last executing test programs: 8.352450114s ago: executing program 4 (id=637): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 6.551355822s ago: executing program 1 (id=657): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f0000006b80)="$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") syz_clone(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c8000000010902"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100001) 4.943470914s ago: executing program 0 (id=669): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 4.894337018s ago: executing program 4 (id=672): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x1}, 0x48) 4.879055129s ago: executing program 4 (id=673): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000b40)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x21, 0x9, {0x9}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000540), &(0x7f00000002c0)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x4, "e509b831"}, &(0x7f00000003c0)={0x20, 0x3, 0x1}}) 3.406900551s ago: executing program 3 (id=675): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') poll(0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/144, 0x90) getdents64(r1, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20183, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = epoll_create1(0x0) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xc000000d}) epoll_pwait(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x1263, &(0x7f0000001080)) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r6 = fsmount(0xffffffffffffffff, 0x1, 0x9) r7 = open_tree(r6, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip6_mr_vif\x00') preadv(r8, &(0x7f0000000780)=[{0x0}], 0x1, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r9) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) r11 = syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') openat$cgroup(r11, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 3.401541211s ago: executing program 1 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0f20c06635000001000f22c0ad660fd8e966b9090200000f32360f55d6baf80c66b8169d288966efbafc0cb000ee0fc776030f201166b8010000000f23c80f21f866350400a0000f23f80f20e06635000040000f22e0", 0xfffffffffffffe84}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.387683412s ago: executing program 3 (id=677): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.375808593s ago: executing program 3 (id=678): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}}}}) 2.521329273s ago: executing program 3 (id=681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.512264304s ago: executing program 3 (id=682): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xa, 0x148, 0x0, 0x10, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2a8) 2.463537458s ago: executing program 3 (id=683): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 2.053676472s ago: executing program 1 (id=686): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='sched_switch\x00', r4}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) close(r3) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) 1.333287791s ago: executing program 2 (id=688): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 1.317401452s ago: executing program 2 (id=689): syz_emit_ethernet(0x52, &(0x7f0000000a00)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast1]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.316969022s ago: executing program 2 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newchain={0x24, 0x2e, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xfff1}}}, 0x24}}, 0x0) 1.254172697s ago: executing program 2 (id=691): socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = inotify_init1(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xfffffffd}]}) setresuid(0x0, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000000000000000004000000000000000000000000000000000000000000038000100000000000000030000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/1897], 0x878) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='coredump_filter\x00') close(r6) inotify_add_watch(r5, &(0x7f0000000000)='./file1\x00', 0x4000801) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$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") 1.253112107s ago: executing program 0 (id=692): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.244172598s ago: executing program 0 (id=693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000580)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x1, 0x23a, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0x4, 0x2}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x6}, @struct={0x2, 0x5, 0x0, 0x4, 0x1, 0x0, [{0x8, 0x4, 0x3}, {0x5, 0x0, 0x5}, {0x6, 0x0, 0x7}, {0xd, 0x3, 0x1}, {0x9, 0x1}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x61]}}, &(0x7f00000002c0)=""/4096, 0x92, 0x1000}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x2, 0x3, 0x4, 0xb, 0x6, 0x30, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0xeb, &(0x7f00000000c0)=""/235, 0x0, 0x60, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000001300)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001340)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001380)=[{0x5, 0x4, 0x5}, {0x1, 0x3, 0xa, 0x2}, {0x0, 0x5, 0xf, 0xf}, {0x1, 0x3, 0x7, 0x1}, {0x2, 0x1, 0x0, 0xb}, {0x0, 0x3, 0x8, 0x4}], 0x10, 0xb}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000280), 0x12) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@p, {0x5}, {}, {}, {}, {}, {0x16, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x1e, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc3}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x1, 0x3, 0x4, 0x2, 0x1, 0x18}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0xa713, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x100, 0xdf, &(0x7f0000000380)=""/223, 0x41100, 0x2, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0xffff, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000700)=[0xffffffffffffffff, r3], &(0x7f0000000740)=[{0x5, 0x2, 0x0, 0xa}, {0x5, 0x5, 0x5, 0x4}, {0x1, 0x5, 0x3, 0xa}, {0x1, 0x1, 0xc, 0x9}, {0x1, 0x5, 0xf, 0xb}, {0x0, 0x3, 0xe, 0x7}, {0x4, 0x5, 0x9}, {0x3, 0x5, 0x8, 0x6}, {0x5, 0x5, 0x6, 0x9}], 0x10, 0x1ff}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x8, &(0x7f00000000c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x39e}, @alu={0x7, 0x0, 0x6, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @exit, @alu={0x7, 0x0, 0x1, 0x4, 0x6, 0x20, 0xfffffffffffffffc}], &(0x7f0000000100)='GPL\x00', 0x2, 0x1d, &(0x7f0000000140)=""/29, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x3, 0x4, 0xd, 0xd}], 0x10, 0x5}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x37b472e4377fcf0b, 0x1a, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x89b7, 0x0, 0x0, 0x0, 0x1000}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x101, 0x4d, &(0x7f00000004c0)=""/77, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x4, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@ifindex, 0x12, 0x1, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@cgroup, r4, 0x18, 0x202c, 0x0, @prog_fd=r5, r6}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f0000000280)=ANY=[], 0x60) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.037989445s ago: executing program 1 (id=694): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="0f764f5b563f4b31634f0efa13b6bb0aa919ae030fae4ba564895644dd7734994b4fe9b224f6639696be610740b2746756c545810c1c5d5f2ef07953c35208ac37", 0x41}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40045402, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'}) 974.36576ms ago: executing program 1 (id=695): socket$inet6(0xa, 0x3, 0x3c) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000600)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) 973.939471ms ago: executing program 1 (id=696): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x105, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) 953.483132ms ago: executing program 4 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x52) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000100001c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 843.619931ms ago: executing program 4 (id=698): getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) 416.554946ms ago: executing program 2 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008200000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 403.293897ms ago: executing program 0 (id=700): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 386.476049ms ago: executing program 0 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newchain={0x24, 0x2e, 0x901, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xfff1}}}, 0x24}}, 0x0) 353.418331ms ago: executing program 0 (id=702): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 344.855492ms ago: executing program 2 (id=703): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 0s ago: executing program 4 (id=704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000ffffffffffffffff0000001077d551234b639ca3f5873e7079676d4ba99c484bffffff7f000000002291728aceb376989e8f654e362815b57af4ed952a49d6c8ec302287d9cd0087c7aa3ad48ca9baa653f3b8f92faf048b9262"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000280)=0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) waitid(0x2, r4, 0x0, 0x8, &(0x7f0000000440)) kernel console output (not intermixed with test programs): 073687][ T698] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 61.073845][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.093947][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.106821][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.720654][ T1328] loop1: detected capacity change from 0 to 128 [ 61.749772][ T1327] device veth0_vlan left promiscuous mode [ 61.763089][ T1327] device veth0_vlan entered promiscuous mode [ 61.984180][ T1328] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 61.987335][ T1290] device veth1_macvtap entered promiscuous mode [ 61.998798][ T1328] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 62.029433][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.038319][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.050835][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.059062][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.165990][ T1132] EXT4-fs (loop1): unmounting filesystem. [ 62.178592][ T1334] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 62.225657][ T590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.279533][ T590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.335600][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 62.335646][ T28] audit: type=1326 audit(1722461775.009:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1336 comm="syz.0.318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba895773b9 code=0x0 [ 62.392624][ T590] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 62.409695][ T590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.428300][ T590] usb 3-1: config 0 descriptor?? [ 62.500807][ T1348] loop3: detected capacity change from 0 to 1024 [ 62.511238][ T1343] loop1: detected capacity change from 0 to 40427 [ 62.540177][ T1348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.546430][ T1343] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.550813][ T1341] loop4: detected capacity change from 0 to 40427 [ 62.655490][ T1343] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.204441][ T1339] loop4: detected capacity change from 0 to 128 [ 63.218976][ T1364] 9pnet: Could not find request transport: fd0x0000000000000008 [ 63.428943][ T960] EXT4-fs error (device loop3): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extended attribute block 8388352 [ 63.463559][ T1366] loop0: detected capacity change from 0 to 512 [ 63.467222][ T960] EXT4-fs error (device loop3): ext4_lookup:1855: inode #15: comm syz-executor: iget: bad extended attribute block 8388352 [ 63.475994][ T1366] EXT4-fs: Ignoring removed bh option [ 63.517179][ T1366] EXT4-fs error (device loop0): __ext4_iget:5046: inode #15: block 1803188595: comm syz.0.322: invalid block [ 63.519432][ T1369] loop1: detected capacity change from 0 to 1024 [ 63.528823][ T1366] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.322: couldn't read orphan inode 15 (err -117) [ 63.550502][ T1366] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 63.563388][ T960] EXT4-fs (loop3): unmounting filesystem. [ 63.571236][ T1369] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 63.604755][ T931] EXT4-fs (loop0): unmounting filesystem. [ 63.625845][ T1369] loop1: detected capacity change from 1024 to 64 [ 63.646197][ T28] audit: type=1400 audit(1722461776.389:364): avc: denied { setattr } for pid=1367 comm="syz.1.324" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.669658][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.685611][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.715680][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.745518][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.765454][ T590] usb 3-1: string descriptor 0 read error: -71 [ 63.769060][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.785471][ T590] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 63.795152][ T590] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 63.800557][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.803244][ T590] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 63.817829][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.824417][ T590] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 63.850015][ T590] uclogic: probe of 0003:256C:006D.0010 failed with error -71 [ 63.854204][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.871114][ T590] usb 3-1: USB disconnect, device number 9 [ 63.878694][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.892266][ T1132] EXT4-fs warning (device loop1): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 63.955931][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.962770][ T1377] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.984909][ T1377] device bridge_slave_0 entered promiscuous mode [ 64.071699][ T1132] EXT4-fs (loop1): unmounting filesystem. [ 64.083059][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.091548][ T1377] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.101703][ T1377] device bridge_slave_1 entered promiscuous mode [ 64.156190][ T1386] device veth0_vlan left promiscuous mode [ 64.164037][ T1386] device veth0_vlan entered promiscuous mode [ 64.195620][ T1371] kmmpd-loop1: attempt to access beyond end of device [ 64.195620][ T1371] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 64.209045][ T1371] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 64.286174][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.293066][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.300313][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.307165][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.347730][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.355037][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.362418][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.373370][ T323] device bridge_slave_1 left promiscuous mode [ 64.379528][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.390366][ T323] device bridge_slave_0 left promiscuous mode [ 64.405576][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.413489][ T323] device veth1_macvtap left