ 86.318138][ T2745] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 86.434569][ T311] EXT4-fs (loop3): unmounting filesystem. [ 86.950902][ T2783] loop3: detected capacity change from 0 to 512 [ 87.120886][ T2783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.130240][ T2783] ext4 filesystem being mounted at /root/syzkaller-testdir1184156324/syzkaller.s7jwWd/243/bus supports timestamps until 2038 (0x7fffffff) [ 87.173723][ T2780] syz-executor.2 (2780) used greatest stack depth: 19936 bytes left [ 87.397994][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 87.398009][ T28] audit: type=1400 audit(1718451299.580:319): avc: denied { mount } for pid=2824 comm="syz-executor.2" name="/" dev="ramfs" ino=23302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 87.532575][ T28] audit: type=1400 audit(1718451299.710:320): avc: denied { unmount } for pid=311 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.558119][ T311] EXT4-fs (loop3): unmounting filesystem. [ 87.652179][ T2835] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 87.680440][ T28] audit: type=1400 audit(1718451299.860:321): avc: denied { mount } for pid=2834 comm="syz-executor.1" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 87.726717][ T28] audit: type=1400 audit(1718451299.900:322): avc: denied { read } for pid=2843 comm="syz-executor.0" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.751833][ T28] audit: type=1400 audit(1718451299.900:323): avc: denied { open } for pid=2843 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.776290][ T28] audit: type=1400 audit(1718451299.900:324): avc: denied { ioctl } for pid=2843 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=139 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 87.882782][ T2849] loop1: detected capacity change from 0 to 1024 [ 87.937174][ T2849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 87.954409][ T2849] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz-executor.1: attempt to clear invalid blocks 1886221359 len 1 [ 87.955293][ T28] audit: type=1400 audit(1718451300.130:325): avc: denied { setattr } for pid=2848 comm="syz-executor.1" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 88.027106][ T2865] loop3: detected capacity change from 0 to 256 [ 88.129243][ T28] audit: type=1400 audit(1718451300.130:326): avc: denied { rename } for pid=2848 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.177318][ T28] audit: type=1400 audit(1718451300.130:327): avc: denied { unlink } for pid=2848 comm="syz-executor.1" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 88.242195][ T28] audit: type=1400 audit(1718451300.420:328): avc: denied { unmount } for pid=800 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 88.243310][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 88.273599][ T2870] loop2: detected capacity change from 0 to 128 [ 88.282955][ T2870] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0009) [ 88.290820][ T2870] FAT-fs (loop2): Filesystem has been set read-only [ 88.297693][ T2870] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0009) [ 88.572602][ T2889] loop2: detected capacity change from 0 to 512 [ 88.605830][ T2889] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.641235][ T2889] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 16 [ 88.666518][ T2889] ext4_test_bit(bit=15, block=4) = 0 [ 88.672020][ T2889] EXT4-fs (loop2): 1 orphan inode deleted [ 88.746144][ T2889] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.777241][ T2889] EXT4-fs (loop2): unmounting filesystem. [ 88.941957][ T2897] loop0: detected capacity change from 0 to 256 [ 88.967877][ T2897] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 89.097694][ T2905] loop1: detected capacity change from 0 to 1024 [ 89.154346][ T2905] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 89.176972][ T2905] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #14: comm syz-executor.1: attempt to clear invalid blocks 1886221359 len 1 [ 89.530213][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 89.750610][ T2942] loop1: detected capacity change from 0 to 512 [ 89.850245][ T2942] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.412502][ T2945] loop3: detected capacity change from 0 to 1024 [ 90.598175][ T2942] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 90.611785][ T2942] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a016e02c, mo2=0002] [ 90.619723][ T2942] System zones: 0-2, 18-18, 34-35 [ 90.625724][ T2942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.819083][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 90.827890][ T2945] EXT4-fs warning (device loop3): ext4_enable_quotas:6987: Failed to enable quota tracking (type=2, err=-13, ino=12). Please run e2fsck to fix. [ 90.843188][ T2945] EXT4-fs (loop3): mount failed [ 91.586845][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 91.834238][ T2971] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 91.977247][ T19] usb 1-1: config index 0 descriptor too short (expected 106, got 36) [ 91.985279][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.996312][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.513242][ T28] kauditd_printk_skb: 2079 callbacks suppressed [ 92.513258][ T28] audit: type=1326 audit(1718451304.270:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e8f440309 code=0x7ffc0000 [ 92.543296][ T19] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 92.551824][ T28] audit: type=1326 audit(1718451304.690:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f47cea9 code=0x7ffc0000 [ 92.552231][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.576002][ T28] audit: type=1326 audit(1718451304.690:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e8f47a627 code=0x7ffc0000 [ 92.584440][ T19] usb 1-1: config 0 descriptor?? [ 92.607391][ T28] audit: type=1326 audit(1718451304.690:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e8f440309 code=0x7ffc0000 [ 92.636165][ T28] audit: type=1326 audit(1718451304.690:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f47cea9 code=0x7ffc0000 [ 92.660001][ T28] audit: type=1326 audit(1718451304.690:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e8f47a627 code=0x7ffc0000 [ 92.684326][ T28] audit: type=1326 audit(1718451304.690:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e8f440309 code=0x7ffc0000 [ 92.707988][ T28] audit: type=1326 audit(1718451304.720:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f47cea9 code=0x7ffc0000 [ 92.731871][ T28] audit: type=1326 audit(1718451304.720:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e8f47a627 code=0x7ffc0000 [ 92.755829][ T28] audit: type=1326 audit(1718451304.720:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2991 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4e8f440309 code=0x7ffc0000 [ 92.827034][ T2999] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 93.098087][ T3023] loop1: detected capacity change from 0 to 512 [ 93.168266][ T3023] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.207038][ T2957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.257814][ T3023] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 93.271406][ T3023] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a016e02c, mo2=0002] [ 93.279368][ T3023] System zones: 0-2, 18-18, 34-35 [ 93.286401][ T3023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 93.428283][ T2957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.862477][ T3029] syz-executor.0[3029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.862563][ T3029] syz-executor.0[3029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.875426][ T19] hid-generic 0003:1B1C:1B3E.0010: unknown main item tag 0x0 [ 93.898092][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 93.916838][ T19] hid-generic 0003:1B1C:1B3E.0010: unknown main item tag 0x0 [ 93.924068][ T19] hid-generic 0003:1B1C:1B3E.0010: item fetching failed at offset 2/5 [ 93.932471][ T19] hid-generic: probe of 0003:1B1C:1B3E.0010 failed with error -22 [ 93.968637][ T3034] sit: non-ECT from 0.0.0.0 with TOS=0x2 [ 94.068889][ T3039] sch_fq: defrate 0 ignored. [ 94.086871][ T1016] usb 1-1: USB disconnect, device number 11 [ 94.516839][ T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 94.648113][ T3063] loop3: detected capacity change from 0 to 512 [ 94.655818][ T3063] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.759317][ T3063] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz-executor.3: casefold flag without casefold feature [ 94.773231][ T3063] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a016e02c, mo2=0002] [ 94.781241][ T3063] System zones: 0-2, 18-18, 34-35 [ 94.788758][ T3063] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.096817][ T19] usb 2-1: Using ep0 maxpacket: 32 [ 95.402782][ T19] usb 2-1: config 0 has no interfaces? [ 95.408288][ T313] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 95.434757][ T311] EXT4-fs (loop3): unmounting filesystem. [ 95.460702][ T3071] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 95.470227][ T3071] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 95.518782][ T3074] loop3: detected capacity change from 0 to 2048 [ 95.568415][ T3074] Alternate GPT is invalid, using primary GPT. [ 95.574558][ T3074] loop3: p1 p2 p3 [ 95.646346][ T3077] loop2: detected capacity change from 0 to 256 [ 95.916888][ T19] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 95.925806][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.933726][ T19] usb 2-1: Product: syz [ 95.937892][ T19] usb 2-1: Manufacturer: syz [ 95.942337][ T19] usb 2-1: SerialNumber: syz [ 95.947440][ T19] usb 2-1: config 0 descriptor?? [ 95.990631][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.997711][ T3080] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.006788][ T3080] device bridge_slave_0 entered promiscuous mode [ 96.015591][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.022493][ T3080] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.031787][ T3080] device bridge_slave_1 entered promiscuous mode [ 96.066850][ T313] usb 1-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 96.077076][ T313] usb 1-1: too many endpoints for config 0 interface 0 altsetting 199: 83, using maximum allowed: 30 [ 96.087826][ T313] usb 1-1: config 0 interface 0 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 96.101472][ T313] usb 1-1: config 0 interface 0 has no altsetting 0 [ 96.175175][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.182092][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.189142][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.196104][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.209363][ T1016] usb 2-1: USB disconnect, device number 13 [ 96.228183][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.236150][ T807] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.243374][ T807] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.260270][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.268519][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.275366][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.282777][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.291449][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.298324][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.319422][ T313] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 96.337952][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.352168][ T3080] device veth0_vlan entered promiscuous mode [ 96.358238][ T313] usb 1-1: Product: syz [ 96.362254][ T313] usb 1-1: Manufacturer: syz [ 96.372101][ T313] usb 1-1: SerialNumber: syz [ 96.379006][ T3080] device veth1_macvtap entered promiscuous mode [ 96.386426][ T313] usb 1-1: config 0 descriptor?? [ 96.392443][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.400950][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.409245][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.416494][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.424040][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.432349][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.440538][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.457745][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.466057][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.487326][ T3088] loop4: detected capacity change from 0 to 1024 [ 96.526367][ T3088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.539211][ T3088] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #14: comm syz-executor.4: attempt to clear invalid blocks 1886221359 len 1 [ 96.614148][ T3080] EXT4-fs (loop4): unmounting filesystem. [ 96.629470][ T3094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.639967][ T3094] device bridge_slave_1 left promiscuous mode [ 96.648928][ T3094] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.679793][ T3098] 9pnet: Could not find request transport: rdma [ 96.689630][ T313] usb 1-1: selecting invalid altsetting 0 [ 96.702596][ T313] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 96.720169][ T313] usb 1-1: USB disconnect, device number 12 [ 96.958102][ T3120] syz-executor.3[3120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.958176][ T3120] syz-executor.3[3120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.423628][ T3128] loop2: detected capacity change from 0 to 512 [ 97.879062][ T3128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 98.015130][ T3127] sched: RT throttling activated [ 98.050660][ T3145] 9pnet: Could not find request transport: rdma [ 98.097158][ T3128] ext4 filesystem being mounted at /root/syzkaller-testdir2000160667/syzkaller.nflwzn/179/bus supports timestamps until 2038 (0x7fffffff) [ 98.304836][ T28] kauditd_printk_skb: 512 callbacks suppressed [ 98.304859][ T28] audit: type=1400 audit(2000000004.030:2930): avc: denied { getopt } for pid=3149 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.654771][ T3158] loop4: detected capacity change from 0 to 256 [ 98.786948][ T28] audit: type=1326 audit(2000000004.360:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 98.853990][ T28] audit: type=1326 audit(2000000004.360:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 98.881918][ T28] audit: type=1326 audit(2000000004.370:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3155 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc41187cea9 code=0x7ffc0000 [ 98.949563][ T800] EXT4-fs (loop2): unmounting filesystem. [ 99.378607][ T3189] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.439362][ T28] audit: type=1326 audit(2000000005.170:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3190 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 99.464281][ T28] audit: type=1326 audit(2000000005.170:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3190 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 99.507215][ T28] audit: type=1326 audit(2000000005.170:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3190 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccc707cea9 code=0x7ffc0000 [ 99.935989][ T3199] syz-executor.1[3199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.936059][ T3199] syz-executor.1[3199] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.020789][ T3215] overlayfs: empty lowerdir [ 100.093632][ T3221] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 100.109986][ T3221] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 100.129240][ T3222] loop3: detected capacity change from 0 to 512 [ 100.142043][ T3221] loop4: detected capacity change from 0 to 2048 [ 100.169107][ T3222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.188554][ T3221] Alternate GPT is invalid, using primary GPT. [ 100.191675][ T3222] ext4 filesystem being mounted at /root/syzkaller-testdir1184156324/syzkaller.s7jwWd/277/bus supports timestamps until 2038 (0x7fffffff) [ 100.194812][ T3221] loop4: p1 p2 p3 [ 100.209436][ T3228] input: syz0 as /devices/virtual/input/input11 [ 100.227625][ T28] audit: type=1400 audit(2000000005.960:2937): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=596 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.273390][ T28] audit: type=1400 audit(2000000005.960:2938): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=596 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.315678][ T3233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3233 comm=syz-executor.4 [ 100.345815][ T28] audit: type=1400 audit(2000000005.960:2939): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=596 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.408763][ T3236] loop4: detected capacity change from 0 to 256 [ 100.425351][ T3236] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 100.687206][ T3240] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.694251][ T3240] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.701637][ T3240] device bridge_slave_0 