last executing test programs: 34.759909036s ago: executing program 1 (id=2094): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') close_range(r2, 0xffffffffffffffff, 0x0) 34.340764621s ago: executing program 1 (id=2095): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_control={0x2, {}, 0x7f, 0x0, &(0x7f0000002b00)={0x0, 0x0, 0x7, 0x1}, 0x8, 0x0, 0x0, 0x0, 0xc36e, 0x7fff, 0x0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.266831177s ago: executing program 1 (id=2099): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x3, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800084}, 0xfffffffffffffea9}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000c) 34.22497919s ago: executing program 1 (id=2101): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 34.09921105s ago: executing program 1 (id=2105): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4}, 0x48) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 32.695393495s ago: executing program 1 (id=2115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ptrace(0x10, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b810"], 0x0) mkdir(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 12.867868418s ago: executing program 3 (id=2234): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f646973ff6172642c6e6f646973636172642c61636c2c616c6c6f635f6d6f64653d72657573652c746573745f64756d6d795f656e6372797074696f6e2c64697361626c655f726f6c6c5f666f72776172642c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f666c7573685f6d657267652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6d6f64653d61646170746976652c6a71666d743d7666736f6c642c6e6f696e6c696e655f64656e7472792c00"], 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000007ff2a576ee34bbea53c906fa049eb3fd7f43d6ac065ee7a1a2eb7d07b36e57ed72187a47e2bbafda692c67407755bbf5b64f724a129de2ba3480f2cf3d0815e009e6356b0c0e8b867de84ff66ff69e3bdc3f1e0b704e1414acd805901b"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9.457637537s ago: executing program 3 (id=2241): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x240) 7.867647786s ago: executing program 3 (id=2246): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0xa4}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, 0x0, 0x0) setfsgid(0x0) r5 = syz_clone(0x2400a400, 0x0, 0x0, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000001f00)) stat(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() sendmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000000c0)}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000100)="8a6e1206ae6517bfdb188cf36609a5fb412eef68ecb45484097f48", 0x1b}, {&(0x7f00000001c0)="53e316a15ab6538724724c73a50982216dd3ab192f2ab17ff7fa2287a158032233205306ea93c7e4cee2351e7da14f270127f13562c97f7f3616edd3bc2c5b", 0x3f}, {&(0x7f00000015c0)="4001056b30ce8f71ee4702675dc1c3f7bb795a94a80757c93e47fad73a64ca7914375eed44f07abfdf3d617c876a7e645dc7de2bd773f244a7046fa360430cc2a8556e4f192cc7afc85ed97642c292aa337c39b7bc7e9baa47816bcf1f9855e325ac2d325628f23be8ecf62912a37a7cfa1f39a424d7610a1da45056988ff8d7cbfff0491457745419f838e0ed8ca464409afc942dc353e3b2968c42a0b9fa1e610007282d85b6644e248e8663b5a1be80a1732e1abc8baae10146306fb5c0595876baf7894cd2e763cf224fcc1a0b602e7901ebb4", 0xd5}, {&(0x7f0000001b40)}], 0x6, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x98, 0x24040084}}], 0x1, 0x8000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f000000cffc), 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc020660b, 0x0) 7.800080322s ago: executing program 2 (id=2248): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x2, 0x4}, 0x48) 6.178362995s ago: executing program 0 (id=2249): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000780)={[{@fat=@uid}, {@dots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@nodots}, {@fat=@nocase}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x3ac}}, {@nodots}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='bcache_alloc_fail\x00'}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000080)={0x0}) socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) 6.178037185s ago: executing program 2 (id=2250): pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="2001"], 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000f9"], 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x60) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.t'], 0x0, 0xf9) 6.177495515s ago: executing program 3 (id=2251): syz_usb_connect(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402", @ANYRES8, @ANYBLOB="7f19dcb94aafab643c02"], 0x0) 5.199071245s ago: executing program 0 (id=2253): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000180)='%-010d \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "6874a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5.197576675s ago: executing program 2 (id=2254): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x2, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x9c, &(0x7f0000000300)=@string={0x9c, 0x3, "3640dc0599dfe97890e01662190a230ed24eaa2c419a9dca287e359669586494b11ce952cff421f1154957c5707c2f8fb19933557bc74ba97ede4bf3ff6c9caceb24be8a9482f95bc5459085513f3384d51c3be684182b1d32980c1a6371ec277a711b0279da9722d92a72a9146e270a52f1b36fc277f58be15d2e71977afbc38fcfd674dcd1b2cc4a4b0a533ca553f5c74b3008bbf2a7dd2bdb"}}]}) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0022030000000200"], &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002140)={0x2c, 0x0, &(0x7f0000001f00)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "6d13f1ad65c002e462d915fc735d54667d04c49802461a7e5abd"}}, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x55, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x20000078}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 5.197175725s ago: executing program 4 (id=2255): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x0, @multicast1, 0x0, 0x4, 'nq\x00', 0x2a, 0x0, 0x11}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x80000001, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="2001000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/108, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000c5e2e9fe4e266eae000000000000007c3d7e8d1757ecbfa600007400000000000000cd5375be6068be684d163e87ba0123cbc20049b3dfdf53743b724fa6acdd6ffdd5b5386b7aa87895fc61dea94e0f9231a5307d49c0ecdfac2522eb2ce5d17730a8a07afbf0ada6368464d3e6e7ee149d4ba6d654ace7c70beb84c93a5c89419ae8b5706516af0f53e40b8e61e0b1de"], 0x120) write$FUSE_DIRENTPLUS(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.t'], 0x0, 0xf9) 4.109614024s ago: executing program 0 (id=2256): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) 4.108056184s ago: executing program 3 (id=2257): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 4.107194164s ago: executing program 4 (id=2258): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) setpgid(0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r8, &(0x7f00000038c0)={'#! ', './file0', [{}]}, 0xc) close(r8) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000140), 0x208e24b) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) getsockopt$packet_buf(r3, 0x107, 0xb, 0x0, &(0x7f0000001040)) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0xac}}, 0x0) 3.991328563s ago: executing program 0 (id=2260): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x0, 0x8e, 0xe7c9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r6, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1, 0x0, 0xfffffffffffffd96}}], 0x2, 0x16da) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8, 0x8}, 0x48) 2.065309131s ago: executing program 0 (id=2261): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 2.064645011s ago: executing program 2 (id=2262): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@dev, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xfffd, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 2.064295371s ago: executing program 3 (id=2263): setrlimit(0x1, &(0x7f0000000100)) rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f00000002c0)="366465f029144d00000081f30fc27f5e06ae0d0fd82e0e460f01d626f00994aff7000000c4c1796f9606000000c402793216c4e2f1453c99f340a56544ca0c00", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006a770000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x2000}], 0x1) 2.064252661s ago: executing program 4 (id=2259): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae09, &(0x7f0000000100)=ANY=[@ANYRES64]) 2.040768333s ago: executing program 2 (id=2264): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 2.035631574s ago: executing program 4 (id=2265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="f60db9be9ce2aaaadcaaaaaa8100000088a8"], 0x0) 2.024926294s ago: executing program 4 (id=2266): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 900.75µs ago: executing program 0 (id=2267): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)={@multicast, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=0x2, @multicast2}}}}}, 0x0) 434.4µs ago: executing program 2 (id=2268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x4, 0x4, 0x8, 0x10, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) mkdir(0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000ed0000000000000500000085100000598d5e0600000018100000", @ANYRES32, @ANYBLOB="000000000000000024080000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x90) 0s ago: executing program 4 (id=2269): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_writepages_result\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x46c, &(0x7f0000000900)="$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") kernel console output (not intermixed with test programs): 0] device veth0_vlan left promiscuous mode [ 307.787444][ T6494] attempt to access beyond end of device [ 307.787444][ T6494] loop4: rw=2049, want=45120, limit=40427 [ 307.807013][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 307.807028][ T30] audit: type=1400 audit(1723042024.180:12873): avc: denied { ioctl } for pid=6485 comm="syz.4.1908" path="/39/bus/file1" dev="loop4" ino=15 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 307.844055][ T30] audit: type=1400 audit(1723042024.190:12874): avc: denied { mounton } for pid=6485 comm="syz.4.1908" path="/39/bus/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 307.876876][ T30] audit: type=1400 audit(1723042024.190:12875): avc: denied { write } for pid=6485 comm="syz.4.1908" name="file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 307.925805][ T30] audit: type=1400 audit(1723042024.190:12876): avc: denied { add_name } for pid=6485 comm="syz.4.1908" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 307.991445][ T5780] attempt to access beyond end of device [ 307.991445][ T5780] loop4: rw=524288, want=45072, limit=40427 [ 308.001054][ T30] audit: type=1400 audit(1723042024.190:12877): avc: denied { setattr } for pid=6485 comm="syz.4.1908" name="work" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 308.020418][ T5780] attempt to access beyond end of device [ 308.020418][ T5780] loop4: rw=0, want=45072, limit=40427 [ 308.025071][ T30] audit: type=1400 audit(1723042024.200:12878): avc: denied { remove_name } for pid=6485 comm="syz.4.1908" name="#74" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 308.075752][ T30] audit: type=1400 audit(1723042024.200:12879): avc: denied { rename } for pid=6485 comm="syz.4.1908" name="#74" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 308.125478][ T30] audit: type=1400 audit(1723042024.200:12880): avc: denied { unlink } for pid=6485 comm="syz.4.1908" name="#74" dev="loop4" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 308.166985][ T30] audit: type=1400 audit(1723042024.200:12881): avc: denied { unlink } for pid=6485 comm="syz.4.1908" name="#75" dev="loop4" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 308.216974][ T30] audit: type=1400 audit(1723042024.370:12882): avc: denied { setattr } for pid=6485 comm="syz.4.1908" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 308.261802][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.277311][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.300951][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.313998][ T6515] loop2: detected capacity change from 0 to 512 [ 308.317303][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 308.346081][ T6471] device veth0_vlan entered promiscuous mode [ 308.367656][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 308.375528][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 308.388258][ T6515] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 308.403646][ T6471] device veth1_macvtap entered promiscuous mode [ 308.417315][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 308.424789][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.432808][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 308.444653][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 308.457717][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 308.465652][ T6515] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1915: casefold flag without casefold feature [ 308.485889][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 308.494470][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 308.503282][ T6515] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1915: missing EA_INODE flag [ 308.503532][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 308.523075][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 308.577380][ T6515] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1915: error while reading EA inode 12 err=-117 [ 308.605600][ T6515] EXT4-fs (loop2): 1 orphan inode deleted [ 308.611456][ T6515] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback. [ 308.882586][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.937512][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.002111][ T6522] device bridge_slave_0 entered promiscuous mode [ 309.090576][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.112851][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.129652][ T6522] device bridge_slave_1 