promiscuous mode [ 64.419414][ T323] device veth0_vlan left promiscuous mode [ 64.577613][ T28] audit: type=1326 audit(1722461777.329:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1390 comm="syz.2.332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04ec3773b9 code=0x0 [ 64.763914][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.771990][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.778858][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.795009][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.803904][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.822145][ T1389] device bridge_slave_0 entered promiscuous mode [ 64.828900][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.839183][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.851581][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.858452][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.878282][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.885129][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.901194][ T1389] device bridge_slave_1 entered promiscuous mode [ 64.921242][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.929520][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.946478][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.954608][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.987906][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.996140][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.009976][ T1377] device veth0_vlan entered promiscuous mode [ 65.015881][ T28] audit: type=1400 audit(1722461777.759:366): avc: denied { ioctl } for pid=1400 comm="syz.0.333" path="socket:[22983]" dev="sockfs" ino=22983 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.051156][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.058969][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.079594][ T1377] device veth1_macvtap entered promiscuous mode [ 65.086503][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.094126][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.101903][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.110313][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.118258][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.136827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.144786][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.152910][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.160958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.213291][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.220931][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.292676][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.300897][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.525839][ T590] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.532689][ T590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.550722][ T1422] loop3: detected capacity change from 0 to 256 [ 65.555152][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.564991][ T590] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.571844][ T590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.572433][ T1422] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.600156][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.607841][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.406289][ T1428] loop2: detected capacity change from 0 to 128 [ 66.412898][ T316] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 66.488152][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.544170][ T1428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.553165][ T1428] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038 (0x7fffffff) [ 66.596973][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.617375][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.625156][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.634027][ T1389] device veth0_vlan entered promiscuous mode [ 66.640730][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.648043][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.668987][ T1389] device veth1_macvtap entered promiscuous mode [ 66.714638][ T930] EXT4-fs (loop2): unmounting filesystem. [ 66.722830][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.732975][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.741266][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.748993][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.759602][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.800898][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.809132][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.003813][ T1442] device veth0_vlan left promiscuous mode [ 67.012107][ T1442] device veth0_vlan entered promiscuous mode [ 67.083723][ T316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.093335][ T316] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.115398][ T316] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.124245][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.132945][ T323] device bridge_slave_1 left promiscuous mode [ 67.135749][ T316] usb 5-1: config 0 descriptor?? [ 67.139000][ T1050] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.151459][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.159074][ T323] device bridge_slave_0 left promiscuous mode [ 67.165220][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.176486][ T316] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 67.185713][ T323] device veth1_macvtap left promiscuous mode [ 67.191881][ T323] device veth0_vlan left promiscuous mode [ 67.303215][ T1447] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.457718][ T1450] loop1: detected capacity change from 0 to 2048 [ 67.467644][ T1450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 67.483949][ T1389] EXT4-fs (loop1): unmounting filesystem. [ 67.505558][ T1050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.517073][ T1050] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 67.530936][ T1050] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 67.533107][ T1456] loop1: detected capacity change from 0 to 512 [ 67.539948][ T1050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.554424][ T1050] usb 1-1: config 0 descriptor?? [ 67.572772][ T1456] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.582103][ T1456] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 67.620306][ T1465] loop3: detected capacity change from 0 to 512 [ 67.625404][ T1456] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 67.642826][ T1389] EXT4-fs (loop1): unmounting filesystem. [ 67.696333][ T1465] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.708392][ T1469] loop1: detected capacity change from 0 to 8192 [ 67.725188][ T1465] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 67.749707][ T1469] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.761706][ T1465] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.351: corrupted inode contents [ 67.780562][ T1467] loop2: detected capacity change from 0 to 40427 [ 67.792118][ T1467] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.804160][ T1465] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.351: mark_inode_dirty error [ 67.816531][ T1465] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.351: corrupted inode contents [ 67.839189][ T1465] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.351: mark_inode_dirty error [ 67.847359][ T1476] loop1: detected capacity change from 0 to 1024 [ 67.853629][ T1467] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 67.871583][ T1476] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.893503][ T1377] EXT4-fs (loop3): unmounting filesystem. [ 67.953421][ T1483] loop3: detected capacity change from 0 to 512 [ 67.977396][ T1483] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.356: corrupted inode contents [ 67.990475][ T1483] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #3: comm syz.3.356: mark_inode_dirty error [ 68.002179][ T1483] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #3: comm syz.3.356: corrupted inode contents [ 68.014483][ T1483] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.356: mark_inode_dirty error [ 68.025970][ T1483] Quota error (device loop3): write_blk: dquota write failed [ 68.026250][ T1050] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 68.033190][ T1483] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 68.042095][ T1050] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 68.050720][ T1483] EXT4-fs error (device loop3): ext4_acquire_dquot:6764: comm syz.3.356: Failed to acquire dquot type 0 [ 68.057615][ T1050] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 68.489592][ T1486] 9pnet: Could not find request transport: fd0x0000000000000008 [ 68.743068][ T1050] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 68.757910][ T1483] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.356: corrupted inode contents [ 68.776930][ T1050] usb 1-1: USB disconnect, device number 5 [ 68.786227][ T590] usb 5-1: USB disconnect, device number 6 [ 68.804209][ T1483] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz.3.356: mark_inode_dirty error [ 68.838284][ T1483] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.356: corrupted inode contents [ 68.917207][ T1389] EXT4-fs (loop1): unmounting filesystem. [ 68.923109][ T1483] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.356: mark_inode_dirty error [ 68.935617][ T1483] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.356: corrupted inode contents [ 68.947552][ T1483] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 68.966403][ T1483] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz.3.356: corrupted inode contents [ 68.978329][ T1483] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz.3.356: mark_inode_dirty error [ 69.004915][ T1505] loop1: detected capacity change from 0 to 512 [ 69.035952][ T1483] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 69.085058][ T1483] EXT4-fs (loop3): 1 truncate cleaned up [ 69.091687][ T1483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 69.101149][ T1483] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 69.175581][ T1505] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.192098][ T1505] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 69.250283][ T1508] device veth0_vlan left promiscuous mode [ 69.256391][ T1508] device veth0_vlan entered promiscuous mode [ 69.290274][ T1505] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 69.300694][ T1389] EXT4-fs (loop1): unmounting filesystem. [ 69.329877][ T1513] loop1: detected capacity change from 0 to 8192 [ 69.337063][ T1513] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.621215][ T1516] loop0: detected capacity change from 0 to 512 [ 69.632849][ T1518] loop1: detected capacity change from 0 to 512 [ 69.640377][ T1518] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 786450)! [ 69.642591][ T1516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.651320][ T1518] EXT4-fs (loop1): group descriptors corrupted! [ 69.664143][ T1516] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 69.675611][ T315] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 69.693036][ T1516] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.366: corrupted inode contents [ 69.759123][ T1377] EXT4-fs (loop3): unmounting filesystem. [ 69.777291][ T1516] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #2: comm syz.0.366: mark_inode_dirty error [ 69.819054][ T1516] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #2: comm syz.0.366: corrupted inode contents [ 69.844261][ T1516] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.366: mark_inode_dirty error [ 69.894964][ T931] EXT4-fs (loop0): unmounting filesystem. [ 70.181608][ T315] usb 3-1: Using ep0 maxpacket: 16 [ 70.200409][ T1534] loop0: detected capacity change from 0 to 1024 [ 70.220257][ T1534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.275429][ T28] audit: type=1400 audit(1722461783.009:367): avc: denied { setopt } for pid=1521 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.291772][ T446] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 70.713273][ T1546] loop4: detected capacity change from 0 to 512 [ 70.719589][ T1546] ext4: Unknown parameter 'nouser_xattr' [ 70.735565][ T315] usb 3-1: New USB device found, idVendor=0499, idProduct=103f, bcdDevice=ef.ea [ 70.744599][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.752828][ T315] usb 3-1: Product: syz [ 70.757081][ T315] usb 3-1: Manufacturer: syz [ 70.761521][ T315] usb 3-1: SerialNumber: syz [ 70.767120][ T315] usb 3-1: config 0 descriptor?? [ 70.815481][ T446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.825130][ T446] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.839656][ T446] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.849918][ T446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.886107][ T446] usb 4-1: config 0 descriptor?? [ 70.925168][ T1553] netlink: 52 bytes leftover after parsing attributes in process `syz.4.374'. [ 70.978837][ T446] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 71.092583][ T1551] loop1: detected capacity change from 0 to 8192 [ 71.099816][ T1551] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.111141][ T931] EXT4-fs (loop0): unmounting filesystem. [ 71.167308][ T315] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 71.181672][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.197716][ T315] usb 3-1: USB disconnect, device number 10 [ 71.423259][ T1560] device veth0_vlan left promiscuous mode [ 71.431429][ T1560] device veth0_vlan entered promiscuous mode [ 71.577856][ T446] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 71.965069][ T1567] loop2: detected capacity change from 0 to 512 [ 71.973818][ T1567] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 786450)! [ 71.985185][ T1567] EXT4-fs (loop2): group descriptors corrupted! [ 71.996250][ T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.007204][ T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.021145][ T446] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 72.033468][ T446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.043473][ T446] usb 1-1: config 0 descriptor?? [ 72.087870][ T1571] loop1: detected capacity change from 0 to 2048 [ 72.090964][ T1573] loop2: detected capacity change from 0 to 512 [ 72.104588][ T1573] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.112855][ T1571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.121507][ T1573] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.383: inline data xattr refers to an external xattr inode [ 72.140437][ T1573] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.383: couldn't read orphan inode 12 (err -117) [ 72.152497][ T1573] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 72.363228][ T1580] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 72.555586][ T1579] overlayfs: failed to resolve './file2': -2 [ 72.578549][ T446] logitech-djreceiver 0003:046D:C71B.0012: item fetching failed at offset 3/7 [ 72.579009][ T10] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.587877][ T446] logitech-djreceiver 0003:046D:C71B.0012: logi_dj_probe: parse failed [ 72.602490][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 72.609975][ T446] logitech-djreceiver: probe of 0003:046D:C71B.0012 failed with error -22 [ 72.630890][ T10] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.630890][ T10] [ 72.640392][ T10] EXT4-fs (loop1): Total free blocks count 0 [ 72.646506][ T10] EXT4-fs (loop1): Free/Dirty block details [ 72.652215][ T10] EXT4-fs (loop1): free_blocks=2415919104 [ 72.657827][ T10] EXT4-fs (loop1): dirty_blocks=8192 [ 72.662887][ T10] EXT4-fs (loop1): Block reservation details [ 72.668800][ T10] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 72.686758][ T10] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 72.717620][ T28] audit: type=1400 audit(1722461785.469:368): avc: denied { getopt } for pid=1589 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.754054][ T1592] loop4: detected capacity change from 0 to 1024 [ 72.774267][ T1592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.875259][ T315] usb 4-1: USB disconnect, device number 6 [ 72.895020][ T590] usb 1-1: USB disconnect, device number 6 [ 73.180502][ T930] EXT4-fs (loop2): unmounting filesystem. [ 73.191858][ T1606] loop3: detected capacity change from 0 to 512 [ 73.199217][ T1606] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 786450)! [ 73.210001][ T1606] EXT4-fs (loop3): group descriptors corrupted! [ 73.256098][ T470] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 73.391682][ T28] audit: type=1400 audit(1722461786.139:369): avc: denied { bind } for pid=1612 comm="syz.1.