last executing test programs: 1.731105863s ago: executing program 2 (id=3266): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611051c5000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x84, &(0x7f00000000c0)=""/132}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5, &(0x7f0000000100)={[{@bsdgroups}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nobarrier}, {@errors_remount}, {@jqfmt_vfsold}]}, 0x1, 0x402, &(0x7f0000000980)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@mblk_io_submit}, {@nomblk_io_submit}, {@init_itable_val}, {@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nodiscard}, {@data_writeback}]}, 0x1, 0x24f, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) r3 = dup2(r0, r0) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0x46) r4 = eventfd(0x0) dup3(r4, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) sigaltstack(0x0, 0x0) r5 = gettid() getpgrp(r5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1.682100181s ago: executing program 2 (id=3269): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) close(r1) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x0) 1.613350402s ago: executing program 2 (id=3272): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000380), 0x20000000}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r3, r0, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 1.594892484s ago: executing program 2 (id=3273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x10000}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) 1.160727531s ago: executing program 4 (id=3287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.093452282s ago: executing program 4 (id=3289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x50}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.076014274s ago: executing program 2 (id=3290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x39) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2008410, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x1, 0x551a, &(0x7f00000056c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) socket$inet6(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) 1.066817965s ago: executing program 4 (id=3292): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000611051c5000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x84, &(0x7f00000000c0)=""/132}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x5, &(0x7f0000000100)={[{@bsdgroups}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nobarrier}, {@errors_remount}, {@jqfmt_vfsold}]}, 0x1, 0x402, &(0x7f0000000980)="$eJzs209oHFUYAPBvZpNUm9bEWv+1VbcNYkBNmkSFgJeKioLgQW8eJDRpKW6a0qzYFg8qgqfixZOePOnBoxcPgnj3JHiydykEKZ5lZXZnmm2yGzfprms7vx9s+97sW9775u23efNmN4DSqmb/JBEHIuL3iJhoVW9tUG3999eND09njyQajbf+TJrtsnrRtHjdeF6ZTiPST5M42qHf9ctX3luq1VYu5vXZ+uqF2fXLV549t7p0duXsyvmFxedPzi8svrC40I8wx7KxXb1x7Le1r978+/MT18Zfuvruy9mxA3mD9jj6pRrVW89lmyf73dmQHWwrJyNDHAi7UomIbLpGm/k/EZXYnLyJeOWToQ4OGKhGo9HY1/3pjxrAXSyJYY8AGI7iD31xbT+I6+D/s41TrQug7fGPRJq3Gd1yfdtP1Yi49M5nP2aPGNA+BABAu5+y9c8zndY/aTzU1u6+/N7QZETcHxGHIuKBiDgcEQ9GNNs+HBGP7LL/6pb69vVPen1PgfUoW/+92HH9W6z+YrKS1w424x9NzpyrrZzMz8l0jO7L6nM79PHr699+0+2WSPv6L3tk/RdrwXwc10e2bNAtL9WXbivoNhsfRxzpuP5Nbt4JSCLi0Yg4ssc+fjjV+LLbc/8e/2A1vo54quP8b965S3a+PznbfD/MFu+K7Y59cGG5W//Djj+b//07xz+ZtN+vXd99H99PHt/o9txe3/9jydvN8lh+7NJSvX5xLmIseWP78fnN1xb1on0W//RU5/w/FJtn4mg2jxHxWEQ8HhFP5GM/HhEnImJqh/hfnXptpWv890TEUOf/u/FWqdf5331hdf7nX7r139v8P9csTedHevn863WAez5xAAAAcAdJm9+BT9KZm+U0nZlpfYf/cOxPa2vr9afPrL1/frn1XfnJGE2Lna6Jtv3QuXxvuKjPb6kv5PvGX1TubdZnTq/Vum6KAf+J8S75n/mjMuzRAQPn91pQXvIfykv+Q3nJfygv+Q/lJf+hpK5V5D+UmPyH8pL/UF7yH0rpdn7Xr6CgcLcWhv3JBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0B//BAAA///k894k") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@journal_checksum}, {@mblk_io_submit}, {@nomblk_io_submit}, {@init_itable_val}, {@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nodiscard}, {@data_writeback}]}, 0x1, 0x24f, &(0x7f0000000600)="$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") mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0) r3 = dup2(r0, r0) write$tun(r3, &(0x7f00000002c0)=ANY=[], 0x46) r4 = eventfd(0x0) dup3(r4, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) sigaltstack(0x0, 0x0) r5 = gettid() getpgrp(r5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1.004520735s ago: executing program 4 (id=3294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00', r3}, 0x10) write$cgroup_int(r1, &(0x7f0000000240), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 980.330869ms ago: executing program 4 (id=3295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd605678c10008000000000000000000000000000000002f5fb1bfb9daf5a1000000000000000000aa00000005"], 0x0) 957.248752ms ago: executing program 4 (id=3297): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000058a4d3948819f0b6d011fe4b21a79"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @hyper}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x20) sendmsg$tipc(r2, &(0x7f0000001b40)={&(0x7f0000001800)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x4018480c, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 581.79775ms ago: executing program 1 (id=3311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 500.378282ms ago: executing program 0 (id=3314): r0 = socket(0x10, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r0, &(0x7f0000000080)={[0x8000]}, 0x8, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x0, 0x1, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) unshare(0xc040400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9803", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b000000", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d90"], 0x398}}, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x110020, &(0x7f0000000d80)=ANY=[@ANYBLOB='mode=']) 494.987694ms ago: executing program 1 (id=3315): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 454.87519ms ago: executing program 1 (id=3316): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x50}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 445.224881ms ago: executing program 1 (id=3317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18ef1100000000000000030000000000a0110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 407.469727ms ago: executing program 1 (id=3319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd605678c10008000000000000000000000000000000002f5fb1bfb9daf5a1000000000000000000aa00000005"], 0x0) 352.258496ms ago: executing program 1 (id=3320): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05044000000000000109022400010000000009040000020300000009210000000122060009058203"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000d46420000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="40211f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 345.908156ms ago: executing program 0 (id=3321): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000380), 0x20000000}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r3, r0, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 323.65626ms ago: executing program 3 (id=3323): setitimer(0x2, &(0x7f0000000040)={{}, {0x2783000000}}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0xfffffcdd) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') sendfile(r0, r1, 0x0, 0x37) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000340)=ANY=[], 0xfffffcdd) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') sendfile(r2, r3, 0x0, 0x100000000033) 294.364415ms ago: executing program 0 (id=3324): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x2, [@private, @empty]}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 282.065296ms ago: executing program 0 (id=3325): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x44}}, 0x0) 256.96676ms ago: executing program 0 (id=3326): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 190.69461ms ago: executing program 3 (id=3327): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006d10001b850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000880)='jbd2_write_superblock\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 119.967661ms ago: executing program 3 (id=3328): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x50}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 86.939226ms ago: executing program 2 (id=3329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000002000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x27}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 71.761069ms ago: executing program 3 (id=3330): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18ef1100000000000000030000000000a0110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) 31.225225ms ago: executing program 0 (id=3331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000e3850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000180), &(0x7f0000000200)='%pI4 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r8}, 0x10) r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x4}}, 0xfe44, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x240) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x21c916, &(0x7f0000000640), 0x1b, 0x4c5, &(0x7f0000000ec0)="$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") 29.296305ms ago: executing program 3 (id=3332): r0 = socket(0x10, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = signalfd4(r0, &(0x7f0000000080)={[0x8000]}, 0x8, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x0, 0x1, 0x6}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) unshare(0xc040400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="9803", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b000000", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d90"], 0x398}}, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x110020, &(0x7f0000000d80)=ANY=[@ANYBLOB='mode=']) 0s ago: executing program 3 (id=3333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) close(r2) kernel console output (not intermixed with test programs): 2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.666694][ T5649] handle_bad_sector: 17 callbacks suppressed [ 159.666713][ T5649] attempt to access beyond end of device [ 159.666713][ T5649] loop0: rw=2049, want=45104, limit=40427 [ 159.962702][ T5874] loop2: detected capacity change from 0 to 40427 [ 160.003137][ T5870] loop4: detected capacity change from 0 to 40427 [ 160.018856][ T5874] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512) [ 160.034527][ T5874] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 160.044950][ T5874] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 160.053989][ T30] audit: type=1326 audit(1719268854.319:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.3.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe186904d39 code=0x7ffc0000 [ 160.080019][ T5870] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 160.089263][ T5870] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.092444][ T5874] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.107330][ T5870] F2FS-fs (loop4): invalid crc value [ 160.123209][ T30] audit: type=1326 audit(1719268854.319:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.3.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe186904d39 code=0x7ffc0000 [ 160.146604][ T30] audit: type=1326 audit(1719268854.329:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.3.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe186904d39 code=0x7ffc0000 [ 160.147533][ T5870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.169810][ T30] audit: type=1326 audit(1719268854.329:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.3.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe186904d39 code=0x7ffc0000 [ 160.203127][ T30] audit: type=1326 audit(1719268854.329:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.3.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe186904d39 code=0x7ffc0000 [ 160.206345][ T5874] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 160.233774][ T30] audit: type=1326 audit(1719268854.329:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.3.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe186904d39 code=0x7ffc0000 [ 160.237853][ T5874] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.263857][ T30] audit: type=1326 audit(1719268854.329:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.3.2132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe186904d39 code=0x7ffc0000 [ 160.275490][ T5870] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 160.305386][ T5870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.398171][ T5874] attempt to access beyond end of device [ 160.398171][ T5874] loop2: rw=2049, want=45104, limit=40427 [ 161.407721][ T5927] attempt to access beyond end of device [ 161.407721][ T5927] loop4: rw=2049, want=81912, limit=40427 [ 161.420305][ T5927] attempt to access beyond end of device [ 161.420305][ T5927] loop4: rw=2049, want=81920, limit=40427 [ 161.439028][ T5927] attempt to access beyond end of device [ 161.439028][ T5927] loop4: rw=2049, want=53248, limit=40427 [ 161.465064][ T5927] attempt to access beyond end of device [ 161.465064][ T5927] loop4: rw=2049, want=64224, limit=40427 [ 161.503912][ T5927] attempt to access beyond end of device [ 161.503912][ T5927] loop4: rw=2049, want=76360, limit=40427 [ 161.522863][ T5927] attempt to access beyond end of device [ 161.522863][ T5927] loop4: rw=2049, want=77824, limit=40427 [ 161.543747][ T5927] attempt to access beyond end of device [ 161.543747][ T5927] loop4: rw=2049, want=85872, limit=40427 [ 161.587818][ T5555] attempt to access beyond end of device [ 161.587818][ T5555] loop4: rw=2049, want=40968, limit=40427 [ 161.607255][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 161.616226][ T8] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 161.701077][ T5918] loop0: detected capacity change from 0 to 40427 [ 161.821011][ T5918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.884029][ T5961] loop3: detected capacity change from 0 to 512 [ 161.920995][ T5918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 161.954084][ T5965] device pim6reg1 entered promiscuous mode [ 161.960394][ T5961] EXT4-fs (loop3): Ignoring removed bh option [ 162.029817][ T5961] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz.3.2151: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 162.067472][ T5961] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2151: couldn't read orphan inode 16 (err -117) [ 162.088482][ T5961] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,acl,bh,,errors=continue. Quota mode: writeback. [ 162.117313][ T5961] ext4 filesystem being