last executing test programs: 4.884304691s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000280)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x11012, r2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x20a, &(0x7f0000000e40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 4.784119926s ago: executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010400010902"], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x77) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.484791598s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4b}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, 0x0}, 0x0) 2.850430537s ago: executing program 3: pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) statfs(&(0x7f0000000240)='./file0\x00', 0x0) 2.835760499s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.811614603s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) sched_setscheduler(r1, 0x5, &(0x7f0000000300)=0xe7ad) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000007c0)=0x8001) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x9) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @private}}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'dummy0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x101140, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) fchown(r3, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYBLOB="a756fab11b1394fb01003e8f98fa5e3e1e8c0445684dd4b7187fa77783748c9ddc235432e731d3c82e40d5134ddf9a207e1eb2052df492c23fce70f06d9c6a58246c337c5f4eebd753aff1630fb954c5f7e72dadad7f291a", @ANYRES64], 0x100000530) 1.932507389s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x31, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@lld}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000600000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002100010000000000000000000a00000000000002"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r4, &(0x7f0000000780)="d9", &(0x7f0000000900)=@udp=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000300)='kfree\x00'}, 0x10) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='quota,alloc_mode=default,usrjquota=\\\'%#--+[:,flush_merge,resuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6261636b67726f756e645f67633d73796e632c6e6f6c617a7974696d652c6a71666d743d76667376312c657874656e745f63616368652c6772706a71756f74613d666c7573685f6d657267652c66617374626f6f742c6e6f666c7573685f6d657267652c0038908b64095c58226c3d76204cc8c8f778a8cd7e32a4d42314eb8bce7a97ec5889ff28465d04debeed280593fe106e3c1d97275aef6d029eec69fc67ea099b92b81d"], 0x1, 0x54ff, &(0x7f0000000a40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000312000000120333d7"], 0x0, 0x0, 0x0}, 0x0) 1.450847694s ago: executing program 4: r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 1.422069219s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='ext4_writepages\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r4, &(0x7f0000000980), 0x12) 1.399375072s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800002c1001c0"]) 1.390268604s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00', r2}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 1.3537755s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r2, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) 1.304338747s ago: executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_BMAP(r2, &(0x7f0000000280)={0x18}, 0x18) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 970.22842ms ago: executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000a00)={0x1, 0x0, [{0x0, 0xb3, &(0x7f0000000900)=""/179}]}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000005c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) 968.676969ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='ext4_writepages\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r4, &(0x7f0000000980), 0x12) 944.313123ms ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4b}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0x14, 0x0, 0x0}, 0x0) 915.748827ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kvm_unmap_hva_range\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000b3c000/0x4000)=nil, 0x4000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) 856.844977ms ago: executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1f}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000340)={0x2, 0x0, '\x00', 0x0, 0x0}) timerfd_create(0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write$evdev(r1, &(0x7f0000000380), 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000c00)=""/4096) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000140)) open(&(0x7f0000000300)='./file0\x00', 0x622000, 0xada66a977c02d739) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000003c0)=0xae) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) connect$inet6(r6, &(0x7f0000004540)={0xa, 0x0, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000100), 0x40000c4, 0x0) 815.745163ms ago: executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42040, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000280)) r3 = fcntl$dupfd(r1, 0x0, r2) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="fb", 0x1, 0xc000, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0xb, 0x0, &(0x7f0000000000)) 808.443004ms ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000900008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000026c0)=ANY=[], 0x0) 712.25814ms ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000300)={0x9}) 338.743247ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000004b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff60, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 200.079349ms ago: executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002224000000574b4c3fbe06e53f070c0000002abd00070900be0083000000878d968619"], 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x25, 0x336, &(0x7f00000009c0)="$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") openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) 86.432556ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}]}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 76.016268ms ago: executing program 0: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) 70.852329ms ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) symlink(&(0x7f0000000340)='./file2\x00', &(0x7f0000000100)='./bus\x00') open(&(0x7f0000000d40)='./file0\x00', 0x40c2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file0\x00') open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') unlinkat(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/4109, 0x100d) 62.21736ms ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x10, 0x6, 0x5f0, 0x0, 0x450, 0x450, 0x2b0, 0x380, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@private1, @ipv4, [], [], 'caif0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0x108, 0x0, {0x7a00000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 57.536741ms ago: executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) link(0x0, 0x0) 45.086043ms ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='kvm_unmap_hva_range\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000b3c000/0x4000)=nil, 0x4000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) 0s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000008980)={0x0, 0x0, &(0x7f0000006880)=[{&(0x7f0000003cc0)={0x14, 0x1f, 0x1, 0x0, 0x0, "", [@generic='\a']}, 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 54.701980][ T1958] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.716569][ T28] audit: type=1400 audit(1718472074.439:9148): avc: denied { unlink } for pid=1957 comm="syz-executor.4" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 54.718464][ T1958] Quota error (device loop4): write_blk: dquota write failed [ 54.746609][ T1958] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 54.771699][ T1158] EXT4-fs (loop4): unmounting filesystem. [ 54.818887][ T1991] 9pnet_fd: p9_fd_create_unix (1991): address too long: ./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 54.863840][ T2001] loop4: detected capacity change from 0 to 512 [ 54.938884][ T2001] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.947247][ T2001] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.961084][ T2001] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 54.975099][ T2001] Quota error (device loop4): write_blk: dquota write failed [ 54.982536][ T2001] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 54.991524][ T2001] Quota error (device loop4): write_blk: dquota write failed [ 54.998919][ T2001] EXT4-fs (loop4): 1 truncate cleaned up [ 55.004591][ T2001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.019156][ T1158] EXT4-fs (loop4): unmounting filesystem. [ 55.192150][ T2019] tipc: Enabling of bearer rejected, failed to enable media [ 55.209970][ T2021] loop3: detected capacity change from 0 to 1024 [ 55.216640][ T2021] EXT4-fs: Ignoring removed i_version option [ 55.230582][ T2021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 55.302537][ T313] EXT4-fs (loop3): unmounting filesystem. [ 55.369328][ T1624] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 55.432143][ T2034] loop0: detected capacity change from 0 to 8192 [ 55.438923][ T2034] FAT-fs (loop0): Unrecognized mount option "GPL" or missing value [ 55.449530][ T2032] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.456370][ T2032] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.463574][ T2032] device bridge_slave_0 entered promiscuous mode [ 55.470201][ T2032] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.477081][ T2032] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.484653][ T2032] device bridge_slave_1 entered promiscuous mode [ 55.551463][ T2032] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.558345][ T2032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.565464][ T2032] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.572225][ T2032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.601048][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.608724][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.616189][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.624529][ T2034] loop0: detected capacity change from 0 to 40427 [ 55.633526][ T2034] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.639302][ T1624] usb 5-1: Using ep0 maxpacket: 16 [ 55.645565][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.653744][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.660608][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.667904][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.669011][ T2034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 55.676498][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.683135][ T431] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 55.689850][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.706526][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.714899][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.720460][ T2034] syz-executor.0: attempt to access beyond end of device [ 55.720460][ T2034] loop0: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 55.722896][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.748989][ T2032] device veth0_vlan entered promiscuous mode [ 55.758491][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.766325][ T312] syz-executor.0: attempt to access beyond end of device [ 55.766325][ T312] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.766423][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.787546][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.794860][ T1624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.806258][ T1624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.815983][ T1624] usb 5-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 55.825587][ T2032] device veth1_macvtap entered promiscuous mode [ 55.831774][ T1624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.851200][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.862965][ T1624] usb 5-1: config 0 descriptor?? [ 55.867996][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.876936][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.877622][ T2049] incfs: Backing dir is not set, filesystem can't be mounted. [ 55.907694][ T2049] incfs: mount failed -2 [ 55.921755][ T678] device bridge_slave_1 left promiscuous mode [ 55.928733][ T2049] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 55.934220][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.943555][ T431] usb 3-1: Using ep0 maxpacket: 16 [ 55.955076][ T2061] loop3: detected capacity change from 0 to 512 [ 55.962109][ T678] device bridge_slave_0 left promiscuous mode [ 55.968760][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.976181][ T2061] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.985525][ T678] device veth1_macvtap left promiscuous mode [ 55.991460][ T2061] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.000577][ T678] device veth0_vlan left promiscuous mode [ 56.283950][ T2066] kvm: pic: non byte write [ 56.329329][ T431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.331492][ T2061] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 56.340148][ T431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.340175][ T431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 56.374508][ T431] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 56.384036][ T431] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 56.397151][ T2061] EXT4-fs (loop3): 1 truncate cleaned up [ 56.403666][ T2061] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 56.428202][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 56.469721][ T431] usb 3-1: New USB device found, idVendor=0525, idProduct=20a1, bcdDevice= 0.86 [ 56.488797][ T431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 56.496655][ T431] usb 3-1: SerialNumber: syz [ 56.526887][ T2071] kvm: emulating exchange as write [ 56.535935][ T1624] wacom 0003:056A:0003.0008: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 56.539665][ T431] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 56.552238][ T1624] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0003.0008/input/input15 [ 56.640860][ T1624] wacom 0003:056A:0003.0008: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.4-1/input0 [ 56.734699][ T431] usb 5-1: USB disconnect, device number 5 [ 56.736947][ T2065] loop1: detected capacity change from 0 to 131072 [ 56.747520][ T2065] F2FS-fs (loop1): Wrong segment_count / block_count (65567 > 16384) [ 56.753754][ T1369] usb 3-1: USB disconnect, device number 6 [ 56.755621][ T2065] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 56.775289][ T2065] F2FS-fs (loop1): Found nat_bits in checkpoint [ 56.806446][ T2081] device pim6reg1 entered promiscuous mode [ 56.813080][ T2065] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 56.819966][ T2065] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 56.897309][ T2086] tmpfs: Unknown parameter 'd' [ 57.071166][ T2095] loop3: detected capacity change from 0 to 1024 [ 57.173053][ T2095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 57.206748][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 57.402901][ T2114] binder: 2113:2114 ioctl 400c620e 200002c0 returned -22 [ 57.457630][ T2117] loop2: detected capacity change from 0 to 8192 [ 57.465102][ T2117] FAT-fs (loop2): Unrecognized mount option "GPL" or missing value [ 57.526100][ T2136] devtmpfs: Unknown parameter 'rt' [ 57.617863][ T2117] loop2: detected capacity change from 0 to 40427 [ 57.627168][ T2117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 57.650045][ T2117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 57.670271][ T2117] syz-executor.2: attempt to access beyond end of device [ 57.670271][ T2117] loop2: rw=34817, sector=77824, nr_sectors = 2056 limit=40427 [ 57.700856][ T1029] syz-executor.2: attempt to access beyond end of device [ 57.700856][ T1029] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 57.750405][ T1369] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 57.800094][ T2154] binder: 2153:2154 ioctl 400c620e 200002c0 returned -22 [ 57.809323][ T1624] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 57.848005][ T2162] loop0: detected capacity change from 0 to 256 [ 57.872392][ T2168] loop0: detected capacity change from 0 to 1024 [ 57.878972][ T2168] EXT4-fs: Ignoring removed i_version option [ 57.890902][ T2168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.918431][ T2170] loop2: detected capacity change from 0 to 8192 [ 57.925154][ T2170] FAT-fs (loop2): Unrecognized mount option "GPL" or missing value [ 57.982032][ T312] EXT4-fs (loop0): unmounting filesystem. [ 57.999322][ T1369] usb 4-1: Using ep0 maxpacket: 16 [ 58.059296][ T1624] usb 5-1: Using ep0 maxpacket: 16 [ 58.119378][ T1369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.135685][ T1369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.148184][ T1369] usb 4-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 58.158851][ T1369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.168927][ T2170] loop2: detected capacity change from 0 to 40427 [ 58.169176][ T1369] usb 4-1: config 0 descriptor?? [ 58.178038][ T2170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 58.189398][ T1624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.200182][ T1624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 58.210984][ T1624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 58.211490][ T2174] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.228256][ T2174] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.233524][ T1624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 58.235578][ T2174] device bridge_slave_0 entered promiscuous mode [ 58.244637][ T1624] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 58.244755][ T2170] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 58.266783][ T2170] syz-executor.2: attempt to access beyond end of device [ 58.266783][ T2170] loop2: rw=34817, sector=77824, nr_sectors = 2048 limit=40427 [ 58.287303][ T2174] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.294517][ T2174] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.306350][ T2183] binder: 2182:2183 ioctl 400c620e 200002c0 returned -22 [ 58.306692][ T2174] device bridge_slave_1 entered promiscuous mode [ 58.328608][ T1029] syz-executor.2: attempt to access beyond end of device [ 58.328608][ T1029] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.349502][ T1624] usb 5-1: New USB device found, idVendor=0525, idProduct=20a1, bcdDevice= 0.86 [ 58.358868][ T1624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 58.389342][ T1624] usb 5-1: SerialNumber: syz [ 58.429653][ T1624] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 58.479206][ T2174] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.486124][ T2174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.493214][ T2174] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.499994][ T2174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.532916][ T1624] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.544779][ T1624] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.582825][ T2197] loop1: detected capacity change from 0 to 256 [ 58.590533][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.598011][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.606793][ T10] device bridge_slave_1 left promiscuous mode [ 58.612891][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.621512][ T10] device bridge_slave_0 left promiscuous mode [ 58.627629][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.634774][ T1624] usb 5-1: USB disconnect, device number 6 [ 58.646838][ T10] device veth1_macvtap left promiscuous mode [ 58.656173][ T10] device veth0_vlan left promiscuous mode [ 58.663507][ T1369] wacom 0003:056A:0003.0009: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 58.676024][ T1369] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0003.0009/input/input18 [ 58.750103][ T1369] wacom 0003:056A:0003.0009: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.3-1/input0 [ 58.763935][ T2209] binder: 2208:2209 ioctl 400c620e 200002c0 returned -22 [ 58.779804][ T2211] binder: Bad value for 'stats' [ 58.878906][ T1624] usb 4-1: USB disconnect, device number 10 [ 58.901096][ T2221] loop2: detected capacity change from 0 to 256 [ 58.909845][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.918454][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.927095][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.933972][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.934004][ T2223] loop2: detected capacity change from 0 to 2048 [ 58.948887][ T2223] EXT4-fs: Ignoring removed nobh option [ 58.951372][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.962681][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.970710][ T1369] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.977555][ T1369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.978917][ T2223] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.993681][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.996749][ T2223] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 2: invalid block bitmap [ 59.001798][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.014047][ T2223] EXT4-fs (loop2): Remounting filesystem read-only [ 59.021770][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.031873][ T2223] loop0: detected capacity change from 0 to 16384 [ 59.036395][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.049585][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.057776][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.070855][ T2174] device veth0_vlan entered promiscuous mode [ 59.078580][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.086640][ T431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.113915][ T2174] device veth1_macvtap entered promiscuous mode [ 59.138570][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.151747][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.173060][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.188259][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.196855][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.207745][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.216248][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.243038][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.537413][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.549900][ T2238] device veth0_vlan left promiscuous mode [ 59.555976][ T2238] device veth0_vlan entered promiscuous mode [ 59.563454][ T2234] IPv6: NLM_F_REPLACE set, but no existing node found! [ 59.615582][ T2243] devtmpfs: Unknown parameter 'rt' [ 59.620597][ T2223] loop0: detected capacity change from 16384 to 16320 [ 59.680409][ T1029] EXT4-fs (loop2): unmounting filesystem. [ 59.760947][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 59.760964][ T28] audit: type=1400 audit(1718472079.489:9164): avc: denied { setcurrent } for pid=2258 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 59.855866][ T28] audit: type=1400 audit(1718472079.579:9165): avc: denied { create } for pid=2269 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 59.929421][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.936296][ T2264] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.943765][ T2264] device bridge_slave_0 entered promiscuous mode [ 59.953191][ T2279] device pim6reg1 entered promiscuous mode [ 59.959637][ T2264] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.967740][ T2264] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.975151][ T2264] device bridge_slave_1 entered promiscuous mode [ 60.053840][ T2264] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.060735][ T2264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.067815][ T2264] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.074624][ T2264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.120646][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.127694][ T28] audit: type=1400 audit(1718472079.849:9166): avc: denied { setopt } for pid=2288 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.148379][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.155892][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.157342][ T2291] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2291 comm=syz-executor.2 [ 60.164087][ T28] audit: type=1400 audit(1718472079.849:9167): avc: denied { read } for pid=2288 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 60.213442][ T28] audit: type=1400 audit(1718472079.899:9168): avc: denied { read } for pid=2290 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 60.287424][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.295774][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.302663][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.310287][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.318504][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.325373][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.345245][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.353388][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.404015][ T1369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.452354][ T10] device bridge_slave_1 left promiscuous mode [ 60.458585][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.470515][ T10] device bridge_slave_0 left promiscuous mode [ 60.518270][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.549738][ T10] device veth1_macvtap left promiscuous mode [ 60.578380][ T10] device veth0_vlan left promiscuous mode [ 60.609400][ T2308] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 60.619206][ T28] audit: type=1400 audit(1718472080.339:9169): avc: denied { connect } for pid=2307 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.639685][ T28] audit: type=1400 audit(1718472080.349:9170): avc: denied { write } for pid=2307 comm="syz-executor.2" path="socket:[23941]" dev="sockfs" ino=23941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.690973][ T2312] binder: Bad value for 'stats' [ 60.726749][ T2264] device veth0_vlan entered promiscuous mode [ 60.736797][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.745026][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.754729][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.766969][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.775162][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.785328][ T2264] device veth1_macvtap entered promiscuous mode [ 60.805653][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.814357][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.824509][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.833330][ T2325] IPv6: NLM_F_REPLACE set, but no existing node found! [ 60.856421][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.866699][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.003463][ T2353] IPv6: NLM_F_REPLACE set, but no existing node found! [ 61.140083][ T1369] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 61.161221][ T2376] IPv6: NLM_F_REPLACE set, but no existing node found! [ 61.409438][ T303] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 61.509366][ T1369] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.520386][ T1369] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.533303][ T1369] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.542204][ T1369] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.550849][ T1369] usb 5-1: config 0 descriptor?? [ 61.649389][ T303] usb 4-1: Using ep0 maxpacket: 16 [ 61.674350][ T2416] loop2: detected capacity change from 0 to 2048 [ 61.682640][ T2416] EXT4-fs: Ignoring removed nobh option [ 61.691176][ T2416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 61.692360][ T2418] block device autoloading is deprecated and will be removed. [ 61.702748][ T2416] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 2: invalid block bitmap [ 61.719931][ T2416] EXT4-fs (loop2): Remounting filesystem read-only [ 61.726300][ T28] audit: type=1400 audit(1718472081.449:9171): avc: denied { read write } for pid=2174 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.756608][ T2416] loop0: detected capacity change from 0 to 16384 [ 61.763351][ T28] audit: type=1400 audit(1718472081.449:9172): avc: denied { open } for pid=2174 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.786490][ T303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.797565][ T303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 61.808569][ T303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 61.818407][ T303] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 61.827903][ T303] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 61.828812][ T28] audit: type=1400 audit(1718472081.449:9173): avc: denied { ioctl } for pid=2174 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=455 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 61.939388][ T303] usb 4-1: New USB device found, idVendor=0525, idProduct=20a1, bcdDevice= 0.86 [ 61.948349][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 61.956126][ T303] usb 4-1: SerialNumber: syz [ 62.010632][ T303] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 62.039881][ T1369] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 0/15 [ 62.048187][ T1369] plantronics 0003:047F:FFFF.000A: parse failed [ 62.055100][ T1369] plantronics: probe of 0003:047F:FFFF.000A failed with error -22 [ 62.069342][ T2416] loop0: detected capacity change from 16384 to 16320 [ 62.091412][ T2429] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.119035][ T1029] EXT4-fs (loop2): unmounting filesystem. [ 62.212181][ T19] usb 4-1: USB disconnect, device number 11 [ 62.243068][ T303] usb 5-1: USB disconnect, device number 7 [ 63.027190][ T2505] loop3: detected capacity change from 0 to 1024 [ 63.202241][ T2505] EXT4-fs: Ignoring removed orlov option [ 63.208149][ T2505] EXT4-fs (loop3): Test dummy encryption mode enabled [ 63.254452][ T2505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.268616][ T2505] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 63.276796][ T2527] loop4: detected capacity change from 0 to 128 [ 63.277956][ T2505] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 63.298795][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 64.136689][ T2546] loop2: detected capacity change from 0 to 8192 [ 64.144053][ T2546] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.309298][ T316] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 64.506140][ T2590] input: syz0 as /devices/virtual/input/input21 [ 64.512286][ T2590] input: failed to attach handler leds to device input21, error: -6 [ 64.589363][ T316] usb 1-1: Using ep0 maxpacket: 16 [ 64.749398][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.760294][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.769843][ T316] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 64.778674][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.786986][ T316] usb 1-1: config 0 descriptor?? [ 65.111643][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 65.111668][ T28] audit: type=1400 audit(1718472084.829:9181): avc: denied { getopt } for pid=2618 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.260336][ T316] wacom 0003:056A:0003.000B: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 65.269920][ T316] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.000B/input/input22 [ 65.349819][ T316] wacom 0003:056A:0003.000B: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.0-1/input0 [ 65.464128][ T316] usb 1-1: USB disconnect, device number 5 [ 65.847004][ T2634] loop3: detected capacity change from 0 to 512 [ 65.853920][ T2634] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.860302][ T2634] EXT4-fs: Ignoring removed i_version option [ 65.867984][ T2634] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz-executor.3: invalid block [ 65.879478][ T2634] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 65.891669][ T2634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 65.921148][ T2632] loop4: detected capacity change from 0 to 40427 [ 65.928819][ T2632] F2FS-fs (loop4): invalid crc value [ 65.935301][ T2632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 65.972884][ T2632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 66.823053][ T2264] syz-executor.4: attempt to access beyond end of device [ 66.823053][ T2264] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.868089][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 66.894909][ T2654] overlayfs: missing 'lowerdir' [ 67.110059][ T2683] loop3: detected capacity change from 0 to 512 [ 67.116461][ T2683] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.122746][ T2683] EXT4-fs: Ignoring removed i_version option [ 67.130060][ T2683] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz-executor.3: invalid block [ 67.141531][ T2683] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 11 (err -117) [ 67.153737][ T2683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.519324][ T316] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 67.769294][ T316] usb 1-1: Using ep0 maxpacket: 16 [ 67.895904][ T2703] loop2: detected capacity change from 0 to 256 [ 67.909687][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.922641][ T316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.932327][ T316] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 67.941239][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.989722][ T316] usb 1-1: config 0 descriptor?? [ 67.992139][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 68.249360][ T431] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 68.480645][ T316] wacom 0003:056A:0003.000C: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 68.490226][ T316] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.000C/input/input25 [ 68.569829][ T316] wacom 0003:056A:0003.000C: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.0-1/input0 [ 68.609394][ T431] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.620135][ T431] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 68.684471][ T316] usb 1-1: USB disconnect, device number 6 [ 68.799389][ T431] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.808289][ T431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.816852][ T431] usb 5-1: Product: syz [ 68.820945][ T431] usb 5-1: Manufacturer: syz [ 68.825261][ T431] usb 5-1: SerialNumber: syz [ 68.949107][ T2725] tmpfs: Bad value for 'size' [ 69.070365][ T2707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 69.269209][ T28] audit: type=1400 audit(1718472088.989:9182): avc: denied { setopt } for pid=2741 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.299336][ T28] audit: type=1326 audit(1718472089.019:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d27cea9 code=0x7ffc0000 [ 69.326728][ T28] audit: type=1326 audit(1718472089.019:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f591d27cea9 code=0x7ffc0000 [ 69.350842][ T28] audit: type=1326 audit(1718472089.019:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d27cea9 code=0x7ffc0000 [ 69.374892][ T28] audit: type=1326 audit(1718472089.019:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f591d27cea9 code=0x7ffc0000 [ 69.405819][ T28] audit: type=1326 audit(1718472089.019:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591d27cea9 code=0x7ffc0000 [ 69.430497][ T28] audit: type=1326 audit(1718472089.019:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f591d27a627 code=0x7ffc0000 [ 69.454371][ T28] audit: type=1326 audit(1718472089.019:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f591d240309 code=0x7ffc0000 [ 69.487615][ T2752] loop0: detected capacity change from 0 to 128 [ 69.495803][ T28] audit: type=1326 audit(1718472089.029:9190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2745 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f591d27cea9 code=0x7ffc0000 [ 69.780727][ T2707] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 70.059385][ T431] cdc_ncm 5-1:1.0: failed to get mac address [ 70.210974][ T2766] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.217834][ T2766] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.225083][ T2766] device bridge_slave_0 entered promiscuous mode [ 70.231788][ T2766] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.238647][ T2766] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.246164][ T2766] device bridge_slave_1 entered promiscuous mode [ 70.279339][ T431] cdc_ncm 5-1:1.0: bind() failure [ 70.299336][ T431] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 70.310849][ T2766] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.317691][ T2766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.319333][ T431] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 70.324814][ T2766] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.337922][ T2766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.363547][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.371391][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.381443][ T431] usb 5-1: USB disconnect, device number 8 [ 70.387226][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.413120][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.424148][ T2776] loop3: detected capacity change from 0 to 256 [ 70.424404][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.430834][ T2776] exfat: Deprecated parameter 'utf8' [ 70.443403][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.443432][ T2776] exfat: Deprecated parameter 'namecase' [ 70.450254][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.462828][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.462876][ T2776] exfat: Deprecated parameter 'utf8' [ 70.470820][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.482554][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.489866][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.491332][ T2776] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 70.497758][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.520437][ T2766] device veth0_vlan entered promiscuous mode [ 70.528183][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 70.528197][ T28] audit: type=1400 audit(1718472090.249:9211): avc: denied { read append open } for pid=2775 comm="syz-executor.3" path="/root/syzkaller-testdir2330757549/syzkaller.ZvAgj7/63/file1/memory.swap.current" dev="loop3" ino=1048708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.565028][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.579193][ T2766] device veth1_macvtap entered promiscuous mode [ 70.586315][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.595840][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.603824][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.617697][ T28] audit: type=1326 audit(1718472090.339:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cc7cea9 code=0x7ffc0000 [ 70.642133][ T28] audit: type=1326 audit(1718472090.339:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cc7cea9 code=0x7ffc0000 [ 70.665998][ T28] audit: type=1326 audit(1718472090.339:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925cc7cea9 code=0x7ffc0000 [ 70.689840][ T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 70.690109][ T28] audit: type=1326 audit(1718472090.339:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cc7cea9 code=0x7ffc0000 [ 70.721623][ T28] audit: type=1326 audit(1718472090.339:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cc7cea9 code=0x7ffc0000 [ 70.745605][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.745658][ T28] audit: type=1326 audit(1718472090.339:9217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f925cc7cea9 code=0x7ffc0000 [ 70.753964][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.777376][ T28] audit: type=1326 audit(1718472090.369:9218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f925cc7cea9 code=0x7ffc0000 [ 70.814117][ T28] audit: type=1326 audit(1718472090.369:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f925cc7a627 code=0x7ffc0000 [ 70.824278][ T2784] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 70.840075][ T28] audit: type=1326 audit(1718472090.369:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2779 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f925cc40309 code=0x7ffc0000 [ 70.859147][ T2784] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 70.883939][ T2784] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 70.959295][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 70.961389][ T2799] loop4: detected capacity change from 0 to 256 [ 70.964827][ T2795] syz-executor.3[2795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.970532][ T2795] syz-executor.3[2795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.991504][ T2799] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 71.012030][ T2799] FAT-fs (loop4): Filesystem has been set read-only [ 71.079342][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.090093][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.101255][ T39] usb 1-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 71.110461][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.119208][ T39] usb 1-1: config 0 descriptor?? [ 71.170735][ T678] device bridge_slave_1 left promiscuous mode [ 71.176691][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.183853][ T678] device bridge_slave_0 left promiscuous mode [ 71.189833][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.197387][ T678] device veth1_macvtap left promiscuous mode [ 71.203387][ T678] device veth0_vlan left promiscuous mode [ 71.239374][ T316] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 71.399356][ T1624] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 71.499313][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 71.600427][ T39] wacom 0003:056A:0003.000D: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 71.610014][ T39] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0003.000D/input/input28 [ 71.639357][ T316] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 71.647268][ T316] usb 3-1: config 0 has no interface number 0 [ 71.653118][ T316] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.663791][ T316] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.689811][ T39] wacom 0003:056A:0003.000D: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.0-1/input0 [ 71.799412][ T1624] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.806191][ T39] usb 1-1: USB disconnect, device number 7 [ 71.810234][ T316] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 71.824683][ T1624] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 71.834474][ T316] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 71.842452][ T316] usb 3-1: Product: syz [ 71.846412][ T316] usb 3-1: SerialNumber: syz [ 71.851616][ T316] usb 3-1: config 0 descriptor?? [ 71.989418][ T1624] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.998335][ T1624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.006259][ T1624] usb 5-1: Product: syz [ 72.010220][ T1624] usb 5-1: Manufacturer: syz [ 72.014570][ T1624] usb 5-1: SerialNumber: syz [ 72.130243][ T316] usb 3-1: USB disconnect, device number 7 [ 72.260221][ T2808] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 72.463214][ T2817] device syzkaller0 entered promiscuous mode [ 72.472435][ T2817] syzkaller0: tun_net_xmit 1280 [ 72.787004][ T2827] loop0: detected capacity change from 0 to 131072 [ 72.793932][ T2827] F2FS-fs (loop0): Wrong segment_count / block_count (65567 > 16384) [ 72.801856][ T2827] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 72.811731][ T2827] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.838275][ T2827] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 72.845241][ T2827] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 72.936072][ T2808] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 73.276212][ T1624] cdc_ncm 5-1:1.0: failed to get mac address [ 73.389345][ T1624] cdc_ncm 5-1:1.0: bind() failure [ 73.409313][ T1624] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 73.425733][ T2842] fuse: Bad value for 'fd' [ 73.439358][ T1624] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 73.446691][ T1624] usb 5-1: USB disconnect, device number 9 [ 73.574298][ T2849] device syzkaller0 entered promiscuous mode [ 73.588793][ T2849] syzkaller0: tun_net_xmit 1280 [ 73.740485][ T2859] loop2: detected capacity change from 0 to 512 [ 73.752097][ T2859] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 73.774709][ T2860] device wg2 entered promiscuous mode [ 73.802402][ T2859] loop2: detected capacity change from 0 to 16 [ 73.809155][ T2859] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.181470][ T2875] fuse: Bad value for 'fd' [ 74.525575][ T2877] loop3: detected capacity change from 0 to 40427 [ 74.537998][ T2877] F2FS-fs (loop3): invalid crc value [ 74.560412][ T2877] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.627251][ T2877] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.092938][ T2032] syz-executor.3: attempt to access beyond end of device [ 75.092938][ T2032] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.119132][ T2905] loop4: detected capacity change from 0 to 256 [ 75.179317][ T2287] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 75.193611][ T2908] loop3: detected capacity change from 0 to 256 [ 75.559302][ T2287] usb 3-1: Using ep0 maxpacket: 8 [ 75.699402][ T2287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.710160][ T2287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.719651][ T2287] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice=32.9b [ 75.728495][ T2287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.736756][ T2287] usb 3-1: config 0 descriptor?? [ 76.117995][ T2915] loop3: detected capacity change from 0 to 40427 [ 76.125046][ T2915] F2FS-fs (loop3): Unrecognized mount option "inline_xa|t¼r" or missing value [ 76.192496][ T2915] mmap: syz-executor.3 (2915): VmData 28999680 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 76.205898][ T2287] lenovo 0003:17EF:6047.000E: unknown main item tag 0x0 [ 76.212735][ T2287] lenovo 0003:17EF:6047.000E: item fetching failed at offset 2/5 [ 76.220589][ T2287] lenovo 0003:17EF:6047.000E: hid_parse failed [ 76.227588][ T2287] lenovo: probe of 0003:17EF:6047.000E failed with error -22 [ 76.249350][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 76.409407][ T431] usb 3-1: USB disconnect, device number 8 [ 76.463289][ T2926] loop3: detected capacity change from 0 to 40427 [ 76.470802][ T2926] F2FS-fs (loop3): invalid crc value [ 76.477133][ T2926] F2FS-fs (loop3): Found nat_bits in checkpoint [ 76.489304][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 76.501971][ T2926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 76.619400][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 76.634508][ T24] usb 5-1: config 0 has no interface number 0 [ 76.640778][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 76.651667][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 76.879407][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 76.888335][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 76.896231][ T24] usb 5-1: Product: syz [ 76.900203][ T24] usb 5-1: SerialNumber: syz [ 76.905013][ T24] usb 5-1: config 0 descriptor?? [ 76.967441][ T2936] device syzkaller0 entered promiscuous mode [ 77.075263][ T2942] loop2: detected capacity change from 0 to 256 [ 77.194678][ T24] usb 5-1: USB disconnect, device number 10 [ 77.576564][ T2032] syz-executor.3: attempt to access beyond end of device [ 77.576564][ T2032] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.651971][ T2948] loop3: detected capacity change from 0 to 128 [ 78.108565][ T2965] device syzkaller0 entered promiscuous mode [ 78.185681][ T2969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.372343][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 78.372367][ T28] audit: type=1400 audit(2000000002.129:9289): avc: denied { setopt } for pid=2970 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.516156][ T2980] loop3: detected capacity change from 0 to 256 [ 78.627850][ T2985] loop3: detected capacity change from 0 to 40427 [ 78.634983][ T2985] F2FS-fs (loop3): Unrecognized mount option "inline_xa|t¼r" or missing value [ 78.709315][ T431] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 78.962781][ T3005] loop2: detected capacity change from 0 to 128 [ 78.970590][ T3003] device syzkaller0 entered promiscuous mode [ 79.099408][ T431] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.161171][ T431] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.183767][ T431] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.369350][ T431] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.378297][ T431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.386126][ T431] usb 1-1: Product: syz [ 79.390199][ T431] usb 1-1: Manufacturer: syz [ 79.394654][ T431] usb 1-1: SerialNumber: syz [ 79.621607][ T3037] loop3: detected capacity change from 0 to 256 [ 79.633231][ T3037] FAT-fs (loop3): Directory bread(block 64) failed [ 79.639694][ T3037] FAT-fs (loop3): Directory bread(block 65) failed [ 79.646104][ T3037] FAT-fs (loop3): Directory bread(block 66) failed [ 79.652415][ T3037] FAT-fs (loop3): Directory bread(block 67) failed [ 79.658776][ T3037] FAT-fs (loop3): Directory bread(block 68) failed [ 79.660309][ T431] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 79.665177][ T3037] FAT-fs (loop3): Directory bread(block 69) failed [ 79.682054][ T3037] FAT-fs (loop3): Directory bread(block 70) failed [ 79.688437][ T3037] FAT-fs (loop3): Directory bread(block 71) failed [ 79.694766][ T3037] FAT-fs (loop3): Directory bread(block 72) failed [ 79.701124][ T3037] FAT-fs (loop3): Directory bread(block 73) failed [ 80.028128][ T431] usb 1-1: USB disconnect, device number 8 [ 80.085787][ T431] usblp0: removed [ 80.224481][ T3058] loop4: detected capacity change from 0 to 512 [ 80.233574][ T3058] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.240859][ T3058] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 80.250930][ T3058] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 80.260793][ T3058] EXT4-fs (loop4): 1 truncate cleaned up [ 80.282618][ T28] audit: type=1400 audit(2000000004.039:9290): avc: denied { watch } for pid=3062 comm="syz-executor.2" path="/proc/3062/map_files" dev="proc" ino=26641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 80.305890][ T3058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.315404][ T3065] loop2: detected capacity change from 0 to 256 [ 80.326101][ T3065] FAT-fs (loop2): Directory bread(block 64) failed [ 80.332611][ T3065] FAT-fs (loop2): Directory bread(block 65) failed [ 80.339074][ T3065] FAT-fs (loop2): Directory bread(block 66) failed [ 80.345464][ T3065] FAT-fs (loop2): Directory bread(block 67) failed [ 80.351924][ T3065] FAT-fs (loop2): Directory bread(block 68) failed [ 80.358274][ T3065] FAT-fs (loop2): Directory bread(block 69) failed [ 80.364760][ T3065] FAT-fs (loop2): Directory bread(block 70) failed [ 80.371251][ T3065] FAT-fs (loop2): Directory bread(block 71) failed [ 80.377784][ T3065] FAT-fs (loop2): Directory bread(block 72) failed [ 80.384204][ T3065] FAT-fs (loop2): Directory bread(block 73) failed [ 80.452629][ T3071] loop2: detected capacity change from 0 to 512 [ 80.459664][ T3071] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 80.470462][ T3071] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 80.478504][ T3071] EXT4-fs (loop2): orphan cleanup on readonly fs [ 80.485939][ T3071] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz-executor.2: attempt to clear invalid blocks 1024 len 1 [ 80.499918][ T3071] EXT4-fs (loop2): Remounting filesystem read-only [ 80.506666][ T3071] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 361: padding at end of block bitmap is not set [ 80.521656][ T3071] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 80.530579][ T3071] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 1811939328 (level 0) [ 80.545095][ T3071] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 2185560079 (level 1) [ 80.559699][ T3071] EXT4-fs (loop2): 1 truncate cleaned up [ 80.565171][ T3071] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.577929][ T2766] EXT4-fs (loop2): unmounting filesystem. [ 80.645720][ T3076] loop2: detected capacity change from 0 to 128 [ 81.092422][ T2264] EXT4-fs (loop4): unmounting filesystem. [ 81.226269][ T3096] device syzkaller0 entered promiscuous mode [ 81.232747][ T3097] device wg2 entered promiscuous mode [ 81.488670][ T3102] loop3: detected capacity change from 0 to 2048 [ 81.500752][ T3102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.509160][ T3102] ext4 filesystem being mounted at /root/syzkaller-testdir2330757549/syzkaller.ZvAgj7/104/file0 supports timestamps until 2038 (0x7fffffff) [ 81.525322][ T3102] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 81.547920][ T3102] EXT4-fs error (device loop3): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 81.576825][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 81.616265][ T3117] input: syz1 as /devices/virtual/input/input31 [ 81.849363][ T316] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 82.089285][ T316] usb 3-1: Using ep0 maxpacket: 32 [ 82.166938][ T3140] input: syz1 as /devices/virtual/input/input32 [ 82.195117][ T3146] loop4: detected capacity change from 0 to 2048 [ 82.195223][ T3145] loop0: detected capacity change from 0 to 1024 [ 82.208554][ T3145] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.219537][ T3145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.234589][ T3146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.239830][ T2174] EXT4-fs (loop0): unmounting filesystem. [ 82.243019][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 82.259586][ T3146] ext4 filesystem being mounted at /root/syzkaller-testdir3922638953/syzkaller.hvlEcF/69/file0 supports timestamps until 2038 (0x7fffffff) [ 82.273638][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 82.293460][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.302567][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.310906][ T3146] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 82.332008][ T316] usb 3-1: config 0 descriptor?? [ 82.347340][ T3142] loop3: detected capacity change from 0 to 40427 [ 82.347400][ T3152] EXT4-fs error (device loop4): ext4_find_dest_de:2112: inode #2: block 16: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 82.355996][ T3109] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 82.387014][ T3142] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 82.395029][ T3142] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 82.397347][ T2264] EXT4-fs (loop4): unmounting filesystem. [ 82.403690][ T316] hub 3-1:0.0: USB hub found [ 82.414356][ T3142] F2FS-fs (loop3): invalid crc value [ 82.423186][ T3142] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.447797][ T3165] syz-executor.0[3165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.447888][ T3165] syz-executor.0[3165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.463300][ T3142] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.482397][ T3142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.515447][ T2032] syz-executor.3: attempt to access beyond end of device [ 82.515447][ T2032] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 82.639350][ T316] hub 3-1:0.0: 2 ports detected [ 83.426683][ T28] audit: type=1400 audit(2000000007.179:9291): avc: denied { bind } for pid=3204 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.736900][ T3213] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 83.773804][ T3217] loop3: detected capacity change from 0 to 512 [ 83.781943][ T3217] EXT4-fs (loop3): orphan cleanup on readonly fs [ 83.788490][ T3217] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 83.798631][ T3217] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 83.808790][ T3217] EXT4-fs (loop3): 1 truncate cleaned up [ 83.817100][ T3217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.142872][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 84.154271][ T3229] loop3: detected capacity