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.410834][ T28] audit: type=1400 audit(1722461786.139:370): avc: denied { name_bind } for pid=1612 comm="syz.1.394" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 73.410912][ T1613] loop1: detected capacity change from 0 to 256 [ 73.431485][ T28] audit: type=1400 audit(1722461786.139:371): avc: denied { node_bind } for pid=1612 comm="syz.1.394" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 73.439459][ T1613] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x19a2be85, utbl_chksum : 0xe619d30d) [ 73.731356][ T1611] device veth0_vlan left promiscuous mode [ 73.737889][ T1611] device veth0_vlan entered promiscuous mode [ 73.744875][ T446] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 73.758287][ T1290] EXT4-fs (loop4): unmounting filesystem. [ 73.789904][ T1618] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 73.802405][ T1618] pim6reg0: linktype set to 776 [ 73.808443][ T28] audit: type=1400 audit(1722461786.539:372): avc: denied { mounton } for pid=1617 comm="syz.0.396" path="/39/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.871711][ T1626] loop1: detected capacity change from 0 to 512 [ 73.881087][ T1626] ext4: Unknown parameter 'fowner<00000000000000000000' [ 74.065474][ T446] usb 3-1: Using ep0 maxpacket: 16 [ 74.176256][ T28] audit: type=1400 audit(1722461786.919:373): avc: denied { name_bind } for pid=1631 comm="syz.1.400" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.236835][ T1640] loop0: detected capacity change from 0 to 512 [ 74.248342][ T1640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 74.257391][ T1640] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038 (0x7fffffff) [ 74.395470][ T446] usb 3-1: New USB device found, idVendor=0499, idProduct=103f, bcdDevice=ef.ea [ 74.404441][ T446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.444661][ T446] usb 3-1: Product: syz [ 74.448685][ T446] usb 3-1: Manufacturer: syz [ 74.453173][ T446] usb 3-1: SerialNumber: syz [ 74.458224][ T446] usb 3-1: config 0 descriptor?? [ 74.756391][ T1649] loop4: detected capacity change from 0 to 2048 [ 74.777476][ T1649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 74.798297][ T28] audit: type=1400 audit(1722461787.549:374): avc: denied { execute } for pid=1648 comm="syz.4.405" path="/16/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.827910][ T1036] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 74.843151][ T1036] EXT4-fs (loop4): Remounting filesystem read-only [ 74.851405][ T446] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 74.858650][ T446] usb 3-1: USB disconnect, device number 11 [ 74.865286][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.917751][ T1290] EXT4-fs (loop4): unmounting filesystem. [ 74.935162][ T1662] loop4: detected capacity change from 0 to 256 [ 74.943858][ T1662] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x19a2be85, utbl_chksum : 0xe619d30d) [ 74.989287][ T1665] loop3: detected capacity change from 0 to 512 [ 74.997174][ T1665] ext4: Unknown parameter 'fowner<00000000000000000000' [ 75.006799][ T1670] loop4: detected capacity change from 0 to 128 [ 75.013149][ T1670] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.025324][ T1670] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.036099][ T28] audit: type=1400 audit(1722461787.789:375): avc: denied { mounton } for pid=1669 comm="syz.4.411" path="/19/file0/file0" dev="loop4" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 75.037183][ T1670] overlayfs: maximum fs stacking depth exceeded [ 75.098051][ T1290] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 75.119813][ T1290] FAT-fs (loop4): Filesystem has been set read-only [ 75.129978][ T1290] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 75.157023][ T931] EXT4-fs (loop0): unmounting filesystem. [ 75.579251][ T1682] device veth0_vlan left promiscuous mode [ 75.587423][ T1682] device veth0_vlan entered promiscuous mode [ 75.754181][ T28] audit: type=1400 audit(1722461788.499:376): avc: denied { bind } for pid=1685 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.810173][ T28] audit: type=1400 audit(1722461788.559:377): avc: denied { read } for pid=1690 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.831925][ T28] audit: type=1400 audit(1722461788.559:378): avc: denied { open } for pid=1690 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.870656][ T1690] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.877735][ T1690] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.884957][ T1690] device bridge_slave_0 entered promiscuous mode [ 75.892039][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.899092][ T1690] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.909553][ T1690] device bridge_slave_1 entered promiscuous mode [ 75.982970][ T1690] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.989859][ T1690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.996955][ T1690] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.003711][ T1690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.011341][ T1702] loop1: detected capacity change from 0 to 128 [ 76.015529][ T590] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 76.021687][ T1702] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.057680][ T1702] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.066980][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.075892][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.083432][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.092389][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.117181][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.125171][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.125459][ T1706] loop2: detected capacity change from 0 to 512 [ 76.132041][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.168489][ T1702] overlayfs: maximum fs stacking depth exceeded [ 76.237337][ T1389] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 76.244949][ T1389] FAT-fs (loop1): Filesystem has been set read-only [ 76.252569][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.253356][ T1389] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 76.260748][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.269496][ T1706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.274611][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.283625][ T1706] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038 (0x7fffffff) [ 76.290688][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.461424][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.480904][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.493345][ T1690] device veth0_vlan entered promiscuous mode [ 76.499847][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.509204][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.517017][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.533317][ T1690] device veth1_macvtap entered promiscuous mode [ 76.540513][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.559304][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.572582][ T446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.625481][ T590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.645412][ T590] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.658400][ T590] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.695397][ T590] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 76.704292][ T590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.721379][ T590] usb 1-1: config 0 descriptor?? [ 76.790376][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.797688][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.804831][ T1717] device bridge_slave_0 entered promiscuous mode [ 76.811890][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.819241][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.848405][ T1717] device bridge_slave_1 entered promiscuous mode [ 77.116746][ T930] EXT4-fs (loop2): unmounting filesystem. [ 77.150348][ T10] device bridge_slave_1 left promiscuous mode [ 77.178972][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.186642][ T10] device bridge_slave_0 left promiscuous mode [ 77.192608][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.200635][ T10] device veth1_macvtap left promiscuous mode [ 77.206574][ T10] device veth0_vlan left promiscuous mode [ 77.213210][ T446] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 77.232947][ T1733] loop3: detected capacity change from 0 to 512 [ 77.239581][ T1733] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.249014][ T1733] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 77.465463][ T446] usb 5-1: Using ep0 maxpacket: 16 [ 77.495222][ T590] acrux 0003:1A34:0802.0013: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 77.506113][ T590] acrux 0003:1A34:0802.0013: no inputs found [ 77.511895][ T590] acrux 0003:1A34:0802.0013: Failed to enable force feedback support, error: -19 [ 77.555903][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.563401][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.596537][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.604762][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.613092][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.619969][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.634565][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.646944][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.658081][ T316] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.664958][ T316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.676086][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.684020][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.692911][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.705572][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.727108][ T1717] device veth0_vlan entered promiscuous mode [ 77.733375][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.742144][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.749416][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.765608][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.768774][ T446] usb 5-1: New USB device found, idVendor=0499, idProduct=103f, bcdDevice=ef.ea [ 77.774010][ T1717] device veth1_macvtap entered promiscuous mode [ 77.792298][ T446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.792961][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.810306][ T446] usb 5-1: Product: syz [ 77.814365][ T446] usb 5-1: Manufacturer: syz [ 77.819659][ T446] usb 5-1: SerialNumber: syz [ 77.830622][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.832347][ T446] usb 5-1: config 0 descriptor?? [ 78.154708][ T1748] device veth0_vlan left promiscuous mode [ 78.162800][ T1748] device veth0_vlan entered promiscuous mode [ 78.356415][ T1050] usb 1-1: USB disconnect, device number 7 [ 78.357327][ T446] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 78.374320][ T446] usb 5-1: USB disconnect, device number 7 [ 78.374848][ T470] udevd[470]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.575438][ T314] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 78.786674][ T10] device bridge_slave_1 left promiscuous mode [ 78.792660][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.827054][ T10] device bridge_slave_0 left promiscuous mode [ 78.833097][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.853165][ T1768] loop1: detected capacity change from 0 to 128 [ 78.862317][ T10] device veth1_macvtap left promiscuous mode [ 78.868304][ T10] device veth0_vlan left promiscuous mode [ 78.915944][ T1768] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.946289][ T1768] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 78.973436][ T1765] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 78.981803][ T1777] loop4: detected capacity change from 0 to 2048 [ 78.988473][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.995773][ T1765] pim6reg0: linktype set to 776 [ 79.001068][ T1768] overlayfs: maximum fs stacking depth exceeded [ 79.198259][ T1777] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.448: bad orphan inode 8192 [ 79.232351][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.245153][ T314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.255410][ T1777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.258258][ T314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.275174][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.283562][ T314] usb 3-1: config 0 descriptor?? [ 79.283607][ T1717] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 79.298870][ T1717] FAT-fs (loop1): Filesystem has been set read-only [ 79.305645][ T1717] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 79.783779][ T1796] loop0: detected capacity change from 0 to 512 [ 79.792771][ T1796] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 79.872663][ T1690] EXT4-fs (loop4): unmounting filesystem. [ 79.969265][ T1803] loop3: detected capacity change from 0 to 1024 [ 80.016873][ T1796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 80.025064][ T1796] System zones: 1-12 [ 80.046841][ T1796] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 80.062487][ T1796] EXT4-fs (loop0): 1 truncate cleaned up [ 80.068141][ T1796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.076453][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 80.076466][ T28] audit: type=1400 audit(1722461792.819:380): avc: denied { connect } for pid=1807 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.090041][ T1803] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.126380][ T931] EXT4-fs (loop0): unmounting filesystem. [ 80.132593][ T1789] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.145449][ T28] audit: type=1400 audit(1722461792.889:381): avc: denied { setattr } for pid=1797 comm="syz.3.455" path="/25/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.153503][ T1789] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.172890][ T1813] loop4: detected capacity change from 0 to 512 [ 80.175109][ T1789] device bridge_slave_0 entered promiscuous mode [ 80.187831][ T314] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 80.195036][ T314] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 80.202053][ T1813] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.203244][ T314] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 80.218008][ T1789] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.224837][ T1789] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.226056][ T1813] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.458: inline data xattr refers to an external xattr inode [ 80.232737][ T314] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 80.246698][ T1813] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.458: couldn't read orphan inode 12 (err -117) [ 80.263534][ T1789] device bridge_slave_1 entered promiscuous mode [ 80.271914][ T1813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 80.382029][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.400942][ T1377] EXT4-fs (loop3): unmounting filesystem. [ 80.647773][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.655576][ T1818] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 80.688204][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.696752][ T1821] loop3: detected capacity change from 0 to 128 [ 80.697024][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.710754][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.716526][ T1821] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.718051][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.730714][ T1821] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.736747][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.753403][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.761906][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.766614][ T1821] overlayfs: maximum fs stacking depth exceeded [ 80.768769][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.782057][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.790534][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.798672][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.798843][ T1377] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 80.805534][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.805782][ T315] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 80.813356][ T1377] FAT-fs (loop3): Filesystem has been set read-only [ 80.820066][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.841465][ T1377] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 80.841582][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.856767][ T1789] device veth0_vlan entered promiscuous mode [ 80.867098][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.878133][ T1789] device veth1_macvtap entered promiscuous mode [ 80.884630][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.896663][ T10] device bridge_slave_1 left promiscuous mode [ 80.902623][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.909902][ T10] device bridge_slave_0 left promiscuous mode [ 80.917159][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.924616][ T10] device veth1_macvtap left promiscuous mode [ 80.935508][ T10] device veth0_vlan left promiscuous mode [ 81.021497][ T1690] EXT4-fs (loop4): unmounting filesystem. [ 81.047474][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.056077][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.128690][ T1835] loop1: detected capacity change from 0 to 2048 [ 81.143326][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.150430][ T1823] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.158715][ T1823] device bridge_slave_0 entered promiscuous mode [ 81.168825][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.176030][ T1823] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.183305][ T1823] device bridge_slave_1 entered promiscuous mode [ 81.183885][ T1835] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.465: bad orphan inode 8192 [ 81.195453][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.209698][ T1835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 81.210178][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.228046][ T315] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.251940][ T315] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 81.269825][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.286612][ T315] usb 1-1: config 0 descriptor?? [ 81.319889][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.326769][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.333832][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.340635][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.352672][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.356438][ T1844] loop4: detected capacity change from 0 to 512 [ 81.510087][ T1844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 81.523549][ T1844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 81.533356][ T1844] System zones: 1-12 [ 81.544013][ T1844] EXT4-fs (loop4): 1 truncate cleaned up [ 81.551029][ T1844] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.584871][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.605407][ T24] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 81.624170][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.632435][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.650562][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.658826][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.672270][ T1690] EXT4-fs (loop4): unmounting filesystem. [ 81.672703][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.684784][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.693319][ T1850] loop4: detected capacity change from 0 to 512 [ 81.697966][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.708299][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.716750][ T1050] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.723603][ T1050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.736439][ T1850] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 81.739263][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.747522][ T1850] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 81.753187][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.776254][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.784212][ T590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.806010][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.814218][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.825179][ T1823] device veth0_vlan entered promiscuous mode [ 81.842445][ T1823] device veth1_macvtap entered promiscuous mode [ 81.851055][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.867279][ T315] acrux 0003:1A34:0802.0015: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 81.879605][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.887739][ T315] acrux 0003:1A34:0802.0015: no inputs found [ 81.893534][ T315] acrux 0003:1A34:0802.0015: Failed to enable force feedback support, error: -19 [ 81.905749][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.913616][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.935726][ T1050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.966208][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.975954][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.003947][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 82.005951][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.038329][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.140464][ T1855] loop1: detected capacity change from 0 to 40427 [ 82.157009][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.165966][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.202830][ T1860] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 82.209003][ T1860] pim6reg0: linktype set to 776 [ 82.215281][ T470] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 82.442209][ T1865] loop1: detected capacity change from 0 to 256 [ 82.596588][ T446] usb 3-1: USB disconnect, device number 12 [ 82.647489][ T1865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 82.733967][ T1690] EXT4-fs (loop4): unmounting filesystem. [ 82.771003][ T1870] loop4: detected capacity change from 0 to 512 [ 82.825923][ T1870] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.472: casefold flag without casefold feature [ 82.849150][ T10] device bridge_slave_1 left promiscuous mode [ 82.856533][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.956057][ T1870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.472: missing EA_INODE flag [ 82.969575][ T10] device bridge_slave_0 left promiscuous mode [ 82.975966][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.982455][ T1870] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.472: error while reading EA inode 2 err=-117 [ 82.997422][ T1870] EXT4-fs (loop4): 1 orphan inode deleted [ 83.003113][ T1870] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.070117][ T10] device veth1_macvtap left promiscuous mode [ 83.104071][ T10] device veth0_vlan left promiscuous mode [ 83.185480][ T315] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 83.242466][ T1890] loop1: detected capacity change from 0 to 512 [ 83.267896][ T1890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.448324][ T1890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 83.456558][ T1890] System zones: 1-12 [ 83.464399][ T1890] EXT4-fs (loop1): 1 truncate cleaned up [ 83.641895][ T1890] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.860312][ T1690] EXT4-fs (loop4): unmounting filesystem. [ 83.873843][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 83.896645][ T1901] loop1: detected capacity change from 0 to 512 [ 83.909690][ T1899] loop2: detected capacity change from 0 to 2048 [ 83.918557][ T1901] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.482: corrupted inode contents [ 83.931677][ T1901] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #3: comm syz.1.482: mark_inode_dirty error [ 83.947100][ T1899] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.480: bad orphan inode 8192 [ 83.961556][ T1901] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #3: comm syz.1.482: corrupted inode contents [ 83.962952][ T1899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.982115][ T1901] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.482: mark_inode_dirty error [ 83.994935][ T1901] Quota error (device loop1): write_blk: dquota write failed [ 84.002749][ T1901] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 84.012823][ T1901] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.482: Failed to acquire dquot type 0 [ 84.024353][ T1901] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.482: corrupted inode contents [ 84.037528][ T1912] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 84.043080][ T1912] pim6reg0: linktype set to 776 [ 84.058699][ T1901] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #16: comm syz.1.482: mark_inode_dirty error [ 84.070763][ T1901] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.482: corrupted inode contents [ 84.083048][ T1901] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.482: mark_inode_dirty error [ 84.105760][ T1901] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.482: corrupted inode contents [ 84.118092][ T1901] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 84.126799][ T1901] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #16: comm syz.1.482: corrupted inode contents [ 84.138734][ T1901] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.482: mark_inode_dirty error [ 84.149709][ T1901] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 84.267633][ T1901] EXT4-fs (loop1): 1 truncate cleaned up [ 84.273558][ T1901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.284855][ T1901] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 84.502161][ T1920] loop0: detected capacity change from 0 to 40427 [ 84.527903][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 84.590076][ T470] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 84.806883][ T1931] loop0: detected capacity change from 0 to 256 [ 84.848595][ T1931] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.979554][ T930] EXT4-fs (loop2): unmounting filesystem. [ 84.987080][ T1050] usb 1-1: USB disconnect, device number 8 [ 85.055537][ T314] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 85.316173][ T526] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 85.401336][ T1944] loop0: detected capacity change from 0 to 512 [ 85.440458][ T1944] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.492: casefold flag without casefold feature [ 85.453774][ T1944] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.492: missing EA_INODE flag [ 85.493285][ T1944] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.492: error while reading EA inode 2 err=-117 [ 85.505649][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.540134][ T1944] EXT4-fs (loop0): 1 orphan inode deleted [ 85.542835][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.556178][ T1944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.556361][ T314] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 85.645994][ T526] usb 5-1: Using ep0 maxpacket: 16 [ 85.651365][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.677752][ T314] usb 4-1: config 0 descriptor?? [ 86.699335][ T526] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.709653][ T526] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.720982][ T526] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 86.730964][ T526] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 87.061674][ T526] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.074754][ T526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.095415][ T526] usb 5-1: SerialNumber: syz [ 87.125999][ T1963] Zero length message leads to an empty skb [ 87.166282][ T314] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 87.205620][ T314] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 87.228767][ T314] arvo 0003:1E7D:30D4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 87.279804][ T931] EXT4-fs (loop0): unmounting filesystem. [ 87.375464][ T314] arvo 0003:1E7D:30D4.0016: couldn't init struct arvo_device [ 87.384865][ T314] arvo 0003:1E7D:30D4.0016: couldn't install keyboard [ 87.403622][ T314] arvo: probe of 0003:1E7D:30D4.0016 failed with error -5 [ 87.424873][ T314] usb 5-1: USB disconnect, device number 8 [ 87.593723][ T1050] usb 4-1: USB disconnect, device number 7 [ 87.740950][ T1968] loop0: detected capacity change from 0 to 512 [ 87.747280][ T1966] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 87.753646][ T1966] pim6reg0: linktype set to 776 [ 87.760473][ T1968] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.497: corrupted inode contents [ 87.772260][ T1968] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.497: mark_inode_dirty error [ 87.783686][ T1968] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.497: corrupted inode contents [ 87.795319][ T1968] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.497: mark_inode_dirty error [ 87.807425][ T1968] Quota error (device loop0): write_blk: dquota write failed [ 87.814701][ T1968] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 87.824441][ T1968] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.497: Failed to acquire dquot type 0 [ 87.835931][ T1968] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.497: corrupted inode contents [ 87.847701][ T1968] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.497: mark_inode_dirty error [ 87.859122][ T1968] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.497: corrupted inode contents [ 87.871280][ T1968] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.497: mark_inode_dirty error [ 87.882825][ T1968] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.497: corrupted inode contents [ 87.894777][ T1968] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 87.903440][ T1968] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.497: corrupted inode contents [ 87.922945][ T1968] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.497: mark_inode_dirty error [ 87.936418][ T1968] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 87.948673][ T1968] EXT4-fs (loop0): 1 truncate cleaned up [ 87.954198][ T1968] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.963164][ T1968] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 88.315204][ T1989] loop3: detected capacity change from 0 to 128 [ 88.336384][ T1991] loop2: detected capacity change from 0 to 512 [ 88.343529][ T1991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.358113][ T1991] EXT4-fs (loop2): 1 truncate cleaned up [ 88.363609][ T1991] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.455442][ T1050] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 88.631407][ T931] EXT4-fs (loop0): unmounting filesystem. [ 89.115907][ T2004] loop1: detected capacity change from 0 to 128 [ 89.237838][ T1990] EXT4-fs error (device loop2): ext4_discard_preallocations:5115: comm syz.2.504: Error -117 loading buddy information for 4294821812 [ 89.285509][ T1050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.301376][ T1050] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.327455][ T1050] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.342869][ T930] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 89.369358][ T1050] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.378687][ T2000] loop0: detected capacity change from 0 to 40427 [ 89.385235][ T930] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 89.399056][ T1050] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.411556][ T1050] usb 5-1: config 0 descriptor?? [ 89.416947][ T930] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 89.439118][ T930] EXT4-fs (loop2): unmounting filesystem. [ 89.450889][ T2000] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.529141][ T2000] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 90.004359][ T2018] 9pnet: Could not find request transport: fd0x0000000000000008 [ 91.395429][ T1050] usbhid 5-1:0.0: can't add hid device: -71 [ 91.401184][ T1050] usbhid: probe of 5-1:0.0 failed with error -71 [ 91.426308][ T2025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 91.450199][ T2029] loop1: detected capacity change from 0 to 512 [ 91.460382][ T1050] usb 5-1: USB disconnect, device number 9 [ 91.506528][ T2031] loop4: detected capacity change from 0 to 512 [ 91.518655][ T2029] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.514: invalid indirect mapped block 256 (level 2) [ 91.579160][ T2031] journal_path: Lookup failure for './bus' [ 91.584790][ T2031] EXT4-fs: error: could not find journal device path [ 91.605881][ T2029] EXT4-fs (loop1): Remounting filesystem read-only [ 91.612350][ T2029] EXT4-fs (loop1): 2 truncates cleaned up [ 91.617985][ T2029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.660925][ T2031] loop4: detected capacity change from 0 to 2048 [ 91.678353][ T2037] loop3: detected capacity change from 0 to 1024 [ 91.689160][ T2031] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.516: casefold flag without casefold feature [ 91.701099][ T2039] loop0: detected capacity change from 0 to 128 [ 91.719697][ T2031] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 91.722706][ T2037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.744072][ T2031] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 91.752304][ T2031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.768541][ T1491] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.447744][ T2033] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 92.564822][ T2040] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.571811][ T2040] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.579372][ T2040] device bridge_slave_0 entered promiscuous mode [ 92.586052][ T2033] EXT4-fs (loop1): Remounting filesystem read-only [ 92.595554][ T2040] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.602479][ T2040] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.609762][ T2040] device bridge_slave_1 entered promiscuous mode [ 92.626312][ T1690] EXT4-fs (loop4): unmounting filesystem. [ 92.657776][ T2058] loop4: detected capacity change from 0 to 512 [ 92.716318][ T2058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.751278][ T2058] EXT4-fs (loop4): 1 truncate cleaned up [ 92.776811][ T2058] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.857129][ T2065] bpf_get_probe_write_proto: 8 callbacks suppressed [ 92.857146][ T2065] syz.3.524[2065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.863627][ T2065] syz.3.524[2065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.899891][ T2067] process 'syz.1.525' launched './file0' with NULL argv: empty string added [ 92.928220][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.936206][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.943947][ T698] device bridge_slave_1 left promiscuous mode [ 92.951065][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.965981][ T698] device bridge_slave_0 left promiscuous mode [ 92.973044][ T2065] 9pnet_fd: Insufficient options for proto=fd [ 92.983961][ T2063] loop0: detected capacity change from 0 to 40427 [ 92.993752][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.001857][ T2063] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 93.013028][ T2063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.022574][ T698] device veth1_macvtap left promiscuous mode [ 93.028471][ T698] device veth0_vlan left promiscuous mode [ 93.034831][ T2063] F2FS-fs (loop0): invalid crc value [ 93.071053][ T2063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.138894][ T2063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.150039][ T2063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.189646][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.207163][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.229437][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.234467][ T2069] loop1: detected capacity change from 0 to 40427 [ 93.236303][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.245457][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.265698][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.283891][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.290749][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.305460][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.314021][ T2069] F2FS-fs (loop1): Invalid segment count (1) [ 93.319971][ T2069] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.328745][ T2069] F2FS-fs (loop1): Unrecognized mount option "usrjgNÆ6ä54Û­¨p 3quota=" or missing value [ 93.350207][ T2040] device veth0_vlan entered promiscuous mode [ 93.367976][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.550574][ T2081] fuse: Bad value for 'group_id' [ 93.565060][ T2081] xt_hashlimit: max too large, truncated to 1048576 [ 93.633121][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.641237][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.648831][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.656163][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.664950][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.724225][ T323] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 93.728945][ T2057] EXT4-fs error (device loop4): ext4_discard_preallocations:5115: comm syz.4.520: Error -117 loading buddy information for 4294821812 [ 93.745659][ T323] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 93.750713][ T2040] device veth1_macvtap entered promiscuous mode [ 93.782269][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.795575][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.803718][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.823827][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.844027][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.899179][ T2088] loop2: detected capacity change from 0 to 256 [ 93.999371][ T1690] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 94.163466][ T1690] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Out of memory [ 94.281347][ T2092] loop1: detected capacity change from 0 to 1024 [ 94.329102][ T1690] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 94.445719][ T2092] EXT4-fs mount: 2 callbacks suppressed [ 94.445737][ T2092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 94.486864][ T1690] EXT4-fs (loop4): unmounting filesystem. [ 94.571006][ T2090] loop2: detected capacity change from 0 to 40427 [ 94.625184][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 94.818822][ T2090] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.855520][ T28] audit: type=1400 audit(1722461807.579:382): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.500603][ T2103] loop0: detected capacity change from 0 to 8192 [ 96.555525][ T2090] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.672643][ T28] audit: type=1400 audit(1722461809.419:383): avc: denied { unmount } for pid=931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 97.614368][ T2115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.537'. [ 97.657174][ T2124] loop1: detected capacity change from 0 to 256 [ 97.682855][ T2126] loop1: detected capacity change from 0 to 128 [ 97.762158][ T2126] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 97.851809][ T2126] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 97.898749][ T2132] loop2: detected capacity change from 0 to 512 [ 97.972143][ T2132] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.539: casefold flag without casefold feature [ 97.993070][ T2132] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.539: missing EA_INODE flag [ 97.999847][ T2122] loop3: detected capacity change from 0 to 40427 [ 98.012674][ T2122] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 98.020527][ T2122] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.031408][ T2122] F2FS-fs (loop3): invalid crc_offset: 12 [ 98.032212][ T2132] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.539: error while reading EA inode 2 err=-117 [ 98.049256][ T2122] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 98.076060][ T2120] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.086936][ T2120] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.094080][ T2132] EXT4-fs (loop2): 1 orphan inode deleted [ 98.095806][ T2120] device bridge_slave_0 entered promiscuous mode [ 98.108539][ T2120] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.115570][ T2120] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.116561][ T2132] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 98.132610][ T2120] device bridge_slave_1 entered promiscuous mode [ 98.246647][ T698] device bridge_slave_1 left promiscuous mode [ 98.254654][ T698] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.301283][ T698] device bridge_slave_0 left promiscuous mode [ 98.307658][ T698] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.319447][ T2122] loop3: detected capacity change from 0 to 16 [ 98.326804][ T698] device veth1_macvtap left promiscuous mode [ 98.356353][ T2122] erofs: (device loop3): mounted with root inode @ nid 36. [ 98.363835][ T698] device veth0_vlan left promiscuous mode [ 98.650344][ T2141] loop0: detected capacity change from 0 to 512 [ 98.684665][ T2142] overlayfs: unrecognized mount option "/" or missing value [ 99.553960][ T2141] EXT4-fs (loop0): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 99.581238][ T2141] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.590179][ T2141] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (fffc1829) [ 99.656585][ T2040] EXT4-fs (loop2): unmounting filesystem. [ 99.656661][ T2141] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 99.706440][ T2147] loop2: detected capacity change from 0 to 128 [ 99.761587][ T2149] loop0: detected capacity change from 0 to 2048 [ 99.777873][ T470] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.863849][ T2149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 99.872338][ T2149] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 99.875385][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.896545][ T28] audit: type=1400 audit(1722461812.649:384): avc: denied { ioctl } for pid=2148 comm="syz.0.545" path="/61/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.905129][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.245431][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.254149][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.255057][ T931] EXT4-fs (loop0): unmounting filesystem. [ 100.286495][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.293346][ T1893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.315640][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.323829][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.345685][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.352537][ T1893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.375499][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.383494][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.405775][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.413672][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.434739][ T2120] device veth0_vlan entered promiscuous mode [ 100.446454][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.465077][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.481259][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.498992][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.515709][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.591568][ T2120] device veth1_macvtap entered promiscuous mode [ 100.602399][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.622914][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.631488][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.641518][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.718308][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.752956][ T2174] loop4: detected capacity change from 0 to 1024 [ 100.764533][ T2174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.777347][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 100.807318][ T2174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.919526][ T2174] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.581788][ T2181] loop2: detected capacity change from 0 to 512 [ 101.689599][ T2174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 102.017158][ T2184] overlayfs: missing 'lowerdir' [ 102.030031][ T2184] loop1: detected capacity change from 0 to 2048 [ 102.185517][ T2181] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.554: casefold flag without casefold feature [ 102.214946][ T2157] loop3: detected capacity change from 0 to 40427 [ 102.235803][ T2181] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.554: missing EA_INODE flag [ 102.271741][ T2157] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 102.293944][ T2157] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 102.311393][ T2181] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.554: error while reading EA inode 2 err=-117 [ 102.324535][ T2157] F2FS-fs (loop3): invalid crc value [ 102.349341][ T28] audit: type=1400 audit(1722461815.099:385): avc: denied { create } for pid=2187 comm="syz.0.555" name="file5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.380536][ T2157] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.385429][ T28] audit: type=1400 audit(1722461815.099:386): avc: denied { execute_no_trans } for pid=2187 comm="syz.0.555" path="/66/file2" dev="tmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.387181][ T2181] EXT4-fs (loop2): 1 orphan inode deleted [ 102.435435][ T314] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 102.435460][ T28] audit: type=1400 audit(1722461815.099:387): avc: denied { rename } for pid=2187 comm="syz.0.555" name="file5" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.471321][ T28] audit: type=1400 audit(1722461815.099:388): avc: denied { unlink } for pid=2187 comm="syz.0.555" name="file7" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.488570][ T2181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.502988][ T2157] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 102.525445][ T2157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.967699][ T2199] fuse: Bad value for 'fd' [ 103.075453][ T2200] xt_hashlimit: max too large, truncated to 1048576 [ 103.532508][ T2190] loop0: detected capacity change from 0 to 40427 [ 103.596531][ T2120] EXT4-fs (loop4): unmounting filesystem. [ 103.608699][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 103.621665][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 103.632954][ T2190] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.639150][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.660156][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.715529][ T2190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.731580][ T314] usb 2-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 103.759743][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.786453][ T314] usb 2-1: config 0 descriptor?? [ 103.799318][ T931] syz-executor: attempt to access beyond end of device [ 103.799318][ T931] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.996309][ T2040] EXT4-fs (loop2): unmounting filesystem. [ 104.018502][ T2213] loop2: detected capacity change from 0 to 16 [ 104.039184][ T2213] erofs: (device loop2): mounted with root inode @ nid 36. [ 104.064678][ T2207] loop4: detected capacity change from 0 to 40427 [ 104.102067][ T2207] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.205534][ T2207] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.214055][ T2211] loop3: detected capacity change from 0 to 40427 [ 104.318664][ T2215] loop0: detected capacity change from 0 to 40427 [ 104.339320][ T2215] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 104.347791][ T2211] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.353932][ T2215] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.379617][ T2215] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.399074][ T2211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.418872][ T2215] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 104.425918][ T2215] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.843202][ T28] audit: type=1400 audit(1722461817.549:389): avc: denied { create } for pid=2212 comm="syz.2.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.199022][ T2120] syz-executor: attempt to access beyond end of device [ 105.199022][ T2120] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.218248][ T1823] syz-executor: attempt to access beyond end of device [ 105.218248][ T1823] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.365522][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 105.435434][ T314] usbhid 2-1:0.0: can't add hid device: -71 [ 105.441511][ T314] usbhid: probe of 2-1:0.0 failed with error -71 [ 105.466148][ T314] usb 2-1: USB disconnect, device number 5 [ 105.577173][ T2244] loop4: detected capacity change from 0 to 128 [ 105.720683][ T2239] loop1: detected capacity change from 0 to 40427 [ 105.727430][ T2239] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 105.736423][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 105.736441][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 105.742170][ T2239] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 105.754120][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 105.808340][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 105.996415][ T24] usb 3-1: config 0 has no interfaces? [ 106.019266][ T2239] F2FS-fs (loop1): invalid crc value [ 106.024615][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.024633][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.032228][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 106.047073][ T2239] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.145643][ T2239] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.152531][ T2239] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 106.207231][ T1789] syz-executor: attempt to access beyond end of device [ 106.207231][ T1789] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 106.221346][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 106.230395][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.238677][ T24] usb 3-1: Product: syz [ 106.246680][ T2253] loop0: detected capacity change from 0 to 16 [ 106.255955][ T24] usb 3-1: Manufacturer: syz [ 106.265570][ T24] usb 3-1: SerialNumber: syz [ 106.270276][ T2253] erofs: (device loop0): mounted with root inode @ nid 36. [ 106.289862][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 106.314064][ T2255] loop0: detected capacity change from 0 to 256 [ 106.371520][ T2257] loop0: detected capacity change from 0 to 1024 [ 106.386225][ T2257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.401898][ T2257] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 106.415424][ T2257] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.461807][ T2257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 106.474441][ T2261] loop4: detected capacity change from 0 to 1024 [ 106.544075][ T2242] loop3: detected capacity change from 0 to 131072 [ 106.552799][ T2261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.576076][ T2242] F2FS-fs (loop3): Test dummy encryption mode enabled [ 106.594087][ T2242] F2FS-fs (loop3): invalid crc value [ 106.599988][ T2120] EXT4-fs (loop4): unmounting filesystem. [ 106.646293][ T2242] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.681642][ T2269] loop4: detected capacity change from 0 to 4096 [ 106.713982][ T2269] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 106.731236][ T2263] loop1: detected capacity change from 0 to 40427 [ 106.738434][ T2263] F2FS-fs (loop1): Invalid segment count (0) [ 106.744276][ T2263] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.753432][ T2263] F2FS-fs (loop1): invalid crc value [ 106.764470][ T2120] EXT4-fs (loop4): unmounting filesystem. [ 106.770735][ T2242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 106.797689][ T2263] F2FS-fs (loop1): Found nat_bits in checkpoint [ 106.839034][ T2263] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 106.888539][ T2263] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.305640][ T28] audit: type=1400 audit(1722461820.989:390): avc: denied { sqpoll } for pid=2241 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 108.447157][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 108.459504][ T1823] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix. [ 108.469040][ T24] r8152-cfgselector 3-1: USB disconnect, device number 13 [ 108.484101][ T931] EXT4-fs (loop0): unmounting filesystem. [ 108.493915][ T1789] syz-executor: attempt to access beyond end of device [ 108.493915][ T1789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.570937][ T2290] loop0: detected capacity change from 0 to 1024 [ 108.595561][ T1893] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 108.635876][ T2290] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.676104][ T2288] loop2: detected capacity change from 0 to 40427 [ 108.686612][ T2288] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.706417][ T931] EXT4-fs (loop0): unmounting filesystem. [ 108.750124][ T2298] loop0: detected capacity change from 0 to 4096 [ 108.767407][ T2298] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.791854][ T2288] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.795395][ T931] EXT4-fs (loop0): unmounting filesystem. [ 110.470200][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.488714][ T2040] syz-executor: attempt to access beyond end of device [ 110.488714][ T2040] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.509109][ T1893] usb 5-1: device descriptor read/all, error -71 [ 110.523708][ T2314] loop0: detected capacity change from 0 to 512 [ 110.603465][ T2318] loop0: detected capacity change from 0 to 512 [ 110.647946][ T2320] loop0: detected capacity change from 0 to 128 [ 110.785385][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 110.960620][ T2316] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.968111][ T2316] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.975576][ T2316] device bridge_slave_0 entered promiscuous mode [ 110.982707][ T2316] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.989884][ T2316] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.999941][ T2316] device bridge_slave_1 entered promiscuous mode [ 111.019196][ T2341] loop2: detected capacity change from 0 to 2048 [ 111.051173][ T8] device bridge_slave_1 left promiscuous mode [ 111.056014][ T2329] loop0: detected capacity change from 0 to 40427 [ 111.058179][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.066639][ T2341] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.070692][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 111.079037][ T2329] F2FS-fs (loop0): Invalid segment count (0) [ 111.096589][ T2329] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 111.101776][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.105723][ T2329] F2FS-fs (loop0): invalid crc value [ 111.112812][ T24] usb 2-1: Product: syz [ 111.118602][ T2040] EXT4-fs (loop2): unmounting filesystem. [ 111.121669][ T8] device bridge_slave_0 left promiscuous mode [ 111.133053][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.143856][ T24] usb 2-1: Manufacturer: syz [ 111.149781][ T2351] loop2: detected capacity change from 0 to 2048 [ 111.149955][ T24] usb 2-1: SerialNumber: syz [ 111.156905][ T2329] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.161180][ T24] usb 2-1: config 0 descriptor?? [ 111.173383][ T8] device veth1_macvtap left promiscuous mode [ 111.180627][ T8] device veth0_vlan left promiscuous mode [ 111.203419][ T2353] loop2: detected capacity change from 0 to 2048 [ 111.240360][ T2355] loop2: detected capacity change from 0 to 2048 [ 111.271768][ T2329] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.278698][ T2329] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.315740][ T2358] loop2: detected capacity change from 0 to 8192 [ 111.388941][ T2363] loop4: detected capacity change from 0 to 128 [ 111.703941][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 111.711862][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.742259][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 111.750763][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.758957][ T2003] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.765806][ T2003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.773479][ T931] syz-executor: attempt to access beyond end of device [ 111.773479][ T931] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.773772][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.811076][ T2003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.819647][ T2003] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.826500][ T2003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.835419][ T314] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 111.850549][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.858291][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.869074][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.878059][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.886345][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.894111][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.902468][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.910774][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.918646][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.926880][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.934168][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.963071][ T24] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 111.963270][ T2316] device veth0_vlan entered promiscuous mode [ 111.980688][ T28] audit: type=1400 audit(1722461824.729:391): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 112.021748][ T28] audit: type=1400 audit(1722461824.769:392): avc: denied { read } for pid=140 comm="dhcpcd" name="n15" dev="tmpfs" ino=5691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.028147][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.063552][ T28] audit: type=1400 audit(1722461824.769:393): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.075698][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.126772][ T28] audit: type=1400 audit(1722461824.769:394): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5691 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.126936][ T2316] device veth1_macvtap entered promiscuous mode [ 112.185049][ T1051] usb 2-1: USB disconnect, device number 6 [ 112.206899][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.212624][ T2369] loop0: detected capacity change from 0 to 32768 [ 112.214997][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.245577][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.267898][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.283899][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.297817][ T314] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 112.302980][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.318022][ T2381] loop3: detected capacity change from 0 to 512 [ 112.325531][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.344772][ T28] audit: type=1400 audit(1722461825.089:395): avc: denied { create } for pid=2371 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.380104][ T314] usb 3-1: config 0 descriptor?? [ 112.386512][ T2381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.402422][ T28] audit: type=1400 audit(1722461825.089:396): avc: denied { write } for pid=2371 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.413853][ T2381] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 112.468820][ T28] audit: type=1400 audit(1722461825.089:397): avc: denied { append } for pid=2371 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=5730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.496143][ T2316] EXT4-fs (loop3): unmounting filesystem. [ 112.517929][ T2395] loop3: detected capacity change from 0 to 128 [ 112.530631][ T28] audit: type=1400 audit(1722461825.149:398): avc: denied { unlink } for pid=2389 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5730 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 112.563818][ T2399] loop3: detected capacity change from 0 to 512 [ 112.614597][ T2403] loop3: detected capacity change from 0 to 128 [ 112.683694][ T2408] loop3: detected capacity change from 0 to 128 [ 112.824437][ T2417] loop3: detected capacity change from 0 to 128 [ 112.849136][ T28] audit: type=1400 audit(1722461825.599:399): avc: denied { create } for pid=2360 comm="syz.2.