last executing test programs: 13.390816507s ago: executing program 4 (id=274): ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x6040600) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x545, &(0x7f0000000bc0)="$eJzs3c9rHOUbAPBnNkl/pd8mXxT8cQootFC7aZqqFQTr3WJBPddlsw0lm0zJbkoTCrUHz3qoJ0+exZNnQfwfPCh48iK1RYpQvUVmM5tuk910m26y1fl8YLbvO+9s33l25nl5Z2eWBFBYU9lLKeKliPg8iZjoaBuNvHFqY7sH929U/7p/o5rE+voHfySR5Ova2yf5v+N55cWI+OHTiJOl7f02VtcWKvV6bTmvTzcXr043VtdOXVmszNfma0uz52ZfPzszc+bsuYHFWr5ZOXT3i/fv3l7+9dRHnz04nsT5OJq3dcYxKFMxlX8mY3F+S9vMoDsbsmTYO8CujOR5PhbZGDARI3nWA/99NyNiHSioRP5DQbXnAdn1b3sZ7oxkf917d+MCaHv8oxvfjcTEenZtdOTP5JEro+x6d3IA/Wd9nD958fdsiT36HgKgm09uRcTp0dHt41+Sj3+7d7qPbbb2YfyD/fN9Nv95rdv8p5Tn5qHW69b5z3iX3N2Nx+d/6c4Auukpm/+93XX+u3nTanIkr/2vNecbSy5fqdeyse1YRJyIsYNZfaf7OT8dfmuiV1vn/C9bsv7bc8F8P+6MHnz0PXOVZuVpYu5071bEy13nv8nm8U+6HP/s87jYZx/Hnnvj515tj49/b61/FXG86/F/eEcr2fn+5HTrfJhunxXbzY6svdCr/2HHnx3/IzvHP5l03q9tPHkfr34z/mOvtt2e/weSD1vlA/m665Vmc3km4kDy3vb1Zx6+t11vb5/Ff+KVnce/buf/4Yj4uM/4v5v9+pfdx7+3svjnnuj4P3nhy/Tbd3r139/xP9sqncjX9DP+9buDT/PZAQAAAAAAwLOmFBFHIymVN8ulUrm88XzH83GkVE8bzZOX05WluWj9VnYyxkrtO90THc9DzOTPw7brZ7bUZyPi/xFxe+Rwq16upvW5YQcPAAAAAAAAAAAAAAAAAAAAz4jxHr//z/w2Muy9A/acP/kNxSX/objkPxSX/Ifikv9QXPIfikv+Q3HJfygu+Q/FJf8BAAAAAAAAAAAAAAAAAAAAAAAAAABgoC5euJAt63/fv1HN6nPXVlcW0mun5mqNhfLiSrVcTZevlufTdL5eK1fTxcf9f/U0vfpmLK1cn27WGs3pxurapcV0Zal56cpiZb52qTa2L1EBAAAAAAAAAAAAAAAAAADAv0tjdW2hUq/XlhUUFBQ2C8MemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgoX8CAAD//z8IGNY=") set_robust_list(&(0x7f00000001c0)={0x0, 0x9}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, 0x0, 0x2) 7.050453774s ago: executing program 2 (id=303): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 4.819868046s ago: executing program 3 (id=309): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={0x3a4, 0x2c, 0x20, 0x70bd25, 0x25dfdbfc, {0x1f}, [@generic="6cf4c5e2aa094d05e446e48d0e5d28a2f8086b8ad14aca8ee242c157429669714963106e276fadbd82b966affe27d51ae8d81be7a4ed6ea291b52a97b3b106ee251c60ab1ea944e9", @generic="b8b151bbad11c3706b4c28bf40ffc3354ff00ec9eecf96fb793b401f6920713fb28d54496e484097", @generic, @nested={0x1cc, 0x141, 0x0, 0x1, [@generic="ca2306b16c807974cb0b9c5fb82f9ab879485e6020a6d1731dacea423f3de77dd257195e21bc9a4b3ed557390f7d4c064403a550eb6d4dbd7e00b24444c54ba75dee83d64e26002b17ff463db03756543b", @typed={0x21, 0xdf, 0x0, 0x0, @binary="3c20bd5285efa68100a0fb847deda6b6f3df61f5097548169e20167d9b"}, @generic="1783311bed18e18db536cc69716fea1725920e9c5154362597f108b74995bebf60bd3136ded837d45e6913ee83f6189eebee85bd87ebe9ad89c8bfb12fb67d3bbd162ac6d0a23cfd572805d8b6443da746a79a98f4fc148454b558b21fd9d189917c3b216f9502c8baee73", @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}, @typed={0x8, 0x89, 0x0, 0x0, @ipv4=@local}, @typed={0xd7, 0xa6, 0x0, 0x0, @binary="143dce44effc6b84a6719e14c99ab5d20ca5eb1160b3c1bfb849fce028fa9b6f7b925cea70affc4402543dbb8a5d8eddca7866cd5d6e02653fd86e8d78ff578328e8f9190aabffac4648a5a112890f76eb39e134192f0abfbc9d482c88d32558f462541ea029b8835e7dc646be0de5f6ca5cefb43670bc6d4d5f1940ba28d9301df28c44481f5964b6c82125b5158c0c8fff9bfd19479e742a916b9fcd5a5dd68878d52b87f5f0cf06e9f7abe385005886d779ba9c6b17be634641a9dc9179ac4a0761f9337072cc7b26e7b093ad7edfd98a22"}]}, @generic="5b0b1e6331ec445f245fbd2a7983bac265baeca8a9509e5913f035cb8d050ce557ab12e6871ddacec31b7d25a29cb34a9ef6645afcccef20ff9c0e2ff411bdc6d40a9a79085c96f9da4e8357ba31853dff921a0daf2d1fb133dff83ddc639b3ee9a0d74da090a4b64cb23afa6591a39193296cd8fd9db405b56a642f47fec1ed0072a9b6475e578d1e5b6f47a73a6fa046e7f4e2f23fa12975da3836d064c2caec0ff9534488dbf0677bb481b8f4bc07c390760030490a8b8a86d091ba0b049a9a0d481ca85c3c9db4d465db94e8e4f0", @generic="fd53182dace3ae67de00202b9c9e799c551413119dec10cf5dc4daf87e928dd7bc97c59de2e1b7924b79be30fed315ff2214eb34a2e6794ac4600591e9f69a054aae7213e3b343176fa9482342d89157da6619c420ec48c9c2230f1d7bb523847502d49bd1c16249e25be436eb616e8121a578b2bce7007ea33a02f6792f7bd017856da2"]}, 0x3a4}, 0x1, 0x0, 0x0, 0x10}, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)=0x28084) 4.336051426s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x40, 0x7fe2, 0x0, 0x20}, 0x48) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@nodelalloc}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") 4.059849888s ago: executing program 0 (id=311): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x0, &(0x7f0000000000/0x400000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00003b0000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000180), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x6010, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000001000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.931581879s ago: executing program 2 (id=312): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38010000100005f600000000000000007f000001000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000faffa92d0000006c000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000480003"], 0x138}}, 0x0) 3.91687481s ago: executing program 3 (id=313): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') getdents64(r1, &(0x7f00000000c0)=""/32, 0x20) getdents(r1, &(0x7f0000001180)=""/120, 0x78) 3.80060212s ago: executing program 2 (id=314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 3.800324709s ago: executing program 3 (id=315): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x46, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r6, r5, 0x0, 0x100801700) 3.711107697s ago: executing program 2 (id=316): setitimer(0x0, &(0x7f0000000580)={{}, {0x6}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) close(r0) r3 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r4 = gettid() fcntl$setown(r0, 0x8, r4) fcntl$setsig(r3, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 3.589318836s ago: executing program 2 (id=317): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0x3) 3.531329061s ago: executing program 2 (id=318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x5, {0x5, 0x0, "a8dad2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 3.382209434s ago: executing program 1 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000013c0)={{r0}, &(0x7f0000001340), &(0x7f0000001380)='%pI4 \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) 3.278891872s ago: executing program 1 (id=321): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./bus\x00', 0x0, &(0x7f0000020000)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1548f5e0b33006bd1049ca45bd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc96eb384dbb4268c50943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906bde2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75", @ANYRES64], 0x1, 0x5511, &(0x7f0000015b80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000700)=""/147) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0xc0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) 3.278643892s ago: executing program 0 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000b3000000180100002020702500000000002020200400f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) r5 = dup(r1) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 3.195703739s ago: executing program 0 (id=323): socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x107, 0xc, 0x0, 0x20600000) 2.903720693s ago: executing program 0 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac141400000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ff020000000000000000000000000001fe8800000000000000f4ffffff000001ac141400000000000000000000000000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001fe8000"], 0xec}}, 0x0) 2.859881406s ago: executing program 3 (id=325): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) socket$inet(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xffffffffffffffc2, &(0x7f0000000280)=0x666) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f0000000240)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0x164, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in=@dev, @in6=@mcast2, @in=@multicast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010101, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@empty, @in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1}}]}, 0x164}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) add_key(&(0x7f0000000480)='logon\x00', &(0x7f0000001000)={'syz', 0x0}, &(0x7f0000000440)='.', 0x1, 0xfffffffffffffffc) 2.56340647s ago: executing program 1 (id=326): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000040)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x100002, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/86}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x4e20, 0xfffffff7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xbc62}}, {{0xa, 0x0, 0x7, @loopback, 0xff}}}, 0x108) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x34, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}}, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x0, 0x0) 2.339544709s ago: executing program 4 (id=320): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x400443c8, 0x20000002) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x1, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x4c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb5}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x4000800) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x598, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080003"], 0x78}}, 0x0) 1.788481884s ago: executing program 0 (id=327): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10880, &(0x7f0000000040)=ANY=[], 0x1, 0x17b, &(0x7f0000000740)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000ac2000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x8, 0x8}, 0x48) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) 1.777296814s ago: executing program 3 (id=328): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r4, 0x12, 0x7, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) getrlimit(0x0, &(0x7f0000000280)) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) unshare(0x42000000) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) 1.734438218s ago: executing program 1 (id=329): clock_gettime(0x9, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0xffffff85, 0x0, 0x0, 0xfffffffffffffca9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) 1.249398778s ago: executing program 4 (id=330): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010900000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x80) 1.242798718s ago: executing program 4 (id=331): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000002c0), &(0x7f0000000400)={'L-', 0x7}, 0x16, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x180, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in6=@private2, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x180}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) 806.896453ms ago: executing program 0 (id=332): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macvtap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/149, 0x95}, {0x0}, {0x0}, {0x0}], 0x4}, 0x1}, {{&(0x7f0000001080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001100)=""/232, 0xe8}], 0x1, &(0x7f00000000c0)=""/24, 0x18}, 0x101}, {{0x0, 0x0, &(0x7f0000003c40)=[{&(0x7f0000000440)=""/161, 0xa1}], 0x1}, 0x3f}], 0x4, 0x40000101, &(0x7f0000003ec0)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c001980"], 0x5c}}, 0x0) socket(0x1, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 753.022628ms ago: executing program 3 (id=333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000", @ANYRES32, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x0) 573.220853ms ago: executing program 1 (id=334): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) time(0xfffffffffffffffc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd55", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000002d1900000000d011f614dbb437d00000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000dc9040001000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) 66.984824ms ago: executing program 4 (id=335): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f00000004c0)=""/131) 0s ago: executing program 4 (id=336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): abeled_t tclass=file permissive=1 [ 36.981377][ T492] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,,errors=continue [ 36.998664][ T24] audit: type=1400 audit(1723544423.340:160): avc: denied { map } for pid=482 comm="syz.0.42" path="/6/file2/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.040460][ T24] audit: type=1400 audit(1723544423.340:161): avc: denied { execute } for pid=482 comm="syz.0.42" path="/6/file2/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.077482][ T286] attempt to access beyond end of device [ 37.077482][ T286] loop0: rw=2049, want=45104, limit=40427 [ 37.194693][ T24] audit: type=1400 audit(1723544423.550:162): avc: denied { accept } for pid=509 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 37.236955][ T506] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.46: casefold flag without casefold feature [ 37.264418][ T506] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.46: missing EA_INODE flag [ 37.280976][ T506] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.46: error while reading EA inode 2 err=-117 [ 37.296130][ T506] EXT4-fs (loop3): 1 orphan inode deleted [ 37.301702][ T506] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 37.325573][ T344] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 37.438484][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 37.455435][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.459175][ T24] audit: type=1400 audit(1723544423.710:163): avc: denied { execute } for pid=509 comm="syz.0.48" path=2F6D656D66643A1033717D329ACEAF0386E7C0148FF881FFF454C0F905202864656C6574656429 dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.463902][ T344] usb 5-1: config 0 descriptor?? [ 37.509757][ T504] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue [ 37.520871][ T504] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 37.546563][ T504] EXT4-fs (loop1): shut down requested (2) [ 37.552805][ T504] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 37.561707][ T504] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=13 [ 37.692121][ T522] syz.3.46[522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.692499][ T522] syz.3.46[522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.899321][ T521] EXT4-fs (loop1): 1 truncate cleaned up [ 37.915682][ T521] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier, [ 37.940283][ T521] EXT4-fs error (device loop1): __ext4_get_inode_loc:4409: comm syz.1.50: Invalid inode table block 5 in block_group 0 [ 37.952659][ T521] EXT4-fs (loop1): Remounting filesystem read-only [ 37.959093][ T521] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.50: Invalid inode bitmap blk 4 in block_group 0 [ 37.975342][ T25] usb 3-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config [ 37.984718][ T284] EXT4-fs error (device loop1): ext4_map_blocks:600: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 38.035738][ T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 38.044565][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 38.053799][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.063896][ T25] usb 3-1: config 0 descriptor?? [ 38.343816][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.350970][ T531] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.365297][ T531] device bridge_slave_0 entered promiscuous mode [ 38.374942][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.382531][ T531] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.391605][ T531] device bridge_slave_1 entered promiscuous mode [ 38.480921][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.487794][ T531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.494871][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.501746][ T531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.515316][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.531437][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.539482][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.546549][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.554894][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.562934][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.569807][ T488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.582770][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.591956][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.598889][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.629612][ T538] EXT4-fs error (device loop2): ext4_find_dest_de:2076: inode #2: block 16: comm syz.2.43: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=21519, rec_len=0, size=1024 fake=0 [ 38.753771][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.764607][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.765424][ T344] usb 5-1: Cannot set autoneg [ 38.777097][ T344] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 38.779627][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.789361][ T344] usb 5-1: USB disconnect, device number 3 [ 38.797000][ T531] device veth0_vlan entered promiscuous mode [ 38.804709][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.812740][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.820041][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.831368][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.841148][ T531] device veth1_macvtap entered promiscuous mode [ 38.853638][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.862289][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.411664][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.422593][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.435265][ T5] usb 1-1: New USB device found, idVendor=0fc5, idProduct=9e80, bcdDevice= 0.00 [ 39.445056][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.456005][ T5] usb 1-1: config 0 descriptor?? [ 39.677808][ T49] device bridge_slave_1 left promiscuous mode [ 39.684634][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.696330][ T49] device bridge_slave_0 left promiscuous mode [ 39.702691][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.712686][ T49] device veth1_macvtap left promiscuous mode [ 39.718845][ T49] device veth0_vlan left promiscuous mode [ 39.818753][ T20] usb 3-1: USB disconnect, device number 3 [ 39.832942][ T552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 39.936090][ T5] hid-generic 0003:0FC5:9E80.0002: unknown main item tag 0x0 [ 39.944096][ T5] hid-generic 0003:0FC5:9E80.0002: hidraw0: USB HID v0.00 Device [HID 0fc5:9e80] on usb-dummy_hcd.0-1/input0 [ 40.184445][ T5] usb 1-1: USB disconnect, device number 2 [ 40.345298][ T405] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.585434][ T405] usb 5-1: Using ep0 maxpacket: 8 [ 40.612222][ T563] F2FS-fs (loop3): Found nat_bits in checkpoint [ 40.639364][ T563] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 40.724686][ T405] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.815301][ T405] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 40.834340][ T405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 40.844428][ T405] usb 5-1: SerialNumber: syz [ 40.856355][ T405] usb 5-1: config 0 descriptor?? [ 40.871281][ T571] F2FS-fs (loop2): invalid crc value [ 40.905875][ T405] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 40.912925][ T405] uvcvideo: Failed to create links for entity 255 [ 40.918314][ T571] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.934331][ T405] uvcvideo: Failed to register entities (-22). [ 40.952275][ T571] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 41.233789][ T581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=581 comm=syz.3.63 [ 41.247915][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.338055][ T556] 9pnet: Insufficient options for proto=fd [ 41.439636][ T54] usb 5-1: USB disconnect, device number 4 [ 41.591727][ T288] attempt to access beyond end of device [ 41.591727][ T288] loop2: rw=2049, want=45112, limit=40427 [ 41.716023][ T587] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 41.734897][ T587] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard, [ 41.767611][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 41.767626][ T24] audit: type=1400 audit(1723544428.130:184): avc: denied { mounton } for pid=586 comm="syz.2.66" path="/10/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.767837][ T587] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (62631!=20869) [ 41.775346][ T24] audit: type=1400 audit(1723544428.130:185): avc: denied { remount } for pid=586 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.825210][ T591] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.837735][ T591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6042e09c, mo2=0002] [ 41.845712][ T591] System zones: 1-12 [ 41.849264][ T288] EXT4-fs error (device loop2): htree_dirblock_to_tree:1091: inode #2: block 48: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 41.850602][ T591] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.67: casefold flag without casefold feature [ 41.870646][ T288] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor: corrupted in-inode xattr [ 41.893927][ T591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.67: missing EA_INODE flag [ 41.894305][ T5] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.905664][ T591] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.67: error while reading EA inode 12 err=-117 [ 41.927168][ T591] EXT4-fs (loop3): 1 orphan inode deleted [ 41.932926][ T591] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,abort,barrier,debug,noinit_itable,min_batch_time=0x0000000000000000,usrjquota=,inode_readahead_blks=0x0000000000200000,minixdf,resgid=0x0000000000000000,,errors=continue [ 41.946330][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 41.958541][ T288] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor: corrupted in-inode xattr [ 41.969307][ T5] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 41.990332][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.004088][ T5] usb 1-1: config 0 descriptor?? [ 42.055583][ T5] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 42.066363][ T595] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 42.073281][ T595] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 42.086367][ T595] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,discard,norecovery,mblk_io_submit,mblk_io_submit,i_version,jqfmt=vfsv0,grpjquota=,bsddf,,errors=continue [ 42.135880][ T597] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.142511][ T597] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 42.150032][ T597] EXT4-fs (loop4): Test dummy encryption mode enabled [ 42.158039][ T597] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz.4.70: invalid block [ 42.168698][ T597] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.70: couldn't read orphan inode 11 (err -117) [ 42.180333][ T597] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 42.290367][ T595] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 42.306379][ T24] audit: type=1400 audit(1723544428.650:186): avc: denied { ioctl } for pid=594 comm="syz.1.69" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.336466][ T597] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 42.489821][ T595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.69: bg 0: block 234: padding at end of block bitmap is not set [ 42.559846][ T24] audit: type=1400 audit(1723544428.870:187): avc: denied { mounton } for pid=605 comm="syz.3.72" path="/20/file0" dev="tmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.650807][ T609] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 42.659176][ T595] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 42.671441][ T595] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.671441][ T595] [ 42.680940][ T595] EXT4-fs (loop1): Total free blocks count 0 [ 42.686717][ T595] EXT4-fs (loop1): Free/Dirty block details [ 42.692393][ T595] EXT4-fs (loop1): free_blocks=0 [ 42.697181][ T595] EXT4-fs (loop1): dirty_blocks=8192 [ 42.702284][ T595] EXT4-fs (loop1): Block reservation details [ 42.708116][ T595] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 42.734539][ T368] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 42.754222][ T368] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.754222][ T368] [ 42.767833][ T611] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.781882][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.792078][ T611] device bridge_slave_0 entered promiscuous mode [ 42.805285][ T611] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.812126][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.819375][ T611] device bridge_slave_1 entered promiscuous mode [ 42.828092][ T24] audit: type=1400 audit(1723544429.190:188): avc: denied { write } for pid=594 comm="syz.1.69" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 42.928767][ T611] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.935640][ T611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.942713][ T611] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.949629][ T611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.971196][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.019429][ T629] erofs: (device loop4): mounted with root inode @ nid 36. [ 43.225256][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.232787][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.240676][ T24] audit: type=1400 audit(1723544429.610:189): avc: denied { read } for pid=628 comm="syz.4.76" name="file3" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.264029][ T24] audit: type=1400 audit(1723544429.610:190): avc: denied { open } for pid=628 comm="syz.4.76" path="/12/file0/file3" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.264108][ T42] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 43.302087][ T629] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 43.323523][ T24] audit: type=1400 audit(1723544429.680:191): avc: denied { remove_name } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.345731][ T24] audit: type=1400 audit(1723544429.710:192): avc: denied { rename } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.369146][ T94] loop3: p3 < > p4 < > [ 43.373780][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.374959][ T94] loop3: partition table partially beyond EOD, [ 43.382081][ T24] audit: type=1400 audit(1723544429.710:193): avc: denied { create } for pid=76 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.394071][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.409039][ T94] truncated [ 43.415484][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.425932][ T94] loop3: p3 start 4284289 is beyond EOD, truncated [ 43.434095][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.442245][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.449091][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.466805][ T633] loop3: p3 < > p4 < > [ 43.470952][ T633] loop3: partition table partially beyond EOD, truncated [ 43.476195][ T611] device veth0_vlan entered promiscuous mode [ 43.483729][ T633] loop3: p3 start 4284289 is beyond EOD, truncated [ 43.490319][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.498980][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.507083][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.514980][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.522967][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.531139][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.539466][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.551870][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.561746][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.568947][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.579309][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.588338][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.599123][ T611] device veth1_macvtap entered promiscuous mode [ 43.608721][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.616510][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.627662][ T640] EXT4-fs (loop1): Test dummy encryption mode enabled [ 43.628696][ T309] udevd[309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 43.635194][ T637] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz.4.79: invalid block [ 43.649280][ T640] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 43.654788][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.665925][ T640] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038 (0x7fffffff) [ 43.673319][ T637] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.79: couldn't read orphan inode 11 (err -117) [ 43.694592][ T637] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue [ 43.720184][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.728564][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.738391][ T635] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 43.756852][ T309] udevd[309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 43.767767][ T49] device bridge_slave_1 left promiscuous mode [ 43.778723][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.786464][ T49] device bridge_slave_0 left promiscuous mode [ 43.792563][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.801390][ T49] device veth1_macvtap left promiscuous mode [ 43.807845][ T49] device veth0_vlan left promiscuous mode [ 44.115541][ T20] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 44.195369][ T488] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.437953][ T652] usb 1-1: USB disconnect, device number 3 [ 44.475322][ T488] usb 3-1: Using ep0 maxpacket: 32 [ 44.507312][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 44.519727][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26367, setting to 1024 [ 44.567149][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 44.580038][ T20] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 44.589040][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.599290][ T20] usb 4-1: config 0 descriptor?? [ 44.605434][ T488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.616173][ T633] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 44.623044][ T488] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.632946][ T488] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 44.642656][ T488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.658355][ T488] usb 3-1: config 0 descriptor?? [ 44.892285][ T658] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.899399][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.911553][ T658] device bridge_slave_0 entered promiscuous mode [ 44.918543][ T658] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.925518][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.932715][ T658] device bridge_slave_1 entered promiscuous mode [ 44.953941][ T652] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.981587][ T658] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.988445][ T658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.995518][ T658] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.002301][ T658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.017928][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.026471][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.033991][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.061143][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.100801][ T20] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 45.182589][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.189477][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.197351][ T20] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 45.225736][ T666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 45.244344][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.252446][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.259290][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.266794][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.274453][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.293081][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.303732][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.311582][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.319332][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.327093][ T658] device veth0_vlan entered promiscuous mode [ 45.335312][ T652] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 45.346374][ T652] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 45.360559][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.369687][ T658] device veth1_macvtap entered promiscuous mode [ 45.380295][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.388755][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.389064][ T652] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 45.405981][ T652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.422660][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.430504][ T655] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.443383][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.475750][ T49] device bridge_slave_1 left promiscuous mode [ 45.481703][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.489184][ T49] device bridge_slave_0 left promiscuous mode [ 45.495104][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.502560][ T49] device veth1_macvtap left promiscuous mode [ 45.508542][ T49] device veth0_vlan left promiscuous mode [ 45.514206][ T671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 45.522139][ T671] System zones: 1-12 [ 45.526344][ T671] EXT4-fs error (device loop4): dx_probe:795: inode #2: comm syz.4.85: Directory hole found for htree index block [ 45.538583][ T671] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 45.546899][ T671] EXT4-fs error (device loop4): dx_probe:795: inode #2: comm syz.4.85: Directory hole found for htree index block [ 45.558858][ T671] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 45.566881][ T671] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue [ 45.725365][ T15] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 45.975478][ T15] usb 2-1: Using ep0 maxpacket: 32 [ 46.115499][ T15] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.126237][ T15] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.285748][ T15] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 46.294648][ T15] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 46.302804][ T15] usb 2-1: Product: syz [ 46.306970][ T15] usb 2-1: Manufacturer: syz [ 46.366091][ T15] hub 2-1:4.0: USB hub found [ 46.625345][ T15] hub 2-1:4.0: 2 ports detected [ 46.691344][ T5] usb 4-1: USB disconnect, device number 2 [ 46.928770][ T694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 46.956815][ T694] EXT4-fs (loop2): Test dummy encryption mode enabled [ 46.964600][ T694] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.90: invalid block [ 46.975696][ T694] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.90: couldn't read orphan inode 11 (err -117) [ 46.987381][ T694] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 46.995473][ T488] usbhid 3-1:0.0: can't add hid device: -71 [ 47.020738][ T24] kauditd_printk_skb: 81 callbacks suppressed [ 47.020749][ T24] audit: type=1400 audit(1723544433.390:275): avc: denied { mounton } for pid=693 comm="syz.2.90" path="/1/file0/file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.052191][ T488] usbhid: probe of 3-1:0.0 failed with error -71 [ 47.068222][ T488] usb 3-1: USB disconnect, device number 4 [ 47.195399][ T15] hub 2-1:4.0: set hub depth failed [ 47.226922][ T24] audit: type=1400 audit(1723544433.590:276): avc: denied { unmount } for pid=611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 47.250852][ T15] usb 2-1: USB disconnect, device number 3 [ 47.290084][ T24] audit: type=1400 audit(1723544433.650:277): avc: denied { rmdir } for pid=611 comm="syz-executor" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.699344][ T706] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,barrier,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 47.719637][ T652] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 47.727409][ T652] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 47.744873][ T652] usb 1-1: USB disconnect, device number 4 [ 47.780753][ T24] audit: type=1400 audit(1723544434.140:278): avc: denied { write } for pid=711 comm="syz.0.95" name="/" dev="9p" ino=639950127193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.803140][ T24] audit: type=1400 audit(1723544434.150:279): avc: denied { add_name } for pid=711 comm="syz.0.95" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.828225][ T24] audit: type=1400 audit(1723544434.150:280): avc: denied { associate } for pid=711 comm="syz.0.95" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.886764][ T704] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 47.906456][ T704] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 47.916527][ T24] audit: type=1400 audit(1723544434.270:281): avc: denied { bind } for pid=719 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.927114][ T704] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.951662][ T722] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 47.962855][ T728] netlink: 'syz.0.97': attribute type 25 has an invalid length. [ 47.972114][ T728] netlink: 'syz.0.97': attribute type 8 has an invalid length. [ 47.978844][ T722] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.98: iget: bad i_size value: -67835469387268086 [ 47.980947][ T704] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 47.992745][ T722] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.98: couldn't read orphan inode 15 (err -117) [ 47.998966][ T704] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.028646][ T24] audit: type=1400 audit(1723544434.390:282): avc: denied { write } for pid=703 comm="syz.2.92" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.062920][ T722] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 48.069961][ T24] audit: type=1400 audit(1723544434.430:283): avc: denied { add_name } for pid=703 comm="syz.2.92" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.075164][ T722] ext2 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 48.099442][ T24] audit: type=1400 audit(1723544434.460:284): avc: denied { remove_name } for pid=703 comm="syz.2.92" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 48.225307][ T735] capability: warning: `syz.3.100' uses deprecated v2 capabilities in a way that may be insecure [ 48.487878][ T739] overlayfs: upper fs needs to support d_type. [ 48.705393][ T344] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.875869][ T750] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ00000000000000000000' [ 49.217048][ T652] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 49.485568][ T344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.510485][ T344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 49.519478][ T344] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 49.542235][ T753] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 49.549486][ T753] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 49.559514][ T753] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 49.579854][ T753] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 49.586759][ T753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.676602][ T652] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 49.727334][ T344] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.736465][ T344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.038547][ T344] usb 5-1: Product: syz [ 50.042539][ T344] usb 5-1: Manufacturer: syz [ 50.047133][ T344] usb 5-1: SerialNumber: syz [ 50.055442][ T652] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.064265][ T652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.072182][ T652] usb 3-1: SerialNumber: syz [ 50.085799][ T344] cdc_ncm 5-1:1.0: bind() failure [ 50.231292][ T286] attempt to access beyond end of device [ 50.231292][ T286] loop0: rw=2049, want=45104, limit=40427 [ 50.298633][ T344] usb 5-1: USB disconnect, device number 5 [ 50.541988][ T771] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 50.551639][ T771] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.585748][ T771] F2FS-fs (loop3): invalid crc value [ 50.591899][ T771] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.608015][ T780] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 50.617087][ T780] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 50.625545][ T771] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.633459][ T771] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.641668][ T780] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 50.655977][ T780] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 50.668116][ T780] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.668116][ T780] [ 50.677699][ T780] EXT4-fs (loop1): Total free blocks count 0 [ 50.683575][ T780] EXT4-fs (loop1): Free/Dirty block details [ 50.689270][ T780] EXT4-fs (loop1): free_blocks=65280 [ 50.694473][ T780] EXT4-fs (loop1): dirty_blocks=2 [ 50.699359][ T780] EXT4-fs (loop1): Block reservation details [ 50.705272][ T780] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 51.057283][ T797] cgroup: syz.2.101 (797) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 51.073291][ T797] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 51.242026][ T652] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 51.309238][ T806] EXT4-fs (loop4): Test dummy encryption mode enabled [ 51.352801][ T806] EXT4-fs (loop4): Ignoring removed orlov option [ 51.359785][ T806] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 51.407443][ T49] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 51.421709][ T49] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 51.518939][ T814] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 51.550197][ T814] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.575737][ T814] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.628521][ T832] EXT4-fs (loop3): Ignoring removed bh option [ 51.702463][ T832] EXT4-fs error (device loop3): __ext4_iget:4958: inode #15: block 1803188595: comm syz.3.119: invalid block [ 51.762811][ T832] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.119: couldn't read orphan inode 15 (err -117) [ 51.791315][ T814] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 51.798643][ T832] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,abort,usrjquota=,,errors=continue [ 51.798709][ T814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.835720][ T839] FAT-fs (loop0): Unrecognized mount option "allow_utime=0>000000000000000000001" or missing value [ 51.988808][ T843] EXT4-fs error (device loop3): ext4_ext_check_inode:500: inode #16: comm syz.3.122: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 52.007696][ T843] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.122: couldn't read orphan inode 16 (err -117) [ 52.019718][ T843] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue [ 52.039316][ T806] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 52.042742][ T843] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038 (0x7fffffff) [ 52.077135][ T806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 52.084860][ T843] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm syz.3.122: Invalid inode table block 2135579478 in block_group 0 [ 52.095018][ T806] F2FS-fs (loop4): invalid crc value [ 52.113087][ T285] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /28/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 52.115552][ T806] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.160186][ T49] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm kworker/u4:2: Invalid inode table block 2135579478 in block_group 0 [ 52.177718][ T49] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm kworker/u4:2: Invalid inode table block 2135579478 in block_group 0 [ 52.189899][ T806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 52.203003][ T806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 52.206137][ T285] EXT4-fs error (device loop3): __ext4_get_inode_loc:4409: comm syz-executor: Invalid inode table block 2135579478 in block_group 0 [ 52.260236][ T658] attempt to access beyond end of device [ 52.260236][ T658] loop1: rw=2049, want=45104, limit=40427 [ 52.288043][ T285] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5869: Corrupt filesystem [ 52.311198][ T285] EXT4-fs error (device loop3): ext4_quota_off:6521: inode #3: comm syz-executor: mark_inode_dirty error [ 52.372932][ T405] usb 3-1: USB disconnect, device number 5 [ 52.636006][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 52.636043][ T24] audit: type=1400 audit(1723544438.740:300): avc: denied { create } for pid=804 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 52.681449][ T405] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 52.768980][ T858] EXT4-fs (loop0): Test dummy encryption mode enabled [ 52.794275][ T858] EXT4-fs (loop0): Ignoring removed orlov option [ 52.815784][ T24] audit: type=1400 audit(1723544439.180:301): avc: denied { lock } for pid=874 comm="syz.1.124" path="socket:[16572]" dev="sockfs" ino=16572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 52.826446][ T858] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,barrier=0x0000000000000b24,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000008,data_err=abort,,errors=continue [ 52.886119][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.892959][ T876] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.900497][ T876] device bridge_slave_0 entered promiscuous mode [ 52.907413][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.914326][ T876] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.922480][ T876] device bridge_slave_1 entered promiscuous mode [ 52.985026][ T626] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 52.993941][ T626] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 53.009848][ T876] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.016699][ T876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.023768][ T876] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.030612][ T876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.040056][ T24] audit: type=1400 audit(1723544439.410:302): avc: denied { ioctl } for pid=857 comm="syz.0.125" path="socket:[16603]" dev="sockfs" ino=16603 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.084644][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.092998][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.100380][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.116724][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.124915][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.131775][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.149018][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.157361][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.164202][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.171498][ T405] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.179238][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.187206][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.195768][ T901] exfat: Unknown parameter '18446744073709551615ÿÿÿÿ' [ 53.207215][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.217747][ T876] device veth0_vlan entered promiscuous mode [ 53.223824][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.234450][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.241718][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.258511][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.267772][ T876] device veth1_macvtap entered promiscuous mode [ 53.279104][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.294749][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.398386][ T49] device bridge_slave_1 left promiscuous mode [ 53.398596][ T24] audit: type=1400 audit(1723544439.760:303): avc: denied { write } for pid=900 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.404534][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.428590][ T907] serio: Serial port ptm0 [ 53.440393][ T49] device bridge_slave_0 left promiscuous mode [ 53.447809][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.468820][ T49] device veth1_macvtap left promiscuous mode [ 53.476895][ T49] device veth0_vlan left promiscuous mode [ 53.745384][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.775914][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.935766][ T24] audit: type=1400 audit(1723544440.220:304): avc: denied { unlink } for pid=910 comm="syz.1.131" name="#3" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 53.977473][ T405] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 53.989444][ T405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.005617][ T405] usb 3-1: config 0 descriptor?? [ 54.156749][ T914] F2FS-fs (loop0): invalid crc value [ 54.186091][ T914] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.208547][ T24] audit: type=1326 audit(1723544440.570:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62dec69f9 code=0x7ffc0000 [ 54.240960][ T24] audit: type=1326 audit(1723544440.570:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62dec69f9 code=0x7ffc0000 [ 54.264961][ T24] audit: type=1326 audit(1723544440.570:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62dec69f9 code=0x7ffc0000 [ 54.289165][ T24] audit: type=1326 audit(1723544440.570:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62dec69f9 code=0x7ffc0000 [ 54.312578][ T24] audit: type=1326 audit(1723544440.570:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=926 comm="syz.3.135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62dec69f9 code=0x7ffc0000 [ 54.320863][ T914] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 54.677028][ T929] request_module fs-minix succeeded, but still no fs? [ 54.696014][ T405] cypress 0003:04B4:07B1.0004: unknown main item tag 0x6 [ 54.702875][ T405] cypress 0003:04B4:07B1.0004: item fetching failed at offset 4/5 [ 54.726202][ T405] cypress 0003:04B4:07B1.0004: parse failed [ 54.732394][ T405] cypress: probe of 0003:04B4:07B1.0004 failed with error -22 [ 54.829050][ T286] attempt to access beyond end of device [ 54.829050][ T286] loop0: rw=524288, want=45072, limit=40427 [ 54.840689][ T286] attempt to access beyond end of device [ 54.840689][ T286] loop0: rw=0, want=45072, limit=40427 [ 54.845877][ T932] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 54.859779][ T932] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 54.870069][ T932] F2FS-fs (loop1): invalid crc value [ 54.879666][ T932] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 54.880703][ T626] attempt to access beyond end of device [ 54.880703][ T626] loop0: rw=2049, want=41072, limit=40427 [ 54.903835][ T54] usb 3-1: USB disconnect, device number 6 [ 54.907052][ T932] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 54.920015][ T932] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 55.131080][ T944] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.138015][ T944] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.145183][ T944] device bridge_slave_0 entered promiscuous mode [ 55.154138][ T944] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.161420][ T944] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.168734][ T944] device bridge_slave_1 entered promiscuous mode [ 55.214234][ T942] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 55.216500][ T940] F2FS-fs (loop1): invalid crc value [ 55.233678][ T944] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.237540][ T942] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 55.240544][ T944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.253789][ T940] F2FS-fs (loop1): Found nat_bits in checkpoint [ 55.256983][ T944] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.269879][ T944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.300767][ T940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 55.302806][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.316010][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.325149][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.334299][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.342395][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.349184][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.376290][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.384656][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.391702][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.397304][ T658] attempt to access beyond end of device [ 55.397304][ T658] loop1: rw=524288, want=45072, limit=40427 [ 55.399333][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.409950][ T658] attempt to access beyond end of device [ 55.409950][ T658] loop1: rw=0, want=45072, limit=40427 [ 55.428964][ T658] attempt to access beyond end of device [ 55.428964][ T658] loop1: rw=2049, want=45104, limit=40427 [ 55.434384][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.459220][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.471754][ T944] device veth0_vlan entered promiscuous mode [ 55.478655][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.488224][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.495653][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.507946][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.518995][ T944] device veth1_macvtap entered promiscuous mode [ 55.528864][ T957] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 55.533672][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.562630][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.572254][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.581437][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.590671][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.599889][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.609215][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.618500][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.627690][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.637449][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.637454][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.637727][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.646588][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.646618][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.646651][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.691093][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.701420][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.711201][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.720906][ T626] device bridge_slave_1 left promiscuous mode [ 55.720935][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.727214][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.743187][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.752603][ T626] device bridge_slave_0 left promiscuous mode [ 55.759167][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.766425][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.775728][ T626] device veth1_macvtap left promiscuous mode [ 55.781671][ T626] device veth0_vlan left promiscuous mode [ 