entered promiscuous mode [ 309.213228][ T6512] loop3: detected capacity change from 0 to 131072 [ 309.260187][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.267082][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.274196][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.281076][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.291731][ T6512] F2FS-fs (loop3): invalid crc value [ 309.318431][ T6512] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 309.330259][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.338941][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.346181][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.358565][ T6512] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 309.421455][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.430373][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.439732][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.446591][ T3810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.454466][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.463614][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.471779][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.478640][ T3810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.493766][ T10] device bridge_slave_1 left promiscuous mode [ 309.500259][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.510923][ T10] device bridge_slave_0 left promiscuous mode [ 309.517148][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.714931][ T10] device veth1_macvtap left promiscuous mode [ 309.721631][ T10] device veth0_vlan left promiscuous mode [ 309.752311][ T6542] loop2: detected capacity change from 0 to 256 [ 309.818883][ T6542] exFAT-fs (loop2): invalid boot record signature [ 309.827873][ T6542] exFAT-fs (loop2): failed to read boot sector [ 309.835194][ T6542] exFAT-fs (loop2): failed to recognize exfat type [ 309.855476][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.864162][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.867047][ T984] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 309.872611][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.887261][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.903733][ T6522] device veth0_vlan entered promiscuous mode [ 309.912979][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.921787][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.930031][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.938502][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 309.970137][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 309.979029][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 309.993241][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 309.998655][ T6544] loop3: detected capacity change from 0 to 16 [ 310.003728][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.029215][ T6522] device veth1_macvtap entered promiscuous mode [ 310.045212][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 310.055570][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 310.065266][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.204651][ T6544] erofs: (device loop3): mounted with root inode @ nid 36. [ 310.222674][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 310.224211][ T6548] loop2: detected capacity change from 0 to 1024 [ 310.272281][ T6548] EXT4-fs (loop2): Test dummy encryption mode enabled [ 310.282484][ T6548] EXT4-fs (loop2): Ignoring removed orlov option [ 310.288984][ T6548] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 310.294152][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.343685][ T6548] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000009,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,grpjquota=./bus,data_err=abort,,errors=continue. Quota mode: writeback. [ 310.649732][ T6560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 310.659775][ T6560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 310.669204][ T6560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 310.678562][ T6560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 311.108598][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.120270][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.130621][ T984] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 311.139556][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.148800][ T984] usb 2-1: config 0 descriptor?? [ 311.289155][ T6574] loop3: detected capacity change from 0 to 256 [ 311.460806][ T6581] loop4: detected capacity change from 0 to 128 [ 311.570963][ T6583] loop3: detected capacity change from 0 to 128 [ 312.401228][ T6601] overlayfs: unrecognized mount option "\/file0" or missing value [ 312.426303][ T6603] loop3: detected capacity change from 0 to 16 [ 312.517019][ T350] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 312.541375][ T6603] erofs: (device loop3): mounted with root inode @ nid 36. [ 312.566026][ T6599] loop4: detected capacity change from 0 to 40427 [ 312.686467][ T6599] F2FS-fs (loop4): Found nat_bits in checkpoint [ 312.813013][ T6612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 312.822269][ T6612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 312.831330][ T6612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 312.840287][ T6612] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 312.927021][ T984] usbhid 2-1:0.0: can't add hid device: -71 [ 312.929702][ T6599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 312.932785][ T984] usbhid: probe of 2-1:0.0 failed with error -71 [ 312.963597][ T984] usb 2-1: USB disconnect, device number 29 [ 312.980432][ T6522] F2FS-fs (loop4): access invalid blkaddr:2048 [ 312.986540][ T6522] CPU: 1 PID: 6522 Comm: syz-executor Not tainted 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 312.996509][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 313.006404][ T6522] Call Trace: [ 313.009620][ T6522] [ 313.012390][ T6522] dump_stack_lvl+0x151/0x1b7 [ 313.016904][ T6522] ? io_uring_drop_tctx_refs+0x190/0x190 [ 313.022394][ T6522] ? mempool_free+0x310/0x310 [ 313.026893][ T6522] dump_stack+0x15/0x17 [ 313.030877][ T6522] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 313.036089][ T6522] f2fs_map_blocks+0x1622/0x3ab0 [ 313.040867][ T6522] ? f2fs_do_map_lock+0x70/0x70 [ 313.045549][ T6522] f2fs_mpage_readpages+0xc9a/0x21a0 [ 313.050764][ T6522] ? dquot_release_reservation_block+0xa0/0xa0 [ 313.056742][ T6522] ? workingset_activation+0x3f0/0x3f0 [ 313.062044][ T6522] f2fs_readahead+0xfd/0x250 [ 313.066464][ T6522] ? blk_start_plug+0x5a/0x170 [ 313.071066][ T6522] read_pages+0x15e/0xb00 [ 313.075231][ T6522] ? lru_cache_add+0x279/0x540 [ 313.079831][ T6522] ? page_cache_ra_unbounded+0x920/0x920 [ 313.085294][ T6522] ? add_to_page_cache_lru+0x225/0x2c0 [ 313.090592][ T6522] ? add_to_page_cache_locked+0x40/0x40 [ 313.096107][ T6522] ? __stack_depot_save+0x34/0x470 [ 313.101145][ T6522] page_cache_ra_unbounded+0x6cb/0x920 [ 313.106439][ T6522] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 313.112773][ T6522] ? _raw_spin_unlock+0x4d/0x70 [ 313.117455][ T6522] ? wp_page_reuse+0xff/0x120 [ 313.121972][ T6522] ondemand_readahead+0x9c8/0xfa0 [ 313.126838][ T6522] ? handle_pte_fault+0x7c0/0x24d0 [ 313.131785][ T6522] ? page_cache_sync_ra+0x4d0/0x4d0 [ 313.136811][ T6522] ? fault_around_bytes_set+0xc0/0xc0 [ 313.142026][ T6522] page_cache_sync_ra+0x2e9/0x4d0 [ 313.146877][ T6522] ? force_page_cache_ra+0x420/0x420 [ 313.151998][ T6522] ? do_handle_mm_fault+0x1807/0x2400 [ 313.157210][ T6522] f2fs_readdir+0x52d/0xba0 [ 313.161549][ T6522] ? f2fs_fill_dentries+0xd60/0xd60 [ 313.166582][ T6522] ? avc_policy_seqno+0x1b/0x70 [ 313.171270][ T6522] ? __kasan_check_read+0x11/0x20 [ 313.176128][ T6522] ? security_file_permission+0x86/0xb0 [ 313.177118][ T350] usb 3-1: config 0 has no interfaces? [ 313.181508][ T6522] iterate_dir+0x265/0x610 [ 313.191055][ T6522] ? f2fs_fill_dentries+0xd60/0xd60 [ 313.196086][ T6522] __se_sys_getdents64+0x1c1/0x460 [ 313.201045][ T6522] ? __x64_sys_getdents64+0x90/0x90 [ 313.206074][ T6522] ? filldir+0x680/0x680 [ 313.210158][ T6522] __x64_sys_getdents64+0x7b/0x90 [ 313.215011][ T6522] do_syscall_64+0x3d/0xb0 [ 313.219264][ T6522] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 313.225002][ T6522] RIP: 0033:0x7f30b4753a93 [ 313.229244][ T6522] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 313.248782][ T6522] RSP: 002b:00007ffed14bd448 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 313.257195][ T6522] RAX: ffffffffffffffda RBX: 0000555556e744e0 RCX: 00007f30b4753a93 [ 313.265007][ T6522] RDX: 0000000000008000 RSI: 0000555556e744e0 RDI: 0000000000000005 [ 313.272823][ T6522] RBP: 0000555556e744b4 R08: 0000000000000000 R09: 0000000000000000 [ 313.280623][ T6522] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 313.288437][ T6522] R13: 0000000000000010 R14: 0000555556e744b0 R15: 00007ffed14bf6f0 [ 313.296259][ T6522] [ 313.301591][ T6522] attempt to access beyond end of device [ 313.301591][ T6522] loop4: rw=524288, want=45072, limit=40427 [ 313.312987][ T6522] attempt to access beyond end of device [ 313.312987][ T6522] loop4: rw=0, want=45072, limit=40427 [ 313.357317][ T457] attempt to access beyond end of device [ 313.357317][ T457] loop4: rw=2049, want=40992, limit=40427 [ 313.450784][ T6616] loop3: detected capacity change from 0 to 512 [ 313.457076][ T350] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 313.466052][ T350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.473999][ T350] usb 3-1: Product: syz [ 313.478668][ T350] usb 3-1: Manufacturer: syz [ 313.483085][ T350] usb 3-1: SerialNumber: syz [ 313.488759][ T350] r8152-cfgselector 3-1: config 0 descriptor?? [ 313.497989][ T6616] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 313.508865][ T6616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 313.517265][ T6616] System zones: 1-12 [ 313.522171][ T6616] EXT4-fs (loop3): 1 truncate cleaned up [ 313.527994][ T6616] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,grpid,max_batch_time=0x0000000000000003,debug,jqfmt=vfsv0,quota,,errors=continue. Quota mode: writeback. [ 313.949005][ T6625] loop1: detected capacity change from 0 to 512 [ 314.015630][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.023017][ T6625] EXT4-fs (loop1): Test dummy encryption mode enabled [ 314.030167][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.038576][ T6625] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.1949: inline data xattr refers to an external xattr inode [ 314.054036][ T6626] device bridge_slave_0 entered promiscuous mode [ 314.062846][ T6625] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1949: couldn't read orphan inode 12 (err -117) [ 314.074869][ T6625] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 314.100750][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.123016][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.157468][ T6626] device bridge_slave_1 entered promiscuous mode [ 314.199175][ T6131] usb 3-1: USB disconnect, device number 33 [ 314.256583][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.263493][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.270598][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.277459][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.308773][ T457] device bridge_slave_1 left promiscuous mode [ 314.322357][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.544765][ T457] device bridge_slave_0 left promiscuous mode [ 314.551313][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.563082][ T457] device veth1_macvtap left promiscuous mode [ 314.574297][ T457] device veth0_vlan left promiscuous mode [ 314.689229][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.696572][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.715562][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.975570][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.992936][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.001298][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.009347][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.016222][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.023662][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.031836][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.039741][ T984] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 315.047453][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.054274][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.061550][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.069512][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.077525][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.085454][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.101438][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.109693][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.119269][ T6626] device veth0_vlan entered promiscuous mode [ 315.125518][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.133341][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.141693][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.149240][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.160827][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.168849][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.178091][ T6626] device veth1_macvtap entered promiscuous mode [ 315.190166][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.197915][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.205925][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.214127][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.222178][ T6556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.250424][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 315.250440][ T30] audit: type=1400 audit(1723042031.840:12934): avc: denied { read write } for pid=6642 comm="syz.1.1962" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 315.283593][ T30] audit: type=1400 audit(1723042031.840:12935): avc: denied { open } for pid=6642 comm="syz.1.1962" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 315.378324][ T6650] loop4: detected capacity change from 0 to 128 [ 315.389152][ T30] audit: type=1400 audit(1723042031.980:12936): avc: denied { unmount } for pid=6471 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 315.447065][ T984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 315.495665][ T984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 315.505505][ T984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.515231][ T984] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 315.524882][ T984] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 315.731123][ T6556] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 315.787631][ T984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.796626][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 315.804450][ T984] usb 1-1: SerialNumber: syz [ 315.857410][ T984] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 315.986997][ T6556] usb 3-1: Using ep0 maxpacket: 8 [ 316.557311][ T6669] xt_bpf: check failed: parse error [ 316.565254][ T30] audit: type=1400 audit(1723042033.140:12937): avc: denied { write } for pid=6658 comm="syz.3.