mounted at /root/syzkaller.VvMLIU/25/file1 supports timestamps until 2038 (0x7fffffff) [ 162.172343][ T5961] EXT4-fs warning (device loop3): ext4_get_first_dir_block:3554: inode #12: lblock 0: comm syz.3.2151: error -12 reading directory block [ 162.219167][ T5714] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 162.254060][ T5714] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 162.278736][ T5714] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 162.290826][ T5714] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 162.328854][ T5714] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 162.371331][ T5714] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 162.386646][ T5714] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 162.406202][ T5714] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 0 in block_group 0 [ 162.424934][ T5714] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 162.429400][ T5975] loop2: detected capacity change from 0 to 40427 [ 162.440234][ T5714] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor: corrupted xattr block 19 [ 162.457888][ T5975] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 162.461831][ T5714] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -74) [ 162.474639][ T5975] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 162.484227][ T5714] EXT4-fs warning (device loop3): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 162.504325][ T5714] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #18: comm syz-executor: corrupted xattr block 41 [ 162.517027][ T5975] F2FS-fs (loop2): invalid crc value [ 162.522427][ T5714] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -74) [ 162.531704][ T5714] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 162.543826][ T5714] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 162.548255][ T5975] F2FS-fs (loop2): Found nat_bits in checkpoint [ 162.701665][ T5975] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 162.708979][ T5975] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 162.876815][ T6004] device pim6reg1 entered promiscuous mode [ 162.913756][ T6006] loop0: detected capacity change from 0 to 1024 [ 163.241967][ T6006] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 163.360034][ T3551] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 163.368880][ T3551] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 163.429201][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.436108][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.443931][ T6014] device bridge_slave_0 entered promiscuous mode [ 163.451994][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.459237][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.471023][ T6014] device bridge_slave_1 entered promiscuous mode [ 163.537111][ T326] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 163.591423][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.599435][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.623278][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.632418][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.643601][ T6031] loop2: detected capacity change from 0 to 512 [ 163.650408][ T751] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.657299][ T751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.664683][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.672927][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.681149][ T751] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.688029][ T751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.695566][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.703453][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.711704][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.720525][ T8] device bridge_slave_1 left promiscuous mode [ 163.721370][ T6031] EXT4-fs (loop2): 1 orphan inode deleted [ 163.726553][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.732413][ T6031] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 163.759725][ T6031] ext4 filesystem being mounted at /root/syzkaller.fNUJ4a/55/file1 supports timestamps until 2038 (0x7fffffff) [ 163.759820][ T8] device bridge_slave_0 left promiscuous mode [ 163.778828][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.794017][ T8] device veth1_macvtap left promiscuous mode [ 163.799981][ T8] device veth0_vlan left promiscuous mode [ 163.817228][ T326] usb 5-1: Using ep0 maxpacket: 8 [ 164.127136][ T326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.137041][ T326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 164.147449][ T326] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 164.157417][ T326] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 164.166307][ T326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.184175][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.195232][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.202887][ T6013] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 164.210376][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.217968][ T326] hub 5-1:1.0: bad descriptor, ignoring hub [ 164.223766][ T326] hub: probe of 5-1:1.0 failed with error -5 [ 164.233977][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.241421][ T326] cdc_wdm 5-1:1.0: skipping garbage [ 164.246434][ T326] cdc_wdm 5-1:1.0: skipping garbage [ 164.253028][ T6014] device veth0_vlan entered promiscuous mode [ 164.269761][ T326] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 164.287736][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.296520][ T6014] device veth1_macvtap entered promiscuous mode [ 164.307947][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.332398][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.633447][ T6051] loop0: detected capacity change from 0 to 40427 [ 164.727515][ T3845] usb 5-1: USB disconnect, device number 13 [ 164.942906][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 164.942921][ T30] audit: type=1326 audit(1719268859.209:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 164.979839][ T6051] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 164.991745][ T6051] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.003495][ T6051] F2FS-fs (loop0): invalid crc value [ 165.009257][ T30] audit: type=1326 audit(1719268859.249:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009288][ T30] audit: type=1326 audit(1719268859.249:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009311][ T30] audit: type=1326 audit(1719268859.249:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009332][ T30] audit: type=1326 audit(1719268859.249:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009353][ T30] audit: type=1326 audit(1719268859.249:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009376][ T30] audit: type=1326 audit(1719268859.249:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009395][ T30] audit: type=1326 audit(1719268859.249:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009416][ T30] audit: type=1326 audit(1719268859.249:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.009436][ T30] audit: type=1326 audit(1719268859.249:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6062 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dcaf01d39 code=0x7ffc0000 [ 165.242367][ T6051] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.266140][ T6067] loop1: detected capacity change from 0 to 40427 [ 165.299569][ T6081] loop2: detected capacity change from 0 to 512 [ 165.314890][ T6067] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512) [ 165.318602][ T6083] x_tables: unsorted underflow at hook 2 [ 165.326903][ T6067] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 165.346695][ T6051] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.347503][ T6067] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 165.353943][ T6051] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.377201][ T6081] EXT4-fs (loop2): Ignoring removed bh option [ 165.401787][ T6067] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.496635][ T6067] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 165.512003][ T6094] loop4: detected capacity change from 0 to 512 [ 165.522392][ T6067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.538852][ T6081] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.2191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 165.669520][ T6081] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2191: couldn't read orphan inode 16 (err -117) [ 165.818742][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,acl,bh,,errors=continue. Quota mode: writeback. [ 165.866448][ T6095] handle_bad_sector: 16 callbacks suppressed [ 165.866469][ T6095] attempt to access beyond end of device [ 165.866469][ T6095] loop0: rw=2049, want=80688, limit=40427 [ 165.866970][ T6067] attempt to access beyond end of device [ 165.866970][ T6067] loop1: rw=2049, want=45104, limit=40427 [ 165.875703][ T6095] attempt to access beyond end of device [ 165.875703][ T6095] loop0: rw=2049, want=81920, limit=40427 [ 165.887018][ T6094] EXT4-fs (loop4): 1 orphan inode deleted [ 165.902678][ T6095] attempt to access beyond end of device [ 165.902678][ T6095] loop0: rw=2049, want=53240, limit=40427 [ 165.923879][ T6095] attempt to access beyond end of device [ 165.923879][ T6095] loop0: rw=2049, want=53248, limit=40427 [ 165.947231][ T6081] ext4 filesystem being mounted at /root/syzkaller.fNUJ4a/58/file1 supports timestamps until 2038 (0x7fffffff) [ 165.959093][ T6094] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 165.978461][ T6095] attempt to access beyond end of device [ 165.978461][ T6095] loop0: rw=2049, want=77824, limit=40427 [ 166.006961][ T6095] attempt to access beyond end of device [ 166.006961][ T6095] loop0: rw=2049, want=85872, limit=40427 [ 166.027020][ T6083] loop3: detected capacity change from 0 to 40427 [ 166.054800][ T5649] attempt to access beyond end of device [ 166.054800][ T5649] loop0: rw=2049, want=40968, limit=40427 [ 166.054965][ T6094] ext4 filesystem being mounted at /root/syzkaller.A8jfmg/25/file1 supports timestamps until 2038 (0x7fffffff) [ 166.080439][ T6081] EXT4-fs warning (device loop2): ext4_get_first_dir_block:3554: inode #12: lblock 0: comm syz.2.2191: error -12 reading directory block [ 166.099596][ T435] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 166.117348][ T435] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 166.143089][ T5111] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 166.172099][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 166.181890][ T6083] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 166.189792][ T5111] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 166.206371][ T6083] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 166.214813][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 166.224146][ T5111] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 166.447198][ T5111] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop2 ino=15 [ 166.455925][ T5111] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 166.473554][ T5111] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz-executor: Invalid block bitmap block 0 in block_group 0 [ 166.483170][ T6083] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.516848][ T5111] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 166.526538][ T5111] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor: corrupted xattr block 19 [ 166.526789][ T6083] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 166.539131][ T5111] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -74) [ 166.545473][ T6083] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.799762][ T5111] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 166.824387][ T5111] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2925: inode #18: comm syz-executor: corrupted xattr block 41 [ 166.840347][ T5111] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -74) [ 166.867155][ T6083] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 166.907209][ T5111] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 166.918525][ T6083] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 166.934752][ T6117] device syzkaller0 entered promiscuous mode [ 166.934771][ T5111] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz-executor: deleted inode referenced: 16 [ 166.983213][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2203'. [ 167.100912][ T6133] loop1: detected capacity change from 0 to 128 [ 167.126118][ T6135] loop0: detected capacity change from 0 to 512 [ 167.163967][ T6133] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.176103][ T6133] ext4 filesystem being mounted at /root/syzkaller.daLeTH/104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 167.222717][ T6133] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz.1.2209: dx entry: limit 0 != root limit 124 [ 167.246531][ T6133] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.2209: Corrupt directory, running e2fsck is recommended [ 167.260890][ T6135] EXT4-fs (loop0): 1 orphan inode deleted [ 167.263306][ T6133] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz.1.2209: dx entry: limit 0 != root limit 124 [ 167.278610][ T6135] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 167.278788][ T6135] ext4 filesystem being mounted at /root/syzkaller.MHp3Pq/34/file1 supports timestamps until 2038 (0x7fffffff) [ 167.310982][ T20] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 167.311431][ T6133] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz.1.2209: Corrupt directory, running e2fsck is recommended [ 167.342023][ T6133] EXT4-fs error (device loop1): ext4_add_entry:2425: inode #2: comm syz.1.2209: Directory has corrupted htree index. [ 167.388333][ T4799] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor: dx entry: limit 0 != root limit 124 [ 167.400328][ T4799] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 167.413310][ T4799] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 4: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 167.434126][ T4799] EXT4-fs warning (device loop1): dx_probe:892: inode #2: comm syz-executor: dx entry: limit 0 != root limit 124 [ 167.446501][ T4799] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 167.467368][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.474196][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.481555][ T6141] device bridge_slave_0 entered promiscuous mode [ 167.491211][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.499293][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.509290][ T6141] device bridge_slave_1 entered