change from 0 to 256 [ 84.163129][ T3229] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 84.175256][ T3229] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 84.192882][ T28] audit: type=1400 audit(2000000007.949:9292): avc: denied { read } for pid=3230 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.224652][ T3235] x_tables: duplicate underflow at hook 3 [ 84.275060][ T3241] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 84.330339][ T3250] loop3: detected capacity change from 0 to 256 [ 84.337444][ T3250] FAT-fs (loop3): bogus logical sector size 0 [ 84.343556][ T3250] FAT-fs (loop3): Can't find a valid FAT filesystem [ 84.464423][ T3253] netlink: 1280 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.629838][ T454] usb 3-1: USB disconnect, device number 9 [ 84.681127][ T3261] x_tables: duplicate underflow at hook 3 [ 84.709346][ T2287] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 85.149474][ T3277] loop2: detected capacity change from 0 to 1024 [ 85.156216][ T3277] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.166887][ T3277] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.183103][ T2766] EXT4-fs (loop2): unmounting filesystem. [ 85.202772][ T3288] x_tables: duplicate underflow at hook 3 [ 85.219365][ T2287] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 85.230101][ T2287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.240891][ T2287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.250471][ T2287] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 85.339388][ T2287] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 85.348301][ T2287] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.356224][ T2287] usb 1-1: Manufacturer: syz [ 85.361309][ T2287] usb 1-1: config 0 descriptor?? [ 85.469319][ T454] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 85.573295][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 85.709428][ T454] usb 3-1: Using ep0 maxpacket: 32 [ 85.819317][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 85.829348][ T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.840577][ T2287] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 85.847512][ T2287] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 85.854650][ T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.864194][ T1624] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 85.871783][ T454] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 85.880867][ T454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.888711][ T2287] appleir 0003:05AC:8243.000F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 85.900334][ T454] usb 3-1: config 0 descriptor?? [ 85.959337][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.970082][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.979578][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 85.988461][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.996598][ T24] usb 4-1: config 0 descriptor?? [ 86.119327][ T1624] usb 5-1: Using ep0 maxpacket: 32 [ 86.239507][ T1624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 86.250500][ T1624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 86.261457][ T1624] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 86.270270][ T1624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.278519][ T1624] usb 5-1: config 0 descriptor?? [ 86.299388][ T3298] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 86.319611][ T1624] hub 5-1:0.0: USB hub found [ 86.379879][ T454] smartjoyplus 0003:0925:0005.0010: item fetching failed at offset 5/7 [ 86.388093][ T454] smartjoyplus 0003:0925:0005.0010: parse failed [ 86.394243][ T454] smartjoyplus: probe of 0003:0925:0005.0010 failed with error -22 [ 86.539397][ T1624] hub 5-1:0.0: 2 ports detected [ 86.580560][ T454] usb 3-1: USB disconnect, device number 10 [ 86.682601][ T24] usb 4-1: USB disconnect, device number 12 [ 86.749722][ T303] usb 1-1: USB disconnect, device number 9 [ 87.365722][ T3313] loop3: detected capacity change from 0 to 1024 [ 87.438728][ T3313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.578690][ T3313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 87.619345][ T3320] loop0: detected capacity change from 0 to 512 [ 87.676261][ T3320] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 87.787043][ T3320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 87.804911][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 87.830631][ T3320] EXT4-fs (loop0): orphan cleanup on readonly fs [ 87.876390][ T3320] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz-executor.0: attempt to clear invalid blocks 1024 len 1 [ 87.937486][ T3320] EXT4-fs (loop0): Remounting filesystem read-only [ 88.008175][ T3320] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 88.091489][ T3320] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 88.131005][ T3320] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1811939328 (level 0) [ 88.194043][ T3320] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 2185560079 (level 1) [ 88.209672][ T3320] EXT4-fs (loop0): 1 truncate cleaned up [ 88.215192][ T3320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.242751][ T2174] EXT4-fs (loop0): unmounting filesystem. [ 88.286251][ T3341] input: syz1 as /devices/virtual/input/input36 [ 88.296665][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.305089][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.312485][ T3323] device bridge_slave_0 entered promiscuous mode [ 88.321432][ T3343] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 88.330681][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.344892][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.352263][ T3323] device bridge_slave_1 entered promiscuous mode [ 88.358744][ T3345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.369914][ T3349] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 88.378400][ T3349] overlayfs: failed to set xattr on upper [ 88.392669][ T3351] overlayfs: missing 'lowerdir' [ 88.419966][ T3357] loop2: detected capacity change from 0 to 512 [ 88.425655][ T28] audit: type=1400 audit(2000000012.179:9293): avc: denied { bind } for pid=3354 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 88.447637][ T3357] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.466410][ T3357] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 88.476708][ T3357] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 88.491313][ T678] device bridge_slave_1 left promiscuous mode [ 88.538046][ T3357] EXT4-fs (loop2): 1 truncate cleaned up [ 88.545217][ T678] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.592128][ T678] device bridge_slave_0 left promiscuous mode [ 88.632488][ T678] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.672648][ T678] device veth1_macvtap left promiscuous mode [ 88.702562][ T678] device veth0_vlan left promiscuous mode [ 89.758470][ T3357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 90.031494][ T24] usb 5-1: USB disconnect, device number 11 [ 90.071555][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.079598][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.095085][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.120451][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.128980][ T1624] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.135923][ T1624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.146499][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.161851][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.169926][ T1624] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.176770][ T1624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.195467][ T3383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.205744][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.213577][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.221882][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.236247][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.245185][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.263268][ T3323] device veth0_vlan entered promiscuous mode [ 90.271604][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.279989][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.288265][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.296611][ T1624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.319959][ T3323] device veth1_macvtap entered promiscuous mode [ 90.333946][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.342445][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.349989][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.370760][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.685698][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.694138][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.702245][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.981637][ T2766] EXT4-fs (loop2): unmounting filesystem. [ 90.984027][ T3409] loop4: detected capacity change from 0 to 512 [ 91.001110][ T3409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.003265][ T3414] input: syz1 as /devices/virtual/input/input37 [ 91.010797][ T3409] ext4 filesystem being mounted at /root/syzkaller-testdir3922638953/syzkaller.hvlEcF/92/file0 supports timestamps until 2038 (0x7fffffff) [ 91.055058][ T28] audit: type=1400 audit(2000000014.809:9294): avc: denied { rename } for pid=3408 comm="syz-executor.4" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 91.173282][ T2264] EXT4-fs (loop4): unmounting filesystem. [ 92.141232][ T3431] loop2: detected capacity change from 0 to 1024 [ 92.171247][ T3431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 92.186870][ T2766] EXT4-fs (loop2): unmounting filesystem. [ 92.206665][ T3447] loop2: detected capacity change from 0 to 512 [ 92.229702][ T28] audit: type=1400 audit(2000000015.989:9295): avc: denied { setopt } for pid=3453 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.250042][ T3447] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #15: comm syz-executor.2: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 92.274379][ T3447] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 92.289656][ T3447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 93.722295][ T28] audit: type=1400 audit(2000000016.249:9296): avc: denied { create } for pid=3468 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.751215][ T3481] loop0: detected capacity change from 0 to 512 [ 93.799464][ T28] audit: type=1400 audit(2000000016.269:9297): avc: denied { write } for pid=3468 comm="syz-executor.1" path="socket:[28420]" dev="sockfs" ino=28420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.848602][ T28] audit: type=1400 audit(2000000017.589:9298): avc: denied { setattr } for pid=3446 comm="syz-executor.2" path="/root/syzkaller-testdir3784055035/syzkaller.qI0TSL/52/file1/file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.896400][ T3481] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.905882][ T3481] ext4 filesystem being mounted at /root/syzkaller-testdir1880009828/syzkaller.dBMWuU/94/file0 supports timestamps until 2038 (0x7fffffff) [ 94.265841][ T2766] EXT4-fs (loop2): unmounting filesystem. [ 94.297240][ T28] audit: type=1400 audit(2000000018.049:9299): avc: denied { create } for pid=3489 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.320087][ T2174] EXT4-fs (loop0): unmounting filesystem. [ 94.348997][ T28] audit: type=1400 audit(2000000018.049:9300): avc: denied { connect } for pid=3489 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.383767][ T3506] loop4: detected capacity change from 0 to 512 [ 94.391149][ T3506] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 94.412925][ T3506] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.419548][ T3506] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz-executor.4: Block bitmap for bg 0 marked uninitialized [ 94.433113][ T3506] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 94.451869][ T3506] EXT4-fs (loop4): 1 orphan inode deleted [ 94.457466][ T3506] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.480551][ T2264] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor.4: path /root/syzkaller-testdir3922638953/syzkaller.hvlEcF/98/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 94.536705][ T2264] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor.4: deleted inode referenced: 11 [ 94.549342][ T2264] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz-executor.4: deleted inode referenced: 11 [ 94.899356][ T333] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 95.000358][ T2264] EXT4-fs (loop4): unmounting filesystem. [ 95.829457][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 95.979583][ T333] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.046503][ T333] usb 4-1: config 0 has no interfaces? [ 96.124370][ T333] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.251929][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.421373][ T333] usb 4-1: config 0 descriptor?? [ 96.540475][ T3549] loop2: detected capacity change from 0 to 512 [ 96.587585][ T3549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.596398][ T3549] ext4 filesystem being mounted at /root/syzkaller-testdir3784055035/syzkaller.qI0TSL/61/file0 supports timestamps until 2038 (0x7fffffff) [ 96.610870][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.617899][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.625676][ T3545] device bridge_slave_0 entered promiscuous mode [ 96.625998][ T2766] EXT4-fs (loop2): unmounting filesystem. [ 96.652737][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.715937][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.725455][ T3545] device bridge_slave_1 entered promiscuous mode [ 96.824084][ T333] usb 4-1: USB disconnect, device number 13 [ 96.898501][ T3566] loop1: detected capacity change from 0 to 256 [ 96.907238][ T3566] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 96.923389][ T28] audit: type=1400 audit(2000000020.679:9301): avc: denied { watch watch_reads } for pid=3565 comm="syz-executor.1" path="/root/syzkaller-testdir2347667604/syzkaller.trc5fQ/14/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.971468][ T3570] loop1: detected capacity change from 0 to 512 [ 96.978460][ T3570] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 96.979846][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.995340][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.995867][ T3570] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.004888][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.010325][ T3570] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz-executor.1: Block bitmap for bg 0 marked uninitialized [ 97.017218][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.030167][ T3570] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 97.037969][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.046478][ T3570] EXT4-fs (loop1): 1 orphan inode deleted [ 97.053566][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.061086][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.073928][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.076356][ T3570] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.082361][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.098240][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.105123][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.112831][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.120837][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.133456][ T3323] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor.1: path /root/syzkaller-testdir2347667604/syzkaller.trc5fQ/16/file1: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=16, rec_len=127, size=1024 fake=0 [ 97.135158][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.157465][ T341] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 97.165889][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.174199][ T3323] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor.1: deleted inode referenced: 11 [ 97.189829][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.193933][ T3323] EXT4-fs error (device loop1): ext4_lookup:1859: inode #2: comm syz-executor.1: deleted inode referenced: 11 [ 97.199894][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.218997][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.227005][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.238654][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.245899][ T2287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.253586][ T3545] device veth0_vlan entered promiscuous mode [ 97.263873][ T3545] device veth1_macvtap entered promiscuous mode [ 97.270991][ T10] device bridge_slave_1 left promiscuous mode [ 97.276995][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.284715][ T10] device bridge_slave_0 left promiscuous mode [ 97.290749][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.298518][ T10] device veth1_macvtap left promiscuous mode [ 97.320563][ T3323] EXT4-fs (loop1): unmounting filesystem. [ 97.388473][ T3574] loop3: detected capacity change from 0 to 512 [ 97.395108][ T3574] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.402640][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.411204][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.420069][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.431853][ T3574] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.3: inline data xattr refers to an external xattr inode [ 97.448322][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.457217][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.465419][ T3574] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 12 (err -117) [ 97.481438][ T3574] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.491207][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.499415][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.520403][ T28] audit: type=1400 audit(2000000021.279:9302): avc: denied { link } for pid=3573 comm="syz-executor.3" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 97.564993][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 97.564999][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.582507][ T341] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.592148][ T341] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 97.600952][ T341] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.610491][ T341] usb 3-1: config 0 descriptor?? [ 97.615303][ T28] audit: type=1400 audit(2000000021.279:9303): avc: denied { remove_name } for pid=3573 comm="syz-executor.3" name="file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 97.623221][ T3587] loop4: detected capacity change from 0 to 128 [ 97.656897][ T3590] loop3: detected capacity change from 0 to 512 [ 97.667373][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.675006][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.682839][ T3578] device bridge_slave_0 entered promiscuous mode [ 97.690601][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.697521][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.697973][ T3590] EXT4-fs (loop3): 1 orphan inode deleted [ 97.711332][ T3578] device bridge_slave_1 entered promiscuous mode [ 97.719353][ T3590] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.740371][ T3590] ext4 filesystem being mounted at /root/syzkaller-testdir2330757549/syzkaller.ZvAgj7/165/file1 supports timestamps until 2038 (0x7fffffff) [ 97.832542][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.839433][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.846513][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.853308][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.883833][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.891923][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.898986][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.151726][ T3599] syz-executor.3[3599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.151800][ T3599] syz-executor.3[3599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.283206][ T3597] loop0: detected capacity change from 0 to 512 [ 98.303579][ T341] hid (null): bogus close delimiter [ 98.352790][ T3597] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 98.387241][ T3597] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 98.399561][ T3597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 98.410378][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.419864][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.421012][ T2174] EXT4-fs (loop0): unmounting filesystem. [ 98.426738][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.440037][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.457755][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.464628][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.471884][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.479689][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.509366][ T341] usb 3-1: language id specifier not provided by device, defaulting to English [ 98.525393][ T2032] EXT4-fs (loop3): unmounting filesystem. [ 98.579881][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.588044][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.597698][ T3607] fuse: Unknown parameter 'user_i00000000000000000000' [ 98.605444][ T28] audit: type=1400 audit(2000000022.359:9304): avc: denied { append } for pid=3606 comm="syz-executor.3" name="event2" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.634732][ T3578] device veth0_vlan entered promiscuous mode [ 98.642368][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.650532][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.660759][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.668219][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.678697][ T28] audit: type=1326 audit(2000000022.429:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c687cea9 code=0x7fc00000 [ 98.689935][ T3603] loop0: detected capacity change from 0 to 40427 [ 98.708494][ T3578] device veth1_macvtap entered promiscuous mode [ 98.716216][ T3603] F2FS-fs (loop0): invalid crc value [ 98.733865][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 98.733882][ T28] audit: type=1326 audit(2000000022.479:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c687cea9 code=0x7fc00000 [ 98.751067][ T3603] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.772083][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.783216][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.791236][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.808218][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.810538][ T3603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.816347][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.831926][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.840429][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.867504][ T2174] syz-executor.0: attempt to access beyond end of device [ 98.867504][ T2174] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.100502][ T10] device bridge_slave_1 left promiscuous mode [ 99.111277][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.118264][ T28] audit: type=1400 audit(2000000022.869:9372): avc: denied { bind } for pid=3642 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.149520][ T10] device bridge_slave_0 left promiscuous mode [ 99.155481][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.156708][ T3628] loop3: detected capacity change from 0 to 40427 [ 99.169947][ T28] audit: type=1400 audit(2000000022.869:9373): avc: denied { name_bind } for pid=3642 comm="syz-executor.0" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 99.195728][ T3628] F2FS-fs (loop3): invalid crc value [ 99.195792][ T10] device veth1_macvtap left promiscuous mode [ 99.210194][ T3628] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.213569][ T28] audit: type=1400 audit(2000000022.869:9374): avc: denied { node_bind } for pid=3642 comm="syz-executor.0" saddr=fe88::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 99.239900][ T10] device veth0_vlan left promiscuous mode [ 99.259933][ T3564] loop2: detected capacity change from 0 to 40427 [ 99.286356][ T3564] F2FS-fs (loop2): Mismatch valid blocks 5 vs. 7 [ 99.293222][ T3564] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 99.305391][ T3628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.371611][ T28] audit: type=1326 audit(2000000023.129:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c687cea9 code=0x7fc00000 [ 99.399144][ T3665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 99.405614][ T28] audit: type=1326 audit(2000000023.129:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32c687cea9 code=0x7fc00000 [ 99.433940][ T3665] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 99.442489][ T28] audit: type=1326 audit(2000000023.129:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c687cea9 code=0x7fc00000 [ 99.466852][ T28] audit: type=1326 audit(2000000023.129:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3651 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c687cea9 code=0x7fc00000 [ 99.494010][ T341] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input38 [ 99.507109][ T341] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input39 [ 99.519793][ T341] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input40 [ 99.532768][ T341] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0012/input/input41 [ 99.545814][ T341] uclogic 0003:256C:006D.0012: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 99.805485][ T2032] syz-executor.3: attempt to access beyond end of device [ 99.805485][ T2032] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 99.881562][ T341] usb 3-1: USB disconnect, device number 11 [ 99.885943][ T2032] syz-executor.3: attempt to access beyond end of device [ 99.885943][ T2032] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 99.905025][ T3683] loop1: detected capacity change from 0 to 256 [ 99.913633][ T3683] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 99.929046][ T3683] exFAT-fs (loop1): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 99.929046][ T3683] [ 99.941152][ T3683] exFAT-fs (loop1): Filesystem has been set read-only [ 99.949456][ T316] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 99.970292][ T2032] syz-executor.3: attempt to access beyond end of device [ 99.970292][ T2032] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.241956][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.248863][ T3694] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.256332][ T3694] device bridge_slave_0 entered promiscuous mode [ 100.263447][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.270315][ T3694] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.277632][ T3694] device bridge_slave_1 entered promiscuous mode [ 100.345891][ T3703] Invalid ELF header magic: != ELF [ 100.374407][ T3694] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.379383][ T316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.381307][ T3694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.391293][ T316] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.398278][ T3694] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.407277][ T316] usb 1-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 100.413992][ T3694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.423117][ T316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.447282][ T3708] loop1: detected capacity change from 0 to 512 [ 100.453810][ T316] usb 1-1: config 0 descriptor?? [ 100.459609][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.466689][ T3708] EXT4-fs (loop1): filesystem is read-only [ 100.469020][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.484769][ T3708] EXT4-fs (loop1): filesystem is read-only [ 100.501853][ T3708] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.516369][ T3715] loop2: detected capacity change from 0 to 16 [ 100.530354][ T3708] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz-executor.1: bad orphan inode 16 [ 100.543739][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.551377][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.559131][ T3715] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.566902][ T3708] ext4_test_bit(bit=15, block=3) = 0 [ 100.583373][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.591831][ T3715] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 100.601064][ T3708] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.609708][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.617751][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.624616][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.635226][ T3715] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 100.650930][ T3578] EXT4-fs (loop1): unmounting filesystem. [ 100.661052][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.671562][ T3715] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 100.680299][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.689696][ T3717] loop1: detected capacity change from 0 to 256 [ 100.714522][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.721410][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.735230][ T3717] syz-executor.1[3717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.735299][ T3717] syz-executor.1[3717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.752676][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.789571][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.810596][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.818859][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.838280][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.847121][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.859745][ T10] device bridge_slave_1 left promiscuous mode [ 100.868419][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.875906][ T10] device bridge_slave_0 left promiscuous mode [ 100.883517][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.891466][ T10] device veth1_macvtap left promiscuous mode [ 101.110862][ T3694] device veth0_vlan entered promiscuous mode [ 101.119188][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.127296][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.134841][ T1624] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 101.142899][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.150271][ T341] usb 1-1: USB disconnect, device number 10 [ 101.150287][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.192782][ T3694] device veth1_macvtap entered promiscuous mode [ 101.276790][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.303130][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.344448][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.391398][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.434111][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.453519][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.461668][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.661039][ T1624] usb 3-1: Using ep0 maxpacket: 8 [ 102.012878][ T3785] xt_bpf: check failed: parse error [ 102.062508][ T3796] loop3: detected capacity change from 0 to 16 [ 102.069361][ T1624] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 102.070454][ T3796] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.104237][ T3796] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.114209][ T3796] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 102.127269][ T3796] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 102.127860][ T3807] loop1: detected capacity change from 0 to 512 [ 102.151477][ T3807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 102.160579][ T3807] ext4 filesystem being mounted at /root/syzkaller-testdir206086923/syzkaller.apJtqf/31/file1 supports timestamps until 2038 (0x7fffffff) [ 102.247299][ T3815] loop0: detected capacity change from 0 to 40427 [ 102.254809][ T3815] F2FS-fs (loop0): invalid crc value [ 102.260958][ T3815] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.268495][ T3578] EXT4-fs (loop1): unmounting filesystem. [ 102.274284][ T1624] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.283433][ T1624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.291303][ T1624] usb 3-1: Product: syz [ 102.295307][ T1624] usb 3-1: Manufacturer: syz [ 102.299713][ T1624] usb 3-1: SerialNumber: syz [ 102.325296][ T3815] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.413416][ T3838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.423235][ T3838] input: syz0 as /devices/virtual/input/input42 [ 102.442126][ T3840] loop4: detected capacity change from 0 to 16 [ 102.448655][ T3840] erofs: (device loop4): mounted with root inode @ nid 36. [ 102.457232][ T3840] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.466640][ T2287] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 102.474438][ T3840] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 102.488543][ T3840] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 102.582638][ T316] usb 3-1: USB disconnect, device number 12 [ 102.645721][ T3865] loop4: detected capacity change from 0 to 16 [ 102.652705][ T3865] erofs: (device loop4): mounted with root inode @ nid 36. [ 102.660480][ T3865] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.670052][ T3865] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 102.682797][ T3865] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 102.739331][ T2287] usb 4-1: Using ep0 maxpacket: 16 [ 102.859420][ T2287] usb 4-1: config 0 has no interfaces? [ 102.874084][ T3894] loop1: detected capacity change from 0 to 16 [ 102.880951][ T3894] erofs: (device loop1): mounted with root inode @ nid 36. [ 102.888545][ T3894] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 102.897913][ T3894] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 102.910625][ T3894] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 102.999385][ T2287] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 103.008359][ T2287] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.019828][ T2287] usb 4-1: Product: syz [ 103.023812][ T2287] usb 4-1: Manufacturer: syz [ 103.032139][ T2174] syz-executor.0: attempt to access beyond end of device [ 103.032139][ T2174] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 103.046561][ T2287] r8152-cfgselector 4-1: config 0 descriptor?? [ 103.053211][ T2174] syz-executor.0: attempt to access beyond end of device [ 103.053211][ T2174] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 103.112939][ T2174] syz-executor.0: attempt to access beyond end of device [ 103.112939][ T2174] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.151948][ T3922] xt_bpf: check failed: parse error [ 103.253450][ T3935] loop2: detected capacity change from 0 to 512 [ 103.293024][ T3935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.301880][ T3935] ext4 filesystem being mounted at /root/syzkaller-testdir3784055035/syzkaller.qI0TSL/69/file1 supports timestamps until 2038 (0x7fffffff) [ 103.322274][ T2287] r8152-cfgselector 4-1: Unknown version 0x0000 [ 103.450039][ T2766] EXT4-fs (loop2): unmounting filesystem. [ 103.522420][ T24] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 103.548136][ T3947] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.555999][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.563521][ T3947] device bridge_slave_0 entered promiscuous mode [ 103.573060][ T3947] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.576192][ T3957] xt_bpf: check failed: parse error [ 103.580116][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.592309][ T3947] device bridge_slave_1 entered promiscuous mode [ 103.634351][ T3947] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.639338][ T2287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 103.641234][ T3947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.655579][ T3947] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.662472][ T3947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.733018][ T3961] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 103.759571][ T3961] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 103.980811][ T3528] device bridge_slave_1 left promiscuous mode [ 103.986793][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.994059][ T3528] device bridge_slave_0 left promiscuous mode [ 104.000130][ T333] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 104.007661][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.014755][ T2287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 104.027590][ T2287] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 104.036494][ T2287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.036582][ T3528] device veth1_macvtap left promiscuous mode [ 104.044934][ T2287] usb 2-1: config 0 descriptor?? [ 104.050384][ T3528] device veth0_vlan left promiscuous mode [ 104.089916][ T2287] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 104.151741][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.158913][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.223565][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.249401][ T333] usb 3-1: Using ep0 maxpacket: 8 [ 104.276462][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.412802][ T3484] usb 2-1: USB disconnect, device number 4 [ 104.475166][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.496135][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.499513][ T333] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 104.504202][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.523512][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.530731][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.533256][ T3972] binder: BINDER_SET_CONTEXT_MGR already set [ 104.539034][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.545090][ T3972] binder: 3971:3972 ioctl 4018620d 20000040 returned -16 [ 104.559684][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.566546][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.579841][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.588302][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.603187][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.611204][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.626460][ T3947] device veth0_vlan entered promiscuous mode [ 104.633111][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.641663][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.649876][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.657623][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.666204][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.673791][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.684221][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.692174][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.699348][ T333] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.701617][ T3947] device veth1_macvtap entered promiscuous mode [ 104.708892][ T333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.722822][ T333] usb 3-1: Product: syz [ 104.728841][ T333] usb 3-1: Manufacturer: syz [ 104.733366][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.733497][ T333] usb 3-1: SerialNumber: syz [ 104.741775][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.752925][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.775477][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.784230][ T3373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.885961][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.892953][ T3985] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.900383][ T3985] device bridge_slave_0 entered promiscuous mode [ 104.907664][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.915754][ T3985] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.923140][ T3985] device bridge_slave_1 entered promiscuous mode [ 104.992891][ T3985] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.999810][ T3985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.006878][ T3985] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.008537][ T2287] usb 3-1: USB disconnect, device number 13 [ 105.013673][ T3985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.033289][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.047715][ T316] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.055165][ T316] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.055174][ T3999] loop0: detected capacity change from 0 to 512 [ 105.080115][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.088109][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.094976][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.110271][ T3999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 105.111214][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.127213][ T3999] ext4 filesystem being mounted at /root/syzkaller-testdir3996194544/syzkaller.vNRyDl/3/file0 supports timestamps until 2038 (0x7fffffff) [ 105.137232][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.147954][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.182628][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.191436][ T3947] EXT4-fs (loop0): unmounting filesystem. [ 105.219316][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.227289][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.236170][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.249582][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.263517][ T3985] device veth0_vlan entered promiscuous mode [ 105.286600][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.294787][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.299294][ T3373] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 105.308955][ T3985] device veth1_macvtap entered promiscuous mode [ 105.329689][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.337171][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.344524][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.359745][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.377949][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.392156][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.406475][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.427231][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.437456][ T3484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.445958][ T4013] UHID_CREATE from different security context by process 16 (syz-executor.0), this is not allowed. [ 105.487138][ T4022] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 105.582448][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x1 [ 105.590590][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.597864][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.605163][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.612460][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.629469][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.638048][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.647565][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x4 [ 105.655067][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.665035][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.672537][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.680344][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.687592][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.694827][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.702743][ T3528] device bridge_slave_1 left promiscuous mode [ 105.708650][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.715657][ T3373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.726447][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.726703][ T3528] device bridge_slave_0 left promiscuous mode [ 105.733653][ T3373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.733685][ T3373] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.740217][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.749313][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.772387][ T3373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.781799][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.789122][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.810397][ T3373] usb 4-1: config 0 descriptor?? [ 105.815787][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.823705][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.831390][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.839147][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.846821][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.854773][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.862403][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.872708][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.880544][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.891752][ T3528] device veth1_macvtap left promiscuous mode [ 105.897800][ T3528] device veth0_vlan left promiscuous mode [ 105.904185][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.911561][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.918871][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.926106][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.933440][ T316] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 105.941181][ T316] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 106.077726][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 106.077738][ T28] audit: type=1326 audit(2000000029.829:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f368d67cea9 code=0x0 [ 106.140862][ T4053] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 106.150057][ T4054] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 106.269434][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 106.748545][ T3373] hid (null): bogus close delimiter [ 106.790140][ T3373] usb 4-1: language id specifier not provided by device, defaulting to English [ 106.809304][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 106.929359][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 106.948205][ T4109] loop2: detected capacity change from 0 to 256 [ 106.955347][ T4109] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.968328][ T4109] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 106.981986][ T28] audit: type=1400 audit(2000000030.739:9457): avc: denied { rename } for pid=4108 comm="syz-executor.2" name="file1" dev="loop2" ino=1048749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.019508][ T4113] loop0: detected capacity change from 0 to 512 [ 107.031144][ T4113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.039418][ T2287] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.040369][ T4113] ext4 filesystem being mounted at /root/syzkaller-testdir3996194544/syzkaller.vNRyDl/18/file1 supports timestamps until 2038 (0x7fffffff) [ 107.065494][ T28] audit: type=1400 audit(2000000030.819:9458): avc: denied { setattr } for pid=4112 comm="syz-executor.0" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.099346][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.108502][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.116425][ T24] usb 5-1: Product: syz [ 107.120588][ T24] usb 5-1: Manufacturer: syz [ 107.121469][ T3947] EXT4-fs (loop0): unmounting filesystem. [ 107.124992][ T24] usb 5-1: SerialNumber: syz [ 107.153629][ T4111] loop2: detected capacity change from 0 to 40427 [ 107.162607][ T4111] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.193191][ T4111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.325404][ T2287] usb 2-1: Using ep0 maxpacket: 16 [ 107.446018][ T4133] syz-executor.2[4133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.446974][ T4133] syz-executor.2[4133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.519337][ C0] ------------[ cut here ]------------ [ 107.521569][ T24] usb 5-1: USB disconnect, device number 12 [ 107.530804][ C0] timer: addrconf_rs_timer+0x0/0x600 preempt leak: 00000102 -> 00000101 [ 107.550037][ C0] WARNING: CPU: 0 PID: 4129 at kernel/time/timer.c:1487 call_timer_fn+0xa3/0x2d0 [ 107.558902][ C0] Modules linked in: [ 107.562657][ C0] CPU: 0 PID: 4129 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 107.572548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 107.582440][ C0] RIP: 0010:call_timer_fn+0xa3/0x2d0 [ 107.587542][ C0] Code: 43 ba 0e 00 c6 05 6c 74 05 06 01 65 8b 0d fd b3 9b 7e 81 e1 ff ff ff 7f 48 c7 c7 e0 ef 6a 85 4c 89 f6 44 89 ea e8 5d bb dd ff <0f> 0b eb 05 e8 14 ba 0e 00 65 8b 0d d5 b3 9b 7e 89 ca 81 e2 00 00 [ 107.593853][ T3995] loop3: detected capacity change from 0 to 40427 [ 107.607005][ C0] RSP: 0018:ffffc90000007d40 EFLAGS: 00010246 [ 107.607028][ C0] RAX: a4d143f666d1a700 RBX: 0000000000000101 RCX: ffff8881155c2880 [ 107.607040][ C0] RDX: 0000000080000101 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.607051][ C0] RBP: ffffc90000007d70 R08: ffffffff814477ce R09: fffff52000000f01 [ 107.607063][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffffb480 [ 107.607076][ C0] R13: 0000000000000102 R14: ffffffff847706e0 R15: ffff888130ea44f0 [ 107.607089][ C0] FS: 00007f79046976c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 107.607103][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.607114][ C0] CR2: 0000000020299030 CR3: 0000000116e98000 CR4: 00000000003506b0 [ 107.607129][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 107.607141][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 107.607152][ C0] Call Trace: [ 107.607158][ C0] [ 107.607165][ C0] ? show_regs+0x58/0x60 [ 107.607186][ C0] ? __warn+0x160/0x3d0 [ 107.607209][ C0] ? call_timer_fn+0xa3/0x2d0 [ 107.615978][ T3995] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 7 [ 107.619356][ C0] ? report_bug+0x4d5/0x7d0 [ 107.627605][ T3995] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 107.635076][ C0] ? call_timer_fn+0xa3/0x2d0 [ 107.635111][ C0] ? handle_bug+0x41/0x70 [ 107.742516][ C0] ? exc_invalid_op+0x1b/0x50 [ 107.747018][ C0] ? asm_exc_invalid_op+0x1b/0x20 [ 107.751886][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 107.757780][ C0] ? __warn_printk+0x28e/0x350 [ 107.762392][ C0] ? call_timer_fn+0xa3/0x2d0 [ 107.766893][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 107.772803][ C0] __run_timers+0x72a/0xa10 [ 107.777135][ C0] ? calc_index+0x270/0x270 [ 107.781484][ C0] ? sched_clock+0x9/0x10 [ 107.785640][ C0] ? sched_clock_cpu+0x71/0x2b0 [ 107.790341][ C0] run_timer_softirq+0x69/0xf0 [ 107.794927][ C0] __do_softirq+0x1d8/0x661 [ 107.799286][ C0] ? irqtime_account_irq+0xdc/0x260 [ 107.804305][ C0] __irq_exit_rcu+0x50/0xf0 [ 107.808640][ C0] irq_exit_rcu+0x9/0x10 [ 107.812733][ C0] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 107.818187][ C0] [ 107.821065][ C0] [ 107.823830][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 107.829655][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 [ 107.835642][ C0] Code: 48 0b 00 00 83 fa 02 75 21 48 8b 91 50 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 4c 0b 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <5d> c3 66 90 55 48 89 e5 4c 8b 45 08 65 48 8b 15 50 f9 8c 7e 65 8b [ 107.855089][ C0] RSP: 0018:ffffc900019076f0 EFLAGS: 00000246 [ 107.860993][ C0] RAX: ffffffff818eb9ed RBX: ffffc9000190794c RCX: 0000000000040000 [ 107.868787][ C0] RDX: ffffc90004461000 RSI: 000000000003ffff RDI: 0000000000040000 [ 107.876607][ C0] RBP: ffffc900019076f0 R08: 0000000000000001 R09: ffffffff818eb8bf [ 107.884420][ C0] R10: 0000000000000004 R11: ffff8881155c2880 R12: dffffc0000000000 [ 107.892230][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000000 [ 107.900047][ C0] ? bpf_bprintf_prepare+0x49f/0x1360 [ 107.905241][ C0] ? bpf_bprintf_prepare+0x5cd/0x1360 [ 107.910460][ C0] bpf_bprintf_prepare+0x5cd/0x1360 [ 107.915484][ C0] ? bpf_bprintf_cleanup+0x60/0x60 [ 107.920443][ C0] ? bpf_bprintf_cleanup+0x60/0x60 [ 107.925376][ C0] ? vbin_printf+0x1bc0/0x1bc0 [ 107.929991][ C0] bpf_trace_printk+0x14a/0x300 [ 107.934668][ C0] ? bpf_trace_run2+0xe9/0x290 [ 107.939276][ C0] ? bpf_probe_write_user+0xf0/0xf0 [ 107.944296][ C0] ? bpf_snprintf+0x1ed/0x210 [ 107.948809][ C0] ? bpf_trace_run2+0xe9/0x290 [ 107.953421][ C0] ? bpf_bprintf_prepare+0x1360/0x1360 [ 107.958704][ C0] ? unix_dgram_recvmsg+0xb7/0xd0 [ 107.963575][ C0] bpf_prog_4a0ae2731b78ce35+0x35/0x37 [ 107.968861][ C0] bpf_trace_run2+0x133/0x290 [ 107.973385][ C0] ? bpf_trace_run1+0x240/0x240 [ 107.978060][ C0] ? do_recvmmsg+0x491/0xab0 [ 107.982500][ C0] ? do_recvmmsg+0x491/0xab0 [ 107.986914][ C0] __bpf_trace_kfree+0x6f/0x90 [ 107.991524][ C0] ? do_recvmmsg+0x491/0xab0 [ 107.995940][ C0] __traceiter_kfree+0x2a/0x40 [ 108.000550][ C0] ? do_recvmmsg+0x491/0xab0 [ 108.004968][ C0] kfree+0xce/0xf0 [ 108.008527][ C0] do_recvmmsg+0x491/0xab0 [ 108.012789][ C0] ? __sys_recvmmsg+0x270/0x270 [ 108.017468][ C0] ? bpf_trace_run2+0xe9/0x290 [ 108.022075][ C0] ? bpf_probe_write_user+0xf0/0xf0 [ 108.027102][ C0] ? bpf_snprintf+0x1ed/0x210 [ 108.031621][ C0] ? bpf_trace_run2+0xe9/0x290 [ 108.036213][ C0] ? bpf_bprintf_prepare+0x1360/0x1360 [ 108.041515][ C0] ? has_cap_mac_admin+0x3c0/0x3c0 [ 108.046452][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 108.051412][ C0] ? bpf_trace_run2+0x138/0x290 [ 108.056091][ C0] ? kcov_ioctl+0x1f9/0x630 [ 108.060447][ C0] ? __bpf_trace_kfree+0x6f/0x90 [ 108.065202][ C0] ? kcov_ioctl+0x1f9/0x630 [ 108.069554][ C0] __x64_sys_recvmmsg+0x195/0x240 [ 108.074403][ C0] ? do_recvmmsg+0xab0/0xab0 [ 108.078827][ C0] ? debug_smp_processor_id+0x17/0x20 [ 108.084049][ C0] ? exit_to_user_mode_prepare+0x39/0xa0 [ 108.089514][ C0] do_syscall_64+0x3d/0xb0 [ 108.093758][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 108.099493][ C0] RIP: 0033:0x7f790387cea9 [ 108.103863][ C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 108.123311][ C0] RSP: 002b:00007f79046970c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 108.131557][ C0] RAX: ffffffffffffffda RBX: 00007f79039b4050 RCX: 00007f790387cea9 [ 108.139369][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000004 [ 108.147166][ C0] RBP: 00007f79038ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 108.154990][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 108.162803][ C0] R13: 000000000000006e R14: 00007f79039b4050 R15: 00007fff48795f98 [ 108.170619][ C0] [ 108.173464][ C0] ---[ end trace 0000000000000000 ]--- [ 108.179477][ T4129] BUG: scheduling while atomic: syz-executor.0/4129/0x00000002 [ 108.186835][ T4129] Modules linked in: [ 108.190584][ T4129] Preemption disabled at: [ 108.190592][ T4129] [] __skb_try_recv_datagram+0x198/0x6a0 [ 108.201776][ T4129] CPU: 0 PID: 4129 Comm: syz-executor.0 Tainted: G W 6.1.78-syzkaller-00009-g25216be1ac5e #0 2033/05/18 03:33:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: read tcp 10.128.0.236:40220->10.128.0.163:30012: read: connection reset by peer [ 108.213375][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 108.223270][ T4129] Call Trace: [ 108.226395][ T4129] [ 108.229172][ T4129] dump_stack_lvl+0x151/0x1b7 [ 108.233682][ T4129] ? __skb_try_recv_datagram+0x198/0x6a0 [ 108.239151][ T4129] ? __skb_try_recv_datagram+0x198/0x6a0 [ 108.244622][ T4129] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 108.249915][ T4129] ? bpf_snprintf+0x1ed/0x210 [ 108.254428][ T4129] ? __skb_try_recv_datagram+0x198/0x6a0 [ 108.259899][ T4129] dump_stack+0x15/0x1b [ 108.263888][ T4129] __schedule_bug+0x195/0x260 [ 108.268402][ T4129] ? cpu_util_update_eff+0x10e0/0x10e0 [ 108.273700][ T4129] ? bpf_trace_run2+0x138/0x290 [ 108.278386][ T4129] __schedule+0xcf7/0x1550 [ 108.282638][ T4129] ? kcov_ioctl+0x1f9/0x630 [ 108.287087][ T4129] ? __bpf_trace_kfree+0x6f/0x90 [ 108.291856][ T4129] ? __sched_text_start+0x8/0x8 [ 108.296545][ T4129] schedule+0xc3/0x180 [ 108.300450][ T4129] exit_to_user_mode_loop+0x4e/0xa0 [ 108.305484][ T4129] exit_to_user_mode_prepare+0x5a/0xa0 [ 108.310777][ T4129] syscall_exit_to_user_mode+0x26/0x140 [ 108.316288][ T4129] do_syscall_64+0x49/0xb0 [ 108.320537][ T4129] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 108.326266][ T4129] RIP: 0033:0x7f790387cea9 [ 108.330519][ T4129] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 108.349960][ T4129] RSP: 002b:00007f79046970c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 108.358201][ T4129] RAX: 000000000000a67d RBX: 00007f79039b4050 RCX: 00007f790387cea9 [ 108.366013][ T4129] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000