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 112.952587][ T2420] loop3: detected capacity change from 0 to 128 [ 113.198404][ T2423] loop3: detected capacity change from 0 to 256 [ 113.253660][ T2425] loop3: detected capacity change from 0 to 1024 [ 113.275986][ T2425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.289270][ T2425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.314879][ T2425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.342323][ T2425] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 113.599305][ T2429] loop1: detected capacity change from 0 to 128 [ 113.605564][ T2361] loop2: detected capacity change from 0 to 40427 [ 113.622482][ T2361] F2FS-fs (loop2): invalid crc value [ 113.668724][ T2361] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.743496][ T2432] loop1: detected capacity change from 0 to 8192 [ 113.789712][ T2361] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.820634][ T2366] loop4: detected capacity change from 0 to 262144 [ 113.834959][ T2435] loop1: detected capacity change from 0 to 256 [ 113.838344][ T2361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'. [ 113.890968][ T2366] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.918271][ T2440] loop1: detected capacity change from 0 to 128 [ 113.945458][ T314] usbhid 3-1:0.0: can't add hid device: -71 [ 113.951226][ T314] usbhid: probe of 3-1:0.0 failed with error -71 [ 113.967314][ T314] usb 3-1: USB disconnect, device number 14 [ 114.018772][ T2443] loop1: detected capacity change from 0 to 8192 [ 114.062307][ T2366] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 115.032650][ T2316] EXT4-fs (loop3): unmounting filesystem. [ 115.033355][ T2452] loop1: detected capacity change from 0 to 2048 [ 115.073779][ T2454] loop3: detected capacity change from 0 to 2048 [ 115.096801][ T2452] loop1: p1 p2 p3 [ 115.106885][ T2454] loop3: p1 p2 p3 [ 115.137075][ T102] loop1: p1 p2 p3 [ 115.214583][ T647] udevd[647]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 115.215893][ T470] udevd[470]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 115.237313][ T1491] udevd[1491]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 115.249616][ T320] udevd[320]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 115.257126][ T349] udevd[349]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 115.260365][ T647] udevd[647]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 115.302094][ T2383] loop0: detected capacity change from 0 to 262144 [ 115.329103][ T2383] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 115.547594][ T2456] loop3: detected capacity change from 0 to 32768 [ 115.599204][ T2458] loop1: detected capacity change from 0 to 40427 [ 115.726181][ T2458] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.989226][ T2458] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.170156][ T2467] loop0: detected capacity change from 0 to 40427 [ 116.185614][ T2467] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.193309][ T2467] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.529949][ T2467] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.556697][ T2472] loop4: detected capacity change from 0 to 40427 [ 116.585890][ T2472] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.593449][ T2472] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.602888][ T1789] syz-executor: attempt to access beyond end of device [ 116.602888][ T1789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.648501][ T2467] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 116.666122][ T2472] F2FS-fs (loop4): invalid crc value [ 116.759352][ T2472] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.775744][ T2467] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 116.785764][ T2467] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.027356][ T2472] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 117.055492][ T2472] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.856045][ T2506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.609'. [ 118.208321][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 118.251608][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 118.313694][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 118.313717][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 118.331459][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 118.345618][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 118.352983][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 118.375428][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 118.382815][ T931] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 118.422398][ T2502] loop1: detected capacity change from 0 to 40427 [ 118.441632][ T2502] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 118.452660][ T2502] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 118.479225][ T2515] loop4: detected capacity change from 0 to 1024 [ 118.500050][ T2515] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 118.509332][ T2502] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.515662][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 118.523108][ T2515] EXT4-fs error (device loop4): ext4_get_journal_inode:5720: inode #32: comm syz.4.626: iget: special inode unallocated [ 118.556405][ T2515] EXT4-fs (loop4): no journal found [ 118.561552][ T2515] EXT4-fs (loop4): can't get journal size [ 118.575748][ T2502] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 118.582593][ T2502] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.598029][ T2515] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.626: iget: special inode unallocated [ 118.635699][ T2515] EXT4-fs (loop4): failed to initialize system zone (-117) [ 118.642853][ T2515] EXT4-fs (loop4): mount failed [ 118.771130][ T28] audit: type=1400 audit(1722461831.519:400): avc: denied { nlmsg_write } for pid=2523 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.797680][ T28] audit: type=1400 audit(1722461831.539:401): avc: denied { nlmsg_read } for pid=2523 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 118.819919][ T28] audit: type=1400 audit(1722461831.549:402): avc: denied { bind } for pid=2523 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 119.260738][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.283659][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.298007][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 119.307082][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.318014][ T1789] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 119.318243][ T1789] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 119.321804][ T24] usb 4-1: config 0 descriptor?? [ 119.335290][ T1789] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 119.423058][ T2548] loop2: detected capacity change from 0 to 256 [ 119.438955][ T2548] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 119.805583][ T446] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.015432][ T314] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 120.106722][ T2511] loop3: detected capacity change from 0 to 40427 [ 120.114251][ T2511] F2FS-fs (loop3): invalid crc value [ 120.120551][ T2511] F2FS-fs (loop3): Found nat_bits in checkpoint [ 120.145437][ T1893] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 120.153043][ T2511] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 120.169949][ T2511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.623'. [ 120.245565][ T446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.255171][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 120.270673][ T24] usbhid: probe of 4-1:0.0 failed with error -71 [ 120.292170][ T446] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.309313][ T24] usb 4-1: USB disconnect, device number 8 [ 120.315851][ T446] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.325156][ T446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.334729][ T446] usb 1-1: config 0 descriptor?? [ 120.375487][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.375974][ T446] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 120.397216][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.407074][ T314] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 120.416105][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.426171][ T2563] loop1: detected capacity change from 0 to 40427 [ 120.427329][ T314] usb 3-1: config 0 descriptor?? [ 120.435431][ T2563] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 120.444667][ T2563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.453140][ T2563] F2FS-fs (loop1): invalid crc value [ 120.459585][ T2563] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.483988][ T2563] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.490925][ T2563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 120.505785][ T1893] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.516742][ T1789] syz-executor: attempt to access beyond end of device [ 120.516742][ T1789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.581883][ T2568] loop1: detected capacity change from 0 to 1024 [ 120.606909][ T2568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.620306][ T28] audit: type=1400 audit(1722461833.369:403): avc: denied { rename } for pid=2567 comm="syz.1.639" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.621189][ T2568] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 623: comm syz.1.639: Attempting to read directory block (623) that is past i_size (638464) [ 120.667342][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 120.695511][ T1893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.707190][ T1893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.715418][ T1893] usb 5-1: Product: syz [ 120.719741][ T1893] usb 5-1: Manufacturer: syz [ 120.724287][ T1893] usb 5-1: SerialNumber: syz [ 120.761190][ T2576] loop3: detected capacity change from 0 to 512 [ 120.784243][ T2576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.793138][ T2576] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 120.806798][ T2576] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 120.816368][ T28] audit: type=1400 audit(1722461833.569:404): avc: denied { relabelto } for pid=2575 comm="syz.3.641" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 120.848655][ T2316] EXT4-fs (loop3): unmounting filesystem. [ 120.857773][ T2584] loop1: detected capacity change from 0 to 256 [ 120.866670][ T2584] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 120.909519][ T2589] loop1: detected capacity change from 0 to 256 [ 120.919590][ T2589] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 120.957542][ T2593] loop3: detected capacity change from 0 to 1024 [ 120.966171][ T2593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.982170][ T2593] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.993496][ T2593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.003696][ T2593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.093205][ T2600] loop1: detected capacity change from 0 to 1024 [ 121.123248][ T2600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.156675][ T2600] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 623: comm syz.1.651: Attempting to read directory block (623) that is past i_size (638464) [ 121.177746][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 121.524067][ T314] hid-led 0003:27B8:01ED.0017: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 121.536420][ T314] hid-led 0003:27B8:01ED.0017: ThingM blink(1) v1 initialized [ 121.546426][ T2612] loop1: detected capacity change from 0 to 128 [ 121.554240][ T2612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 121.562816][ T2612] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 121.594680][ T446] usb 3-1: USB disconnect, device number 15 [ 121.604472][ T2612] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 121.614129][ T1789] EXT4-fs (loop1): unmounting filesystem. [ 121.723900][ T2619] loop1: detected capacity change from 0 to 40427 [ 121.732162][ T2619] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 121.738402][ T2619] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 121.748166][ T2619] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 121.769625][ T2619] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 121.776573][ T2619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.805777][ T2619] syz.1.657: attempt to access beyond end of device [ 121.805777][ T2619] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 121.825910][ T2624] syz.1.657: attempt to access beyond end of device [ 121.825910][ T2624] loop1: rw=10241, sector=53256, nr_sectors = 8 limit=40427 [ 121.828879][ T2316] EXT4-fs (loop3): unmounting filesystem. [ 121.845570][ T1893] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 121.853104][ T1893] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 121.868044][ T1893] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 121.871933][ T446] usb 1-1: USB disconnect, device number 9 [ 121.895972][ T2626] loop0: detected capacity change from 0 to 256 [ 121.936466][ T1491] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 122.085447][ T314] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.104311][ T28] audit: type=1400 audit(1722461834.849:405): avc: denied { read write } for pid=2634 comm="syz.0.661" name="file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 122.142880][ T28] audit: type=1400 audit(1722461834.849:406): avc: denied { ioctl open } for pid=2634 comm="syz.0.661" path="/86/file0" dev="tmpfs" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 122.392464][ T2649] loop3: detected capacity change from 0 to 2048 [ 122.402880][ T28] audit: type=1400 audit(1722461835.049:407): avc: denied { watch watch_reads } for pid=2637 comm="syz.3.663" path="/21/file1" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 122.415926][ T1893] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 122.433079][ T1893] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 122.446006][ T1893] usb 5-1: USB disconnect, device number 12 [ 122.451974][ T1893] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 122.461836][ T2649] Alternate GPT is invalid, using primary GPT. [ 122.468749][ T2649] loop3: p1 p2 p3 [ 122.598750][ T314] usb 2-1: Using ep0 maxpacket: 32 [ 122.794446][ T2639] loop2: detected capacity change from 0 to 40427 [ 122.801145][ T2639] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 122.805459][ T314] usb 2-1: config 0 has no interfaces? [ 122.809140][ T2639] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.814122][ T314] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 122.828212][ T2639] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.830948][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.853164][ T314] usb 2-1: config 0 descriptor?? [ 122.861928][ T2639] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 122.873247][ T2639] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.880209][ T2639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.259339][ T2662] loop3: detected capacity change from 0 to 256 [ 123.268829][ T2662] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 123.279738][ T316] usb 2-1: USB disconnect, device number 7 [ 123.903496][ T2040] f2fs_fill_dentries: 4 callbacks suppressed [ 123.903532][ T2040] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 123.916418][ T2040] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 