promiscuous mode [ 167.746169][ T6158] x_tables: unsorted underflow at hook 2 [ 167.757082][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 167.852132][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.859211][ T6141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.866316][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.873103][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.887150][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.898586][ T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.907559][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 167.919499][ T20] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 167.931034][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.959128][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.966191][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.969975][ T6120] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.973850][ T6160] device bridge_slave_0 entered promiscuous mode [ 167.998891][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.006628][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.015585][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.029022][ T6158] loop3: detected capacity change from 0 to 40427 [ 168.036393][ T435] device bridge_slave_1 left promiscuous mode [ 168.042843][ T20] hub 5-1:1.0: bad descriptor, ignoring hub [ 168.047204][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.049009][ T20] hub: probe of 5-1:1.0 failed with error -5 [ 168.062093][ T435] device bridge_slave_0 left promiscuous mode [ 168.067361][ T20] cdc_wdm 5-1:1.0: skipping garbage [ 168.070540][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.079914][ T20] cdc_wdm 5-1:1.0: skipping garbage [ 168.081853][ T6158] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 168.088098][ T20] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 168.093032][ T6158] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 168.108486][ T435] device veth1_macvtap left promiscuous mode [ 168.118827][ T435] device veth0_vlan left promiscuous mode [ 168.154285][ T6158] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.176404][ T6158] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 168.183323][ T6158] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.199190][ T6158] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 168.207939][ T6158] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 168.272918][ T6172] fuse: Unknown parameter '0xffffffffffffffff' [ 168.557123][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.565334][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.573542][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.577822][ T313] usb 5-1: USB disconnect, device number 14 [ 168.580413][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.603521][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.610517][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.617839][ T6160] device bridge_slave_1 entered promiscuous mode [ 168.629763][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.637697][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.663785][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.672479][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.699558][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.708349][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.716602][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.727096][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.742085][ T6141] device veth0_vlan entered promiscuous mode [ 168.753209][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.760937][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.786329][ T6141] device veth1_macvtap entered promiscuous mode [ 168.798796][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.808502][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.816669][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.825433][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.836673][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.882983][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.891556][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.900559][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 169.023844][ T6203] tipc: Started in network mode [ 169.031533][ T6203] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 169.041116][ T6203] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 169.049611][ T6203] tipc: Enabled bearer , priority 10 [ 169.120906][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.239881][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.247863][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.256061][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.264767][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.271659][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.279215][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.287461][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.295926][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.302820][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.427467][ T6227] fuse: Unknown parameter '0xffffffffffffffff' [ 169.454065][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.494009][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.502634][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.520477][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.529141][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.541888][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.550280][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.562334][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.570813][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.581875][ T6160] device veth0_vlan entered promiscuous mode [ 169.588792][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.596338][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.611351][ T6160] device veth1_macvtap entered promiscuous mode [ 169.618859][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.627462][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.635618][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.654622][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.663151][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.671392][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.680040][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.757689][ T26] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.796305][ T435] device bridge_slave_1 left promiscuous mode [ 169.802425][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.810197][ T435] device bridge_slave_0 left promiscuous mode [ 169.816214][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.824678][ T435] device veth1_macvtap left promiscuous mode [ 169.830831][ T435] device veth0_vlan left promiscuous mode [ 170.117186][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 170.167112][ T2774] tipc: Node number set to 1 [ 170.229235][ T6225] loop2: detected capacity change from 0 to 131072 [ 170.237979][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.248441][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 170.257228][ T26] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 170.266990][ T26] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 170.278204][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.286673][ T6225] F2FS-fs (loop2): invalid crc value [ 170.297560][ T6225] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 170.308303][ T6234] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 170.327560][ T26] hub 5-1:1.0: bad descriptor, ignoring hub [ 170.331814][ T6225] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 170.334243][ T26] hub: probe of 5-1:1.0 failed with error -5 [ 170.355584][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 170.362320][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 170.372881][ T26] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 170.603887][ T2774] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 170.924691][ T6271] x_tables: unsorted underflow at hook 2 [ 170.997473][ T751] usb 5-1: USB disconnect, device number 15 [ 171.077181][ T2774] usb 1-1: Using ep0 maxpacket: 16 [ 171.197267][ T2774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.218200][ T2774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.237104][ T2774] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.267731][ T2774] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 171.283724][ T2774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.292002][ T6271] loop1: detected capacity change from 0 to 40427 [ 171.299064][ T2774] usb 1-1: config 0 descriptor?? [ 171.327295][ T6277] loop3: detected capacity change from 0 to 40427 [ 171.358362][ T6277] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 171.365911][ T6277] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.374913][ T6277] F2FS-fs (loop3): invalid crc value [ 171.382802][ T6271] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 171.392712][ T6271] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 171.398475][ T6277] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.403391][ T6271] F2FS-fs (loop1): Found nat_bits in checkpoint [ 171.435779][ T6277] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 171.440973][ T6271] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 171.442701][ T6277] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 171.450109][ T6271] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 171.556181][ T6271] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 171.565265][ T6271] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 171.597277][ T6] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 171.624819][ T6305] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6305 comm=syz.4.2270 [ 171.902502][ T6307] attempt to access beyond end of device [ 171.902502][ T6307] loop3: rw=2049, want=79880, limit=40427 [ 171.918198][ T6307] attempt to access beyond end of device [ 171.918198][ T6307] loop3: rw=2049, want=81920, limit=40427 [ 171.937674][ T6307] attempt to access beyond end of device [ 171.937674][ T6307] loop3: rw=2049, want=53248, limit=40427 [ 171.960262][ T6307] attempt to access beyond end of device [ 171.960262][ T6307] loop3: rw=2049, want=62864, limit=40427 [ 171.990320][ T6307] attempt to access beyond end of device [ 171.990320][ T6307] loop3: rw=2049, want=71080, limit=40427 [ 172.020788][ T6307] attempt to access beyond end of device [ 172.020788][ T6307] loop3: rw=2049, want=77824, limit=40427 [ 172.037298][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 172.043069][ T6307] attempt to access beyond end of device [ 172.043069][ T6307] loop3: rw=2049, want=85872, limit=40427 [ 172.089739][ T2774] ryos 0003:1E7D:31CE.0025: unknown main item tag 0x0 [ 172.096820][ T2774] ryos 0003:1E7D:31CE.0025: unbalanced delimiter at end of report description [ 172.097628][ T6014] attempt to access beyond end of device [ 172.097628][ T6014] loop3: rw=2049, want=40968, limit=40427 [ 172.106222][ T2774] ryos 0003:1E7D:31CE.0025: parse failed [ 172.122969][ T2774] ryos: probe of 0003:1E7D:31CE.0025 failed with error -22 [ 172.131257][ T2774] usb 1-1: USB disconnect, device number 15 [ 172.147135][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 172.163206][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 172.177203][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.194499][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.209662][ T6] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 172.218767][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.230329][ T6] usb 3-1: config 0 descriptor?? [ 172.470269][ T6326] loop3: detected capacity change from 0 to 1024 [ 172.498067][ T6326] EXT4-fs (loop3): Ignoring removed orlov option [ 172.506930][ T6326] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x000000000000007f,debug_want_extra_isize=0x0000000000000084,noinit_itable,commit=0x0000000000000005,orlov,data=ordered,max_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 172.551033][ T6326] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.2273: Invalid inode table block 5 in block_group 0 [ 172.563997][ T6326] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2273: Invalid inode bitmap blk 4 in block_group 0 [ 172.577740][ T6326] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz.3.2273: Invalid inode table block 5 in block_group 0 [ 172.594933][ T6014] EXT4-fs error (device loop3): ext4_map_blocks:602: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 172.609756][ T6014] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 172.622855][ T6014] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 172.632479][ T6014] EXT4-fs error (device loop3): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 172.647292][ T10] EXT4-fs error (device loop3): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 5 in block_group 0 [ 172.648719][ T6309] loop4: detected capacity change from 0 to 131072 [ 172.683207][ T6333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6333 comm=syz.0.2281 [ 172.718029][ T6] steelseries_srws1 0003:1038:1410.0026: unknown main item tag 0x0 [ 172.729649][ T6309] F2FS-fs (loop4): invalid crc value [ 172.737444][ T6] steelseries_srws1 0003:1038:1410.0026: unknown main item tag 0x4 [ 172.745193][ T6] steelseries_srws1 0003:1038:1410.0026: item fetching failed at offset 3/7 [ 172.757025][ T6] steelseries_srws1 0003:1038:1410.0026: parse failed [ 172.764293][ T6] steelseries_srws1: probe of 0003:1038:1410.0026 failed with error -22 [ 172.772931][ T6309] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 172.820391][ T6309] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 172.926913][ T26] usb 3-1: USB disconnect, device number 14 [ 172.948311][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.955412][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.963137][ T6346] device bridge_slave_0 entered promiscuous mode [ 172.970397][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.977720][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.162874][ T6346] device bridge_slave_1 entered promiscuous mode [ 173.479069][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.485966][ T6346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.493063][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.499835][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.525647][ T6363] loop2: detected capacity change from 0 to 128 [ 