55.797087][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.814930][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.824727][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.837026][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.847239][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.855267][ T5] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 55.856480][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.872934][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.882355][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.894835][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.904166][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.913528][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.923005][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.932210][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.941545][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.951022][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.953718][ T963] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 55.960310][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.969036][ T963] ext4 filesystem being mounted at /28/bus/file1 supports timestamps until 2038 (0x7fffffff) [ 55.978132][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 55.997348][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 56.014278][ T970] Alternate GPT is invalid, using primary GPT. [ 56.020450][ T970] loop3: p2 p3 p7 [ 56.027353][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 56.036921][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 56.065487][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 56.075045][ T962] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 56.099486][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.110308][ T962] fuse: Bad value for 'fd' [ 56.115801][ T962] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.145: Failed to acquire dquot type 1 [ 56.118391][ T971] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.135959][ T388] udevd[388]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 56.146107][ T384] udevd[384]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 56.147880][ T287] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 56.157658][ T309] udevd[309]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 56.164820][ T287] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=16886 [ 56.188988][ T971] device bridge_slave_0 entered promiscuous mode [ 56.209985][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.217917][ T971] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.225610][ T971] device bridge_slave_1 entered promiscuous mode [ 56.245393][ T5] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 56.266299][ T5] usb 3-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 56.286860][ T5] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 56.297597][ T5] usb 3-1: config 0 has no interface number 0 [ 56.303503][ T5] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 56.305926][ T976] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 1) [ 56.314271][ T5] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 187, changing to 11 [ 56.331743][ T5] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 34240, setting to 1024 [ 56.335379][ T976] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 56.346306][ T984] EXT4-fs (loop4): Ignoring removed orlov option [ 56.364469][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.365575][ T5] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.371332][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.384315][ T5] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 56.391287][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.402351][ T976] F2FS-fs (loop0): invalid crc value [ 56.407096][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.419781][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.428910][ T984] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 56.441247][ T5] usb 3-1: config 0 descriptor?? [ 56.447324][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.455125][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.463517][ T976] F2FS-fs (loop0): Found nat_bits in checkpoint [ 56.464054][ T984] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.150: casefold flag without casefold feature [ 56.482085][ T957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.482147][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.496336][ T5] usb 3-1: MIDIStreaming interface descriptor not found [ 56.518061][ T990] syz.3.149[990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.518114][ T990] syz.3.149[990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.529662][ T984] EXT4-fs (loop4): Remounting filesystem read-only [ 56.548280][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.555349][ T984] EXT4-fs (loop4): 1 truncate cleaned up [ 56.561779][ T984] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000004000000, [ 56.562741][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.587168][ T652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.604800][ T976] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 56.612567][ T976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.633096][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.651041][ T652] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.657917][ T652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.665427][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.673740][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.692954][ T971] device veth0_vlan entered promiscuous mode [ 56.701269][ T944] attempt to access beyond end of device [ 56.701269][ T944] loop0: rw=2049, want=45104, limit=40427 [ 56.727686][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.784766][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.792919][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.800730][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.813650][ T971] device veth1_macvtap entered promiscuous mode [ 56.824166][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.935424][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.998558][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.046764][ T291] usb 3-1: USB disconnect, device number 7 [ 57.216127][ T1013] overlayfs: failed to get inode (-116) [ 57.248041][ T1013] overlayfs: failed to get inode (-116) [ 57.253954][ T1013] overlayfs: failed to get inode (-116) [ 57.281983][ T1021] process 'syz.1.156' launched '/dev/fd/3' with NULL argv: empty string added [ 57.390280][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 57.400683][ T1013] overlayfs: failed to get inode (-116) [ 57.486920][ T1020] erofs: (device loop3): mounted with root inode @ nid 36. [ 57.972750][ T24] kauditd_printk_skb: 64 callbacks suppressed [ 57.972761][ T24] audit: type=1400 audit(1723544444.330:372): avc: denied { create } for pid=1030 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.044699][ T24] audit: type=1400 audit(1723544444.370:373): avc: denied { read } for pid=1030 comm="syz.3.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.075911][ T626] device bridge_slave_1 left promiscuous mode [ 58.079007][ T24] audit: type=1326 audit(1723544444.370:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed53939f9 code=0x7ffc0000 [ 58.082933][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.112459][ T626] device bridge_slave_0 left promiscuous mode [ 58.119179][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.127932][ T626] device veth1_macvtap left promiscuous mode [ 58.133834][ T626] device veth0_vlan left promiscuous mode [ 58.145899][ T1041] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 58.173323][ T24] audit: type=1326 audit(1723544444.370:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8ed53939f9 code=0x7ffc0000 [ 58.238641][ T24] audit: type=1326 audit(1723544444.370:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed53939f9 code=0x7ffc0000 [ 58.263547][ T24] audit: type=1326 audit(1723544444.370:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8ed53939f9 code=0x7ffc0000 [ 58.291685][ T24] audit: type=1326 audit(1723544444.370:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed53939f9 code=0x7ffc0000 [ 58.315286][ T24] audit: type=1326 audit(1723544444.370:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8ed53939f9 code=0x7ffc0000 [ 58.338903][ T24] audit: type=1326 audit(1723544444.370:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 58.362702][ T24] audit: type=1326 audit(1723544444.370:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1038 comm="syz.1.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed53939f9 code=0x7ffc0000 [ 58.485302][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 58.564399][ T1056] netlink: 116 bytes leftover after parsing attributes in process `syz.2.169'. [ 58.602580][ T1056] device bridge_slave_1 left promiscuous mode [ 58.875373][ T1056] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.904010][ T1056] device bridge_slave_0 left promiscuous mode [ 58.931554][ T1056] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.945304][ T20] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 58.956997][ T20] usb 2-1: config 0 has an invalid descriptor of length 229, skipping remainder of the config [ 58.977245][ T20] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 58.988850][ T20] usb 2-1: config 0 has no interface number 0 [ 58.994747][ T20] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 59.014786][ T20] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 187, changing to 11 [ 59.035299][ T20] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 34240, setting to 1024 [ 59.055272][ T20] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 59.078403][ T20] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 59.095251][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.117595][ T20] usb 2-1: config 0 descriptor?? [ 59.135315][ T1041] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 59.165839][ T20] usb 2-1: MIDIStreaming interface descriptor not found [ 59.192154][ T1066] syz.2.172[1066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.192209][ T1066] syz.2.172[1066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.236647][ T1044] F2FS-fs (loop4): Test dummy encryption mode enabled [ 59.258491][ T1044] F2FS-fs (loop4): invalid crc value [ 59.305145][ T1044] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.340859][ T1044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.340875][ T1098] EXT4-fs (loop4): Test dummy encryption mode enabled [ 60.349172][ T1098] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 60.361383][ T1098] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038 (0x7fffffff) [ 60.750407][ T1104] EXT4-fs (loop3): unsupported inode size: 4096 [ 60.779432][ T1104] EXT4-fs (loop3): blocksize: 1024 [ 61.050260][ T54] usb 2-1: USB disconnect, device number 4 [ 61.114383][ T1116] input: syz0 as /devices/virtual/input/input6 [ 61.273064][ T1123] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 61.343244][ T1133] Zero length message leads to an empty skb [ 61.674733][ T1129] FAT-fs (loop4): Directory bread(block 64) failed [ 61.702069][ T1129] FAT-fs (loop4): Directory bread(block 65) failed [ 61.722738][ T1129] FAT-fs (loop4): Directory bread(block 66) failed [ 61.738575][ T1129] FAT-fs (loop4): Directory bread(block 67) failed [ 61.745143][ T1129] FAT-fs (loop4): Directory bread(block 68) failed [ 61.755648][ T1129] FAT-fs (loop4): Directory bread(block 69) failed [ 61.765070][ T1129] FAT-fs (loop4): Directory bread(block 70) failed [ 61.773499][ T1129] FAT-fs (loop4): Directory bread(block 71) failed [ 61.785046][ T1129] FAT-fs (loop4): Directory bread(block 72) failed [ 61.791424][ T1129] FAT-fs (loop4): Directory bread(block 73) failed [ 62.148463][ T1144] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 62.172967][ T1144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 62.306990][ T1144] F2FS-fs (loop4): Found nat_bits in checkpoint [ 62.434603][ T1161] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 62.435615][ T1144] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 62.442682][ T1161] System zones: [ 62.455327][ T1144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.455518][ T1161] 0-2, 18-18, 34-35 [ 62.481075][ T1161] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,noinit_itable,debug,,errors=continue [ 62.493795][ T1161] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 62.644732][ T1166] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 62.654143][ T1166] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff) [ 62.893959][ T1178] EXT4-fs error (device loop1): ext4_search_dir:1520: inode #2: block 3: comm syz.1.200: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 63.305879][ T1185] exfat: Deprecated parameter 'utf8' [ 63.329647][ T1185] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 63.374356][ T24] kauditd_printk_skb: 3646 callbacks suppressed [ 63.374373][ T24] audit: type=1400 audit(1723544449.730:4028): avc: denied { read append open } for pid=1184 comm="syz.0.204" path="/14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop0" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.427608][ T24] audit: type=1400 audit(1723544449.730:4029): avc: denied { map } for pid=1184 comm="syz.0.204" path="/14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/cpu.stat" dev="loop0" ino=1048609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.850480][ T1200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.206'. [ 63.859764][ T1200] tipc: Invalid UDP bearer configuration [ 63.859789][ T1200] tipc: Enabling of bearer rejected, failed to enable media [ 63.877096][ T24] audit: type=1400 audit(1723544450.030:4030): avc: denied { read } for pid=1195 comm="syz.3.207" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.900268][ T24] audit: type=1400 