entered promiscuous mode [ 100.708643][ T3240] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.715560][ T3240] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.723260][ T3240] device bridge_slave_1 entered promiscuous mode [ 100.797946][ T311] EXT4-fs (loop3): unmounting filesystem. [ 100.846386][ T3240] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.853274][ T3240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.860371][ T3240] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.864187][ T3253] overlayfs: empty lowerdir [ 100.867146][ T3240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.905233][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.920561][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.930525][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.960171][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.972043][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.978929][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.987168][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.995568][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.002437][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.025232][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.033589][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.049355][ T3240] device veth0_vlan entered promiscuous mode [ 101.056501][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.067479][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.075372][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.087393][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.105451][ T3240] device veth1_macvtap entered promiscuous mode [ 101.117363][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.141553][ T3274] loop0: detected capacity change from 0 to 512 [ 101.148301][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.156523][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.179144][ T3274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 101.189304][ T8] device bridge_slave_0 left promiscuous mode [ 101.195243][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.210218][ T3274] EXT4-fs (loop0): 1 truncate cleaned up [ 101.219590][ T8] device veth1_macvtap left promiscuous mode [ 101.225989][ T8] device veth0_vlan left promiscuous mode [ 101.236127][ T3274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 101.283142][ T3289] loop1: detected capacity change from 0 to 512 [ 101.315306][ T314] EXT4-fs (loop0): unmounting filesystem. [ 101.348075][ T3289] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.364621][ T3289] ext4 filesystem being mounted at /root/syzkaller-testdir462695916/syzkaller.FbzNmJ/93/bus supports timestamps until 2038 (0x7fffffff) [ 101.443647][ T3301] input: syz0 as /devices/virtual/input/input12 [ 101.627043][ T332] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 101.896839][ T313] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.937749][ T3319] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.960248][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 101.986977][ T332] usb 1-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 101.997483][ T332] usb 1-1: too many endpoints for config 0 interface 0 altsetting 199: 83, using maximum allowed: 30 [ 102.008303][ T332] usb 1-1: config 0 interface 0 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 102.021564][ T332] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.186938][ T332] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 102.195847][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.203652][ T332] usb 1-1: Product: syz [ 102.207666][ T332] usb 1-1: Manufacturer: syz [ 102.212027][ T332] usb 1-1: SerialNumber: syz [ 102.217160][ T332] usb 1-1: config 0 descriptor?? [ 102.256869][ T313] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 102.267623][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.298452][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.319317][ T313] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 102.328284][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.337706][ T313] usb 5-1: config 0 descriptor?? [ 102.507415][ T332] usb 1-1: selecting invalid altsetting 0 [ 102.515466][ T332] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 102.539417][ T332] usb 1-1: USB disconnect, device number 13 [ 102.788779][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.799253][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.818066][ T313] hid-generic 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 102.825273][ T313] hid-generic 0003:1B1C:1B3E.0011: unknown main item tag 0x0 [ 102.836838][ T313] hid-generic 0003:1B1C:1B3E.0011: item fetching failed at offset 2/5 [ 102.844989][ T313] hid-generic: probe of 0003:1B1C:1B3E.0011 failed with error -22 [ 103.021264][ T3312] syz-executor.4[3312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.021343][ T3312] syz-executor.4[3312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.036278][ T3349] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.081795][ T313] usb 5-1: USB disconnect, device number 7 [ 103.156298][ T3368] loop0: detected capacity change from 0 to 256 [ 103.258233][ T3373] loop1: detected capacity change from 0 to 512 [ 103.287490][ T3373] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.300934][ T3373] ext4 filesystem being mounted at /root/syzkaller-testdir462695916/syzkaller.FbzNmJ/97/bus supports timestamps until 2038 (0x7fffffff) [ 103.562743][ T3378] netlink: 308 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.638461][ T3383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.647985][ T3383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.688627][ T3389] loop3: detected capacity change from 0 to 512 [ 103.695275][ T3389] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.708052][ T3389] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 103.723372][ T3389] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 103.735598][ T3389] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.751433][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 103.751446][ T28] audit: type=1400 audit(2000000001.270:2948): avc: denied { link } for pid=3388 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 103.815981][ T311] EXT4-fs (loop3): unmounting filesystem. [ 103.857916][ T2031] EXT4-fs (loop1): unmounting filesystem. [ 104.381332][ T28] audit: type=1400 audit(2000000000.010:2949): avc: denied { unmount } for pid=2031 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.549752][ T3424] loop0: detected capacity change from 0 to 256 [ 104.847282][ T28] audit: type=1400 audit(2000000000.480:2950): avc: denied { accept } for pid=3429 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 104.907761][ T3437] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3437 comm=syz-executor.2 [ 104.914049][ T3441] loop3: detected capacity change from 0 to 16 [ 104.928399][ T3441] erofs: (device loop3): mounted with root inode @ nid 36. [ 104.994015][ T3443] loop2: detected capacity change from 0 to 1024 [ 105.013092][ T3443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.034176][ T3443] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.046876][ T3443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 105.070729][ T3443] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c01c, mo2=0003] [ 105.085741][ T3435] loop4: detected capacity change from 0 to 40427 [ 105.092244][ T3443] System zones: 0-1, 3-36 [ 105.098516][ T3443] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 105.107624][ T3435] F2FS-fs (loop4): invalid crc value [ 105.119948][ T3435] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.147409][ T800] EXT4-fs (loop2): unmounting filesystem. [ 105.188834][ T3448] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.216898][ T3435] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 105.226953][ T19] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.299855][ T3422] loop1: detected capacity change from 0 to 131072 [ 105.317142][ T3422] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.348378][ T3422] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 105.686829][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 105.759367][ T3240] syz-executor.4: attempt to access beyond end of device [ 105.759367][ T3240] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 105.775732][ T3240] syz-executor.4: attempt to access beyond end