173.551769][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.567346][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.584790][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.598294][ T6363] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.635025][ T6363] ext4 filesystem being mounted at /root/syzkaller.qHqbg4/11/mnt supports timestamps until 2038 (0x7fffffff) [ 173.651973][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.670651][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.677539][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.717134][ T2774] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 173.725912][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.744109][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.751002][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.766914][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.786892][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.809982][ T6346] device veth0_vlan entered promiscuous mode [ 173.824167][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.837666][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.850021][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.860007][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.868762][ T8] device bridge_slave_1 left promiscuous mode [ 173.874714][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.887273][ T8] device bridge_slave_0 left promiscuous mode [ 173.903410][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.923615][ T8] device veth1_macvtap left promiscuous mode [ 173.933658][ T8] device veth0_vlan left promiscuous mode [ 173.957083][ T2774] usb 2-1: Using ep0 maxpacket: 16 [ 173.982205][ T6345] loop0: detected capacity change from 0 to 131072 [ 174.019958][ T6345] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.077582][ T2774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.088448][ T2774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.089850][ T6345] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 174.098359][ T2774] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.118290][ T2774] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 174.127279][ T2774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.132959][ T6346] device veth1_macvtap entered promiscuous mode [ 174.138607][ T2774] usb 2-1: config 0 descriptor?? [ 174.142444][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.153589][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.161263][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.177419][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.197436][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.220299][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.228601][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.236852][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.245182][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.925851][ T6385] fuse: Unknown parameter '0xffffffffffffffff' [ 175.238146][ T2774] ryos 0003:1E7D:31CE.0027: unknown main item tag 0x0 [ 175.244771][ T2774] ryos 0003:1E7D:31CE.0027: unbalanced delimiter at end of report description [ 175.298935][ T6391] loop2: detected capacity change from 0 to 1024 [ 175.309182][ T6391] EXT4-fs (loop2): Ignoring removed orlov option [ 175.328626][ T6391] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x000000000000007f,debug_want_extra_isize=0x0000000000000084,noinit_itable,commit=0x0000000000000005,orlov,data=ordered,max_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 175.367634][ T2774] ryos 0003:1E7D:31CE.0027: parse failed [ 175.373107][ T2774] ryos: probe of 0003:1E7D:31CE.0027 failed with error -22 [ 175.400346][ T6391] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz.2.2299: Invalid inode table block 5 in block_group 0 [ 175.437756][ T6391] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2299: Invalid inode bitmap blk 4 in block_group 0 [ 175.467621][ T26] usb 2-1: USB disconnect, device number 15 [ 175.487591][ T6399] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz.2.2299: Invalid inode table block 5 in block_group 0 [ 175.531967][ T6141] EXT4-fs error (device loop2): ext4_map_blocks:602: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 175.546539][ T6141] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 175.560530][ T6141] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 175.570289][ T6141] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 175.584719][ T10] EXT4-fs error (device loop2): __ext4_get_inode_loc:4340: comm kworker/u4:1: Invalid inode table block 5 in block_group 0 [ 175.722397][ T10] tipc: Disabling bearer [ 175.728924][ T10] tipc: Left network mode [ 175.777084][ T2774] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.822648][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.829656][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.836957][ T6407] device bridge_slave_0 entered promiscuous mode [ 175.847116][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.853972][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.861279][ T6407] device bridge_slave_1 entered promiscuous mode [ 175.906140][ T6393] loop4: detected capacity change from 0 to 131072 [ 175.922781][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.929756][ T6407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.936798][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.943619][ T6407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.963286][ T6393] F2FS-fs (loop4): invalid crc value [ 175.977986][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.980870][ T6393] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 175.995813][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.003859][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.017117][ T2774] usb 4-1: Using ep0 maxpacket: 8 [ 176.017946][ T6393] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 176.045773][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.054476][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.061388][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.078719][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.086793][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.093694][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.111403][ T6416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6416 comm=syz.1.2305 [ 176.115755][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.146198][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.154820][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.164304][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.171933][ T2774] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.184336][ T2774] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 176.194823][ T2774] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 253 [ 176.206707][ T2774] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 176.216546][ T2774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.364028][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.384373][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.397687][ T6401] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 176.434494][ T6407] device veth0_vlan entered promiscuous mode [ 176.441061][ T2774] hub 4-1:1.0: bad descriptor, ignoring hub [ 176.446782][ T2774] hub: probe of 4-1:1.0 failed with error -5 [ 176.459301][ T6407] device veth1_macvtap entered promiscuous mode [ 176.489932][ T2774] cdc_wdm 4-1:1.0: skipping garbage [ 176.495025][ T2774] cdc_wdm 4-1:1.0: skipping garbage [ 176.500223][ T2774] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 176.500891][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.517922][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.526369][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.534827][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.543112][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.551618][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 176.560050][ T5405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.631938][ T6437] device syzkaller0 left promiscuous mode [ 176.660536][ T6439] loop0: detected capacity change from 0 to 128 [ 176.678855][ T10] device bridge_slave_1 left promiscuous mode [ 176.685223][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.692260][ T6439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.703391][ T6439] ext4 filesystem being mounted at /root/syzkaller.MHp3Pq/56/mnt supports timestamps until 2038 (0x7fffffff) [ 176.703462][ T10] device bridge_slave_0 left promiscuous mode [ 176.742454][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.757264][ T326] usb 4-1: USB disconnect, device number 11 [ 176.776043][ T10] device veth1_macvtap left promiscuous mode [ 176.788412][ T10] device veth0_vlan left promiscuous mode [ 176.929621][ T6442] loop4: detected capacity change from 0 to 40427 [ 176.975240][ T6446] loop0: detected capacity change from 0 to 1024 [ 176.984909][ T6442] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 176.992607][ T6442] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 177.001803][ T6442] F2FS-fs (loop4): invalid crc value [ 177.008673][ T6446] EXT4-fs (loop0): Ignoring removed orlov option [ 177.026054][ T6442] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.030814][ T6446] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x000000000000007f,debug_want_extra_isize=0x0000000000000084,noinit_itable,commit=0x0000000000000005,orlov,data=ordered,max_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 177.059420][ T6442] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 177.067116][ T6442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 177.083735][ T6446] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.2314: Invalid inode table block 5 in block_group 0 [ 177.098406][ T6446] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2314: Invalid inode bitmap blk 4 in block_group 0 [ 177.111798][ T6446] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz.0.2314: Invalid inode table block 5 in block_group 0 [ 177.146704][ T5649] EXT4-fs error (device loop0): ext4_map_blocks:602: inode #2: block 48: comm syz-executor: lblock 0 mapped to illegal pblock 48 (length 1) [ 177.161111][ T5649] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 177.174426][ T5649] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 177.184781][ T5649] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 177.199877][ T435] EXT4-fs error (device loop0): __ext4_get_inode_loc:4340: comm kworker/u4:4: Invalid inode table block 5 in block_group 0 [ 177.322277][ T2774] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 177.469124][ T6464] loop2: detected capacity change from 0 to 512 [ 177.525513][ T6464] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.528488][ T6456] attempt to access beyond end of device [ 177.528488][ T6456] loop4: rw=2049, want=80008, limit=40427 [ 177.542728][ T6464] ext4 filesystem being mounted at /root/syzkaller.7rjqaO/2/file0 supports timestamps until 2038 (0x7fffffff) [ 177.551379][ T6456] attempt to access beyond end of device [ 177.551379][ T6456] loop4: rw=2049, want=81920, limit=40427 [ 177.576770][ T6456] attempt to access beyond end of device [ 177.576770][ T6456] loop4: rw=2049, want=52760, limit=40427 [ 177.590355][ T6456] attempt to access beyond end of device [ 177.590355][ T6456] loop4: rw=2049, want=53248, limit=40427 [ 177.605558][ T6456] attempt to access beyond end of device [ 177.605558][ T6456] loop4: rw=2049, want=59392, limit=40427 [ 177.621174][ T6456] attempt to access beyond end of device [ 177.621174][ T6456] loop4: rw=2049, want=61440, limit=40427 [ 177.635897][ T6456] attempt to access beyond end of device [ 177.635897][ T6456] loop4: rw=2049, want=63488, limit=40427 [ 177.652733][ T6456] attempt to access beyond end of device [ 177.652733][ T6456] loop4: rw=2049, want=65728, limit=40427 [ 177.674600][ T6456] attempt to access beyond end of device [ 177.674600][ T6456] loop4: rw=2049, want=69840, limit=40427 [ 177.691952][ T6456] attempt to access beyond end of device [ 177.691952][ T6456] loop4: rw=2049, want=72176, limit=40427 [ 177.703895][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.711163][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.718822][ T6468] device bridge_slave_0 entered promiscuous mode [ 177.725913][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.733175][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.740723][ T6468] device bridge_slave_1 entered promiscuous mode [ 177.747175][ T2774] usb 2-1: Using ep0 maxpacket: 16 [ 177.761488][ T435] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 177.770330][ T435] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 177.825308][ T6475] loop2: detected capacity change from 0 to 512 [ 177.857494][ T6468] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.864529][ T6468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.867174][ T2774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.871584][ T6468] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.889019][ T6468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.892381][ T2774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.905916][ T6475] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.912291][ T2774] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.927450][ T2774] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 177.936213][ T2774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.939176][ T6475] EXT4-fs (loop2): failed to initialize system zone (-117) [ 177.948102][ T2774] usb 2-1: config 0 descriptor?? [ 177.951326][ T6475] EXT4-fs (loop2): mount failed [ 177.968117][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.975731][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.983474][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.008404][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.016428][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.023304][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.058595][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.067663][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.074614][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.082714][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.090606][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.127275][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.135984][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.144191][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.151665][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.165826][ T6468] device veth0_vlan entered promiscuous mode [ 178.205385][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.222109][ T6468] device veth1_macvtap entered promiscuous mode [ 178.259445][ T6490] loop2: detected capacity change from 0 to 512 [ 178.299950][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.395936][ T6495] loop3: detected capacity change from 0 to 512 [ 178.404009][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.414133][ T6490] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.428020][ T2774] ryos 0003:1E7D:31CE.0028: unknown main item tag 0x0 [ 178.434773][ T2774] ryos 0003:1E7D:31CE.0028: unbalanced delimiter at end of report description [ 178.446627][ T2774] ryos 0003:1E7D:31CE.0028: parse failed [ 178.452180][ T2774] ryos: probe of 0003:1E7D:31CE.0028 failed with error -22 [ 178.471506][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 178.471526][ T30] audit: type=1326 audit(1719268872.739:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.501739][ T30] audit: type=1326 audit(1719268872.739:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.525296][ T30] audit: type=1326 audit(1719268872.739:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.549047][ T30] audit: type=1326 audit(1719268872.739:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.574209][ T30] audit: type=1326 audit(1719268872.739:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.603205][ T30] audit: type=1326 audit(1719268872.739:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.627161][ T30] audit: type=1326 audit(1719268872.849:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.662998][ T30] audit: type=1326 audit(1719268872.849:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6497 comm="syz.4.