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.986651][ T6673] serio: Serial port ptm0 [ 317.084625][ T6556] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.106821][ T30] audit: type=1400 audit(1723042033.690:12938): avc: denied { write } for pid=6680 comm="syz.4.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.106865][ T6681] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 317.397109][ T6556] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 317.405629][ T6556] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.409190][ T6685] loop4: detected capacity change from 0 to 512 [ 317.424080][ T6556] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 317.433421][ T6556] usb 3-1: config 1 has no interface number 1 [ 317.439760][ T6556] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 317.452587][ T6556] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.465783][ T6556] usb 3-1: config 1 interface 2 has no altsetting 0 [ 317.469510][ T6679] loop1: detected capacity change from 0 to 40427 [ 317.489183][ T6685] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 317.500117][ T6685] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 317.580391][ T6679] F2FS-fs (loop1): Found nat_bits in checkpoint [ 317.606706][ T6679] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 317.856854][ T6556] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.891209][ T6556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.913680][ T6556] usb 3-1: Product: syz [ 317.917877][ T6556] usb 3-1: Manufacturer: syz [ 317.922351][ T6556] usb 3-1: SerialNumber: syz [ 317.944717][ T6471] F2FS-fs (loop1): access invalid blkaddr:2048 [ 317.951114][ T6471] CPU: 0 PID: 6471 Comm: syz-executor Not tainted 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 317.953050][ T30] audit: type=1400 audit(1723042034.540:12939): avc: denied { getopt } for pid=6697 comm="syz.3.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 317.961008][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 317.961020][ T6471] Call Trace: [ 317.961026][ T6471] [ 317.961032][ T6471] dump_stack_lvl+0x151/0x1b7 [ 317.961055][ T6471] ? io_uring_drop_tctx_refs+0x190/0x190 [ 317.961071][ T6471] ? mempool_free+0x310/0x310 [ 317.961087][ T6471] dump_stack+0x15/0x17 [ 318.015172][ T6471] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 318.020389][ T6471] f2fs_map_blocks+0x1622/0x3ab0 [ 318.025244][ T6471] ? f2fs_do_map_lock+0x70/0x70 [ 318.029927][ T6471] f2fs_mpage_readpages+0xc9a/0x21a0 [ 318.035046][ T6471] ? dquot_release_reservation_block+0xa0/0xa0 [ 318.041030][ T6471] ? workingset_activation+0x3f0/0x3f0 [ 318.046330][ T6471] f2fs_readahead+0xfd/0x250 [ 318.050750][ T6471] ? blk_start_plug+0x5a/0x170 [ 318.055352][ T6471] read_pages+0x15e/0xb00 [ 318.059525][ T6471] ? lru_cache_add+0x279/0x540 [ 318.064124][ T6471] ? page_cache_ra_unbounded+0x920/0x920 [ 318.069588][ T6471] ? add_to_page_cache_lru+0x225/0x2c0 [ 318.074880][ T6471] ? add_to_page_cache_locked+0x40/0x40 [ 318.080424][ T6471] ? __stack_depot_save+0x34/0x470 [ 318.085299][ T6471] page_cache_ra_unbounded+0x6cb/0x920 [ 318.090595][ T6471] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 318.097013][ T6471] ? _raw_spin_unlock+0x4d/0x70 [ 318.101701][ T6471] ? wp_page_reuse+0xff/0x120 [ 318.106310][ T6471] ondemand_readahead+0x9c8/0xfa0 [ 318.111174][ T6471] ? handle_pte_fault+0x7c0/0x24d0 [ 318.116113][ T6471] ? page_cache_sync_ra+0x4d0/0x4d0 [ 318.121161][ T6471] ? fault_around_bytes_set+0xc0/0xc0 [ 318.126358][ T6471] page_cache_sync_ra+0x2e9/0x4d0 [ 318.131270][ T6471] ? force_page_cache_ra+0x420/0x420 [ 318.136346][ T6471] ? do_handle_mm_fault+0x1807/0x2400 [ 318.141547][ T6471] f2fs_readdir+0x52d/0xba0 [ 318.145888][ T6471] ? f2fs_fill_dentries+0xd60/0xd60 [ 318.150920][ T6471] ? avc_policy_seqno+0x1b/0x70 [ 318.155614][ T6471] ? __kasan_check_read+0x11/0x20 [ 318.160467][ T6471] ? security_file_permission+0x86/0xb0 [ 318.165852][ T6471] iterate_dir+0x265/0x610 [ 318.170100][ T6471] ? f2fs_fill_dentries+0xd60/0xd60 [ 318.175134][ T6471] __se_sys_getdents64+0x1c1/0x460 [ 318.180087][ T6471] ? __x64_sys_getdents64+0x90/0x90 [ 318.185114][ T6471] ? filldir+0x680/0x680 [ 318.189212][ T6471] __x64_sys_getdents64+0x7b/0x90 [ 318.194053][ T6471] do_syscall_64+0x3d/0xb0 [ 318.198308][ T6471] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 318.204035][ T6471] RIP: 0033:0x7fcbfb6f7a93 [ 318.208289][ T6471] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 318.227730][ T6471] RSP: 002b:00007ffe840bbe68 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 318.236061][ T6471] RAX: ffffffffffffffda RBX: 00005555565fb4e0 RCX: 00007fcbfb6f7a93 [ 318.243960][ T6471] RDX: 0000000000008000 RSI: 00005555565fb4e0 RDI: 0000000000000005 [ 318.251770][ T6471] RBP: 00005555565fb4b4 R08: 0000000000000000 R09: 0000000000000000 [ 318.259582][ T6471] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 318.267393][ T6471] R13: 0000000000000010 R14: 00005555565fb4b0 R15: 00007ffe840be110 [ 318.275212][ T6471] [ 318.282608][ T6131] usb 1-1: USB disconnect, device number 32 [ 318.323594][ T6471] attempt to access beyond end of device [ 318.323594][ T6471] loop1: rw=524288, want=45072, limit=40427 [ 318.336017][ T6471] attempt to access beyond end of device [ 318.336017][ T6471] loop1: rw=0, want=45072, limit=40427 [ 318.360023][ T6705] netem: unknown loss type 0 [ 318.364472][ T6705] netem: change failed [ 318.371087][ T30] audit: type=1400 audit(1723042034.960:12940): avc: denied { read } for pid=6706 comm="syz.0.1973" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 318.374114][ T457] attempt to access beyond end of device [ 318.374114][ T457] loop1: rw=2049, want=40992, limit=40427 [ 318.430918][ T6556] usb 3-1: USB disconnect, device number 34 [ 318.439601][ T2416] udevd[2416]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 318.451410][ T30] audit: type=1400 audit(1723042035.000:12941): avc: denied { open } for pid=6706 comm="syz.0.1973" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 318.481179][ T30] audit: type=1400 audit(1723042035.000:12942): avc: denied { ioctl } for pid=6706 comm="syz.0.1973" path="/dev/loop-control" dev="devtmpfs" ino=111 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 318.553864][ T30] audit: type=1400 audit(1723042035.130:12943): avc: denied { ioctl } for pid=6713 comm="syz.0.1984" path="socket:[50019]" dev="sockfs" ino=50019 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 318.698721][ T6716] loop2: detected capacity change from 0 to 256 [ 318.753384][ T6716] FAT-fs (loop2): Directory bread(block 64) failed [ 318.760166][ T6716] FAT-fs (loop2): Directory bread(block 65) failed [ 318.766698][ T6716] FAT-fs (loop2): Directory bread(block 66) failed [ 318.773116][ T6716] FAT-fs (loop2): Directory bread(block 67) failed [ 318.779784][ T6716] FAT-fs (loop2): Directory bread(block 68) failed [ 318.786179][ T6716] FAT-fs (loop2): Directory bread(block 69) failed [ 318.792592][ T6716] FAT-fs (loop2): Directory bread(block 70) failed [ 318.799118][ T6716] FAT-fs (loop2): Directory bread(block 71) failed [ 318.805487][ T6716] FAT-fs (loop2): Directory bread(block 72) failed [ 318.811860][ T6716] FAT-fs (loop2): Directory bread(block 73) failed [ 318.854909][ T6712] loop4: detected capacity change from 0 to 40427 [ 318.882175][ T6712] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 318.890334][ T6712] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 318.902736][ T6712] F2FS-fs (loop4): Found nat_bits in checkpoint [ 318.974466][ T6712] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 318.989948][ T6712] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 318.996983][ T6712] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 319.132339][ T6730] loop3: detected capacity change from 0 to 128 [ 319.169329][ T6730] FAT-fs (loop3): Unrecognized mount option "shortname=win9H" or missing value [ 319.208055][ T6131] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 319.244579][ T6712] overlayfs: failed to resolve './file0': -2 [ 319.364118][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.372856][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.380523][ T6732] device bridge_slave_0 entered promiscuous mode [ 319.387991][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.394959][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.402445][ T6732] device bridge_slave_1 entered promiscuous mode [ 319.451480][ T10] device bridge_slave_1 left promiscuous mode [ 319.457691][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.465234][ T10] device bridge_slave_0 left promiscuous mode [ 319.471362][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.479095][ T10] device veth1_macvtap left promiscuous mode [ 319.484962][ T10] device veth0_vlan left promiscuous mode [ 319.616440][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.623830][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.633149][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.641403][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.649336][ T6131] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.659864][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.666718][ T3810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.673905][ T6131] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 319.682802][ T6131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.691248][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.698504][ T2450] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 319.706065][ T6131] usb 1-1: config 0 descriptor?? [ 319.713169][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.736268][ T3810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.744407][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.751270][ T3810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.778653][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.787422][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.795407][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.804593][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.818782][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.828128][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.842093][ T6732] device veth0_vlan entered promiscuous mode [ 319.849235][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.860713][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.869133][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.876505][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.883646][ T6556] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 319.900742][ T6732] device veth1_macvtap entered promiscuous mode [ 319.955009][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 319.968661][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.977839][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.986305][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.996054][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.117373][ T2450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.150960][ T2450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.203221][ T2450] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 320.218477][ T309] usb 1-1: USB disconnect, device number 33 [ 320.227548][ T2450] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.240107][ T2450] usb 3-1: config 0 descriptor?? [ 320.250834][ T6752] loop1: detected capacity change from 0 to 40427 [ 320.308782][ T6752] F2FS-fs (loop1): invalid crc value [ 320.316828][ T6752] F2FS-fs (loop1): Found nat_bits in checkpoint [ 320.339171][ T6752] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 320.360332][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 320.360348][ T30] audit: type=1400 audit(1723042036.950:12967): avc: denied { create } for pid=6751 comm="syz.1.