audit(1723544450.030:4031): avc: denied { open } for pid=1195 comm="syz.3.207" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.925472][ T24] audit: type=1400 audit(1723544450.210:4032): avc: denied { ioctl } for pid=1192 comm="syz.0.206" path="socket:[18145]" dev="sockfs" ino=18145 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.588762][ T1216] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.213: casefold flag without casefold feature [ 64.601226][ T1216] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.213: missing EA_INODE flag [ 64.612966][ T1216] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.213: error while reading EA inode 12 err=-117 [ 64.626334][ T1216] EXT4-fs (loop3): 1 orphan inode deleted [ 64.631882][ T1216] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 64.665172][ T1220] syz.4.211[1220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.665490][ T1220] syz.4.211[1220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.705467][ T344] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 64.793981][ T1219] device wg2 entered promiscuous mode [ 65.155333][ T344] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.166161][ T344] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 65.228086][ T971] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 65.248951][ T971] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 65.270083][ T971] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 65.291380][ T971] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.311961][ T971] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 65.332352][ T971] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 65.353879][ T971] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /7/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 65.374295][ T971] EXT4-fs error (device loop1): ext4_map_blocks:600: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 65.385347][ T344] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.397325][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.405086][ T344] usb 1-1: Product: syz [ 65.409366][ T344] usb 1-1: Manufacturer: syz [ 65.416063][ T344] usb 1-1: SerialNumber: syz [ 65.425126][ T1226] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009b275e, utbl_chksum : 0x7319d30d) [ 65.505923][ T1232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.218'. [ 65.561762][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.569225][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.576736][ T1236] device bridge_slave_0 entered promiscuous mode [ 65.584754][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.591701][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.598713][ T1236] device bridge_slave_1 entered promiscuous mode [ 65.629726][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.636687][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.644010][ T1236] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.651427][ T1236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.675635][ T652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.683416][ T652] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.690845][ T652] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.707663][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.725405][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.732245][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.740355][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.748315][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.755142][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.762529][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.770255][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.788051][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.798427][ T1236] device veth0_vlan entered promiscuous mode [ 65.805289][ T402] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.805598][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.826570][ T1236] device veth1_macvtap entered promiscuous mode [ 65.833512][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.842209][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.849617][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.862687][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.870974][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.879685][ T1241] F2FS-fs (loop3): invalid crc value [ 65.890840][ T1241] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.925761][ T1249] device pim6reg1 entered promiscuous mode [ 65.934699][ T1241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 66.263662][ T24] audit: type=1400 audit(1723544452.610:4033): avc: denied { connect } for pid=1251 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.293812][ T1179] device bridge_slave_1 left promiscuous mode [ 66.301358][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.311649][ T1179] device bridge_slave_0 left promiscuous mode [ 66.328129][ T24] audit: type=1400 audit(1723544452.610:4034): avc: denied { write } for pid=1251 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.351094][ T1256] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 66.351094][ T1256] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 66.351094][ T1256] [ 66.368738][ T1256] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 66.399932][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.405583][ T1256] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 66.415472][ T1256] EXT4-fs (loop1): 1 truncate cleaned up [ 66.415488][ T1179] device veth1_macvtap left promiscuous mode [ 66.420909][ T1256] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,sb=0x7fffffffffffffff,noload,nombcache,usrjquota="init_itable=0x0000000800000601,noacl,mblk_io_submit,jqfmt=vfsv1,,errors=continue [ 66.447796][ T1179] device veth0_vlan left promiscuous mode [ 66.485389][ T402] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 66.495901][ T402] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 66.564269][ T1205] erofs: (device loop0): mounted with root inode @ nid 36. [ 66.574134][ T1205] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 66.594217][ T876] attempt to access beyond end of device [ 66.594217][ T876] loop3: rw=524288, want=45072, limit=40427 [ 66.611270][ T876] attempt to access beyond end of device [ 66.611270][ T876] loop3: rw=0, want=45072, limit=40427 [ 66.640150][ T626] attempt to access beyond end of device [ 66.640150][ T626] loop3: rw=2049, want=41072, limit=40427 [ 66.665339][ T402] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 66.685988][ T402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.693803][ T402] usb 5-1: Product: syz [ 66.697824][ T402] usb 5-1: Manufacturer: syz [ 66.702481][ T402] usb 5-1: SerialNumber: syz [ 66.707545][ T402] usb 5-1: config 0 descriptor?? [ 67.123989][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.131012][ T1269] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.138077][ T1269] device bridge_slave_0 entered promiscuous mode [ 67.145913][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.152740][ T1269] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.181235][ T1269] device bridge_slave_1 entered promiscuous mode [ 67.231476][ T1269] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.238463][ T1269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.245528][ T1269] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.252300][ T1269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.274309][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.286775][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.299612][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.314968][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.325023][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.331880][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.344877][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.352989][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.359931][ T557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.374828][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.383335][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.400161][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.408638][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.416704][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.424005][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.432518][ T1269] device veth0_vlan entered promiscuous mode [ 67.447174][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.456535][ T1269] device veth1_macvtap entered promiscuous mode [ 67.468014][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.483949][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.495967][ T1179] device bridge_slave_1 left promiscuous mode [ 67.502735][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.510574][ T1179] device bridge_slave_0 left promiscuous mode [ 67.516801][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.524581][ T1179] device veth1_macvtap left promiscuous mode [ 67.530601][ T1179] device veth0_vlan left promiscuous mode [ 68.075309][ T344] cdc_ncm 1-1:1.0: bind() failure [ 68.095344][ T344] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 68.115446][ T344] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 68.123103][ T344] usb 1-1: USB disconnect, device number 5 [ 68.775296][ T15] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 68.899124][ T24] audit: type=1326 audit(1723544455.260:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 68.945638][ T402] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 68.953053][ T24] audit: type=1326 audit(1723544455.260:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 68.980451][ T402] usb 5-1: USB disconnect, device number 6 [ 68.987341][ T24] audit: type=1326 audit(1723544455.260:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.011894][ T24] audit: type=1326 audit(1723544455.260:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.035032][ T24] audit: type=1326 audit(1723544455.260:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.058245][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 69.058291][ T24] audit: type=1326 audit(1723544455.260:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.086997][ T24] audit: type=1326 audit(1723544455.260:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.097375][ T1296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 69.110150][ T24] audit: type=1326 audit(1723544455.260:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.110165][ T24] audit: type=1326 audit(1723544455.260:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.110177][ T24] audit: type=1326 audit(1723544455.260:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1284 comm="syz.0.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0dde09f9 code=0x7fc00000 [ 69.189463][ T1296] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff) [ 69.210215][ T1294] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 69.233869][ T1294] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 69.243129][ T1294] F2FS-fs (loop1): invalid crc value [ 69.248371][ T15] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 69.256694][ T15] usb 4-1: config 179 has no interface number 0 [ 69.262753][ T15] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 69.274889][ T1294] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.304279][ T15] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 69.321671][ T15] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 69.333371][ T15] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 69.370110][ T1294] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 69.377294][ T1294] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.564395][ T15] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 69.577617][ T15] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 69.584883][ T1236] attempt to access beyond end of device [ 69.584883][ T1236] loop1: rw=0, want=45072, limit=40427 [ 69.586679][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.625367][ T1292] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 69.779774][ T1316] device syzkaller0 entered promiscuous mode [ 69.815304][ T344] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 69.828415][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.835387][ T1317] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.842414][ T1317] device bridge_slave_0 entered promiscuous mode [ 69.849638][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.856772][ T1317] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.864054][ T1317] device bridge_slave_1 entered promiscuous mode [ 69.865983][ T1147] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input7 [ 69.910013][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.916871][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.923959][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.930766][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.965253][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.972943][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.980486][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.009498][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.019028][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.026878][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.033998][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.041649][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.049695][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.056530][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.075356][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.083245][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.090017][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.097461][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.105483][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.115323][ T344] usb 5-1: Using ep0 maxpacket: 32 [ 70.125600][ T1317] device veth0_vlan entered promiscuous mode [ 70.145753][ T1325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 70.147290][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.170275][ T1317] device veth1_macvtap entered promiscuous mode [ 70.179139][ T1325] netlink: 'syz.0.240': attribute type 3 has an invalid length. [ 70.186899][ T1325] netlink: 'syz.0.240': attribute type 3 has an invalid length. [ 70.214550][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.235531][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.246516][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 70.257165][ T344] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 70.271134][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.322730][ T344] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 70.331605][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.341007][ T344] usb 5-1: config 0 descriptor?? [ 70.375942][ T1179] device bridge_slave_1 left promiscuous mode [ 70.382001][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.389549][ T1179] device bridge_slave_0 left promiscuous mode [ 70.763208][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.812428][ T1179] device veth1_macvtap left promiscuous mode [ 70.835613][ T1179] device veth0_vlan left promiscuous mode [ 71.222308][ T1342] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.229920][ T1342] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.249369][ T1342] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.272299][ T1342] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 71.279177][ T1342] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 71.306551][ T1342] overlayfs: invalid origin (00000079004c000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 71.505286][ T291] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 71.865290][ T291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 71.902619][ T944] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 71.902631][ T944] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 71.910489][ T944] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 71.918162][ T944] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 71.918871][ T488] usb 4-1: USB disconnect, device number 3 [ 71.925841][ T944] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 71.938901][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 71.938976][ T488] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 71.946846][ T944] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 71.967696][ T944] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 72.045332][ T291] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 72.061579][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.069397][ T291] usb 2-1: Product: syz [ 72.073349][ T291] usb 2-1: Manufacturer: syz [ 72.078286][ T291] usb 2-1: SerialNumber: syz [ 72.083158][ T291] usb 2-1: config 0 descriptor?? [ 72.095301][ T344] usbhid 5-1:0.0: can't add hid device: -71 [ 72.101040][ T344] usbhid: probe of 5-1:0.0 failed with error -71 [ 72.171372][ T344] usb 5-1: USB disconnect, device number 7 [ 72.212256][ T1360] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,grpquota,,errors=continue [ 72.222649][ T1360] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 72.484344][ T291] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 72.492121][ T291] usb 2-1: USB disconnect, device number 5 [ 73.167855][ T1377] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 73.167855][ T1377] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 73.167855][ T1377] [ 73.187568][ T1377] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.207107][ T1377] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 73.216170][ T1377] EXT4-fs (loop3): Remounting filesystem read-only [ 73.222536][ T1377] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #3: comm syz.3.253: mark_inode_dirty error [ 73.248450][ T1377] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 73.267627][ T1377] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #3: comm syz.3.253: mark_inode_dirty error [ 73.365745][ T1377] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.253: Failed to acquire dquot type 0 [ 73.466963][ T1377] EXT4-fs (loop3): 1 truncate cleaned up [ 73.472425][ T1377] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr, [ 73.483868][ T1377] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038 (0x7fffffff) [ 73.626841][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.633770][ T1393] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.641514][ T1393] device bridge_slave_0 entered promiscuous mode [ 73.648858][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.655794][ T1393] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.664830][ T1393] device bridge_slave_1 entered promiscuous mode [ 74.200676][ T1395] EXT4-fs (loop4): Test dummy encryption mode enabled [ 74.207852][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.209340][ T1395] EXT4-fs (loop4): Ignoring removed orlov option [ 74.214708][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.227426][ T1395] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x000000000000007a,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 74.227950][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.260780][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.292980][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.301293][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.309233][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.325029][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.333794][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.340656][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.348156][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.356555][ T402] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.363392][ T402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.371841][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.385292][ T24] kauditd_printk_skb: 69 callbacks suppressed [ 74.385303][ T24] audit: type=1400 audit(1723544460.750:4112): avc: denied { accept } for pid=1411 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 74.420423][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.441212][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.530420][ T1393] device veth0_vlan entered promiscuous mode [ 74.546308][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.554553][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.564674][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.575830][ T1414] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 74.587001][ T1414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 74.595026][ T1414] System zones: 1-12 [ 74.603490][ T1414] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2204: inode #15: comm syz.0.265: corrupted in-inode xattr [ 74.616553][ T1414] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.265: couldn't read orphan inode 15 (err -117) [ 74.629385][ T1414] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 74.735514][ T24] audit: type=1400 audit(1723544461.060:4113): avc: denied { validate_trans } for pid=1411 comm="syz.3.264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 74.783381][ T1393] device veth1_macvtap entered promiscuous mode [ 74.827355][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.856689][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.868728][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.876380][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.883408][ T1427] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 74.884468][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.136648][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.141345][ T24] audit: type=1401 audit(1723544461.500:4114): op=setxattr invalid_context="" [ 75.144689][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.182650][ T1435] syz.0.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 75.225126][ T24] audit: type=1326 audit(1723544461.580:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1438 comm="syz.2.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f087f6629f9 code=0x0 [ 75.378569][ T1447] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.274: casefold flag without casefold feature [ 75.391210][ T1447] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 75.401235][ T1447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 75.446280][ T1179] device veth1_macvtap left promiscuous mode [ 75.452153][ T1179] device veth0_vlan left promiscuous mode [ 75.485337][ T488] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 75.515311][ T20] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 75.785299][ T20] usb 4-1: Using ep0 maxpacket: 32 [ 75.875682][ T488] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.885735][ T488] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.965353][ T20] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.972935][ T488] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 75.981873][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 75.989637][ T488] usb 2-1: SerialNumber: syz [ 76.055338][ T20] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 76.067104][ T20] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 76.077207][ T20] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 76.248917][ T1437] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.425455][ T1437] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 76.472795][ T1437] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 76.492804][ T1437] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 76.494679][ T20] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.502223][ T1437] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 76.510356][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.539947][ T20] usb 4-1: Manufacturer: Ц [ 76.565879][ T488] usb 2-1: 0:2 : does not exist [ 76.582271][ T1469] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 76.596533][ T1469] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.278: invalid indirect mapped block 1 (level 1) [ 76.609866][ T1469] EXT4-fs (loop0): 1 truncate cleaned up [ 76.615357][ T1469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 76.988289][ T402] usb 2-1: USB disconnect, device number 6 [ 76.996192][ T24] audit: type=1400 audit(1723544463.360:4116): avc: denied { view } for pid=1442 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 77.072593][ T1475] IPv6: NLM_F_REPLACE set, but no existing node found! [ 77.118329][ T1443] device syzkaller0 entered promiscuous mode [ 77.129087][ T1479] netlink: 47 bytes leftover after parsing attributes in process `syz.2.281'. [ 77.275298][ T20] cdc_ncm 4-1:1.0: bind() failure [ 77.280826][ T20] cdc_ncm 4-1:1.1: bind() failure [ 77.289644][ T20] usb 4-1: USB disconnect, device number 4 [ 77.445302][ T652] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 77.815527][ T652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.826415][ T652] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.839823][ T652] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 77.849114][ T652] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.862147][ T1494] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 77.866165][ T652] usb 3-1: config 0 descriptor?? [ 77.936664][ T1490] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 77.949719][ T1490] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 77.958826][ T1490] F2FS-fs (loop3): invalid crc value [ 77.965381][ T1490] F2FS-fs (loop3): Found nat_bits in checkpoint [ 77.991704][ T1490] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 77.998673][ T1490] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 78.223641][ T1510] overlayfs: missing 'workdir' [ 78.746548][ T652] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 78.757877][ T1269] attempt to access beyond end of device [ 78.757877][ T1269] loop3: rw=2049, want=45104, limit=40427 [ 78.758836][ T652] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 78.845283][ T652] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected [ 78.897789][ T1517] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue [ 78.960468][ T15] usb 3-1: USB disconnect, device number 8 [ 78.970757][ T488] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.973564][ T15] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected [ 79.225343][ T488] usb 1-1: Using ep0 maxpacket: 32 [ 79.345443][ T488] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.355625][ T488] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.515395][ T488] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.524561][ T488] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.532548][ T488] usb 1-1: Product: syz [ 79.536557][ T488] usb 1-1: Manufacturer: syz [ 79.540963][ T488] usb 1-1: SerialNumber: syz [ 79.755858][ T15] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 79.805842][ T488] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 79.854626][ T1530] attempt to access beyond end of device [ 79.854626][ T1530] loop3: rw=2049, want=1041, limit=128 [ 80.007502][ T24] audit: type=1400 audit(1723544466.370:4117): avc: denied { read write } for pid=1514 comm="syz.0.290" name="lp0" dev="devtmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 80.031337][ T24] audit: type=1400 audit(1723544466.370:4118): avc: denied { open } for pid=1514 comm="syz.0.290" path="/dev/usb/lp0" dev="devtmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 80.215313][ T291] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.215363][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.233463][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.242994][ T15] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 