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9788769d39 code=0x7ffc0000 [ 178.692529][ T5405] usb 2-1: USB disconnect, device number 16 [ 178.709168][ T30] audit: type=1400 audit(1719268872.929:742): avc: denied { ioctl } for pid=6503 comm="syz.4.2332" path="/root/syzkaller.A8jfmg/45/file0" dev="sda1" ino=2139 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 178.725994][ T6506] device syzkaller0 entered promiscuous mode [ 178.747588][ T10] device bridge_slave_1 left promiscuous mode [ 178.757491][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.768519][ T10] device bridge_slave_0 left promiscuous mode [ 178.774487][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.783061][ T10] device veth1_macvtap left promiscuous mode [ 178.789503][ T10] device veth0_vlan left promiscuous mode [ 178.910205][ T6509] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2335'. [ 178.954984][ T30] audit: type=1400 audit(1719268873.219:743): avc: denied { name_bind } for pid=6525 comm="syz.4.2341" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 179.046002][ T6536] loop3: detected capacity change from 0 to 512 [ 179.122075][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2352'. [ 179.202383][ T6555] device syzkaller0 entered promiscuous mode [ 179.299984][ T6569] loop0: detected capacity change from 0 to 512 [ 179.325177][ T6577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2365'. [ 179.377813][ T6585] loop3: detected capacity change from 0 to 512 [ 179.398813][ T6585] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.410429][ T6585] ext4 filesystem being mounted at /root/syzkaller.yjgAPq/25/file0 supports timestamps until 2038 (0x7fffffff) [ 179.465838][ T6589] device syzkaller0 entered promiscuous mode [ 179.558565][ T6608] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2378'. [ 179.644971][ T6616] loop2: detected capacity change from 0 to 512 [ 179.682131][ T6620] loop1: detected capacity change from 0 to 512 [ 179.688974][ T6616] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.699915][ T6616] ext4 filesystem being mounted at /root/syzkaller.7rjqaO/6/file0 supports timestamps until 2038 (0x7fffffff) [ 179.787135][ T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.827243][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 179.842683][ T6633] device syzkaller0 entered promiscuous mode [ 179.965625][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2399'. [ 180.008331][ T6664] netlink: 'syz.4.2403': attribute type 4 has an invalid length. [ 180.058608][ T6668] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 180.067093][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 180.067947][ T6668] SELinux: security_context_str_to_sid(s) failed for (dev sda1, type ext4) errno=-22 [ 180.074564][ T6672] device syzkaller0 entered promiscuous mode [ 180.126934][ T6678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2410'. [ 180.167211][ T751] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 180.185199][ T6688] netlink: 'syz.2.2415': attribute type 4 has an invalid length. [ 180.187304][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.208884][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.219754][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.222141][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.239204][ T26] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 180.239233][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.239886][ T26] usb 1-1: config 0 descriptor?? [ 180.251243][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.274776][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 180.284021][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.304588][ T6] usb 4-1: config 0 descriptor?? [ 180.425117][ T6713] netlink: 'syz.2.2427': attribute type 4 has an invalid length. [ 180.456741][ T6717] device vlan0 entered promiscuous mode [ 180.537195][ T751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.537291][ T6715] loop4: detected capacity change from 0 to 40427 [ 180.548009][ T751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.563555][ T6719] device vlan0 left promiscuous mode [ 180.563865][ T751] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 180.577777][ T751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.586284][ T751] usb 2-1: config 0 descriptor?? [ 180.628529][ T6715] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 180.636136][ T6715] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.645076][ T6715] F2FS-fs (loop4): invalid crc value [ 180.651744][ T6715] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.673978][ T6715] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.680936][ T6715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.767776][ T6] ryos 0003:1E7D:31CE.002A: unknown main item tag 0x0 [ 180.774438][ T6] ryos 0003:1E7D:31CE.002A: unbalanced delimiter at end of report description [ 180.783223][ T6] ryos 0003:1E7D:31CE.002A: parse failed [ 180.788738][ T6] ryos: probe of 0003:1E7D:31CE.002A failed with error -22 [ 181.036768][ T6] usb 4-1: USB disconnect, device number 12 [ 181.247147][ T26] usb 1-1: string descriptor 0 read error: -71 [ 181.268518][ T26] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #200: -71 [ 181.286582][ T6646] loop1: detected capacity change from 0 to 4096 [ 181.307736][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 181.307739][ T26] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71 [ 181.307761][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 181.333414][ T26] uclogic 0003:256C:006D.0029: failed probing pen v2 parameters: -71 [ 181.341373][ T26] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 181.349230][ T26] uclogic: probe of 0003:256C:006D.0029 failed with error -71 [ 181.358050][ T26] usb 1-1: USB disconnect, device number 16 [ 181.387699][ T6646] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.422063][ T6646] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,,errors=continue. Quota mode: writeback. [ 181.459944][ T751] waltop 0003:172F:0032.002B: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 181.647145][ T6751] device vlan0 entered promiscuous mode [ 181.696333][ T6646] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 181.702281][ T6753] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.711181][ T6] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 181.731687][ T751] usb 2-1: USB disconnect, device number 17 [ 181.754373][ T6756] device vlan0 left promiscuous mode [ 181.895463][ T6776] loop4: detected capacity change from 0 to 256 [ 181.919841][ T6776] FAT-fs (loop4): Directory bread(block 64) failed [ 181.926235][ T6776] FAT-fs (loop4): Directory bread(block 65) failed [ 181.933137][ T6776] FAT-fs (loop4): Directory bread(block 66) failed [ 181.939772][ T6776] FAT-fs (loop4): Directory bread(block 67) failed [ 181.946200][ T6776] FAT-fs (loop4): Directory bread(block 68) failed [ 181.952588][ T6776] FAT-fs (loop4): Directory bread(block 69) failed [ 181.959135][ T6776] FAT-fs (loop4): Directory bread(block 70) failed [ 181.965737][ T6776] FAT-fs (loop4): Directory bread(block 71) failed [ 181.972422][ T6776] FAT-fs (loop4): Directory bread(block 72) failed [ 181.978953][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 181.984017][ T6776] FAT-fs (loop4): Directory bread(block 73) failed [ 182.010556][ T6782] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.097188][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.110157][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.120010][ T6] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 182.135940][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.145754][ T6] usb 3-1: config 0 descriptor?? [ 182.277582][ T6805] netlink: 'syz.0.2465': attribute type 4 has an invalid length. [ 182.550206][ T6814] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.157737][ T6840] device vlan0 entered promiscuous mode [ 184.176139][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 184.176155][ T30] audit: type=1326 audit(1719268878.439:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.1.2479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904f64dd39 code=0x0 [ 184.276439][ T6846] device vlan0 left promiscuous mode [ 184.301628][ T6844] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 184.317432][ T26] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 184.687174][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.708898][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.740572][ T26] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 184.768518][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.799787][ T26] usb 4-1: config 0 descriptor?? [ 185.005083][ T6] steelseries_srws1 0003:1038:1410.002C: unknown main item tag 0x0 [ 185.013062][ T6] steelseries_srws1 0003:1038:1410.002C: unknown main item tag 0x4 [ 185.020831][ T6] steelseries_srws1 0003:1038:1410.002C: item fetching failed at offset 3/7 [ 185.029394][ T6] steelseries_srws1 0003:1038:1410.002C: parse failed [ 185.037774][ T6] steelseries_srws1: probe of 0003:1038:1410.002C failed with error -22 [ 185.046825][ T6] usb 3-1: USB disconnect, device number 15 [ 185.240066][ T6879] syz.2.2496[6879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.240136][ T6879] syz.2.2496[6879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.264964][ T30] audit: type=1400 audit(1719268879.529:749): avc: denied { setattr } for pid=6878 comm="syz.2.2496" name="file0" dev="9p" ino=7016996764471618667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 185.395988][ T313] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 185.405541][ T26] waltop 0003:172F:0032.002D: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.3-1/input0 [ 185.866987][ T326] usb 4-1: USB disconnect, device number 13 [ 185.987098][ T313] usb 5-1: Using ep0 maxpacket: 8 [ 186.107226][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.118663][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.128574][ T313] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 186.137752][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.149530][ T313] usb 5-1: config 0 descriptor?? [ 186.747987][ T313] steelseries_srws1 0003:1038:1410.002E: unknown main item tag 0x0 [ 186.755780][ T313] steelseries_srws1 0003:1038:1410.002E: unknown main item tag 0x4 [ 186.763903][ T313] steelseries_srws1 0003:1038:1410.002E: item fetching failed at offset 3/7 [ 186.772788][ T313] steelseries_srws1 0003:1038:1410.002E: parse failed [ 186.779834][ T313] steelseries_srws1: probe of 0003:1038:1410.002E failed with error -22 [ 186.951181][ T6] usb 5-1: USB disconnect, device number 16 [ 187.215199][ T6958] syz.3.2530[6958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.215276][ T6958] syz.3.2530[6958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.584102][ T313] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 188.327314][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.348051][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.359687][ T313] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 188.410766][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.424032][ T313] usb 3-1: config 0 descriptor?? [ 188.787130][ T326] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 188.948982][ T313] waltop 0003:172F:0032.002F: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.2-1/input0 [ 189.143978][ T20] kernel write not supported for file bpf-prog (pid: 20 comm: kworker/0:1) [ 189.177168][ T326] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 189.186185][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.224231][ T326] usb 4-1: config 0 descriptor?? [ 189.235728][ T20] usb 3-1: USB disconnect, device number 16 [ 189.803176][ T7011] syz.4.2549[7011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.803235][ T7011] syz.4.2549[7011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.815771][ T7011] syz.4.2549[7011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.827465][ T7011] syz.4.2549[7011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.850236][ T30] audit: type=1400 audit(1719268884.119:750): avc: denied { getopt } for pid=7012 comm="syz.4.