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.477111][ T6556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.488195][ T6556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.617072][ T30] audit: type=1400 audit(1723042037.140:12968): avc: denied { write } for pid=6751 comm="syz.1.1978" name="snmp6" dev="proc" ino=4026532908 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 320.684629][ T6556] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.697392][ T6556] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 320.706566][ T6556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.715444][ T6556] usb 5-1: config 0 descriptor?? [ 320.718061][ T2450] elecom 0003:056E:010D.0040: item fetching failed at offset 0/3 [ 320.728021][ T2450] elecom: probe of 0003:056E:010D.0040 failed with error -22 [ 320.923047][ T309] usb 3-1: USB disconnect, device number 35 [ 321.178012][ T6556] betop 0003:11C2:2208.0041: item fetching failed at offset 4/5 [ 321.185590][ T6556] betop 0003:11C2:2208.0041: parse failed [ 321.191223][ T6556] betop: probe of 0003:11C2:2208.0041 failed with error -22 [ 321.380822][ T6556] usb 5-1: USB disconnect, device number 36 [ 321.464358][ T30] audit: type=1400 audit(1723042038.050:12969): avc: denied { unmount } for pid=6277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 321.590575][ T30] audit: type=1400 audit(1723042038.180:12970): avc: denied { remount } for pid=6764 comm="syz.1.1989" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 322.170142][ T30] audit: type=1326 audit(1723042038.320:12971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e54abe9f9 code=0x7ffc0000 [ 322.284625][ T30] audit: type=1326 audit(1723042038.320:12972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e54abe9f9 code=0x7ffc0000 [ 322.313224][ T30] audit: type=1326 audit(1723042038.320:12973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e54abe9f9 code=0x7ffc0000 [ 322.340751][ T30] audit: type=1326 audit(1723042038.320:12974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e54abe9f9 code=0x7ffc0000 [ 322.365095][ T30] audit: type=1326 audit(1723042038.320:12975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e54abe9f9 code=0x7ffc0000 [ 322.389997][ T30] audit: type=1326 audit(1723042038.350:12976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f3e54abe9f9 code=0x7ffc0000 [ 322.466853][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1997'. [ 322.521280][ T6802] loop3: detected capacity change from 0 to 1024 [ 322.541843][ T6802] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 322.551357][ T6802] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 322.558650][ T6802] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.571597][ T6787] loop2: detected capacity change from 0 to 128 [ 322.580377][ T6802] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,data_err=abort,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 322.742735][ T6815] loop0: detected capacity change from 0 to 1024 [ 322.766994][ T60] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 322.970809][ T6815] EXT4-fs (loop0): Unrecognized mount option "fsuuid=67491ed9-b1ac-0be6-52eb-fd2fdc6" or missing value [ 323.146983][ T309] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 323.167082][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 323.178278][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.187937][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 323.210601][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.243045][ T60] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 323.255923][ T60] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 323.264828][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.274065][ T60] usb 5-1: config 0 descriptor?? [ 323.387077][ T309] usb 4-1: Using ep0 maxpacket: 8 [ 323.557044][ T309] usb 4-1: unable to get BOS descriptor or descriptor too short [ 323.637062][ T309] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 323.645584][ T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.656173][ T309] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 323.664962][ T309] usb 4-1: config 1 has no interface number 1 [ 323.670871][ T309] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 323.683458][ T309] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.696200][ T309] usb 4-1: config 1 interface 2 has no altsetting 0 [ 323.767980][ T60] ntrig 0003:1B96:000A.0042: unknown main item tag 0x0 [ 323.774691][ T60] ntrig 0003:1B96:000A.0042: unknown main item tag 0x0 [ 323.781414][ T60] ntrig 0003:1B96:000A.0042: unknown main item tag 0x0 [ 323.788065][ T60] ntrig 0003:1B96:000A.0042: unknown main item tag 0x0 [ 323.794727][ T60] ntrig 0003:1B96:000A.0042: unknown main item tag 0x0 [ 323.802208][ T60] ntrig 0003:1B96:000A.0042: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 323.857139][ T309] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.866051][ T309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.873894][ T309] usb 4-1: Product: syz [ 323.877958][ T309] usb 4-1: Manufacturer: syz [ 323.882468][ T309] usb 4-1: SerialNumber: syz [ 324.037098][ T60] ntrig 0003:1B96:000A.0042: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 324.241790][ T6556] usb 5-1: USB disconnect, device number 37 [ 324.249966][ T309] usb 4-1: USB disconnect, device number 34 [ 324.760010][ T6828] loop3: detected capacity change from 0 to 1024 [ 324.840558][ T6828] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,data_err=ignore,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 324.849863][ T6835] netlink: 'syz.2.2011': attribute type 27 has an invalid length. [ 325.007913][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.014962][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.087490][ T6839] loop2: detected capacity change from 0 to 512 [ 325.131789][ T6839] EXT4-fs error (device loop2): ext4_quota_enable:6366: comm syz.2.2011: inode #8454144: comm syz.2.2011: iget: illegal inode # [ 325.150825][ T6839] EXT4-fs error (device loop2): ext4_quota_enable:6369: comm syz.2.2011: Bad quota inode: 8454144, type: 2 [ 325.165822][ T6839] EXT4-fs warning (device loop2): ext4_enable_quotas:6410: Failed to enable quota tracking (type=2, err=-117, ino=8454144). Please run e2fsck to fix. [ 325.188241][ T6856] loop0: detected capacity change from 0 to 256 [ 325.188535][ T6839] EXT4-fs (loop2): mount failed [ 325.207272][ T6856] exfat: Deprecated parameter 'namecase' [ 325.212797][ T6856] exfat: Deprecated parameter 'namecase' [ 325.218696][ T6856] exfat: Unknown parameter 'iocharse' [ 325.244607][ T6835] xt_hashlimit: overflow, try lower: 0/0 [ 325.273507][ T6835] device veth0_vlan left promiscuous mode [ 325.279265][ T6835] device veth0_vlan entered promiscuous mode [ 325.285652][ T6835] device veth1_macvtap left promiscuous mode [ 325.292752][ T6835] device veth1_macvtap entered promiscuous mode [ 325.293230][ T6856] loop0: detected capacity change from 0 to 128 [ 325.306254][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.310655][ T6856] EXT4-fs (loop0): Test dummy encryption mode enabled [ 325.315923][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.328529][ T6856] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 325.333475][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.341483][ T6856] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038 (0x7fffffff) [ 325.349544][ T2450] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.365204][ T2450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.375827][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.384293][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.392371][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.399226][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.406383][ T60] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 325.446956][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.455236][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 325.463287][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.471622][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 325.479607][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.487530][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.495357][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.503506][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.511419][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.519363][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 325.527819][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.536724][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 325.545331][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.554259][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.562423][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.571070][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.581531][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.596358][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.607047][ T6556] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 325.683057][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 325.696970][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 325.702215][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.715349][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 325.719664][ T6868] loop3: detected capacity change from 0 to 128 [ 325.723635][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.740081][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.747731][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.755855][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 325.764229][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 325.773187][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.817336][ T60] usb 5-1: config 1 interface 0 altsetting 232 endpoint 0x82 has invalid wMaxPacketSize 0 [ 325.827210][ T60] usb 5-1: config 1 interface 0 altsetting 232 bulk endpoint 0x82 has invalid maxpacket 0 [ 325.837009][ T60] usb 5-1: config 1 interface 0 altsetting 232 bulk endpoint 0x3 has invalid maxpacket 64 [ 325.846693][ T60] usb 5-1: config 1 interface 0 has no altsetting 0 [ 326.147346][ T6556] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 326.156010][ T6556] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 326.176969][ T20] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 326.207869][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 326.207882][ T30] audit: type=1400 audit(1723042042.800:13034): avc: denied { getopt } for pid=6873 comm="syz.0.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 326.233518][ T30] audit: type=1400 audit(1723042042.800:13035): avc: denied { bind } for pid=6873 comm="syz.0.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 326.287151][ T60] usb 5-1: string descriptor 0 read error: -22 [ 326.293188][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.302126][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.327189][ T6849] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 326.342360][ T6877] loop0: detected capacity change from 0 to 2048 [ 326.349514][ T60] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 326.367111][ T6556] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 326.376074][ T6556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.384303][ T6556] usb 3-1: Product: syz [ 326.388367][ T6556] usb 3-1: Manufacturer: syz [ 326.392722][ T6556] usb 3-1: SerialNumber: syz [ 326.444080][ T6556] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 326.448319][ T6877] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.467104][ T30] audit: type=1400 audit(1723042043.060:13036): avc: denied { read } for pid=6876 comm="syz.0.2026" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.501312][ T457] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 326.516176][ T457] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 326.528286][ T457] EXT4-fs (loop0): This should not happen!! Data will be lost [ 326.528286][ T457] [ 326.538068][ T457] EXT4-fs (loop0): Total free blocks count 0 [ 326.543914][ T457] EXT4-fs (loop0): Free/Dirty block details [ 326.549971][ T457] EXT4-fs (loop0): free_blocks=2415919104 [ 326.552347][ T6849] loop4: detected capacity change from 0 to 512 [ 326.561774][ T457] EXT4-fs (loop0): dirty_blocks=16 [ 326.566698][ T457] EXT4-fs (loop0): Block reservation details [ 326.573679][ T457] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 326.596001][ T45] attempt to access beyond end of device [ 326.596001][ T45] loop3: rw=1, want=1041, limit=128 [ 326.607050][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.614726][ T6849] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 326.625905][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.642712][ T6849] EXT4-fs (loop4): 1 truncate cleaned up [ 326.648200][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 326.648230][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.648249][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 326.658943][ T6849] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 326.713810][ T30] audit: type=1400 audit(1723042043.300:13037): avc: denied { setattr } for pid=6848 comm="syz.4.2015" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 326.735803][ T2450] usb 5-1: USB disconnect, device number 38 [ 326.745385][ T20] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 326.755286][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.765616][ T6556] usb 3-1: USB disconnect, device number 36 [ 326.775908][ T20] usb 2-1: config 0 descriptor?? [ 326.879665][ T30] audit: type=1326 audit(1723042043.470:13038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6883 comm="syz.3.2028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d6a6519f9 code=0x0 [ 327.052533][ T30] audit: type=1326 audit(1723042043.640:13039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.3.2029" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d6a6519f9 code=0x0 [ 327.379646][ T30] audit: type=1400 audit(1723042043.880:13040): avc: denied { write } for pid=6892 comm="syz.2.2032" path="socket:[51471]" dev="sockfs" ino=51471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.417152][ T2450] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 327.474947][ T20] ntrig 0003:1B96:000A.0043: unknown main item tag 0x0 [ 327.485997][ T20] ntrig 0003:1B96:000A.0043: unknown main item tag 0x0 [ 327.492938][ T20] ntrig 0003:1B96:000A.0043: unknown main item tag 0x0 [ 327.492984][ T30] audit: type=1400 audit(1723042044.050:13041): avc: denied { mount } for pid=6897 comm="syz.0.2043" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 327.499790][ T20] ntrig 0003:1B96:000A.0043: unknown main item tag 0x0 [ 327.528645][ T20] ntrig 0003:1B96:000A.0043: unknown main item tag 0x0 [ 327.536592][ T20] ntrig 0003:1B96:000A.0043: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 327.655786][ T6900] loop0: detected capacity change from 0 to 40427 [ 327.707034][ T20] ntrig 0003:1B96:000A.0043: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 327.757081][ T2450] usb 4-1: Using ep0 maxpacket: 8 [ 327.907147][ T30] audit: type=1326 audit(1723042044.380:13042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.4.