80.251846][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.260096][ T15] usb 3-1: config 0 descriptor?? [ 80.315745][ T15] hub 3-1:0.0: USB hub found [ 80.485266][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 80.545502][ T15] hub 3-1:0.0: 1 port detected [ 80.568542][ T488] usb 1-1: USB disconnect, device number 6 [ 80.575687][ T488] usblp0: removed [ 80.625333][ T291] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 80.633776][ T291] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 80.642546][ T291] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 80.651418][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 80.660905][ T291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 80.670360][ T291] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 80.683379][ T291] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 80.692250][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.700543][ T291] usb 4-1: config 0 descriptor?? [ 80.966162][ T291] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 80.978891][ T291] usb 4-1: USB disconnect, device number 5 [ 80.985160][ T291] usblp0: removed [ 80.989403][ T15] usb 3-1: USB disconnect, device number 9 [ 81.005631][ T488] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 81.405269][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 81.435295][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 81.446414][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 81.457351][ T488] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.470535][ T488] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.482846][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.492247][ T1544] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 81.492247][ T1544] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 81.492247][ T1544] [ 81.510538][ T488] usb 1-1: config 0 descriptor?? [ 81.511576][ T1544] EXT4-fs (loop2): orphan cleanup on readonly fs [ 81.521621][ T1544] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 81.530323][ T1544] EXT4-fs (loop2): 1 truncate cleaned up [ 81.535899][ T1544] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="nouid32,noacl,data_err=abort,,errors=continue [ 81.545308][ T291] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 81.557447][ T1536] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.572020][ T1544] EXT4-fs error (device loop2): ext4_map_blocks:600: inode #2: block 4: comm syz.2.300: lblock 0 mapped to illegal pblock 4 (length 1) [ 81.805286][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 81.815361][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.826128][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.835794][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.844653][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.852970][ T20] usb 2-1: config 0 descriptor?? [ 81.925327][ T291] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 81.933533][ T291] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 81.941932][ T291] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 81.945268][ T54] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 81.950747][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.967545][ T291] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.976975][ T291] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.989757][ T291] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 81.998580][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.007027][ T291] usb 4-1: config 0 descriptor?? [ 82.035930][ T488] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 82.043811][ T488] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 82.052634][ T488] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 82.107977][ T24] audit: type=1400 audit(1723544468.470:4119): avc: denied { append } for pid=1540 comm="syz.1.299" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.215304][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 82.221095][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 82.227909][ T20] usb 2-1: USB disconnect, device number 7 [ 82.315820][ T291] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 82.315853][ T1536] 9pnet: Insufficient options for proto=fd [ 82.339249][ T291] usb 1-1: USB disconnect, device number 7 [ 82.355334][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.366041][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.375890][ T54] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.384737][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.393611][ T54] usb 3-1: config 0 descriptor?? [ 83.119119][ T1566] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 83.290840][ T24] audit: type=1400 audit(1723544469.460:4120): avc: denied { create } for pid=1562 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.637824][ T1570] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 83.645575][ T1570] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.654303][ T1570] F2FS-fs (loop1): invalid crc value [ 83.660826][ T1570] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.684144][ T1570] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 83.691109][ T1570] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.845657][ T488] usb 4-1: USB disconnect, device number 6 [ 83.855039][ T488] usblp0: removed [ 83.875489][ T1581] overlayfs: failed to resolve './file1': -2 [ 84.374087][ T1179] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 84.382897][ T1179] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 84.825766][ T54] usbhid 3-1:0.0: can't add hid device: -71 [ 84.844833][ T54] usbhid: probe of 3-1:0.0 failed with error -71 [ 84.851278][ T1590] EXT4-fs (loop1): Test dummy encryption mode enabled [ 84.858020][ T1590] EXT4-fs (loop1): Ignoring removed orlov option [ 84.864133][ T1590] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 84.874313][ T54] usb 3-1: USB disconnect, device number 10 [ 84.884945][ T1590] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,usrjquota=./bus,nodelalloc,,errors=continue [ 85.026608][ T1602] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 85.048853][ T1602] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.093661][ T24] audit: type=1400 audit(1723544471.450:4121): avc: denied { watch } for pid=1607 comm="syz.2.316" path="/15/control" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 85.133783][ T1602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 85.172611][ T1602] System zones: 0-1, 3-36 [ 85.235560][ T1602] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue [ 85.443396][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.466719][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.475489][ T557] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 85.506551][ T1618] device bridge_slave_0 entered promiscuous mode [ 85.525525][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.532362][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.615797][ T24] audit: type=1400 audit(1723544471.960:4122): avc: denied { read } for pid=1601 comm="syz.3.315" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.758997][ T1618] device bridge_slave_1 entered promiscuous mode [ 85.761457][ T24] audit: type=1400 audit(1723544471.960:4123): avc: denied { open } for pid=1601 comm="syz.3.315" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.849510][ T24] audit: type=1400 audit(1723544471.970:4124): avc: denied { ioctl } for pid=1601 comm="syz.3.315" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.874376][ T24] audit: type=1400 audit(1723544472.120:4125): avc: denied { getopt } for pid=1628 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.907661][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.914517][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.921644][ T1618] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.928406][ T1618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.936946][ T1623] F2FS-fs (loop1): invalid crc value [ 85.950817][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.958316][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.968729][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.977296][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.984928][ T1623] F2FS-fs (loop1): Found nat_bits in checkpoint [ 86.001951][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.015463][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.022295][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.035361][ T557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.055249][ T557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.065049][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.073324][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.080173][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.087663][ T557] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 86.094826][ T1623] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 86.096513][ T557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.113302][ T557] usb 3-1: config 0 descriptor?? [ 86.130641][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.138574][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.150179][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.166677][ T1618] device veth0_vlan entered promiscuous mode [ 86.173365][ T488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.205078][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.213043][ T679] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.236362][ T1618] device veth1_macvtap entered promiscuous mode [ 86.249878][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.274252][ T24] audit: type=1400 audit(1723544472.630:4126): avc: denied { write } for pid=1637 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.274375][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.327178][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.417042][ T1645] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.459952][ T24] audit: type=1400 audit(1723544472.820:4127): avc: denied { write } for pid=1644 comm="syz.1.326" path="/18/file2/bus" dev="loop1" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.525947][ T1179] device bridge_slave_1 left promiscuous mode [ 86.532046][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.539802][ T24] audit: type=1400 audit(1723544472.910:4128): avc: denied { connect } for pid=1647 comm="syz.4.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.541447][ T1179] device bridge_slave_0 left promiscuous mode [ 86.565872][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.574405][ T1179] device veth1_macvtap left promiscuous mode [ 86.580492][ T557] hid (null): bogus close delimiter [ 86.586495][ T1179] device veth0_vlan left promiscuous mode [ 86.809352][ T24] audit: type=1400 audit(1723544473.060:4129): avc: denied { setopt } for pid=1644 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 86.828659][ T557] usb 3-1: language id specifier not provided by device, defaulting to English [ 86.957055][ T1657] erofs: (device loop0): mounted with root inode @ nid 36. [ 87.058603][ T1656] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.117974][ T1656] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.328: invalid block [ 87.129018][ T1656] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.328: couldn't read orphan inode 11 (err -117) [ 87.142822][ T1656] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 87.425337][ T557] uclogic 0003:256C:006D.0008: interface is invalid, ignoring [ 87.474564][ T24] audit: type=1326 audit(1723544473.830:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1660 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1f53ad9f9 code=0x7ffc0000 [ 87.613485][ T1672] overlayfs: missing 'lowerdir' [ 87.772128][ T1674] fuse: Bad value for 'fd' [ 88.123622][ T557] usb 3-1: USB disconnect, device number 11 [ 89.798425][ T1677] sched: RT throttling activated SYZFAIL: failed to send rpc fd=3 want=776 sent=0 n=-1 (errno 32: Broken pipe) [ 133.945886][ T1179] device bridge_slave_1 left promiscuous mode [ 133.951795][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.959057][ T1179] device bridge_slave_0 left promiscuous mode [ 133.964951][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.972463][ T1179] device veth1_macvtap left promiscuous mode [ 133.978297][ T1179] device veth0_vlan left promiscuous mode [ 135.355851][ T1179] device bridge_slave_1 left promiscuous mode [ 135.361775][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.369015][ T1179] device bridge_slave_0 left promiscuous mode [ 135.374903][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.382430][ T1179] device bridge_slave_1 left promiscuous mode [ 135.388381][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.395521][ T1179] device bridge_slave_0 left promiscuous mode [ 135.401492][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.409196][ T1179] device bridge_slave_1 left promiscuous mode [ 135.415091][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.422297][ T1179] device bridge_slave_0 left promiscuous mode [ 135.428266][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.435690][ T1179] device bridge_slave_1 left promiscuous mode [ 135.441574][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.448812][ T1179] device bridge_slave_0 left promiscuous mode [ 135.454699][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.462594][ T1179] device veth1_macvtap left promiscuous mode [ 135.468407][ T1179] device veth0_vlan left promiscuous mode [ 135.474024][ T1179] device veth1_macvtap left promiscuous mode [ 135.479806][ T1179] device veth0_vlan left promiscuous mode [ 135.485408][ T1179] device veth1_macvtap left promiscuous mode [ 135.491115][ T1179] device veth0_vlan left promiscuous mode [ 135.496963][ T1179] device veth1_macvtap left promiscuous mode [ 135.502744][ T1179] device veth0_vlan left promiscuous mode