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 190.471602][ T7040] syz.2.2561[7040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.471669][ T7040] syz.2.2561[7040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.485499][ T7040] syz.2.2561[7040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.497005][ T7040] syz.2.2561[7040] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.057579][ T326] usb 4-1: Cannot set autoneg [ 191.081186][ T326] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 191.090016][ T326] usb 4-1: USB disconnect, device number 14 [ 191.527103][ T20] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 191.590109][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.597126][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.618835][ T7071] device bridge_slave_0 entered promiscuous mode [ 191.625929][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.633000][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.640367][ T7071] device bridge_slave_1 entered promiscuous mode [ 191.959414][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.966278][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.973424][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.980191][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.004552][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.013240][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.020994][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.032365][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.040447][ T2774] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.047311][ T2774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.057872][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.065977][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.072847][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.091070][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.099173][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.109803][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.124093][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.132266][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.139625][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.148045][ T7071] device veth0_vlan entered promiscuous mode [ 192.161004][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.168889][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.179925][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.181460][ T7071] device veth1_macvtap entered promiscuous mode [ 192.189523][ T20] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 192.201550][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.204599][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.223153][ T435] device bridge_slave_1 left promiscuous mode [ 192.225717][ T20] usb 2-1: config 0 descriptor?? [ 192.229513][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.241575][ T435] device bridge_slave_0 left promiscuous mode [ 192.247808][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.255773][ T435] device veth1_macvtap left promiscuous mode [ 192.261873][ T751] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 192.261937][ T435] device veth0_vlan left promiscuous mode [ 192.371214][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.817214][ T751] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.861900][ T751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.881449][ T751] usb 5-1: config 0 descriptor?? [ 192.885850][ T20] waltop 0003:172F:0032.0030: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 192.891775][ T30] audit: type=1400 audit(1719268887.159:751): avc: denied { watch watch_reads } for pid=7124 comm="syz.0.2592" path="/root/syzkaller.zCVE8H/54/file0" dev="incremental-fs" ino=2144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.045670][ T30] audit: type=1400 audit(1719268887.309:752): avc: denied { create } for pid=7138 comm="syz.2.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.082167][ T30] audit: type=1400 audit(1719268887.349:753): avc: denied { relabelfrom } for pid=7144 comm="syz.2.2602" name="" dev="pipefs" ino=48981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 193.110595][ T30] audit: type=1401 audit(1719268887.349:754): op=setxattr invalid_context="" [ 193.130459][ T7149] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 193.183300][ T313] usb 2-1: USB disconnect, device number 18 [ 193.387139][ T326] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 193.421615][ T30] audit: type=1326 audit(1719268887.689:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 193.456350][ T30] audit: type=1326 audit(1719268887.719:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 193.480487][ T30] audit: type=1326 audit(1719268887.719:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 193.510748][ T30] audit: type=1326 audit(1719268887.719:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 193.534577][ T30] audit: type=1326 audit(1719268887.719:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.3.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 193.967254][ T326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.978190][ T326] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.991080][ T326] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.000011][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.008695][ T326] usb 3-1: config 0 descriptor?? [ 194.440859][ T313] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 194.498236][ T326] plantronics 0003:047F:FFFF.0031: No inputs registered, leaving [ 194.511122][ T326] plantronics 0003:047F:FFFF.0031: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 194.670234][ T7245] netlink: 'syz.0.2648': attribute type 4 has an invalid length. [ 194.777190][ T751] usb 5-1: Cannot set autoneg [ 194.781883][ T751] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 194.790575][ T751] usb 5-1: USB disconnect, device number 17 [ 194.807161][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.817946][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.827552][ T313] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 194.836392][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.845244][ T313] usb 2-1: config 0 descriptor?? [ 195.276497][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.283429][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.290945][ T7252] device bridge_slave_0 entered promiscuous mode [ 195.300257][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.307190][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.327500][ T7252] device bridge_slave_1 entered promiscuous mode [ 195.415706][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.422588][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.429967][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.430871][ T313] waltop 0003:172F:0032.0032: hidraw1: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 195.436815][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.713385][ T313] usb 2-1: USB disconnect, device number 19 [ 195.726306][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.734547][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.743238][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.760613][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.769451][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.780680][ T751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 195.793181][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 195.804604][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 195.811981][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 195.821549][ T7252] device veth0_vlan entered promiscuous mode [ 195.841102][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 195.851086][ T7252] device veth1_macvtap entered promiscuous mode [ 195.862682][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.883415][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.905274][ T7274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59312 sclass=netlink_route_socket pid=7274 comm=syz.4.2649 [ 195.928243][ T435] device bridge_slave_1 left promiscuous mode [ 195.934462][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.942371][ T435] device bridge_slave_0 left promiscuous mode [ 195.948546][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.956741][ T435] device veth1_macvtap left promiscuous mode [ 195.962865][ T435] device veth0_vlan left promiscuous mode [ 195.963021][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 195.963032][ T30] audit: type=1326 audit(1719268890.239:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.4.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 196.268216][ T30] audit: type=1326 audit(1719268890.239:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.4.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 196.300797][ T30] audit: type=1326 audit(1719268890.239:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.4.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 196.325607][ T30] audit: type=1326 audit(1719268890.239:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.4.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 196.350744][ T30] audit: type=1326 audit(1719268890.239:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.4.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 196.374318][ T30] audit: type=1326 audit(1719268890.249:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.4.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 196.406397][ T30] audit: type=1326 audit(1719268890.249:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7277 comm="syz.4.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 196.478584][ T326] usb 3-1: USB disconnect, device number 17 [ 196.493141][ T30] audit: type=1326 audit(1719268890.759:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 196.519352][ T30] audit: type=1326 audit(1719268890.789:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 196.544059][ T30] audit: type=1326 audit(1719268890.789:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7290 comm="syz.3.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 198.109789][ T326] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 198.467161][ T321] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 198.715691][ T326] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.726106][ T326] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 198.735194][ T326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.747810][ T326] usb 5-1: config 0 descriptor?? [ 198.797622][ T326] usb 5-1: bad CDC descriptors [ 198.999036][ T751] usb 5-1: USB disconnect, device number 18 [ 199.067176][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.078370][ T321] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.088126][ T321] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 199.097019][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.424100][ T321] usb 1-1: config 0 descriptor?? [ 200.247191][ T321] usb 1-1: string descriptor 0 read error: -71 [ 200.742478][ T321] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 200.764557][ T321] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 200.778068][ T321] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 200.786166][ T321] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 200.793806][ T321] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 200.808643][ T321] usb 1-1: USB disconnect, device number 17 [ 201.087088][ T6] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 201.089887][ T7499] device pim6reg1 entered promiscuous mode [ 201.275639][ T7521] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2754'. [ 201.320269][ T7526] device pim6reg1 entered promiscuous mode [ 201.687168][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.697241][ T6] usb 4-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 201.706132][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.706474][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2769'. [ 201.718245][ T6] usb 4-1: config 0 descriptor?? [ 201.767524][ T6] usb 4-1: bad CDC descriptors [ 201.857094][ T321] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 201.862968][ T7559] device pim6reg1 entered promiscuous mode [ 201.901942][ T7560] 9pnet: Insufficient options for proto=fd [ 201.958842][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 201.958858][ T30] audit: type=1326 audit(1719268896.229:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f64dd39 code=0x7ffc0000 [ 201.991148][ T30] audit: type=1326 audit(1719268896.229:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f64dd39 code=0x7ffc0000 [ 201.996088][ T308] usb 4-1: USB disconnect, device number 15 [ 202.534867][ T30] audit: type=1326 audit(1719268896.229:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904f64dd39 code=0x7ffc0000 [ 202.569744][ T7575] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 202.573243][ T30] audit: type=1326 audit(1719268896.259:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f64dd39 code=0x7ffc0000 [ 202.608988][ T30] audit: type=1326 audit(1719268896.259:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f904f64dd39 code=0x7ffc0000 [ 202.615425][ T457] printk: udevd: 3 output lines suppressed due to ratelimiting [ 202.632431][ T30] audit: type=1326 audit(1719268896.299:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f904f64dd39 code=0x7ffc0000 [ 202.662839][ T30] audit: type=1326 audit(1719268896.819:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f904f644ba7 code=0x7ffc0000 [ 202.686101][ T30] audit: type=1326 audit(1719268896.819:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f904f5e9569 code=0x7ffc0000 [ 202.686133][ T30] audit: type=1326 audit(1719268896.819:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f904f64dd39 code=0x7ffc0000 [ 202.686155][ T30] audit: type=1326 audit(1719268896.819:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7556 comm="syz.1.