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb775b4f9f9 code=0x7ffc0000 [ 327.950028][ T30] audit: type=1326 audit(1723042044.380:13043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6901 comm="syz.4.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb775b4f9f9 code=0x7ffc0000 [ 327.950821][ T6900] F2FS-fs (loop0): Found nat_bits in checkpoint [ 327.979673][ T2450] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 328.033515][ T2450] usb 4-1: config 179 has no interface number 0 [ 328.040248][ T2450] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 328.052365][ T2450] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 328.064550][ T2450] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 328.077786][ T2450] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 328.084267][ T6900] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 328.089355][ T2450] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 328.109740][ T2450] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 328.110104][ T20] usb 2-1: USB disconnect, device number 30 [ 328.139816][ T2450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.149573][ T6900] attempt to access beyond end of device [ 328.149573][ T6900] loop0: rw=0, want=45072, limit=40427 [ 328.177024][ T6891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 328.183844][ T6891] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 328.243816][ T2450] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input57 [ 328.349471][ T6918] loop0: detected capacity change from 0 to 512 [ 328.951939][ T6918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01d, mo2=0002] [ 328.980594][ T6918] EXT4-fs (loop0): orphan cleanup on readonly fs [ 328.993540][ T20] usb 4-1: USB disconnect, device number 35 [ 328.996158][ T6918] EXT4-fs warning (device loop0): ext4_enable_quotas:6410: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 328.999450][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 329.017605][ T20] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 329.029419][ T6918] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 329.057069][ T6918] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #13: comm syz.0.2037: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 329.142679][ T6918] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2037: couldn't read orphan inode 13 (err -117) [ 329.164897][ T6918] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,nombcache,auto_da_alloc=0x0000000000000008,debug,debug,grpid,,errors=continue. Quota mode: writeback. [ 329.217634][ T6932] Non-string source [ 329.219851][ T6918] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 329.238310][ T6918] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01d, mo2=0002] [ 329.270037][ T6918] EXT4-fs warning (device loop0): ext4_enable_quotas:6410: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 329.420730][ T6947] syz.4.2045: vmalloc error: size 12884901888, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 329.436477][ T6947] CPU: 1 PID: 6947 Comm: syz.4.2045 Not tainted 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 329.446136][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.456032][ T6947] Call Trace: [ 329.459155][ T6947] [ 329.461936][ T6947] dump_stack_lvl+0x151/0x1b7 [ 329.466447][ T6947] ? io_uring_drop_tctx_refs+0x190/0x190 [ 329.471916][ T6947] ? __rcu_read_unlock+0x7e/0xd0 [ 329.476784][ T6947] dump_stack+0x15/0x17 [ 329.480771][ T6947] warn_alloc+0x21a/0x390 [ 329.484952][ T6947] ? finish_task_switch+0x167/0x7b0 [ 329.489968][ T6947] ? requeue_task_rt+0x410/0x410 [ 329.494788][ T6947] ? __vmalloc_node_range+0x95/0x8d0 [ 329.499869][ T6947] ? zone_watermark_ok_safe+0x270/0x270 [ 329.505244][ T6947] ? __sched_text_start+0x8/0x8 [ 329.509928][ T6947] __vmalloc_node_range+0xb6/0x8d0 [ 329.514877][ T6947] ? preempt_schedule_irq+0xe7/0x140 [ 329.520169][ T6947] ? __cond_resched+0x20/0x20 [ 329.524684][ T6947] ? __vcalloc+0x36/0x50 [ 329.528764][ T6947] __vmalloc+0x7a/0x90 [ 329.532667][ T6947] ? __vcalloc+0x36/0x50 [ 329.536748][ T6947] __vcalloc+0x36/0x50 [ 329.540653][ T6947] memslot_rmap_alloc+0x6b/0x2a0 [ 329.545429][ T6947] kvm_arch_prepare_memory_region+0xc5/0xd20 [ 329.551424][ T6947] ? kvm_set_memslot+0x4fe/0x1780 [ 329.556283][ T6947] ? memcpy+0x56/0x70 [ 329.560103][ T6947] kvm_set_memslot+0x513/0x1780 [ 329.564797][ T6947] ? id_to_memslot+0x110/0x110 [ 329.569396][ T6947] ? id_to_memslot+0xaa/0x110 [ 329.573903][ T6947] __kvm_set_memory_region+0xdf8/0x1060 [ 329.579293][ T6947] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 329.584491][ T6947] ? __switch_to+0x62a/0x1190 [ 329.589011][ T6947] ? find_lock_lowest_rq+0x75/0x480 [ 329.594043][ T6947] ? asm_sysvec_call_function_single+0x1b/0x20 [ 329.600031][ T6947] kvm_vm_ioctl_set_memory_region+0x73/0xa0 [ 329.605757][ T6947] kvm_vm_ioctl+0x91f/0xb60 [ 329.610096][ T6947] ? __kasan_check_write+0x14/0x20 [ 329.615054][ T6947] ? _raw_spin_lock+0xa4/0x1b0 [ 329.619647][ T6947] ? kvm_device_release+0x210/0x210 [ 329.624678][ T6947] ? ioctl_has_perm+0x1f8/0x560 [ 329.629377][ T6947] ? memcpy+0x56/0x70 [ 329.633271][ T6947] ? ioctl_has_perm+0x452/0x560 [ 329.637958][ T6947] ? rcu_preempt_deferred_qs_irqrestore+0x709/0x9f0 [ 329.644381][ T6947] ? has_cap_mac_admin+0x3c0/0x3c0 [ 329.649329][ T6947] ? rcu_read_unlock_special+0xdb/0x4c0 [ 329.654707][ T6947] ? sysvec_reschedule_ipi+0x7d/0x150 [ 329.659920][ T6947] ? __rcu_read_unlock+0xd0/0xd0 [ 329.664691][ T6947] ? selinux_file_ioctl+0x3cc/0x540 [ 329.669723][ T6947] ? __fget_files+0x13f/0x380 [ 329.674236][ T6947] ? __fget_files+0x15d/0x380 [ 329.678751][ T6947] ? selinux_file_alloc_security+0x120/0x120 [ 329.684565][ T6947] ? __rcu_read_unlock+0x7e/0xd0 [ 329.689340][ T6947] ? __fget_files+0x31e/0x380 [ 329.693853][ T6947] ? security_file_ioctl+0x84/0xb0 [ 329.698798][ T6947] ? kvm_device_release+0x210/0x210 [ 329.703833][ T6947] __se_sys_ioctl+0x114/0x190 [ 329.708348][ T6947] __x64_sys_ioctl+0x7b/0x90 [ 329.712772][ T6947] do_syscall_64+0x3d/0xb0 [ 329.717024][ T6947] ? sysvec_call_function_single+0x52/0xb0 [ 329.722667][ T6947] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 329.728394][ T6947] RIP: 0033:0x7fb775b4f9f9 [ 329.732649][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.752092][ T6947] RSP: 002b:00007fb77478d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.760333][ T6947] RAX: ffffffffffffffda RBX: 00007fb775cde130 RCX: 00007fb775b4f9f9 [ 329.768145][ T6947] RDX: 0000000020001180 RSI: 000000004020ae46 RDI: 0000000000000004 [ 329.775959][ T6947] RBP: 00007fb775bbd8ee R08: 0000000000000000 R09: 0000000000000000 [ 329.783769][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.791582][ T6947] R13: 0000000000000000 R14: 00007fb775cde130 R15: 00007fff1c62a578 [ 329.799396][ T6947] [ 329.802793][ T6947] Mem-Info: [ 329.805912][ T6947] active_anon:130 inactive_anon:14928 isolated_anon:0 [ 329.805912][ T6947] active_file:4221 inactive_file:7483 isolated_file:0 [ 329.805912][ T6947] unevictable:14850 dirty:204 writeback:0 [ 329.805912][ T6947] slab_reclaimable:7993 slab_unreclaimable:70920 [ 329.805912][ T6947] mapped:31952 shmem:253 pagetables:579 bounce:0 [ 329.805912][ T6947] kernel_misc_reclaimable:0 [ 329.805912][ T6947] free:1539799 free_pcp:18277 free_cma:0 [ 329.847462][ T6947] Node 0 active_anon:520kB inactive_anon:59712kB active_file:16884kB inactive_file:29932kB unevictable:59400kB isolated(anon):0kB isolated(file):0kB mapped:127808kB dirty:816kB writeback:0kB shmem:1012kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4876kB pagetables:2316kB all_unreclaimable? no [ 329.878297][ T6947] DMA32 free:2974676kB min:62568kB low:78208kB high:93848kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2978980kB mlocked:0kB bounce:0kB free_pcp:4304kB local_pcp:4248kB free_cma:0kB [ 329.905459][ T6947] lowmem_reserve[]: 0 3941 3941 [ 329.910244][ T6947] Normal free:3184520kB min:84884kB low:106104kB high:127324kB reserved_highatomic:0KB active_anon:520kB inactive_anon:59712kB active_file:16884kB inactive_file:29932kB unevictable:59400kB writepending:816kB present:5242880kB managed:4035584kB mlocked:59400kB bounce:0kB free_pcp:68784kB local_pcp:44688kB free_cma:0kB [ 329.939860][ T6947] lowmem_reserve[]: 0 0 0 [ 329.944284][ T6947] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 723*4096kB (M) = 2974676kB [ 329.960494][ T6947] Normal: 92*4kB (UME) 47*8kB (ME) 1044*16kB (UME) 663*32kB (UME) 442*64kB (UME) 146*128kB (UME) 61*256kB (UME) 44*512kB (UM) 41*1024kB (UME) 6*2048kB (UME) 734*4096kB (UM) = 3184520kB [ 329.979041][ T6947] 22563 total pagecache pages [ 329.983478][ T6947] 3 pages in swap cache [ 329.987595][ T6947] Swap cache stats: add 10450, delete 10447, find 2501/2567 [ 329.994723][ T6947] Free swap = 124224kB [ 329.998721][ T6947] Total swap = 124996kB [ 330.002694][ T6947] 2097051 pages RAM [ 330.006333][ T6947] 0 pages HighMem/MovableOnly [ 330.010863][ T6947] 343410 pages reserved [ 330.014844][ T6947] 0 pages cma reserved [ 330.248919][ T6952] loop4: detected capacity change from 0 to 16 [ 330.265262][ T6955] loop3: detected capacity change from 0 to 512 [ 330.309824][ T6955] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 330.318123][ T6952] erofs: (device loop4): erofs_read_inode: unsupported datalayout 5 of nid 36 [ 330.341989][ T6955] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2052: iget: bad i_size value: -67835469387268086 [ 330.472138][ T6961] loop0: detected capacity change from 0 to 256 [ 330.519987][ T6955] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2052: couldn't read orphan inode 15 (err -117) [ 330.600260][ T6955] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.611029][ T6955] ext2 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 330.621832][ T6961] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.472083][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 331.472100][ T30] audit: type=1400 audit(1723042047.440:13066): avc: denied { read write } for pid=6963 comm="syz.2.2055" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 331.503580][ T30] audit: type=1400 audit(1723042047.450:13067): avc: denied { open } for pid=6963 comm="syz.2.2055" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 332.318113][ T6979] loop2: detected capacity change from 0 to 8192 [ 332.359412][ T6981] loop0: detected capacity change from 0 to 512 [ 332.448570][ T6987] serio: Serial port ptm0 [ 332.556915][ T6981] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 332.747367][ T30] audit: type=1326 audit(1723042049.310:13068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.2.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d689e9f9 code=0x7ffc0000 [ 332.757003][ T6981] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038 (0x7fffffff) [ 332.771000][ T30] audit: type=1326 audit(1723042049.320:13069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.2.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6d689e9f9 code=0x7ffc0000 [ 332.823242][ T30] audit: type=1326 audit(1723042049.400:13070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.2.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d689e9f9 code=0x7ffc0000 [ 332.871990][ T30] audit: type=1326 audit(1723042049.400:13071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6993 comm="syz.2.2060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6d689e9f9 code=0x7ffc0000 [ 332.874162][ T6999] loop2: detected capacity change from 0 to 512 [ 332.974555][ T6999] EXT4-fs (loop2): 1 truncate cleaned up [ 332.989727][ T6999] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 333.010013][ T6999] overlayfs: failed to resolve './file0': -2 [ 333.015860][ T7005] syz.1.2066[7005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.015937][ T7005] syz.1.2066[7005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 333.032695][ T30] audit: type=1400 audit(1723042049.620:13072): avc: denied { create } for pid=7000 comm="syz.3.2064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 333.079065][ T7007] incfs: Can't find or create .index dir in ./file0 [ 333.085494][ T30] audit: type=1400 audit(1723042049.620:13073): avc: denied { relabelfrom } for pid=7004 comm="syz.1.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 333.085620][ T7007] incfs: mount failed -14 [ 333.109902][ T30] audit: type=1400 audit(1723042049.620:13074): avc: denied { relabelto } for pid=7004 comm="syz.1.