of device [ 105.775732][ T3240] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 105.806287][ T8] kworker/u4:0: attempt to access beyond end of device [ 105.806287][ T8] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 105.837010][ T19] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 105.847096][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.859137][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.870954][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 105.887507][ T19] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 105.896775][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.915280][ T19] usb 4-1: config 0 descriptor?? [ 106.365037][ T3486] loop2: detected capacity change from 0 to 256 [ 106.597833][ T19] hid-generic 0003:1B96:9F0A.0012: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0 [ 106.646238][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.653133][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.660645][ T3485] device bridge_slave_0 entered promiscuous mode [ 106.677120][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.684297][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.692111][ T3485] device bridge_slave_1 entered promiscuous mode [ 106.721882][ T8] device bridge_slave_1 left promiscuous mode [ 106.728128][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.736184][ T8] device bridge_slave_0 left promiscuous mode [ 106.742989][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.744279][ T3488] loop1: detected capacity change from 0 to 40427 [ 106.758723][ T3488] F2FS-fs (loop1): invalid crc value [ 106.758876][ T8] device veth1_macvtap left promiscuous mode [ 106.767633][ T3488] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.769910][ T8] device veth0_vlan left promiscuous mode [ 106.826694][ T3488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.922016][ T3497] loop0: detected capacity change from 0 to 256 [ 106.931552][ T3497] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 106.948909][ T28] audit: type=1400 audit(2000000000.230:2951): avc: denied { mounton } for pid=3496 comm="syz-executor.0" path="/root/syzkaller-testdir3770892637/syzkaller.5vShkm/214/file2/bus" dev="loop0" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.144794][ T3441] hid-generic 0003:1B96:9F0A.0012: pid 3441 passed too short report [ 107.153652][ T3497] loop0: detected capacity change from 256 to 0 [ 107.183899][ T415] loop: Write error at byte offset 9223372036854857727, length 512. [ 107.199632][ C1] I/O error, dev loop0, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 107.209043][ C1] Buffer I/O error on dev loop0, logical block 160, lost sync page write [ 107.217868][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.218060][ T28] audit: type=1400 audit(2000000000.460:2952): avc: denied { remove_name } for pid=3496 comm="syz-executor.0" name="file2" dev="loop0" ino=1048667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.250241][ T28] audit: type=1400 audit(2000000000.460:2953): avc: denied { unlink } for pid=3496 comm="syz-executor.0" name="file2" dev="loop0" ino=1048667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.259909][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.286574][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.296501][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.305796][ C1] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.314975][ T314] exFAT-fs (loop0): error, failed to access to FAT (entry 0x00000005, err:-5) [ 107.323706][ T314] exFAT-fs (loop0): Filesystem has been set read-only [ 107.359064][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.366295][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.388431][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.396690][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.404716][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.411561][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.419402][ T2031] syz-executor.1: attempt to access beyond end of device [ 107.419402][ T2031] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 107.422581][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.433824][ T2031] syz-executor.1: attempt to access beyond end of device [ 107.433824][ T2031] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 107.441986][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.463619][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.470470][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.479591][ T415] kworker/u4:5: attempt to access beyond end of device [ 107.479591][ T415] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 107.496900][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.504696][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.533990][ T3485] device veth0_vlan entered promiscuous mode [ 107.540666][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.549070][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.584659][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.595012][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.602576][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.623718][ T3485] device veth1_macvtap entered promiscuous mode [ 107.630588][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.655813][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.664680][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.788176][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.804711][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.822455][ T3503] device bridge_slave_0 entered promiscuous mode [ 107.834183][ T3503] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.841146][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.848672][ T3503] device bridge_slave_1 entered promiscuous mode [ 107.943583][ T3526] loop4: detected capacity change from 0 to 1024 [ 107.951997][ T3526] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 107.966861][ T1016] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 108.024859][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.038001][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.044828][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.052269][ T3527] device bridge_slave_0 entered promiscuous mode [ 108.058977][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.065805][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.077000][ T3527] device bridge_slave_1 entered promiscuous mode [ 108.086959][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.094515][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.123804][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.132659][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.140732][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.147594][ T1560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.155366][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.163539][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.171525][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.178356][ T1560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.185720][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.193504][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.201232][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.209007][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.225881][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.269631][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.277790][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.295852][ T3503] device veth0_vlan entered promiscuous mode [ 108.303954][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.311660][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.320297][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.327543][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.351776][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.372638][ T3503] device veth1_macvtap entered promiscuous mode [ 108.386629][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.394722][ T3537] loop4: detected capacity change from 0 to 512 [ 108.399851][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.408841][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.411378][ T3537] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 108.415667][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.415819][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.431709][ T3537] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 108.438826][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.445661][ T3537] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.457585][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.484238][ T8] device bridge_slave_1 left promiscuous mode [ 108.490263][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.497732][ T8] device bridge_slave_0 left promiscuous mode [ 108.503671][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.511850][ T3485] EXT4-fs (loop4): unmounting filesystem. [ 108.523173][ T8] device bridge_slave_1 left promiscuous mode [ 108.532414][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.543691][ T8] device bridge_slave_0 left promiscuous mode [ 108.550159][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.560972][ T8] device veth1_macvtap left promiscuous mode [ 108.567766][ T8] device veth0_vlan left promiscuous mode [ 108.575107][ T3549] loop3: detected capacity change from 0 to 1024 [ 108.583045][ T8] device veth1_macvtap left promiscuous mode [ 108.588967][ T8] device veth0_vlan left promiscuous mode [ 108.603574][ T3549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.635025][ T3557] loop2: detected capacity change from 0 to 512 [ 108.644137][ T3557] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 108.665537][ T3557] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.2: missing EA_INODE flag [ 108.678355][ T3557] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 2 err=-117 [ 108.692924][ T3557] EXT4-fs (loop2): 1 orphan inode deleted [ 108.698571][ T3557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.976671][ T1016] usb 4-1: device descriptor read/64, error -71 [ 109.146945][ T1016] usb 4-1: device reset changed ep0 maxpacket size! [ 109.153828][ T332] usb 4-1: USB disconnect, device number 8 [ 109.249449][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.257589][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.265380][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.273167][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.281243][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.289546][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.297569][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.306874][ T332] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 109.328106][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.336576][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.348773][ T3527] device veth0_vlan entered promiscuous mode [ 109.354857][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.363567][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.385590][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.397152][ T3564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.407911][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.415326][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.422623][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.431102][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.439350][ T3527] device veth1_macvtap entered promiscuous mode [ 109.453850][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.461568][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.484186][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.520440][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.521814][ T800] EXT4-fs (loop2): unmounting filesystem. [ 109.535232][ T1016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.560800][ T3575] tipc: Started in network mode [ 109.586989][ T3575] tipc: Node identity f0, cluster identity 4711 [ 109.593148][ T3575] tipc: Node number set to 240 [ 109.617281][ T3578] loop4: detected capacity change from 0 to 16 [ 109.624230][ T3578] erofs: (device loop4): mounted with root inode @ nid 36. [ 109.659977][ T3584] loop1: detected capacity change from 0 to 256 [ 109.687112][ T332] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.754179][ T3586] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 109.806070][ T3584] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 109.838860][ T332] usb 4-1: New USB device found, idVendor=3bd3, idProduct=a4a1, bcdDevice= 0.40 [ 109.860742][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.873935][ T332] usb 4-1: SerialNumber: syz [ 109.927129][ T332] usb 4-1: bad CDC descriptors [ 109.936948][ T3584] loop1: detected capacity change from 256 to 0 [ 109.943321][ T8] loop: Write error at byte offset 9223372036854857727, length 512. [ 109.951216][ C1] I/O error, dev loop1, sector 160 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 109.960634][ C1] Buffer I/O error on dev loop1, logical block 160, lost sync page write [ 109.968979][ C0] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.978886][ C0] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.991593][ C0] I/O error, dev loop1, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.001434][ T3527] exFAT-fs (loop1): error, failed to access to FAT (entry 0x00000005, err:-5) [ 110.010118][ T3527] exFAT-fs (loop1): Filesystem has been set read-only [ 110.027182][ T313] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.059608][ T8] tipc: Left network mode [ 110.132413][ T807] usb 4-1: USB disconnect, device number 9 [ 110.183817][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.190843][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.198199][ T3591] device bridge_slave_0 entered promiscuous mode [ 110.206513][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.213708][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.220894][ T3591] device bridge_slave_1 entered promiscuous mode [ 110.286839][ T313] usb 5-1: Using ep0 maxpacket: 32 [ 110.307668][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.315194][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.339486][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.347940][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.355967][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.362836][ T1560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.370039][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.378544][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.386450][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.393212][ T1560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.400534][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.408191][ T28] audit: type=1326 audit(2000000003.690:2954): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3595 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86cee7cea9 code=0x0 [ 110.424352][ T3602] loop2: detected capacity change from 0 to 1024 [ 110.432250][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.438758][ T3602] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 110.445931][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.461878][ T313] usb 5-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 110.472062][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.483033][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.490577][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.500393][ T313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 110.513025][ T313] usb 5-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 110.521845][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.530294][ T313] usb 5-1: config 0 descriptor?? [ 110.540151][ T3591] device veth0_vlan entered promiscuous mode [ 110.548250][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.555595][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.563786][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.571951][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.580311][ T807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.588975][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.596247][ T1560] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.616120][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.625723][ T3591] device veth1_macvtap entered promiscuous mode [ 110.639500][ T3602] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.652587][ T311] EXT4-fs (loop3): unmounting filesystem. [ 110.667227][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 110.675383][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 110.683491][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.692364][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.753637][ T28] audit: type=1326 