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f904f644ba7 code=0x7ffc0000 [ 202.762367][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.762400][ T321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.762432][ T321] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 202.762462][ T321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.763099][ T321] usb 3-1: config 0 descriptor?? [ 202.996349][ T7618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7618 comm=syz.4.2799 [ 203.349858][ T7643] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7643 comm=syz.4.2810 [ 203.834909][ T7674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7674 comm=syz.1.2824 [ 203.957433][ T321] usb 3-1: string descriptor 0 read error: -71 [ 203.976155][ T7697] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7697 comm=syz.0.2837 [ 203.997328][ T321] uclogic 0003:256C:006D.0034: failed retrieving string descriptor #200: -71 [ 204.006609][ T321] uclogic 0003:256C:006D.0034: failed retrieving pen parameters: -71 [ 204.016891][ T321] uclogic 0003:256C:006D.0034: failed probing pen v2 parameters: -71 [ 204.024896][ T321] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 204.032307][ T321] uclogic: probe of 0003:256C:006D.0034 failed with error -71 [ 204.040585][ T321] usb 3-1: USB disconnect, device number 18 [ 204.347092][ T751] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 204.513695][ T7726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7726 comm=syz.3.2849 [ 204.776684][ T7742] device pim6reg1 entered promiscuous mode [ 204.884985][ T751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 204.912480][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.923435][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.971284][ T751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 204.992871][ T751] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 205.011325][ T751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.026650][ T751] usb 1-1: config 0 descriptor?? [ 205.377100][ T2774] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 205.508117][ T751] hid-picolcd 0003:04D8:C002.0035: unbalanced collection at end of report description [ 205.524650][ T751] hid-picolcd 0003:04D8:C002.0035: device report parse failed [ 205.532315][ T751] hid-picolcd: probe of 0003:04D8:C002.0035 failed with error -22 [ 205.739408][ T7793] device pim6reg1 entered promiscuous mode [ 205.870798][ T751] usb 1-1: USB disconnect, device number 18 [ 205.897181][ T2774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.908045][ T2774] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.917731][ T2774] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.926598][ T2774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.934903][ T2774] usb 2-1: config 0 descriptor?? [ 206.677144][ T6] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 206.757199][ T2774] usb 2-1: string descriptor 0 read error: -71 [ 206.777164][ T751] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 206.784702][ T2774] uclogic 0003:256C:006D.0036: failed retrieving string descriptor #200: -71 [ 206.793368][ T2774] uclogic 0003:256C:006D.0036: failed retrieving pen parameters: -71 [ 206.801374][ T2774] uclogic 0003:256C:006D.0036: failed probing pen v2 parameters: -71 [ 206.809286][ T2774] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 206.816517][ T2774] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 206.824500][ T2774] usb 2-1: USB disconnect, device number 20 [ 207.047174][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.057159][ T6] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 207.066081][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.074489][ T6] usb 5-1: config 0 descriptor?? [ 207.117599][ T6] usb 5-1: bad CDC descriptors [ 207.147145][ T751] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 207.160966][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.171663][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.181194][ T751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 207.193979][ T751] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 207.202825][ T751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.211093][ T751] usb 1-1: config 0 descriptor?? [ 207.320172][ T326] usb 5-1: USB disconnect, device number 19 [ 207.712296][ T751] hid-picolcd 0003:04D8:C002.0037: unbalanced collection at end of report description [ 207.722174][ T751] hid-picolcd 0003:04D8:C002.0037: device report parse failed [ 207.729937][ T751] hid-picolcd: probe of 0003:04D8:C002.0037 failed with error -22 [ 207.912254][ T326] usb 1-1: USB disconnect, device number 19 [ 208.412478][ T7866] syz.1.2907[7866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.412552][ T7866] syz.1.2907[7866] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.687083][ T308] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 209.077139][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.088196][ T308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.098054][ T308] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.107248][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.116051][ T308] usb 3-1: config 0 descriptor?? [ 209.256620][ T7891] overlayfs: statfs failed on './file0' [ 209.317636][ T7899] netlink: 'syz.3.2915': attribute type 3 has an invalid length. [ 209.367854][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 209.367870][ T30] audit: type=1400 audit(1719268903.639:946): avc: denied { ioctl } for pid=7902 comm="syz.3.2920" path="socket:[53487]" dev="sockfs" ino=53487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 209.487364][ T30] audit: type=1400 audit(1719268903.759:947): avc: denied { ioctl } for pid=7907 comm="syz.3.2922" path="/root/syzkaller.Tz28Sb/68/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.522244][ T7911] syz.3.2923[7911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.522303][ T7911] syz.3.2923[7911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.536783][ T30] audit: type=1400 audit(1719268903.799:948): avc: denied { remount } for pid=7910 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.733328][ T7920] overlayfs: statfs failed on './file0' [ 209.967177][ T308] usb 3-1: string descriptor 0 read error: -71 [ 209.979776][ T7929] netlink: 'syz.4.2930': attribute type 3 has an invalid length. [ 209.987134][ T308] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #200: -71 [ 209.997982][ T308] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71 [ 210.006154][ T308] uclogic 0003:256C:006D.0038: failed probing pen v2 parameters: -71 [ 210.014233][ T308] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 210.037072][ T308] uclogic: probe of 0003:256C:006D.0038 failed with error -71 [ 210.047899][ T308] usb 3-1: USB disconnect, device number 19 [ 210.077100][ T326] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 210.091162][ T7940] syz.1.2935[7940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.091233][ T7940] syz.1.2935[7940] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.547671][ T7956] netlink: 'syz.2.2941': attribute type 3 has an invalid length. [ 210.597160][ T326] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.607228][ T326] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 210.727164][ T326] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.736116][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.743875][ T326] usb 1-1: SerialNumber: syz [ 210.787694][ T326] usb 1-1: bad CDC descriptors [ 210.959488][ T308] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 211.011947][ T313] usb 1-1: USB disconnect, device number 20 [ 211.387128][ T308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.597409][ T308] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.617504][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.633642][ T308] usb 3-1: Product: syz [ 211.637777][ T308] usb 3-1: Manufacturer: syz [ 211.642210][ T308] usb 3-1: SerialNumber: syz [ 211.897571][ T7971] syz.2.2948 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 212.287134][ T308] cdc_ncm 3-1:1.0: bind() failure [ 212.317398][ T308] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 212.347159][ T308] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 212.364742][ T308] usb 3-1: USB disconnect, device number 20 [ 212.607133][ T321] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 213.147182][ T321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.162702][ T321] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 213.267193][ T321] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.276069][ T321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 213.297196][ T321] usb 5-1: SerialNumber: syz [ 213.337610][ T321] usb 5-1: bad CDC descriptors [ 213.342326][ T751] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.540686][ T308] usb 5-1: USB disconnect, device number 20 [ 213.591823][ T8128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8128 comm=syz.1.3017 [ 213.777397][ T751] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.987216][ T751] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.996241][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.004023][ T751] usb 3-1: Product: syz [ 214.008021][ T751] usb 3-1: Manufacturer: syz [ 214.012397][ T751] usb 3-1: SerialNumber: syz [ 214.047099][ T326] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 214.090261][ T30] audit: type=1326 audit(1719268908.359:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 214.113580][ T30] audit: type=1326 audit(1719268908.359:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 214.137071][ T30] audit: type=1326 audit(1719268908.359:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 214.160172][ T30] audit: type=1326 audit(1719268908.359:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 214.183806][ T30] audit: type=1326 audit(1719268908.359:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 214.207482][ T30] audit: type=1326 audit(1719268908.359:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 214.230593][ T30] audit: type=1326 audit(1719268908.359:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8134 comm="syz.4.3019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa2766d39 code=0x7ffc0000 [ 214.447461][ T326] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 214.466498][ T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.487763][ T326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.507092][ T326] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 214.537102][ T326] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 214.554139][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.579977][ T326] usb 1-1: config 0 descriptor?? [ 214.591142][ T8154] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 214.637116][ T751] cdc_ncm 3-1:1.0: bind() failure [ 214.657115][ T751] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 214.677117][ T751] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 214.685114][ T751] usb 3-1: USB disconnect, device number 21 [ 214.711411][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 214.711427][ T30] audit: type=1326 audit(1719268908.979:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.752513][ T30] audit: type=1326 audit(1719268909.009:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.775941][ T30] audit: type=1326 audit(1719268909.009:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.799329][ T30] audit: type=1326 audit(1719268909.009:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.825262][ T30] audit: type=1326 audit(1719268909.009:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.849380][ T30] audit: type=1326 audit(1719268909.009:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.882129][ T30] audit: type=1326 audit(1719268909.009:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.905440][ T30] audit: type=1326 audit(1719268909.009:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73d2346d39 code=0x7ffc0000 [ 214.933286][ T8167] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8167 comm=syz.1.3035 [ 215.077968][ T326] hid-picolcd 0003:04D8:C002.0039: unbalanced collection at end of report description [ 215.092605][ T326] hid-picolcd 0003:04D8:C002.0039: device report parse failed [ 215.107089][ T326] hid-picolcd: probe of 0003:04D8:C002.0039 failed with error -22 [ 215.201846][ T30] audit: type=1400 audit(1719268909.469:965): avc: denied { setattr } for pid=8182 comm="syz.2.3041" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.249000][ T8185] EXT4-fs warning (device sda1): ext4_group_extend:1822: can't shrink FS - resize aborted [ 215.329553][ T313] usb 1-1: USB disconnect, device number 21 [ 216.399355][ T8262] device pim6reg1 entered promiscuous mode [ 216.476758][ T8270] tipc: Started in network mode [ 216.481646][ T8270] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 216.497172][ T8270] tipc: Enabling of bearer rejected, failed to enable media [ 216.645080][ T30] audit: type=1400 audit(1719268910.909:966): avc: denied { read } for pid=8284 comm="syz.1.3085" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 216.717071][ T313] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 216.967309][ T313] usb 5-1: Using ep0 maxpacket: 16 [ 217.087317][ T313] usb 5-1: config 0 has no interfaces? [ 217.427237][ T313] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 217.440365][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.464929][ T313] usb 5-1: Product: syz [ 217.476228][ T313] usb 5-1: Manufacturer: syz [ 217.490892][ T313] usb 5-1: SerialNumber: syz [ 217.505280][ T8349] loop0: detected capacity change from 0 to 256 [ 217.511796][ T313] r8152-cfgselector 5-1: config 0 descriptor?? [ 217.602736][ T8355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3113'. [ 217.639422][ T8360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8360 comm=syz.2.3115 [ 217.895850][ T8371] xt_bpf: check failed: parse error [ 218.021084][ T8379] device pim6reg1 entered promiscuous mode [ 218.044266][ T313] usb 5-1: USB disconnect, device number 21 [ 218.973636][ T8400] xt_bpf: check failed: parse error [ 219.146027][ T8424] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8424 comm=syz.2.3142 [ 219.369306][ T8451] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.381285][ T8445] device pim6reg1 entered promiscuous mode [ 219.565888][ T8469] overlayfs: statfs failed on './file0' [ 219.654990][ T8477] rtc_cmos 00:00: Alarms can be up to one day in the future [ 219.658811][ T8415] loop0: detected capacity change from 0 to 131072 [ 219.672332][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3167'. [ 219.698579][ T8415] F2FS-fs (loop0): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 219.707004][ T8415] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 219.716171][ T8415] F2FS-fs (loop0): invalid crc value [ 219.726946][ T8415] F2FS-fs (loop0): Found nat_bits in checkpoint [ 219.764333][ T8415] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 219.771357][ T8415] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 220.191788][ T8508] rtc_cmos 00:00: Alarms can be up to one day in the future [ 220.215605][ T8499] overlayfs: statfs failed on './file0' [ 221.267387][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3200'. [ 221.311468][ T8574] loop0: detected capacity change from 0 to 512 [ 221.377959][ T8574] EXT4-fs (loop0): orphan cleanup on readonly fs [ 221.379683][ T8582] syz.2.3209[8582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.384216][ T8574] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.3204: bad orphan inode 1 [ 221.407498][ T8582] syz.2.3209[8582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.425881][ T8574] EXT4-fs (loop0): Remounting filesystem read-only [ 221.447459][ T8574] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,i_version,usrquota,min_batch_time=0x0000000000000005,nobarrier,errors=remount-ro,jqfmt=vfsold,. Quota mode: writeback. [ 221.494334][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 221.494349][ T30] audit: type=1400 audit(1719268915.759:983): avc: denied { mounton } for pid=8571 comm="syz.0.3204" path="/root/syzkaller.zCVE8H/176/file0/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 221.495041][ T8574] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 221.546956][ T8574] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 221.554497][ T8574] EXT4-fs (loop0): Remounting file system with no journal so ignoring journalled data option [ 221.564611][ T8574] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 221.573917][ T8574] EXT4-fs error (device loop0): ext4_remount:5845: comm syz.0.3204: Abort forced by user [ 221.618846][ T6468] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 21: comm syz-executor: path /root/syzkaller.zCVE8H/176/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0 [ 221.667794][ T6468] EXT4-fs error (device loop0): ext4_lookup:1855: inode #16: comm syz-executor: iget: bad extra_isize 2080 (inode size 256) [ 221.686734][ T6468] EXT4-fs error (device loop0): ext4_lookup:1855: inode #16: comm syz-executor: iget: bad extra_isize 2080 (inode size 256) [ 221.997418][ T8602] overlayfs: statfs failed on './file0' [ 222.188262][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.195169][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.205881][ T8612] device bridge_slave_0 entered promiscuous mode [ 222.213002][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.220203][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.227559][ T8612] device bridge_slave_1 entered promiscuous mode [ 222.255699][ T8617] syz.2.3224[8617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.255775][ T8617] syz.2.3224[8617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.312350][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.330346][ T8612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.337578][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.344434][ T8612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.690208][ T30] audit: type=1400 audit(1719268916.759:984): avc: denied { ioctl } for pid=8610 comm="syz.1.3223" path="socket:[56377]" dev="sockfs" ino=56377 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 222.727243][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.734768][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.754046][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.766757][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.783269][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.792365][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.800407][ T30] audit: type=1400 audit(1719268917.079:985): avc: denied { create } for pid=8633 comm="syz.2.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 222.800459][ T2774] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.826460][ T2774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.835311][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.843842][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.851941][ T2774] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.858808][ T2774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.866777][ T8632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3229'. [ 222.883600][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.894127][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.902572][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.912227][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.934938][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.943497][ T2774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.969010][ T8612] device veth0_vlan entered promiscuous mode [ 222.991832][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.002669][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.023170][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.037969][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.047083][ T751] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 223.057234][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.065336][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.085103][ T8646] device syzkaller0 entered promiscuous mode [ 223.098389][ T8612] device veth1_macvtap entered promiscuous mode [ 223.106639][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3243'. [ 223.120951][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.133020][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.157491][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.187691][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.197765][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.239980][ T8668] device pim6reg1 entered promiscuous mode [ 223.287224][ T751] usb 4-1: Using ep0 maxpacket: 16 [ 223.407149][ T751] usb 4-1: config 0 has no interfaces? [ 223.618275][ T751] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 223.637000][ T751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.673042][ T751] usb 4-1: Product: syz [ 223.695139][ T751] usb 4-1: Manufacturer: syz [ 223.748278][ T751] usb 4-1: SerialNumber: syz [ 223.784604][ T751] r8152-cfgselector 4-1: config 0 descriptor?? [ 224.269714][ T2774] usb 4-1: USB disconnect, device number 16 [ 224.400757][ T8764] device pim6reg1 entered promiscuous mode [ 224.863725][ T8803] device pim6reg1 entered promiscuous mode [ 224.907149][ T326] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 225.016977][ T8815] device pim6reg1 entered promiscuous mode [ 225.083160][ T8824] loop0: detected capacity change from 0 to 2048 [ 225.127542][ T8824] loop0: p1 < > p4 [ 225.131673][ T8824] loop0: p4 size 8388608 extends beyond EOD, truncated [ 225.146296][ T8834] device pim6reg1 entered promiscuous mode [ 225.161519][ T30] audit: type=1400 audit(1719268919.429:986): avc: denied { mounton } for pid=8823 comm="syz.0.3314" path="/dev/loop0p1" dev="devtmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.187205][ T30] audit: type=1400 audit(1719268919.449:987): avc: denied { remount } for pid=8823 comm="syz.0.3314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 225.297229][ T326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.313739][ T326] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.331701][ T8850] loop0: detected capacity change from 0 to 1024 [ 225.337993][ T326] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.346930][ T326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.355866][ T326] usb 5-1: config 0 descriptor?? [ 225.380240][ T8850] EXT4-fs (loop0): Ignoring removed orlov option [ 225.386524][ T8850] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 225.399793][ T8850] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 225.446867][ T30] audit: type=1400 audit(1719268919.709:988): avc: denied { map } for pid=8849 comm="syz.0.3326" path="/root/syzkaller.mFo5yF/10/file1/file0/bus" dev="devtmpfs" ino=1103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 225.487103][ T308] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 225.487857][ T8850] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #12: comm syz.0.3326: corrupt xattr in inline inode [ 225.511339][ T8850] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz.0.3326: corrupted in-inode xattr [ 225.537316][ T8612] ================================================================== [ 225.545200][ T8612] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 225.553010][ T8612] Read of size 4 at addr ffff88813106d000 by task syz-executor/8612 [ 225.560825][ T8612] [ 225.562994][ T8612] CPU: 0 PID: 8612 Comm: syz-executor Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 225.572887][ T8612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 225.582795][ T8612] Call Trace: [ 225.585905][ T8612] [ 225.588682][ T8612] dump_stack_lvl+0x151/0x1b7 [ 225.593200][ T8612] ? io_uring_drop_tctx_refs+0x190/0x190 [ 225.598663][ T8612] ? panic+0x751/0x751 [ 225.602570][ T8612] print_address_description+0x87/0x3b0 [ 225.607950][ T8612] kasan_report+0x179/0x1c0 [ 225.612288][ T8612] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 225.617756][ T8612] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 225.623223][ T8612] __asan_report_load4_noabort+0x14/0x20 [ 225.628690][ T8612] ext4_xattr_delete_inode+0xcd0/0xce0 [ 225.633987][ T8612] ? sb_end_intwrite+0x120/0x120 [ 225.638761][ T8612] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 225.644662][ T8612] ? ext4_journal_check_start+0x16c/0x230 [ 225.650220][ T8612] ? __kasan_check_read+0x11/0x20 [ 225.655075][ T8612] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 225.660806][ T8612] ? ext4_evict_inode+0xb8d/0x14e0 [ 225.665756][ T8612] ext4_evict_inode+0xea1/0x14e0 [ 225.670528][ T8612] ? _raw_spin_unlock+0x4d/0x70 [ 225.675215][ T8612] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 225.680948][ T8612] ? _raw_spin_unlock+0x4d/0x70 [ 225.685628][ T8612] ? inode_io_list_del+0x18b/0x1a0 [ 225.690577][ T8612] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 225.696303][ T8612] evict+0x2a3/0x630 [ 225.700037][ T8612] iput+0x63b/0x7e0 [ 225.703681][ T8612] vfs_rmdir+0x359/0x470 [ 225.707766][ T8612] do_rmdir+0x3ab/0x630 [ 225.711753][ T8612] ? d_delete_notify+0x160/0x160 [ 225.716530][ T8612] __x64_sys_unlinkat+0xdf/0xf0 [ 225.721221][ T8612] do_syscall_64+0x3d/0xb0 [ 225.725466][ T8612] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 225.731206][ T8612] RIP: 0033:0x7fb1a8be11a7 [ 225.735449][ T8612] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.754890][ T8612] RSP: 002b:00007ffeaf900018 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 225.763136][ T8612] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fb1a8be11a7 [ 225.770945][ T8612] RDX: 0000000000000200 RSI: 00007ffeaf9011c0 RDI: 00000000ffffff9c [ 225.778756][ T8612] RBP: 00007fb1a8c4f672 R08: 0000000000000000 R09: 0000000000000000 [ 225.786571][ T8612] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffeaf9011c0 [ 225.794381][ T8612] R13: 00007fb1a8c4f672 R14: 0000000000037010 R15: 00007ffeaf9033a0 [ 225.802195][ T8612] [ 225.805057][ T8612] [ 225.807227][ T8612] The buggy address belongs to the page: [ 225.812705][ T8612] page:ffffea0004c41b40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x13106d [ 225.822763][ T8612] flags: 0x4000000000000000(zone=1) [ 225.827803][ T8612] raw: 4000000000000000 ffffea00048c4d08 ffffea0004bb5288 0000000000000000 [ 225.836219][ T8612] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 225.844634][ T8612] page dumped because: kasan: bad access detected [ 225.850890][ T8612] page_owner tracks the page as freed [ 225.856092][ T8612] page last allocated via order 0, migratetype Movable, gfp_mask 0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), pid 8733, ts 224023427204, free_ts 224496162095 [ 225.871634][ T8612] post_alloc_hook+0x1a3/0x1b0 [ 225.876226][ T8612] prep_new_page+0x1b/0x110 [ 225.880565][ T8612] get_page_from_freelist+0x3550/0x35d0 [ 225.885946][ T8612] __alloc_pages+0x27e/0x8f0 [ 225.890375][ T8612] pagecache_get_page+0xb18/0xeb0 [ 225.895233][ T8612] grab_cache_page_write_begin+0x5d/0xa0 [ 225.900704][ T8612] ext4_da_write_begin+0x5ae/0xc30 [ 225.905649][ T8612] generic_perform_write+0x2bc/0x5a0 [ 225.910770][ T8612] ext4_buffered_write_iter+0x48a/0x610 [ 225.916152][ T8612] ext4_file_write_iter+0x443/0x1c80 [ 225.921537][ T8612] vfs_write+0xd5d/0x1110 [ 225.925697][ T8612] ksys_write+0x199/0x2c0 [ 225.929864][ T8612] __x64_sys_write+0x7b/0x90 [ 225.934295][ T8612] do_syscall_64+0x3d/0xb0 [ 225.938558][ T8612] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 225.944275][ T8612] page last free stack trace: [ 225.948786][ T8612] free_unref_page_prepare+0x7c8/0x7d0 [ 225.954080][ T8612] free_unref_page_list+0x14b/0xa60 [ 225.959112][ T8612] release_pages+0x1310/0x1370 [ 225.963716][ T8612] __pagevec_release+0x84/0x100 [ 225.968402][ T8612] truncate_inode_pages_range+0x482/0x1160 [ 225.974042][ T8612] truncate_inode_pages_final+0x83/0x90 [ 225.979426][ T8612] ext4_evict_inode+0x4d1/0x14e0 [ 225.984197][ T8612] evict+0x2a3/0x630 [ 225.987928][ T8612] iput+0x63b/0x7e0 [ 225.991573][ T8612] do_unlinkat+0x4e1/0x920 [ 225.995828][ T8612] __x64_sys_unlink+0x49/0x50 [ 226.000340][ T8612] do_syscall_64+0x3d/0xb0 [ 226.004592][ T8612] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 226.010325][ T8612] [ 226.012491][ T8612] Memory state around the buggy address: [ 226.017965][ T8612] ffff88813106cf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.025865][ T8612] ffff88813106cf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 226.033759][ T8612] >ffff88813106d000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 226.041666][ T8612] ^ [ 226.045585][ T8612] ffff88813106d080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 226.053461][ T8612] ffff88813106d100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 226.061357][ T8612] ================================================================== [ 226.069257][ T8612] Disabling lock debugging due to kernel taint [ 226.085717][ T8865] device pim6reg1 entered promiscuous mode [ 226.116561][ T8869] device syzkaller0 entered promiscuous mode [ 226.131777][ T8869] loop0: detected capacity change from 0 to 512 [ 226.157953][ T8869] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.178302][ T8869] EXT4-fs (loop0): failed to initialize system zone (-117) [ 226.185463][ T8869] EXT4-fs (loop0): mount failed [ 226.307203][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.308219][ T326] plantronics 0003:047F:FFFF.003A: No inputs registered, leaving [ 226.319272][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 226.326837][ T326] plantronics 0003:047F:FFFF.003A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 226.335306][ T308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.360129][ T308] usb 2-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 226.369010][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.377523][ T308] usb 2-1: config 0 descriptor?? [ 226.858050][ T308] wacom 0003:056A:4004.003B: unknown main item tag 0x0 [ 226.865086][ T308] wacom 0003:056A:4004.003B: unknown main item tag 0x0 [ 226.871986][ T308] wacom 0003:056A:4004.003B: unknown main item tag 0x0 [ 226.878695][ T308] wacom 0003:056A:4004.003B: unknown main item tag 0x0 [ 226.885366][ T308] wacom 0003:056A:4004.003B: unknown main item tag 0x0 [ 226.892244][ T308] wacom 0003:056A:4004.003B: unknown main item tag 0x0 [ 226.904687][ T308] wacom 0003:056A:4004.003B: hidraw1: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.1-1/input0 [ 227.066481][ T321] usb 2-1: USB disconnect, device number 21 [ 228.157752][ T5405] usb 5-1: USB disconnect, device number 22