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 333.131490][ T30] audit: type=1400 audit(1723042049.670:13075): avc: denied { mounton } for pid=7006 comm="syz.0.2065" path="/106/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.208252][ T7013] loop1: detected capacity change from 0 to 256 [ 333.224391][ T7013] FAT-fs (loop1): Directory bread(block 64) failed [ 333.230855][ T7013] FAT-fs (loop1): Directory bread(block 65) failed [ 333.241275][ T7013] FAT-fs (loop1): Directory bread(block 66) failed [ 333.263558][ T7013] FAT-fs (loop1): Directory bread(block 67) failed [ 333.270350][ T7013] FAT-fs (loop1): Directory bread(block 68) failed [ 333.276750][ T7013] FAT-fs (loop1): Directory bread(block 69) failed [ 333.293724][ T7013] FAT-fs (loop1): Directory bread(block 70) failed [ 333.300194][ T7013] FAT-fs (loop1): Directory bread(block 71) failed [ 333.306626][ T7013] FAT-fs (loop1): Directory bread(block 72) failed [ 333.313793][ T7013] FAT-fs (loop1): Directory bread(block 73) failed [ 333.430236][ T7029] loop0: detected capacity change from 0 to 512 [ 333.458141][ T7029] EXT4-fs (loop0): Ignoring removed oldalloc option [ 333.510536][ T7029] EXT4-fs (loop0): 1 orphan inode deleted [ 333.689397][ T7029] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,nodiscard,noquota,init_itable,oldalloc,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,,errors=continue. Quota mode: writeback. [ 333.719639][ T7029] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038 (0x7fffffff) [ 334.296913][ T984] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 335.647006][ T984] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 335.647338][ T336] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 335.704621][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2098'. [ 335.717739][ T7098] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 335.847086][ T984] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 335.861493][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.871169][ T984] usb 3-1: Product: syz [ 335.875209][ T984] usb 3-1: Manufacturer: syz [ 335.879774][ T984] usb 3-1: SerialNumber: syz [ 335.884976][ T984] usb 3-1: config 0 descriptor?? [ 336.129532][ T7112] loop4: detected capacity change from 0 to 512 [ 336.170037][ T7112] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 336.261530][ T7112] EXT4-fs (loop4): 1 truncate cleaned up [ 336.267130][ T7112] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 336.337057][ T984] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 336.346870][ T984] asix: probe of 3-1:0.0 failed with error -71 [ 336.347094][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.353618][ T984] usb 3-1: USB disconnect, device number 37 [ 336.370030][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.370069][ T336] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 336.388786][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.404013][ T336] usb 4-1: config 0 descriptor?? [ 336.592340][ T7121] xt_bpf: check failed: parse error [ 336.895921][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 336.895935][ T30] audit: type=1400 audit(1723042053.480:13101): avc: denied { name_bind } for pid=7126 comm="syz.4.2109" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 337.002822][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 337.017068][ T336] lenovo 0003:17EF:6062.0044: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 337.152986][ T336] usb 4-1: USB disconnect, device number 36 [ 337.359603][ T350] kernel write not supported for file /uhid (pid: 350 comm: kworker/0:4) [ 337.392553][ T30] audit: type=1400 audit(1723042053.980:13102): avc: denied { read } for pid=7146 comm="syz.2.2116" name="ptp0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 337.422370][ T7147] binder: 7146:7147 ioctl c0306201 20000580 returned -14 [ 337.429144][ T30] audit: type=1400 audit(1723042054.000:13103): avc: denied { open } for pid=7146 comm="syz.2.2116" path="/dev/ptp0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 337.460319][ T30] audit: type=1400 audit(1723042054.010:13104): avc: denied { ioctl } for pid=7146 comm="syz.2.2116" path="cgroup:[4026532286]" dev="nsfs" ino=4026532286 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 337.557038][ T984] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 337.806705][ T30] audit: type=1400 audit(1723042054.390:13105): avc: denied { mount } for pid=7158 comm="syz.0.2121" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 337.850810][ T30] audit: type=1400 audit(1723042054.400:13106): avc: denied { mounton } for pid=7158 comm="syz.0.2121" path="/119/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 337.870090][ T7162] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2123'. [ 337.882542][ T984] usb 2-1: device descriptor read/64, error -71 [ 337.885024][ T30] audit: type=1400 audit(1723042054.460:13107): avc: denied { nlmsg_read } for pid=7161 comm="syz.3.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.131778][ T7169] loop3: detected capacity change from 0 to 1024 [ 338.168615][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.175642][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.183080][ T7173] device bridge_slave_0 entered promiscuous mode [ 338.192302][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.199419][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.206539][ T7173] device bridge_slave_1 entered promiscuous mode [ 338.214045][ T7169] EXT4-fs (loop3): Test dummy encryption mode enabled [ 338.220906][ T7169] EXT4-fs (loop3): Ignoring removed bh option [ 338.230014][ T7169] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,bh,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 338.266980][ T960] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 338.361252][ T7185] loop4: detected capacity change from 0 to 1024 [ 338.370675][ T30] audit: type=1326 audit(1723042054.960:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6a6519f9 code=0x7ffc0000 [ 338.393974][ T984] usb 2-1: device descriptor read/64, error -71 [ 338.424105][ T7185] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 338.457448][ T30] audit: type=1326 audit(1723042054.960:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6a6519f9 code=0x7ffc0000 [ 338.483275][ T30] audit: type=1326 audit(1723042054.970:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7168 comm="syz.3.2128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6a6519f9 code=0x7ffc0000 [ 338.512256][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.519215][ T7173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.526293][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.533101][ T7173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.566982][ T960] usb 3-1: Using ep0 maxpacket: 16 [ 338.584854][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.592650][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.601099][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.621356][ T6131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.629718][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.636578][ T6131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.647927][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.656367][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.663577][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.666997][ T984] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 338.689384][ T10] device bridge_slave_1 left promiscuous mode [ 338.695461][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.703338][ T10] device bridge_slave_0 left promiscuous mode [ 338.709415][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.717878][ T10] device veth1_macvtap left promiscuous mode [ 338.723707][ T10] device veth0_vlan left promiscuous mode [ 338.761690][ T960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.772842][ T960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.782959][ T960] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 338.791920][ T960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.807785][ T960] usb 3-1: config 0 descriptor?? [ 339.156980][ T984] usb 2-1: device descriptor read/64, error -71 [ 339.203159][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.213618][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.222005][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.232398][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.240318][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.248208][ T7173] device veth0_vlan entered promiscuous mode [ 339.254350][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.261751][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.343343][ T7196] netlink: 'syz.4.2134': attribute type 13 has an invalid length. [ 339.347886][ T960] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 339.358383][ T960] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 339.365215][ T960] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 339.365387][ T7194] loop4: detected capacity change from 0 to 1024 [ 339.372035][ T960] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 339.382355][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.384929][ T960] cp2112 0003:10C4:EA90.0045: unknown main item tag 0x0 [ 339.393559][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.400624][ T960] cp2112 0003:10C4:EA90.0045: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 339.409221][ T7173] device veth1_macvtap entered promiscuous mode [ 339.432421][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.440277][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.448564][ T7194] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,nombcache,auto_da_alloc=0x0000000000000002,inode_readahead_blks=0x0000000000000010,debug_want_extra_isize=0x0000000000000006,lazytime,jqfmt=vfsv1,usrquota,grpquota,,errors=continue. Quota mode: writeback. [ 339.475096][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.483557][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.492081][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.566980][ T984] usb 2-1: device descriptor read/64, error -71 [ 339.567077][ T960] cp2112 0003:10C4:EA90.0045: Part Number: 0xE5 Device Version: 0x26 [ 339.725289][ T984] usb usb2-port1: attempt power cycle [ 340.009936][ T960] cp2112 0003:10C4:EA90.0045: error setting SMBus config [ 340.017466][ T960] cp2112: probe of 0003:10C4:EA90.0045 failed with error -71 [ 340.027749][ T960] usb 3-1: USB disconnect, device number 38 [ 340.136991][ T984] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 340.175198][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.182151][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.189611][ T7216] device bridge_slave_0 entered promiscuous mode [ 340.198431][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.205313][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.212674][ T7216] device bridge_slave_1 entered promiscuous mode [ 340.272166][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 340.279461][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 340.290612][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 340.298810][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.306755][ T960] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.313618][ T960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.321077][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.337028][ T984] usb 2-1: device descriptor read/8, error -71 [ 340.345223][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.353680][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.361869][ T842] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.368713][ T842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.375924][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.383817][ T842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.400189][ T7216] device veth0_vlan entered promiscuous mode [ 340.407072][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.415252][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.423109][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.430735][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.444696][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.454197][ T7216] device veth1_macvtap entered promiscuous mode [ 340.466076][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.490186][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.541064][ T7223] x_tables: duplicate underflow at hook 2 [ 340.574554][ T7227] loop0: detected capacity change from 0 to 1024 [ 340.588422][ T45] device bridge_slave_1 left promiscuous mode [ 340.594533][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.603681][ T45] device bridge_slave_0 left promiscuous mode [ 340.611688][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.620884][ T45] device veth1_macvtap left promiscuous mode [ 340.621260][ T7227] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 340.626722][ T45] device veth0_vlan left promiscuous mode [ 340.658679][ T984] usb 2-1: device descriptor read/8, error -71 [ 340.791745][ T7243] loop2: detected capacity change from 0 to 512 [ 340.833942][ T7243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 340.843952][ T960] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 340.928544][ T7243] EXT4-fs (loop2): 1 truncate cleaned up [ 340.934688][ T7243] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,nobarrier,debug_want_extra_isize=0x0000000000000068,nodelalloc,sb=0x0000000000000003,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 341.037060][ T336] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 341.051660][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'. [ 341.067004][ T984] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 341.138573][ T7257] loop2: detected capacity change from 0 to 2048 [ 341.218637][ T7257] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 341.230971][ T7257] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 341.245675][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.245819][ T7257] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 341.256616][ T960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.270306][ T7257] EXT4-fs (loop2): This should not happen!! Data will be lost [ 341.270306][ T7257] [ 341.278194][ T336] usb 4-1: Using ep0 maxpacket: 16 [ 341.288064][ T7257] EXT4-fs (loop2): Total free blocks count 0 [ 341.293207][ T7260] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 341.299001][ T7257] EXT4-fs (loop2): Free/Dirty block details [ 341.310599][ T960] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 341.316597][ T7257] EXT4-fs (loop2): free_blocks=2415919104 [ 341.326284][ T960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.331117][ T984] usb 2-1: device descriptor read/8, error -71 [ 341.342357][ T960] usb 5-1: config 0 descriptor?? [ 341.345007][ T7260] EXT4-fs (loop2): This should not happen!! Data will be lost [ 341.345007][ T7260] [ 341.349443][ T7257] EXT4-fs (loop2): dirty_blocks=32 [ 341.363946][ T7260] EXT4-fs (loop2): Total free blocks count 0 [ 341.365103][ T7257] EXT4-fs (loop2): Block reservation details [ 341.597041][ T336] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 341.605951][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.613742][ T336] usb 4-1: Product: syz [ 341.617853][ T336] usb 4-1: Manufacturer: syz [ 341.622239][ T336] usb 4-1: SerialNumber: syz [ 341.627128][ T984] usb 2-1: device descriptor read/8, error -71 [ 341.627343][ T336] usb 4-1: config 0 descriptor?? [ 341.679143][ T336] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 341.686640][ T336] usb 4-1: Detected