123.930096][ T2040] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 123.938060][ T446] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 123.944328][ T2040] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 123.955453][ T2040] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 123.962907][ T2040] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 123.970362][ T2040] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 124.050147][ T2677] futex_wake_op: syz.2.674 tries to shift op by 32; fix this program [ 124.085480][ T314] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.748311][ T2679] loop2: detected capacity change from 0 to 256 [ 124.823108][ T1789] syz-executor: attempt to access beyond end of device [ 124.823108][ T1789] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 124.986046][ T446] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.255756][ T446] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.295878][ T446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.336933][ T446] usb 1-1: SerialNumber: syz [ 125.432418][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.443206][ T314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.452759][ T314] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 125.461580][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.474653][ T314] usb 5-1: config 0 descriptor?? [ 125.943187][ T28] audit: type=1400 audit(1722461838.689:408): avc: denied { read } for pid=2704 comm="syz.2.684" path="socket:[28770]" dev="sockfs" ino=28770 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 126.015477][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.056596][ T446] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 126.458994][ T2237] usb 1-1: USB disconnect, device number 10 [ 126.466266][ T2237] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 126.475994][ T314] hid-led 0003:27B8:01ED.0018: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 126.487875][ T314] hid-led 0003:27B8:01ED.0018: ThingM blink(1) v1 initialized [ 126.515513][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.668986][ T314] usb 5-1: USB disconnect, device number 13 [ 126.715485][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.724367][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.732165][ T39] usb 4-1: Product: syz [ 126.736425][ T39] usb 4-1: Manufacturer: syz [ 126.740809][ T39] usb 4-1: SerialNumber: syz [ 126.913112][ T2761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.690'. [ 126.986368][ T2767] loop0: detected capacity change from 0 to 128 [ 126.996836][ T2767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 127.005654][ T2767] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038 (0x7fffffff) [ 127.152016][ T2771] loop2: detected capacity change from 0 to 2048 [ 127.163498][ T2767] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz.0.693: No space for directory leaf checksum. Please run e2fsck -D. [ 127.188104][ T2771] Alternate GPT is invalid, using primary GPT. [ 127.194171][ T2771] loop2: p1 p2 p3 [ 127.210631][ T2767] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz.0.693: checksumming directory block 0 [ 127.216747][ T102] Alternate GPT is invalid, using primary GPT. [ 127.228811][ T102] loop2: p1 p2 p3 [ 127.294121][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 127.545528][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.821078][ T931] EXT4-fs (loop0): unmounting filesystem. [ 127.843304][ T2789] netlink: 24 bytes leftover after parsing attributes in process `syz.0.701'. [ 127.915528][ T39] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 127.922456][ T39] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 127.929847][ T39] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 127.935481][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.946357][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.956004][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 127.964933][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.975894][ T24] usb 2-1: config 0 descriptor?? [ 128.155441][ T2237] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 128.335590][ T39] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 128.353869][ T39] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 128.513119][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.555335][ T39] usb 4-1: USB disconnect, device number 9 [ 128.583946][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.591633][ T39] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 128.600751][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.611981][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.620229][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.627236][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.634163][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.641600][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.666579][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.673577][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.680467][ T24] lg-g15 0003:046D:C222.0019: unknown main item tag 0x0 [ 128.688083][ T316] ================================================================== [ 128.695957][ T316] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 128.702983][ T316] Read of size 8 at addr ffff88811f7bace0 by task kworker/1:3/316 [ 128.710621][ T316] [ 128.712798][ T316] CPU: 1 PID: 316 Comm: kworker/1:3 Not tainted 6.1.90-syzkaller-00123-g7d0a1d6b86b6 #0 [ 128.722343][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 128.725481][ T2237] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.732231][ T316] Workqueue: 0x0 (wg-crypt-wg1) [ 128.749771][ T316] Call Trace: [ 128.752886][ T316] [ 128.755670][ T316] dump_stack_lvl+0x151/0x1b7 [ 128.760179][ T316] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 128.765558][ T316] ? _printk+0xd1/0x111 [ 128.769556][ T316] ? __virt_addr_valid+0x242/0x2f0 [ 128.774935][ T316] print_report+0x158/0x4e0 [ 128.779273][ T316] ? __virt_addr_valid+0x242/0x2f0 [ 128.784218][ T316] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 128.790379][ T316] ? worker_thread+0xa36/0x1260 [ 128.795065][ T316] kasan_report+0x13c/0x170 [ 128.799406][ T316] ? worker_thread+0xa36/0x1260 [ 128.804102][ T316] __asan_report_load8_noabort+0x14/0x20 [ 128.809561][ T316] worker_thread+0xa36/0x1260 [ 128.814082][ T316] kthread+0x26d/0x300 [ 128.817974][ T316] ? worker_clr_flags+0x1a0/0x1a0 [ 128.822837][ T316] ? kthread_blkcg+0xd0/0xd0 [ 128.825480][ T2237] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.827264][ T316] ret_from_fork+0x1f/0x30 [ 128.827291][ T316] [ 128.836249][ T2237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.840472][ T316] [ 128.840480][ T316] Allocated by task 39: [ 128.840489][ T316] kasan_set_track+0x4b/0x70 [ 128.843394][ T2237] usb 3-1: SerialNumber: syz [ 128.851236][ T316] kasan_save_alloc_info+0x1f/0x30 [ 128.851265][ T316] __kasan_kmalloc+0x9c/0xb0 [ 128.851281][ T316] __kmalloc_node+0xb4/0x1e0 [ 128.851313][ T316] kvmalloc_node+0x221/0x640 [ 128.884472][ T316] alloc_netdev_mqs+0x8c/0xf90 [ 128.889074][ T316] alloc_etherdev_mqs+0x36/0x40 [ 128.893753][ T316] usbnet_probe+0x207/0x27c0 [ 128.898180][ T316] usb_probe_interface+0x5b6/0xa90 [ 128.903134][ T316] really_probe+0x2b8/0x920 [ 128.907471][ T316] __driver_probe_device+0x1a0/0x310 [ 128.912593][ T316] driver_probe_device+0x54/0x3d0 [ 128.917449][ T316] __device_attach_driver+0x2e3/0x490 [ 128.922657][ T316] bus_for_each_drv+0x183/0x200 [ 128.927342][ T316] __device_attach+0x312/0x510 [ 128.931943][ T316] device_initial_probe+0x1a/0x20 [ 128.936803][ T316] bus_probe_device+0xbe/0x1e0 [ 128.941403][ T316] device_add+0xb60/0xf10 [ 128.945569][ T316] usb_set_configuration+0x190f/0x1e80 [ 128.950862][ T316] usb_generic_driver_probe+0x8b/0x150 [ 128.956417][ T316] usb_probe_device+0x144/0x260 [ 128.961106][ T316] really_probe+0x2b8/0x920 [ 128.965552][ T316] __driver_probe_device+0x1a0/0x310 [ 128.970654][ T316] driver_probe_device+0x54/0x3d0 [ 128.975544][ T316] __device_attach_driver+0x2e3/0x490 [ 128.980724][ T316] bus_for_each_drv+0x183/0x200 [ 128.985410][ T316] __device_attach+0x312/0x510 [ 128.990012][ T316] device_initial_probe+0x1a/0x20 [ 128.994867][ T316] bus_probe_device+0xbe/0x1e0 [ 128.999470][ T316] device_add+0xb60/0xf10 [ 129.003644][ T316] usb_new_device+0xf2f/0x1820 [ 129.008232][ T316] hub_event+0x2db1/0x4830 [ 129.012486][ T316] process_one_work+0x73d/0xcb0 [ 129.017180][ T316] worker_thread+0xa60/0x1260 [ 129.021712][ T316] kthread+0x26d/0x300 [ 129.025595][ T316] ret_from_fork+0x1f/0x30 [ 129.029845][ T316] [ 129.032013][ T316] Freed by task 39: [ 129.035658][ T316] kasan_set_track+0x4b/0x70 [ 129.040182][ T316] kasan_save_free_info+0x2b/0x40 [ 129.045041][ T316] ____kasan_slab_free+0x131/0x180 [ 129.049991][ T316] __kasan_slab_free+0x11/0x20 [ 129.054589][ T316] __kmem_cache_free+0x218/0x3b0 [ 129.059362][ T316] kfree+0x7a/0xf0 [ 129.062918][ T316] kvfree+0x35/0x40 [ 129.066565][ T316] netdev_freemem+0x3f/0x60 [ 129.070908][ T316] netdev_release+0x7f/0xb0 [ 129.075245][ T316] device_release+0x95/0x1c0 [ 129.079680][ T316] kobject_put+0x178/0x260 [ 129.083931][ T316] put_device+0x1f/0x30 [ 129.087924][ T316] free_netdev+0x393/0x480 [ 129.092168][ T316] usbnet_disconnect+0x245/0x390 [ 129.096946][ T316] usb_unbind_interface+0x1fa/0x8c0 [ 129.101977][ T316] device_release_driver_internal+0x53e/0x870 [ 129.107881][ T316] device_release_driver+0x19/0x20 [ 129.112829][ T316] bus_remove_device+0x2fa/0x360 [ 129.117603][ T316] device_del+0x663/0xe90 [ 129.121765][ T316] usb_disable_device+0x380/0x720 [ 129.126627][ T316] usb_disconnect+0x32a/0x890 [ 129.131137][ T316] hub_event+0x1ed8/0x4830 [ 129.135398][ T316] process_one_work+0x73d/0xcb0 [ 129.140075][ T316] worker_thread+0xd71/0x1260 [ 129.144593][ T316] kthread+0x26d/0x300 [ 129.148498][ T316] ret_from_fork+0x1f/0x30 [ 129.152748][ T316] [ 129.154921][ T316] Last potentially related work creation: [ 129.160475][ T316] kasan_save_stack+0x3b/0x60 [ 129.164986][ T316] __kasan_record_aux_stack+0xb4/0xc0 [ 129.170201][ T316] kasan_record_aux_stack_noalloc+0xb/0x10 [ 129.175836][ T316] insert_work+0x56/0x310 [ 129.180002][ T316] __queue_work+0x9b6/0xd70 [ 129.184339][ T316] queue_work_on+0x105/0x170 [ 129.188768][ T316] usbnet_link_change+0xeb/0x100 [ 129.193540][ T316] usbnet_probe+0x1dbe/0x27c0 [ 129.198053][ T316] usb_probe_interface+0x5b6/0xa90 [ 129.202998][ T316] really_probe+0x2b8/0x920 [ 129.207339][ T316] __driver_probe_device+0x1a0/0x310 [ 129.212471][ T316] driver_probe_device+0x54/0x3d0 [ 129.217321][ T316] __device_attach_driver+0x2e3/0x490 [ 129.222961][ T316] bus_for_each_drv+0x183/0x200 [ 129.227647][ T316] __device_attach+0x312/0x510 [ 129.232247][ T316] device_initial_probe+0x1a/0x20 [ 129.237112][ T316] bus_probe_device+0xbe/0x1e0 [ 129.241794][ T316] device_add+0xb60/0xf10 [ 129.245982][ T316] usb_set_configuration+0x190f/0x1e80 [ 129.251255][ T316] usb_generic_driver_probe+0x8b/0x150 [ 129.256548][ T316] usb_probe_device+0x144/0x260 [ 129.261235][ T316] really_probe+0x2b8/0x920 [ 129.265576][ T316] __driver_probe_device+0x1a0/0x310 [ 129.270700][ T316] driver_probe_device+0x54/0x3d0 [ 129.275560][ T316] __device_attach_driver+0x2e3/0x490 [ 129.280780][ T316] bus_for_each_drv+0x183/0x200 [ 129.285451][ T316] __device_attach+0x312/0x510 [ 129.290051][ T316] device_initial_probe+0x1a/0x20 [ 129.294911][ T316] bus_probe_device+0xbe/0x1e0 [ 129.299511][ T316] device_add+0xb60/0xf10 [ 129.303676][ T316] usb_new_device+0xf2f/0x1820 [ 129.308278][ T316] hub_event+0x2db1/0x4830 [ 129.312529][ T316] process_one_work+0x73d/0xcb0 [ 129.317215][ T316] worker_thread+0xa60/0x1260 [ 129.321933][ T316] kthread+0x26d/0x300 [ 129.325810][ T316] ret_from_fork+0x1f/0x30 [ 129.330060][ T316] [ 129.332230][ T316] The buggy address belongs to the object at ffff88811f7ba000 [ 129.332230][ T316] which belongs to the cache kmalloc-4k of size 4096 [ 129.346124][ T316] The buggy address is located 3296 bytes inside of [ 129.346124][ T316] 4096-byte region [ffff88811f7ba000, ffff88811f7bb000) [ 129.359401][ T316] [ 129.361567][ T316] The buggy address belongs to the physical page: [ 129.367826][ T316] page:ffffea00047dee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11f7b8 [ 129.377886][ T316] head:ffffea00047dee00 order:3 compound_mapcount:0 compound_pincount:0 [ 129.386041][ T316] flags: 0x4000000000010200(slab|head|zone=1) [ 129.391953][ T316] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043380 [ 129.400375][ T316] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 129.408781][ T316] page dumped because: kasan: bad access detected [ 129.415038][ T316] page_owner tracks the page as allocated [ 129.420844][ T316] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 2316, tgid 2316 (syz-executor), ts 111038703814, free_ts 111015557157 [ 129.445324][ T316] post_alloc_hook+0x213/0x220 [ 129.449921][ T316] prep_new_page+0x1b/0x110 [ 129.454269][ T316] get_page_from_freelist+0x27ea/0x2870 [ 129.459640][ T316] __alloc_pages+0x3a1/0x780 [ 129.464065][ T316] alloc_slab_page+0x6c/0xf0 [ 129.468492][ T316] new_slab+0x90/0x3e0 [ 129.472396][ T316] ___slab_alloc+0x6f9/0xb80 [ 129.476822][ T316] __slab_alloc+0x5d/0xa0 [ 129.480989][ T316] __kmem_cache_alloc_node+0x1af/0x250 [ 129.486283][ T316] __kmalloc_node+0xa3/0x1e0 [ 129.490709][ T316] kvmalloc_node+0x221/0x640 [ 129.495134][ T316] alloc_netdev_mqs+0x8c/0xf90 [ 129.499736][ T316] rtnl_create_link+0x2e1/0xad0 [ 129.504422][ T316] rtnl_newlink+0x13e6/0x2030 [ 129.508940][ T316] rtnetlink_rcv_msg+0x9a5/0xca0 [ 129.513710][ T316] netlink_rcv_skb+0x1cd/0x410 [ 129.518310][ T316] page last free stack trace: [ 129.522823][ T316] free_unref_page_prepare+0x83d/0x850 [ 129.528116][ T316] free_unref_page+0xb2/0x5c0 [ 129.532630][ T316] __free_pages+0x61/0xf0 [ 129.536795][ T316] __free_slab+0xce/0x1a0 [ 129.540963][ T316] __unfreeze_partials+0x165/0x1a0 [ 129.545912][ T316] put_cpu_partial+0xa9/0x100 [ 129.547581][ T2237] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 129.550421][ T316] __slab_free+0x1c8/0x280 [ 129.566050][ T316] ___cache_free+0xc6/0xd0 [ 129.570304][ T316] qlist_free_all+0xc5/0x140 [ 129.574728][ T316] kasan_quarantine_reduce+0x15a/0x180 [ 129.580037][ T316] __kasan_slab_alloc+0x24/0x80 [ 129.584708][ T316] slab_post_alloc_hook+0x53/0x2c0 [ 129.589656][ T316] __kmem_cache_alloc_node+0x191/0x250 [ 129.595037][ T316] kmalloc_trace+0x2a/0xa0 [ 129.599290][ T316] ref_tracker_alloc+0x138/0x450 [ 129.604064][ T316] netdev_hold+0x92/0xe0 [ 129.608230][ T316] [ 129.610398][ T316] Memory state around the buggy address: [ 129.615872][ T316] ffff88811f7bab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.623860][ T316] ffff88811f7bac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.631772][ T316] >ffff88811f7bac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.639652][ T316] ^ [ 129.646697][ T316] ffff88811f7bad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.654582][ T316] ffff88811f7bad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 129.662475][ T316] ================================================================== [ 129.670372][ T316] Disabling lock debugging due to kernel taint [ 129.694297][ T24] lg-g15 0003:046D:C222.0019: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 129.706589][ T24] usb 2-1: USB disconnect, device number 8 [ 129.979689][ T1893] usb 3-1: USB disconnect, device number 16 [ 129.995988][ T1893] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device