audit(2000000004.030:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.786820][ T28] audit: type=1326 audit(2000000004.030:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.818357][ T28] audit: type=1326 audit(2000000004.040:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.842859][ T3613] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.844353][ T28] audit: type=1326 audit(2000000004.040:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.877016][ T28] audit: type=1326 audit(2000000004.040:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.901599][ T8] device bridge_slave_1 left promiscuous mode [ 110.901695][ T28] audit: type=1326 audit(2000000004.040:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.907803][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.932791][ T28] audit: type=1326 audit(2000000004.040:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.962282][ T28] audit: type=1326 audit(2000000004.040:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.962388][ T8] device bridge_slave_0 left promiscuous mode [ 110.986117][ T28] audit: type=1326 audit(2000000004.040:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3608 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac4127cea9 code=0x7ffc0000 [ 110.994060][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.023732][ T8] device veth1_macvtap left promiscuous mode [ 111.029709][ T8] device veth0_vlan left promiscuous mode [ 111.071417][ T313] hid-generic 0003:1B96:9F0A.0013: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.4-1/input0 [ 111.128697][ T3615] tipc: Started in network mode [ 111.133494][ T3615] tipc: Node identity f0, cluster identity 4711 [ 111.140059][ T3615] tipc: Node number set to 240 [ 111.277389][ T3640] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 111.305021][ T3644] loop2: detected capacity change from 0 to 1024 [ 111.490724][ T3644] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 111.590467][ T3650] tipc: Started in network mode [ 111.595297][ T3650] tipc: Node identity f0, cluster identity 4711 [ 111.601441][ T3650] tipc: Node number set to 240 [ 111.615867][ T3653] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 111.655676][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.676942][ T3578] hid-generic 0003:1B96:9F0A.0013: pid 3578 passed too short report [ 111.728519][ T3669] loop3: detected capacity change from 0 to 512 [ 111.737180][ T3669] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 111.752617][ T3669] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 111.764890][ T3669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.795625][ T311] EXT4-fs (loop3): unmounting filesystem. [ 111.914934][ T3682] tipc: Started in network mode [ 111.919787][ T3682] tipc: Node identity f0, cluster identity 4711 [ 111.925859][ T3682] tipc: Node number set to 240 [ 111.985487][ T3694] loop0: detected capacity change from 0 to 512 [ 111.994673][ T3694] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 111.998831][ T3688] loop3: detected capacity change from 0 to 8192 [ 112.013945][ T3694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.0: missing EA_INODE flag [ 112.026871][ T3694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 2 err=-117 [ 112.039460][ T3694] EXT4-fs (loop0): 1 orphan inode deleted [ 112.047667][ T3694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.056449][ T3688] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.082495][ T3701] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 112.184075][ T415] tipc: Disabling bearer [ 112.189345][ T415] tipc: Left network mode [ 112.706999][ T313] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 113.080360][ T3503] EXT4-fs (loop0): unmounting filesystem. [ 113.128826][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.135785][ T3723] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.143590][ T3723] device bridge_slave_0 entered promiscuous mode [ 113.150733][ T3742] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 113.159261][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.166177][ T3723] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.173313][ T3723] device bridge_slave_1 entered promiscuous mode [ 113.242364][ T3757] syz-executor.4[3757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.242439][ T3757] syz-executor.4[3757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.248402][ T3723] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.272224][ T3723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.279311][ T3723] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.286090][ T3723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.294084][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.301822][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.303521][ T3757] syz-executor.4[3757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.309097][ T3757] syz-executor.4[3757] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.338380][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.357308][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.366664][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.379906][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.388026][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.394863][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.408041][ T415] device bridge_slave_1 left promiscuous mode [ 113.414121][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.424153][ T415] device bridge_slave_0 left promiscuous mode [ 113.430377][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.438101][ T415] device veth1_macvtap left promiscuous mode [ 113.443905][ T415] device veth0_vlan left promiscuous mode [ 113.463767][ T3766] loop3: detected capacity change from 0 to 512 [ 113.472486][ T3766] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 113.485470][ T3766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.3: missing EA_INODE flag [ 113.497555][ T3766] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 2 err=-117 [ 113.510802][ T3766] EXT4-fs (loop3): 1 orphan inode deleted [ 113.516865][ T3766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.956948][ T313] usb 5-1: device descriptor read/64, error -71 [ 114.019983][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.028568][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.036477][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.043330][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.054877][ T3779] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 114.070587][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.079255][ T3789] syz-executor.0[3789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.079316][ T3789] syz-executor.0[3789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.080384][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.110856][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.119387][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.127144][ T313] usb 5-1: device reset changed ep0 maxpacket size! [ 114.133743][ T19] usb 5-1: USB disconnect, device number 8 [ 114.146957][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.155311][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.165645][ T3723] device veth0_vlan entered promiscuous mode [ 114.172121][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.184544][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.200222][ T3723] device veth1_macvtap entered promiscuous mode [ 114.208051][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.215282][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.222906][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.234066][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.244421][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 114.276999][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.285215][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.295227][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.304549][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 114.323501][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.349577][ T311] EXT4-fs (loop3): unmounting filesystem. [ 114.368257][ T3818] syz-executor.3[3818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.368323][ T3818] syz-executor.3[3818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.597080][ T3828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.977262][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.995716][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.021788][ T19] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.039638][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.056029][ T19] usb 5-1: config 0 descriptor?? [ 115.361389][ T3875] device sit0 entered promiscuous mode [ 115.367833][ T3875] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 115.375749][ T3875] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.447899][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 115.447913][ T28] audit: type=1326 audit(2000000008.730:3019): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x0 [ 115.767819][ T19] hid (null): bogus close delimiter [ 115.816910][ T19] usb 5-1: language id specifier not provided by device, defaulting to English [ 115.949796][ T3901] netem: change failed [ 116.266398][ T3903] device sit0 entered promiscuous mode [ 116.273916][ T3903] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 116.282075][ T3903] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.444167][ T3928] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.456561][ T3928] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.507402][ T3935] serio: Serial port pts0 [ 116.528430][ T3936] syz-executor.2[3936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.528494][ T3936] syz-executor.2[3936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.542477][ T3936] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 116.864567][ T19] uclogic 0003:256C:006D.0014: failed retrieving string descriptor #100: -71 [ 116.874321][ T19] uclogic 0003:256C:006D.0014: failed retrieving pen parameters: -71 [ 116.883505][ T19] uclogic 0003:256C:006D.0014: failed probing pen v1 parameters: -71 [ 116.904479][ T19] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 116.914569][ T19] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 116.923623][ T19] usb 5-1: USB disconnect, device number 9 [ 116.937349][ T3948] device syzkaller0 entered promiscuous mode [ 116.987977][ T3951] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.104489][ T3963] loop1: detected capacity change from 0 to 2048 [ 117.125150][ T3963] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 117.218445][ T28] audit: type=1400 audit(2000000010.500:3020): avc: denied { connect } for pid=3966 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.256863][ T28] audit: type=1400 audit(2000000010.530:3021): avc: denied { mount } for pid=3966 comm="syz-executor.1" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.290937][ T3965] loop2: detected capacity change from 0 to 40427 [ 117.300141][ T3965] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.338087][ T3965] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.346525][ T28] audit: type=1400 audit(2000000010.530:3022): avc: denied { write } for pid=3966 comm="syz-executor.1" path="socket:[29567]" dev="sockfs" ino=29567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 117.349837][ T3973] loop3: detected capacity change from 0 to 16 [ 117.378352][ T3965] F2FS-fs (loop2): invalid crc value [ 117.390509][ T3973] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.398362][ T3965] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.409335][ T3980] device syzkaller0 entered promiscuous mode [ 117.451735][ T3965] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.460920][ T3965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.544700][ T28] audit: type=1400 audit(2000000010.820:3023): avc: denied { map } for pid=3964 comm="syz-executor.2" path="/root/syzkaller-testdir2153343600/syzkaller.NtswhQ/23/file0/cgroup.controllers" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.575589][ T3993] loop0: detected capacity change from 0 to 1024 [ 117.578742][ T3965] syz-executor.2: attempt to access beyond end of device [ 117.578742][ T3965] loop2: rw=2049, sector=77824, nr_sectors = 2128 limit=40427 [ 117.582631][ T3993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.611091][ T3965] syz-executor.2: attempt to access beyond end of device [ 117.611091][ T3965] loop2: rw=2049, sector=79952, nr_sectors = 1968 limit=40427 [ 117.637463][ T4002] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.651053][ T3993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 117.674383][ T3965] syz-executor.2: attempt to access beyond end of device [ 117.674383][ T3965] loop2: rw=2049, sector=49152, nr_sectors = 2064 limit=40427 [ 117.697052][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.718929][ T3503] EXT4-fs (loop0): unmounting filesystem. [ 117.729049][ T4008] device pim6reg1 entered promiscuous mode [ 117.742705][ T3965] syz-executor.2: attempt to access beyond end of device [ 117.742705][ T3965] loop2: rw=2049, sector=51216, nr_sectors = 2032 limit=40427 [ 117.768480][ T4013] loop0: detected capacity change from 0 to 128 [ 117.776151][ T3965] syz-executor.2: attempt to access beyond end of device [ 117.776151][ T3965] loop2: rw=2049, sector=57344, nr_sectors = 2064 limit=40427 [ 117.805661][ T3965] syz-executor.2: attempt to access beyond end of device [ 117.805661][ T3965] loop2: rw=2049, sector=59408, nr_sectors = 2072 limit=40427 [ 117.822947][ T4015] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 117.836549][ T3965] syz-executor.2: attempt to access beyond end of device [ 117.836549][ T3965] loop2: rw=2049, sector=61480, nr_sectors = 1688 limit=40427 [ 117.873486][ T3994] syz-executor.2: attempt to access beyond end of device [ 117.873486][ T3994] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 117.931890][ T28] audit: type=1400 audit(2000000011.210:3024): avc: denied { ioctl } for pid=4022 comm="syz-executor.4" path="/root/syzkaller-testdir2781043908/syzkaller.YJ560b/29/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.996835][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 118.005941][ T415] kworker/u4:5: attempt to access beyond end of device [ 118.005941][ T415] loop2: rw=1, sector=77824, nr_sectors = 8 limit=40427 [ 118.014157][ T4027] serio: Serial port pts0 [ 118.088701][ T4030] loop0: detected capacity change from 0 to 2048 [ 118.137059][ T19] usb 4-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 118.137283][ T4030] loop0: p1 < > p4 [ 118.147190][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.147221][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.167273][ T4030] loop0: p4 size 8388608 extends beyond EOD, truncated [ 118.171065][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 118.191810][ T19] usb 4-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 118.213514][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.218517][ T28] audit: type=1400 audit(2000000011.500:3025): avc: denied { read } for pid=4029 comm="syz-executor.0" name="loop0p4" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.245366][ T19] usb 4-1: config 0 descriptor?? [ 118.263231][ T28] audit: type=1400 audit(2000000000.000:3026): avc: denied { open } for pid=4029 comm="syz-executor.0" path="/dev/loop0p4" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.287086][ T28] audit: type=1400 audit(2000000000.000:3027): avc: denied { ioctl } for pid=4029 comm="syz-executor.0" path="/dev/loop0p4" dev="devtmpfs" ino=608 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.317977][ T4030] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 118.331508][ T4039] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 118.349735][ T28] audit: type=1400 audit(2000000000.080:3028): avc: denied { write } for pid=4029 comm="syz-executor.0" name="loop0p4" dev="devtmpfs" ino=608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 118.386469][ T4042] loop0: detected capacity change from 0 to 128 [ 118.421548][ T4044] device pim6reg1 entered promiscuous mode [ 118.509395][ T4049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.848532][ T19] hid-generic 0003:1B96:9F0A.0015: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.3-1/input0 [ 118.860631][ T4057] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 4095 (only 8 groups) [ 118.876111][ T4053] loop4: detected capacity change from 0 to 40427 [ 119.157504][ T4053] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 119.166461][ T4053] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 119.176212][ T4053] F2FS-fs (loop4): invalid crc value [ 119.192513][ T4053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.245957][ T4072] loop2: detected capacity change from 0 to 1024 [ 119.246892][ T4053] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 119.257330][ T4072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.259336][ T4053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.327248][ T4072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.361008][ T4053] syz-executor.4: attempt to access beyond end of device [ 119.361008][ T4053] loop4: rw=2049, sector=77824, nr_sectors = 2064 limit=40427 [ 119.416468][ T3723] EXT4-fs (loop2): unmounting filesystem. [ 119.429098][ T4075] loop1: detected capacity change from 0 to 40427 [ 119.434065][ T4088] device pim6reg1 entered promiscuous mode [ 119.441316][ T4075] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 119.451416][ T4075] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.466929][ T3973] hid-generic 0003:1B96:9F0A.0015: pid 3973 passed too short report [ 119.477459][ T4090] loop2: detected capacity change from 0 to 2048 [ 119.494025][ T4075] F2FS-fs (loop1): invalid crc value [ 119.503569][ T4075] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.517139][ T4090] loop2: p1 < > p4 [ 119.521183][ T4090] loop2: p4 size 8388608 extends beyond EOD, truncated [ 119.609291][ T4099] fuse: Unknown parameter '017777777777777777777770x0000000000000003' [ 119.626907][ T4075] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 119.634111][ T4090] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 119.638113][ T4075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.025491][ T4117] loop4: detected capacity change from 0 to 256 [ 120.042005][ T4117] FAT-fs (loop4): Directory bread(block 64) failed [ 120.048594][ T4117] FAT-fs (loop4): Directory bread(block 65) failed [ 120.055002][ T4117] FAT-fs (loop4): Directory bread(block 66) failed [ 120.058404][ T3591] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 120.061552][ T3591] F2FS-fs (loop1): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 120.061587][ T4117] FAT-fs (loop4): Directory bread(block 67) failed [ 120.070157][ T3591] F2FS-fs (loop1): Issue discard(10240, 10240, 512) failed, ret: -5 [ 120.077091][ T4117] FAT-fs (loop4): Directory bread(block 68) failed [ 120.097615][ T4117] FAT-fs (loop4): Directory bread(block 69) failed [ 120.104098][ T4117] FAT-fs (loop4): Directory bread(block 70) failed [ 120.110495][ T4117] FAT-fs (loop4): Directory bread(block 71) failed [ 120.116894][ T4117] FAT-fs (loop4): Directory bread(block 72) failed [ 120.123348][ T4117] FAT-fs (loop4): Directory bread(block 73) failed [ 120.296857][ T2947] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 120.333570][ T4150] loop1: detected capacity change from 0 to 256 [ 120.344869][ T4150] FAT-fs (loop1): Directory bread(block 64) failed [ 120.353834][ T4150] FAT-fs (loop1): Directory bread(block 65) failed [ 120.360842][ T4150] FAT-fs (loop1): Directory bread(block 66) failed [ 120.367602][ T4150] FAT-fs (loop1): Directory bread(block 67) failed [ 120.374591][ T4150] FAT-fs (loop1): Directory bread(block 68) failed [ 120.384215][ T4150] FAT-fs (loop1): Directory bread(block 69) failed [ 120.390892][ T4150] FAT-fs (loop1): Directory bread(block 70) failed [ 120.397574][ T4150] FAT-fs (loop1): Directory bread(block 71) failed [ 120.413609][ T4150] FAT-fs (loop1): Directory bread(block 72) failed [ 120.420097][ T4150] FAT-fs (loop1): Directory bread(block 73) failed [ 120.461231][ T4163] loop0: detected capacity change from 0 to 512 [ 120.520046][ T4163] EXT4-fs: Ignoring removed oldalloc option [ 120.537210][ T4163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b802e02d, mo2=0002] [ 120.556919][ T4163] System zones: 1-12 [ 120.567080][ T4163] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 120.585780][ T4167] device syzkaller0 entered promiscuous mode [ 120.602400][ T4163] EXT4-fs (loop0): Remounting filesystem read-only [ 120.611620][ T4172] SELinux: Context system_u:object_r:crypt_device_t:s0 is not valid (left unmapped). [ 120.621304][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 120.621316][ T28] audit: type=1400 audit(2000000002.370:3032): avc: denied { relabelto } for pid=4161 comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 120.629022][ T4163] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 7 (level 2) [ 120.669084][ T28] audit: type=1400 audit(2000000002.420:3033): avc: denied { write } for pid=4161 comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 120.716829][ T28] audit: type=1400 audit(2000000002.440:3034): avc: denied { open } for pid=4161 comm="syz-executor.4" path="/root/syzkaller-testdir2781043908/syzkaller.YJ560b/44/memory.events" dev="sda1" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:crypt_device_t:s0" [ 120.717028][ T4163] EXT4-fs (loop0): 1 truncate cleaned up [ 120.754338][ T4163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.780530][ T3503] EXT4-fs (loop0): unmounting filesystem. [ 120.786361][ C0] softirq: huh, entered softirq 3 NET_RX ffffffff840ba070 with preempt_count 00000103, exited with 00000102? [ 120.798172][ T287] BUG: scheduling while atomic: syz-fuzzer/287/0x00000002 [ 120.805101][ T287] Modules linked in: [ 120.808858][ T287] Preemption disabled at: [ 120.808867][ T287] [] release_sock+0x30/0x1b0 [ 120.819116][ T287] CPU: 0 PID: 287 Comm: syz-fuzzer Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 120.828528][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 120.838432][ T287] Call Trace: [ 120.841544][ T287] [ 120.844322][ T287] dump_stack_lvl+0x151/0x1b7 [ 120.848835][ T287] ? release_sock+0x30/0x1b0 [ 120.853275][ T287] ? release_sock+0x30/0x1b0 [ 120.857692][ T287] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 120.862991][ T287] ? release_sock+0x30/0x1b0 [ 120.866904][ T28] audit: type=1326 audit(2000000002.580:3035): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4174 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac4127cea9 code=0x0 [ 120.867408][ T287] dump_stack+0x15/0x1b [ 120.894927][ T287] __schedule_bug+0x195/0x260 [ 120.899439][ T287] ? cpu_util_update_eff+0x10e0/0x10e0 [ 120.904732][ T287] ? ring_buffer_lock_reserve+0x1b68/0x1f80 [ 120.910464][ T287] __schedule+0xcf7/0x1550 [ 120.914712][ T287] ? timerqueue_add+0x250/0x270 [ 120.919405][ T287] ? __sched_text_start+0x8/0x8 [ 120.924088][ T287] schedule+0xc3/0x180 [ 120.927989][ T287] schedule_hrtimeout_range_clock+0x1ef/0x360 [ 120.933894][ T287] ? hrtimer_nanosleep_restart+0x170/0x170 [ 120.939534][ T287] ? select_estimate_accuracy+0x2f3/0x3f0 [ 120.945262][ T287] ? __remove_hrtimer+0x4d0/0x4d0 [ 120.950127][ T287] ? _raw_write_lock_irq+0xa5/0x170 [ 120.955157][ T287] ? _raw_write_lock_irqsave+0x1e0/0x1e0 [ 120.960628][ T287] schedule_hrtimeout_range+0x2a/0x40 [ 120.965834][ T287] do_epoll_wait+0x1919/0x1ad0 [ 120.970442][ T287] ? vbin_printf+0x1bc0/0x1bc0 [ 120.975122][ T287] ? ep_destroy_wakeup_source+0x70/0x70 [ 120.980590][ T287] ? bpf_bprintf_cleanup+0x48/0x60 [ 120.985548][ T287] ? bpf_trace_printk+0x1be/0x300 [ 120.990401][ T287] ? bpf_trace_run2+0xe9/0x290 [ 120.994995][ T287] ? do_epoll_wait+0x1ad0/0x1ad0 [ 120.999769][ T287] ? bpf_trace_run2+0xe9/0x290 [ 121.004370][ T287] ? timespec64_add_safe+0x1ba/0x220 [ 121.009492][ T287] ? nsecs_to_jiffies+0x30/0x30 [ 121.014180][ T287] do_epoll_pwait+0x5c/0x1f0 [ 121.018607][ T287] __x64_sys_epoll_pwait+0x2b4/0x300 [ 121.023728][ T287] ? __ia32_sys_epoll_wait+0x2a0/0x2a0 [ 121.029020][ T287] ? __bpf_trace_sys_enter+0x62/0x70 [ 121.034143][ T287] ? syscall_enter_from_user_mode+0x12c/0x190 [ 121.040049][ T287] do_syscall_64+0x3d/0xb0 [ 121.044295][ T287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.050031][ T287] RIP: 0033:0x40720e [ 121.053757][ T287] Code: 48 83 ec 38 e8 13 00 00 00 48 83 c4 38 5d c3 cc cc cc cc cc cc cc cc cc cc cc cc cc 49 89 f2 48 89 fa 48 89 ce 48 89 df 0f 05 <48> 3d 01 f0 ff ff 76 15 48 f7 d8 48 89 c1 48 c7 c0 ff ff ff ff 48 [ 121.073305][ T287] RSP: 002b:000000c000087748 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 2033/05/18 03:33:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 121.081552][ T287] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000040720e [ 121.089364][ T287] RDX: 0000000000000080 RSI: 000000c000087818 RDI: 0000000000000004 [ 121.097177][ T287] RBP: 000000c000087790 R08: 0000000000000000 R09: 0000000000000000 [ 121.104986][ T287] R10: 0000000000000073 R11: 0000000000000246 R12: 000000c000087820 [ 121.112800][ T287] R13: 11ef101ef111efef R14: 000000c000006d00 R15: 000000000000006a [ 121.120615][ T287]