FT232H [ 341.707072][ T2450] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 341.747084][ T984] usb usb2-port1: unable to enumerate USB device [ 341.767958][ T7276] loop0: detected capacity change from 0 to 512 [ 341.838032][ T960] wacom 0003:056A:0325.0046: unknown main item tag 0x0 [ 341.845471][ T960] wacom 0003:056A:0325.0046: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.4-1/input0 [ 341.857380][ T7276] EXT4-fs (loop0): Ignoring removed bh option [ 341.887064][ T336] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 341.888971][ T7276] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #16: comm syz.0.2161: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 341.912295][ T7276] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.2161: couldn't read orphan inode 16 (err -117) [ 341.924354][ T7276] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,resgid=0x0000000000000000,journal_dev=0x00000000000001ff,barrier,delalloc,bh,,errors=continue. Quota mode: writeback. [ 341.945223][ T7276] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 342.087076][ T2450] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 342.102981][ T984] usb 5-1: USB disconnect, device number 39 [ 342.147061][ T336] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 342.157837][ T336] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 342.174928][ T336] usb 4-1: USB disconnect, device number 37 [ 342.185661][ T336] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 342.267526][ T336] ftdi_sio 4-1:0.0: device disconnected [ 342.287177][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 342.287209][ T30] audit: type=1326 audit(1723042058.800:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.327480][ T2450] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 342.354881][ T30] audit: type=1326 audit(1723042058.810:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.355699][ T2450] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.382843][ T30] audit: type=1326 audit(1723042058.810:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.387603][ T2450] usb 3-1: Product: syz [ 342.413985][ T2450] usb 3-1: Manufacturer: syz [ 342.418462][ T2450] usb 3-1: SerialNumber: syz [ 342.428346][ T2450] usb 3-1: config 0 descriptor?? [ 342.434019][ T30] audit: type=1326 audit(1723042058.810:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.457587][ T30] audit: type=1326 audit(1723042058.810:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.481773][ T30] audit: type=1326 audit(1723042058.830:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.505441][ T30] audit: type=1326 audit(1723042058.830:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.528929][ T30] audit: type=1326 audit(1723042058.830:13158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.552744][ T30] audit: type=1326 audit(1723042058.830:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.576363][ T30] audit: type=1326 audit(1723042058.840:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.0.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969bde79f9 code=0x7ffc0000 [ 342.730784][ T7287] syz.4.2164[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.730845][ T7287] syz.4.2164[7287] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 342.817127][ T7300] loop4: detected capacity change from 0 to 512 [ 342.999427][ T984] usb 3-1: USB disconnect, device number 39 [ 343.015085][ T7300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 343.037240][ T7300] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 344.262116][ T7325] xt_hashlimit: overflow, try lower: 0/0 [ 344.285403][ T7327] loop0: detected capacity change from 0 to 512 [ 344.341522][ T7327] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.342088][ T7336] binder: 7334:7336 ioctl c0306201 20000580 returned -14 [ 344.352745][ T7327] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 344.496982][ T960] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 344.792222][ T7343] loop2: detected capacity change from 0 to 40427 [ 344.887762][ T7343] F2FS-fs (loop2): Found nat_bits in checkpoint [ 344.907040][ T960] usb 5-1: config 0 has no interfaces? [ 344.911468][ T7343] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 344.912410][ T960] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 344.932427][ T960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.944719][ T960] usb 5-1: config 0 descriptor?? [ 344.950004][ T6389] attempt to access beyond end of device [ 344.950004][ T6389] loop2: rw=2049, want=45104, limit=40427 [ 345.415721][ T984] usb 5-1: USB disconnect, device number 40 [ 346.149084][ T7362] input: syz0 as /devices/virtual/input/input61 [ 346.565503][ T7377] loop3: detected capacity change from 0 to 1024 [ 346.722904][ T7377] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.771043][ T7377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 348.828060][ T7409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2199'. [ 348.857043][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2199'. [ 349.107251][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 349.107305][ T30] audit: type=1326 audit(1723042065.630:13195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.221145][ T30] audit: type=1326 audit(1723042065.630:13196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.245328][ T30] audit: type=1326 audit(1723042065.640:13197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.269550][ T30] audit: type=1326 audit(1723042065.640:13198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.293242][ T30] audit: type=1326 audit(1723042065.640:13199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.316825][ T30] audit: type=1326 audit(1723042065.660:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.340568][ T30] audit: type=1326 audit(1723042065.660:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.364221][ T30] audit: type=1326 audit(1723042065.660:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.366447][ T7393] loop2: detected capacity change from 0 to 131072 [ 349.393841][ T30] audit: type=1326 audit(1723042065.660:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.417440][ T30] audit: type=1326 audit(1723042065.660:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7410 comm="syz.4.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1a44e9f9 code=0x7ffc0000 [ 349.455753][ T7393] F2FS-fs (loop2): Found nat_bits in checkpoint [ 349.477571][ T7393] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 349.484254][ T7393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 349.577643][ T45] device bridge_slave_1 left promiscuous mode [ 349.583593][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.590897][ T45] device bridge_slave_0 left promiscuous mode [ 349.596914][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.604653][ T45] device veth1_macvtap left promiscuous mode [ 349.611874][ T45] device veth0_vlan left promiscuous mode [ 349.844410][ T7424] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2195'. [ 349.882046][ T7431] loop3: detected capacity change from 0 to 512 [ 350.033739][ T7440] loop0: detected capacity change from 0 to 1024 [ 350.041475][ T7431] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 350.052724][ T7431] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038 (0x7fffffff) [ 350.153192][ T7442] input: syz1 as /devices/virtual/input/input63 [ 350.202384][ T7440] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 350.573664][ T7440] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000efe,data=ordered,jqfmt=vfsold,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 350.628165][ T7440] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 351.229736][ T7458] loop4: detected capacity change from 0 to 1024 [ 351.248466][ T7460] device pim6reg1 entered promiscuous mode [ 351.308195][ T7458] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 351.994424][ T7470] loop3: detected capacity change from 0 to 1024 [ 352.109633][ T7470] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue. Quota mode: none. [ 352.171322][ T7468] loop2: detected capacity change from 0 to 40427 [ 352.220323][ T7468] F2FS-fs (loop2): Invalid segment count (0) [ 352.226228][ T7468] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 352.237828][ T7468] F2FS-fs (loop2): invalid crc value [ 352.257516][ T7468] F2FS-fs (loop2): Found nat_bits in checkpoint [ 352.357712][ T7468] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 352.364643][ T7468] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 352.629821][ T6389] attempt to access beyond end of device [ 352.629821][ T6389] loop2: rw=2049, want=45104, limit=40427 [ 352.899004][ T10] device bridge_slave_1 left promiscuous mode [ 352.904963][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.912818][ T10] device bridge_slave_0 left promiscuous mode [ 352.918853][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.926873][ T10] device veth1_macvtap left promiscuous mode [ 352.948513][ T10] device veth0_vlan left promiscuous mode [ 353.071964][ T7490] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.078841][ T7490] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.085987][ T7490] device bridge_slave_0 entered promiscuous mode [ 353.093710][ T7490] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.100640][ T7490] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.109724][ T7490] device bridge_slave_1 entered promiscuous mode [ 353.387334][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.394605][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.403847][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.412003][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.420058][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.427001][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.434343][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.447698][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.455900][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.463949][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.470807][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.487389][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.495594][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.503910][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.511724][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.519570][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.530295][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.538057][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.545478][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.553830][ T7490] device veth0_vlan entered promiscuous mode [ 353.564689][ T960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.573709][ T7490] device veth1_macvtap entered promiscuous mode [ 353.582705][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.591031][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.600633][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 353.608813][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.630152][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 354.007024][ T2450] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 354.367079][ T2450] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.377218][ T2450] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 354.385914][ T2450] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 354.394792][ T2450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.403134][ T2450] usb 5-1: config 0 descriptor?? [ 354.690857][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 354.690872][ T30] audit: type=1400 audit(1723042071.280:13224): avc: denied { bind } for pid=7516 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.727316][ T30] audit: type=1400 audit(1723042071.310:13225): avc: denied { setopt } for pid=7516 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.748207][ T30] audit: type=1400 audit(1723042071.310:13226): avc: denied { ioctl } for pid=7516 comm="syz.3.2228" path="socket:[54352]" dev="sockfs" ino=54352 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 355.871035][ T30] audit: type=1404 audit(1723042072.460:13227): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 355.885984][ T30] audit: type=1400 audit(1723042072.460:13228): avc: denied { prog_load } for pid=7524 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.910995][ T30] audit: type=1400 audit(1723042072.460:13229): avc: denied { map_create } for pid=7520 comm="syz.2.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.930467][ T30] audit: type=1400 audit(1723042072.460:13230): avc: denied { integrity } for pid=7519 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=0 [ 355.954314][ T30] audit: type=1400 audit(1723042072.470:13231): avc: denied { map_create } for pid=7524 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.973579][ T30] audit: type=1400 audit(1723042072.470:13232): avc: denied { prog_load } for pid=7524 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 355.992519][ T30] audit: type=1400 audit(1723042072.470:13233): avc: denied { prog_load } for pid=7524 comm="syz.3.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 356.632016][ T2450] usb 5-1: USB disconnect, device number 41 [ 357.093129][ T7530] loop0: detected capacity change from 0 to 512 [ 357.151228][ T7540] device pim6reg1 entered promiscuous mode [ 359.006932][ C0] sched: RT throttling activated [ 359.079007][ T7544] syz.4.2238[7544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.079093][ T7544] syz.4.2238[7544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.095370][ T7536] loop3: detected capacity change from 0 to 40427 [ 359.129901][ T7530] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 359.143269][ T7530] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 359.150799][ T7530] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 359.176445][ T7530] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 359.184873][ T7536] F2FS-fs (loop3): Unrecognized mount option "nodisard" or missing value [ 360.515320][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 360.515336][ T30] audit: type=1400 audit(1723042077.100:13262): avc: denied { confidentiality } for pid=7558 comm="syz.4.2242" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 360.577528][ T7557] device syzkaller0 entered promiscuous mode [ 360.604728][ T7559] loop4: detected capacity change from 0 to 1024 [ 360.661520][ T7559] EXT4-fs (loop4): Ignoring removed bh option [ 360.674878][ T7559] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 69: comm syz.4.2242: lblock 8 mapped to illegal pblock 69 (length 1) [ 360.699707][ T7559] Quota error (device loop4): write_blk: dquota write failed [ 360.707132][ T7559] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 68: comm syz.4.2242: lblock 7 mapped to illegal pblock 68 (length 1) [ 360.721345][ T30] audit: type=1400 audit(1723042077.310:13263): avc: denied { write } for pid=7561 comm="syz.0.2243" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 360.744683][ T7559] Quota error (device loop4): write_blk: dquota write failed [ 360.752503][ T7559] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 67: comm syz.4.2242: lblock 6 mapped to illegal pblock 67 (length 1) [ 360.766723][ T7559] Quota error (device loop4): write_blk: dquota write failed [ 360.774020][ T7559] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 360.783787][ T7559] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 48: comm syz.4.2242: lblock 0 mapped to illegal pblock 48 (length 1) [ 360.798175][ T30] audit: type=1400 audit(1723042077.390:13264): avc: denied { read } for pid=7561 comm="syz.0.2243" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 360.798555][ T7559] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 360.829358][ T7559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 360.838746][ T30] audit: type=1400 audit(1723042077.390:13265): avc: denied { open } for pid=7561 comm="syz.0.2243" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 360.862294][ T7559] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.2242: mark_inode_dirty error [ 360.873990][ T7559] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 360.884237][ T7559] EXT4-fs (loop4): 1 orphan inode deleted [ 360.889888][ T7559] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,barrier,resuid=0x0000000000000000,noload,dioread_lock,bh,bsddf,bsdgroups,,errors=continue. Quota mode: none. [ 360.908226][ T45] EXT4-fs error (device loop4): ext4_map_blocks:602: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 360.936267][ T45] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 360.967050][ T7559] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 360.976528][ T7559] EXT4-fs error (device loop4): ext4_quota_off:6464: inode #3: comm syz.4.2242: mark_inode_dirty error [ 362.092633][ T7575] loop3: detected capacity change from 0 to 512 [ 362.119755][ T7569] device syzkaller0 entered promiscuous mode [ 362.158578][ T7575] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 362.158578][ T7575] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 362.158578][ T7575] [ 362.202666][ T7575] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 362.211296][ T7575] EXT4-fs (loop3): 1 truncate cleaned up [ 362.216811][ T7575] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 363.841849][ T7591] tipc: Started in network mode [ 363.846562][ T7591] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711 [ 363.855840][ T7591] tipc: Enabling of bearer rejected, failed to enable media [ 363.974313][ T7595] loop0: detected capacity change from 0 to 256 [ 364.088600][ T2450] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 364.537030][ T2450] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.546998][ T2450] usb 4-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 364.555793][ T2450] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.564676][ T2450] usb 4-1: config 0 descriptor?? [ 364.631278][ T2450] rndis_host 4-1:0.0: invalid descriptor buffer length [ 364.638218][ T2450] usb 4-1: bad CDC descriptors [ 364.763589][ T7603] loop4: detected capacity change from 0 to 512 [ 364.799302][ T7603] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 364.819073][ T7603] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 364.831297][ T4322] usb 4-1: USB disconnect, device number 38 [ 364.834332][ T7603] EXT4-fs (loop4): 1 truncate cleaned up [ 364.844599][ T7603] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue. Quota mode: writeback. [ 364.924181][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.931412][ T7604] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.938724][ T7604] device bridge_slave_0 entered promiscuous mode [ 364.947842][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.954676][ T7604] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.962072][ T7604] device bridge_slave_1 entered promiscuous mode [ 365.220450][ T20] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 365.247490][ T7604] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.254373][ T7604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.261483][ T7604] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.268240][ T7604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.289360][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.296759][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.304063][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.315945][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.323991][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.330862][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.341783][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.349851][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.356683][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.373090][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.383127][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.391688][ T45] device bridge_slave_1 left promiscuous mode [ 365.397790][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.405079][ T45] device bridge_slave_0 left promiscuous mode [ 365.411275][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.418970][ T45] device veth1_macvtap left promiscuous mode [ 365.424774][ T45] device veth0_vlan left promiscuous mode [ 365.504027][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.515001][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.522888][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.530512][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.538704][ T7604] device veth0_vlan entered promiscuous mode [ 365.549837][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.558838][ T7604] device veth1_macvtap entered promiscuous mode [ 365.568533][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.579892][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.592591][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 365.592605][ T30] audit: type=1400 audit(1723042082.180:13290): avc: denied { mounton } for pid=7604 comm="syz-executor" path="/root/syzkaller.xrY0FW/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 365.638722][ T30] audit: type=1400 audit(1723042082.180:13291): avc: denied { mount } for pid=7604 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 365.661824][ T20] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 365.670919][ T20] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 365.680834][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.689851][ T30] audit: type=1400 audit(1723042082.220:13292): avc: denied { mounton } for pid=7604 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 365.692882][ T7216] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 365.730876][ T7216] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 365.788673][ T45] tipc: Left network mode [ 365.848788][ T20] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.868156][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.897174][ T20] usb 3-1: Product: syz [ 365.901236][ T20] usb 3-1: Manufacturer: 䀶ל磩或ਙร仒Ⲫ驁쪝縨阵塩鑤Ჱ勩䤕앗籰輯馱唳읻ꥋ泿겜⓫誾芔对䗅薐㽑萳᳕ᢄᴫ頲ᨌ煣⟬煺ț⊗⫙ꥲ渔ਧ澳矂诵巡焮窗쏻쾏瓖퇜첲䭊匊ꔼ䯇࠰ [ 365.925464][ T30] audit: type=1400 audit(1723042082.520:13293): avc: denied { name_bind } for pid=7616 comm="syz.3.2257" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 365.949801][ T20] usb 3-1: SerialNumber: syz [ 365.998674][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.005532][ T7619] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.015567][ T7619] device bridge_slave_0 entered promiscuous mode [ 366.023029][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.030300][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.037847][ T7619] device bridge_slave_1 entered promiscuous mode [ 366.082182][ T7619] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.089037][ T7619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.096122][ T7619] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.102945][ T7619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.287383][ T30] audit: type=1400 audit(1723042082.740:13294): avc: denied { name_bind } for pid=7623 comm="syz.0.2260" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 366.321978][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.329469][ T30] audit: type=1400 audit(1723042082.740:13295): avc: denied { node_bind } for pid=7623 comm="syz.0.2260" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 366.351676][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.359371][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.371795][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.380190][ T2450] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.387070][ T2450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.394344][ T2450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.402578][ T2450] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.409429][ T2450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.426369][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.434372][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.449185][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.457426][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.465169][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.472994][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.480728][ T7619] device veth0_vlan entered promiscuous mode [ 366.493342][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.502385][ T7619] device veth1_macvtap entered promiscuous mode [ 366.511964][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.525774][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.557887][ T45] device bridge_slave_1 left promiscuous mode [ 366.563891][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.571203][ T45] device bridge_slave_0 left promiscuous mode [ 366.577226][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.584851][ T45] device veth1_macvtap left promiscuous mode [ 366.590762][ T45] device veth0_vlan left promiscuous mode [ 366.769412][ T30] audit: type=1400 audit(1723042083.360:13296): avc: denied { name_bind } for pid=7600 comm="syz.2.2254" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 366.778343][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 366.791011][ T30] audit: type=1400 audit(1723042083.360:13297): avc: denied { create } for pid=7600 comm="syz.2.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.822294][ T30] audit: type=1400 audit(1723042083.360:13298): avc: denied { connect } for pid=7600 comm="syz.2.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.841925][ T30] audit: type=1400 audit(1723042083.360:13299): avc: denied { write } for pid=7600 comm="syz.2.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 366.861980][ T20] usb 3-1: 0:2 : does not exist [ 366.880875][ T20] usb 3-1: USB disconnect, device number 40 [ 367.894397][ T7633] loop0: detected capacity change from 0 to 512 [ 367.998933][ T7633] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 368.010545][ T7633] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 368.022726][ T7633] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on [ 368.031541][ T7633] ext4 filesystem being remounted at /2/file0/file0 supports timestamps until 2038 (0x7fffffff) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: open of /sys/kernel/debug/kcov failed (errno 1: Operation not permitted) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=1 req=2196 state=1 status=1 (errno 11: Resource temporarily unavailable) [ 370.038474][ T7657] loop4: detected capacity change from 0 to 512 [ 370.147920][ T7657] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.2269: attempt to clear invalid blocks 1 len 1 [ 370.250337][ T7657] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2269: bg 0: block 343: padding at end of block bitmap is not set [ 370.264991][ T7657] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6176: Corrupt filesystem [ 370.273933][ T7657] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2269: invalid indirect mapped block 1819239214 (level 0) [ 370.288995][ T7657] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2269: invalid indirect mapped block 1819239214 (level 1) [ 370.303415][ T7657] EXT4-fs (loop4): 1 truncate cleaned up [ 370.309156][ T7657] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 371.337866][ T10] device bridge_slave_1 left promiscuous mode [ 371.343798][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.351186][ T10] device bridge_slave_0 left promiscuous mode [ 371.357180][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.364638][ T10] device veth1_macvtap left promiscuous mode [ 371.370507][ T10] device veth0_vlan left promiscuous mode [ 372.937826][ T10] device bridge_slave_1 left promiscuous mode [ 372.943752][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.951153][ T10] device bridge_slave_0 left promiscuous mode [ 372.957173][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.964840][ T10] device veth1_macvtap left promiscuous mode [ 372.970693][ T10] device veth0_vlan left promiscuous mode