last executing test programs: 9.207024307s ago: executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='9p_protocol_dump\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 9.169962883s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) 9.136153948s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) 9.088120686s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000011100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='ext4_fc_track_inode\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='ext4_fc_track_inode\x00', r2}, 0x10) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) 9.059785621s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 8.994266752s ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$poke(0x4209, r1, &(0x7f0000000000), 0x0) 4.515959003s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696667655f736c617665000000000c000580050001"], 0x44}}, 0x0) 4.462287841s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407900060000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) 3.00154628s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024001280110001006272696667655f736c617665000000000c000580050001"], 0x44}}, 0x0) 2.964746306s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002020702500000000002020207b1a01ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540), 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x5}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1b, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000380000007b8af0ff00040000bfa100000000000007010000f8ffffffbff8735d859a25a504e502ca1d6aa400000002000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYBLOB="0000000000000000b70200000000000085000000860000000500feff0000000085200000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018"], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x1, 0x0, 0xf, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 2.530276837s ago: executing program 4: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, @empty, @empty}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfcf1, 0x4, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.431943633s ago: executing program 4: creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 2.378656022s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x248, &(0x7f0000000980)={[{@test_dummy_encryption}, {@resgid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@mblk_io_submit}, {@usrjquota}, {@nodelalloc}, {@errors_remount}, {@data_journal}]}, 0xfd, 0x4a1, &(0x7f00000004c0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 2.248777173s ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend}]}}) 2.216721068s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet6(0xa, 0x3, 0x7) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x240) 2.121060054s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='ext4_mballoc_prealloc\x00'}, 0x10) 2.02339594s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 2.010620212s ago: executing program 3: openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000040)) 1.700170192s ago: executing program 1: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, @empty, @empty}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfcf1, 0x4, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.602428328s ago: executing program 1: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0x9, 0x43000000}, {0x2}, {}]}]}}, &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='nsdelegate', &(0x7f0000000140)='&)\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x10}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000080000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$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") r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_update_reserve_space\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x8709, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x40000}}}}]}, 0x78}}, 0x0) 1.402996991s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 1.391374723s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0xfd32) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 995.301657ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c9801288463"], 0xffdd) 775.962934ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002020702500000000002020207b1a01ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540), 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x5}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1b, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000380000007b8af0ff00040000bfa100000000000007010000f8ffffffbff8735d859a25a504e502ca1d6aa400000002000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYBLOB="0000000000000000b70200000000000085000000860000000500feff0000000085200000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018"], &(0x7f0000000440)='GPL\x00', 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000780), &(0x7f0000000980)=[{0x1, 0x1}, {0x1, 0x0, 0xf, 0x1}, {0x5, 0x2, 0x6}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x3, 0x0, 0x8}], 0x10, 0x7}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 295.247882ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 243.53232ms ago: executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) link(0x0, 0x0) 221.659144ms ago: executing program 0: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fcntl$setstatus(r0, 0x4, 0x2400) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) vmsplice(r3, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}], 0x1, 0x0) 210.484486ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='jbd2_write_superblock\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x40086607, 0x20001412) 155.874795ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 0s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3, 0x0, 0x0, 0xfffffdef}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) kernel console output (not intermixed with test programs): anup on readonly fs [ 166.509143][ T5883] EXT4-fs (loop0): 1 truncate cleaned up [ 166.521763][ T5883] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 166.969039][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 166.969068][ T30] audit: type=1400 audit(1718610381.702:2055): avc: denied { read } for pid=5901 comm="syz-executor.3" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.983071][ T5904] fuseblk: Unknown parameter 'aþ”L§ªWgæw2p±~’' [ 166.999789][ T20] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 167.013301][ T30] audit: type=1400 audit(1718610381.702:2056): avc: denied { open } for pid=5901 comm="syz-executor.3" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.040136][ T30] audit: type=1400 audit(1718610381.702:2057): avc: denied { ioctl } for pid=5901 comm="syz-executor.3" path="/dev/loop-control" dev="devtmpfs" ino=111 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 167.127343][ T5905] syz-executor.1[5905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.127495][ T5905] syz-executor.1[5905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.141390][ T5905] syz-executor.1[5905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.153480][ T5905] syz-executor.1[5905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.222997][ T515] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 167.426105][ T20] usb 5-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 167.434745][ T20] usb 5-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 167.444006][ T20] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.454801][ T20] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.464618][ T20] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 167.473448][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.494003][ T5916] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 167.503202][ T5916] SELinux: security_context_str_to_sid(s) failed for (dev bpf, type bpf) errno=-22 [ 167.534098][ T5916] loop2: detected capacity change from 0 to 8192 [ 167.565044][ T336] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 167.576474][ T5916] FAT-fs (loop2): Unrecognized mount option "kfree" or missing value [ 167.598419][ T5918] loop3: detected capacity change from 0 to 512 [ 167.618570][ T515] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.629591][ T515] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 167.638848][ T515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.639051][ T5918] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.648326][ T515] usb 1-1: config 0 descriptor?? [ 167.662938][ T5918] EXT4-fs (loop3): orphan cleanup on readonly fs [ 167.670966][ T5918] EXT4-fs (loop3): 1 truncate cleaned up [ 167.683194][ T45] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 167.697050][ T5918] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 168.137826][ T20] uclogic 0003:5543:0042.0029: unexpected long global item [ 168.145175][ T20] uclogic 0003:5543:0042.0029: parse failed [ 168.150910][ T20] uclogic: probe of 0003:5543:0042.0029 failed with error -22 [ 168.230803][ T858] usb 5-1: USB disconnect, device number 16 [ 168.232688][ T515] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 168.256744][ T336] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 168.267643][ T336] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 168.279196][ T515] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002A/input/input38 [ 168.290883][ T336] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 168.299807][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.374334][ T515] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 168.388616][ T5930] hub 6-0:1.0: USB hub found [ 168.393201][ T5930] hub 6-0:1.0: 1 port detected [ 168.455460][ T5895] UDC core: couldn't find an available UDC or it's busy: -16 [ 168.462780][ T5895] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 168.580798][ T336] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 168.590701][ T336] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input39 [ 168.710915][ T336] input: failed to attach handler kbd to device input39, error: -5 [ 168.879829][ T336] usb 2-1: USB disconnect, device number 22 [ 169.085340][ T5937] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 170.158715][ T20] usb 1-1: USB disconnect, device number 22 [ 170.173137][ T5939] fuseblk: Unknown parameter 'aþ”L§ªWgæw2p±~’' [ 170.205184][ T5939] syz-executor.2[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.205263][ T5939] syz-executor.2[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.228316][ T5939] syz-executor.2[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.245840][ T5939] syz-executor.2[5939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.534215][ T30] audit: type=1326 audit(1718610385.013:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5945 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc069578ea9 code=0x0 [ 171.423281][ T858] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 171.646005][ T5991] hub 6-0:1.0: USB hub found [ 171.650789][ T5991] hub 6-0:1.0: 1 port detected [ 171.702396][ T858] usb 3-1: Using ep0 maxpacket: 8 [ 171.830804][ T858] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 171.841634][ T858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.851834][ T858] usb 3-1: config 0 descriptor?? [ 171.955158][ T6003] loop0: detected capacity change from 0 to 1024 [ 172.012968][ T6003] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 172.429323][ T6014] incfs: Error accessing: ./file0. [ 172.434495][ T6014] incfs: mount failed -20 [ 172.467688][ T30] audit: type=1400 audit(1718610386.837:2059): avc: denied { execstack } for pid=6019 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 172.494200][ T6024] fuse: Invalid rootmode [ 172.666074][ T6028] loop0: detected capacity change from 0 to 2048 [ 172.672803][ T30] audit: type=1400 audit(1718610386.977:2060): avc: denied { mount } for pid=6023 comm="syz-executor.0" name="/" dev="configfs" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 172.823949][ T6028] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.894247][ T6033] loop1: detected capacity change from 0 to 1024 [ 172.965031][ T6033] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 173.125896][ T6046] devpts: called with bogus options [ 173.220345][ T39] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 173.361856][ T6060] device pim6reg1 entered promiscuous mode [ 173.434781][ T6066] loop1: detected capacity change from 0 to 1024 [ 173.467596][ T6066] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 173.528997][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.616476][ T6086] fuse: Invalid rootmode [ 173.767297][ T6097] loop0: detected capacity change from 0 to 2048 [ 173.774009][ T39] usb 5-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 173.774045][ T858] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.792570][ T858] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 174.122420][ T858] asix: probe of 3-1:0.0 failed with error -71 [ 174.134864][ T858] usb 3-1: USB disconnect, device number 23 [ 174.141356][ T39] usb 5-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 174.174965][ T39] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.192277][ T39] usb 5-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.210008][ T39] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 174.219645][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.270916][ T6097] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.530900][ T30] audit: type=1326 audit(1718610388.773:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.555303][ T30] audit: type=1326 audit(1718610388.773:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.579564][ T30] audit: type=1326 audit(1718610388.783:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.606778][ T30] audit: type=1326 audit(1718610388.783:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.630695][ T30] audit: type=1326 audit(1718610388.783:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.671442][ T6106] loop0: detected capacity change from 0 to 1024 [ 174.680304][ T30] audit: type=1326 audit(1718610388.783:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.715078][ T30] audit: type=1326 audit(1718610388.783:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.739326][ T30] audit: type=1326 audit(1718610388.783:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6103 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f807cdc7ea9 code=0x7ffc0000 [ 174.783150][ T39] uclogic 0003:5543:0042.002B: unexpected long global item [ 174.793367][ T39] uclogic 0003:5543:0042.002B: parse failed [ 174.799232][ T6106] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 174.807041][ T39] uclogic: probe of 0003:5543:0042.002B failed with error -22 [ 174.917737][ T6128] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.926990][ T6128] device bridge_slave_1 left promiscuous mode [ 174.933127][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.940796][ T6128] device bridge_slave_0 left promiscuous mode [ 174.946988][ T6128] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.047008][ T6129] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 175.282691][ T39] usb 5-1: USB disconnect, device number 17 [ 176.103140][ T6151] syz-executor.1[6151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.103201][ T6151] syz-executor.1[6151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.339810][ T6162] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.560051][ T6179] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 176.815711][ T6194] loop1: detected capacity change from 0 to 1024 [ 176.846206][ T6194] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.905717][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.912660][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.921039][ T6197] device bridge_slave_0 entered promiscuous mode [ 176.931012][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.937954][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.945354][ T6197] device bridge_slave_1 entered promiscuous mode [ 177.004870][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 177.011747][ T1053] Bluetooth: hci0: sending frame failed (-49) [ 177.029163][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.036014][ T6197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.043158][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.050453][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.080664][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.087879][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.130850][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.137856][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.145346][ T6206] device bridge_slave_0 entered promiscuous mode [ 177.152229][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.159441][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.166781][ T6206] device bridge_slave_1 entered promiscuous mode [ 177.183508][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.191126][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.213607][ T411] device veth1_macvtap left promiscuous mode [ 177.219632][ T411] device veth0_vlan left promiscuous mode [ 177.293562][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.302876][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.311153][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.318025][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.327728][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.336288][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.344357][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.351246][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.358708][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.366794][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.374864][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.382894][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.411361][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.419614][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.442868][ T6197] device veth0_vlan entered promiscuous mode [ 177.449868][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.458442][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.477647][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.485007][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.492532][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.507639][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.517756][ T6197] device veth1_macvtap entered promiscuous mode [ 177.535106][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.543174][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.551490][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.559754][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.568380][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.644679][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.657369][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.665749][ T515] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.672630][ T515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.680125][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.688225][ T515] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.695146][ T515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.712932][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.723005][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.731125][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.752954][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.761600][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.769876][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.777946][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.785809][ T6206] device veth0_vlan entered promiscuous mode [ 177.801148][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.811574][ T6206] device veth1_macvtap entered promiscuous mode [ 177.821731][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.833290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.902854][ T336] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 178.490826][ T336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.501642][ T336] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.510558][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.519262][ T336] usb 1-1: config 0 descriptor?? [ 179.036616][ T336] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 179.045917][ T336] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.002C/input/input40 [ 179.110850][ T6102] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 179.134643][ T336] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 179.203188][ T6251] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.214371][ T6251] kvm: pic: non byte read [ 179.219034][ T6251] kvm: pic: level sensitive irq not supported [ 179.219094][ T6251] kvm: pic: non byte read [ 179.229088][ T336] Bluetooth: hci0: command 0x1001 tx timeout [ 179.230603][ T6251] kvm: pic: level sensitive irq not supported [ 179.235044][ T6251] kvm: pic: non byte read [ 179.235089][ T1053] Bluetooth: hci0: sending frame failed (-49) [ 179.241317][ T6251] kvm: pic: level sensitive irq not supported [ 179.251362][ T6251] kvm: pic: non byte read [ 179.259692][ T6222] UDC core: couldn't find an available UDC or it's busy: -16 [ 179.268680][ T6222] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 179.365395][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 179.365410][ T30] audit: type=1400 audit(1718610393.291:2080): avc: denied { mount } for pid=6265 comm="syz-executor.3" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 179.378151][ T6102] usb 2-1: Using ep0 maxpacket: 16 [ 179.689691][ T20] usb 1-1: USB disconnect, device number 23 [ 179.767263][ T6277] loop4: detected capacity change from 0 to 40427 [ 179.827267][ T6102] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=ed.ec [ 179.829370][ T6277] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 179.836359][ T6102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.844073][ T6277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 179.851622][ T6102] usb 2-1: Product: syz [ 179.851643][ T6102] usb 2-1: Manufacturer: syz [ 179.851658][ T6102] usb 2-1: SerialNumber: syz [ 179.861397][ T6277] F2FS-fs (loop4): invalid crc value [ 179.866293][ T6102] r8152-cfgselector 2-1: config 0 descriptor?? [ 179.870461][ T6277] F2FS-fs (loop4): Found nat_bits in checkpoint [ 179.916592][ T6277] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 179.923568][ T6277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 180.158973][ T6102] r8152-cfgselector 2-1: Unknown version 0x0000 [ 180.180179][ T6102] r8152-cfgselector 2-1: Unknown version 0x0000 [ 180.189605][ T6102] r8152-cfgselector 2-1: USB disconnect, device number 23 [ 180.580974][ T1610] attempt to access beyond end of device [ 180.580974][ T1610] loop4: rw=2049, want=45104, limit=40427 [ 180.686945][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.693852][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.701188][ T6303] device bridge_slave_0 entered promiscuous mode [ 180.708286][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.715150][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.722550][ T6303] device bridge_slave_1 entered promiscuous mode [ 180.829699][ T6310] device syzkaller0 entered promiscuous mode [ 180.896594][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.903509][ T6303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.910621][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.917476][ T6303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.964235][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.971819][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.981039][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.001838][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.011912][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.018818][ T858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.101415][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.196795][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.239664][ T6322] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 181.278937][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.293422][ T45] device bridge_slave_1 left promiscuous mode [ 181.299512][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.307210][ T45] device bridge_slave_0 left promiscuous mode [ 181.313998][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.324806][ T45] device veth1_macvtap left promiscuous mode [ 181.330622][ T30] audit: type=1400 audit(1718610395.134:2081): avc: denied { map } for pid=6332 comm="syz-executor.1" path="socket:[42353]" dev="sockfs" ino=42353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 181.338116][ T45] device veth0_vlan left promiscuous mode [ 181.403405][ T30] audit: type=1400 audit(1718610395.199:2082): avc: denied { create } for pid=6340 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 181.416120][ T6343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6343 comm=syz-executor.1 [ 181.452403][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 181.500233][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.511930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.520788][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.528314][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.536714][ T6303] device veth0_vlan entered promiscuous mode [ 181.544741][ T30] audit: type=1400 audit(1718610395.330:2083): avc: denied { getattr } for pid=6347 comm="syz-executor.1" name="/" dev="incremental-fs" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 181.551848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.569356][ T6348] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 181.577093][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.596953][ T6303] device veth1_macvtap entered promiscuous mode [ 181.608342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.616225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.624880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.645033][ T6351] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.656269][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.667825][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.736677][ T6360] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 181.774843][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.781701][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.789375][ T6356] device bridge_slave_0 entered promiscuous mode [ 181.798043][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.804987][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.812728][ T6356] device bridge_slave_1 entered promiscuous mode [ 181.840997][ T6365] device pim6reg1 entered promiscuous mode [ 181.897134][ T6375] 9pnet: Insufficient options for proto=fd [ 181.947862][ T6383] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.950077][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.963944][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.971101][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.977986][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.006190][ T6389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6389 comm=syz-executor.1 [ 182.020244][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.038092][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.046163][ T858] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.052228][ T6390] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.060383][ T858] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.071440][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.081584][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.088493][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.117225][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.125279][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.132339][ T858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.166048][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.178424][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.178603][ T30] audit: type=1326 audit(1718610395.920:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 182.200594][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.238951][ T30] audit: type=1326 audit(1718610395.920:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 182.241306][ T6356] device veth0_vlan entered promiscuous mode [ 182.270099][ T30] audit: type=1326 audit(1718610395.957:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 182.271237][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.302403][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.309833][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.320076][ T30] audit: type=1326 audit(1718610395.957:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 182.354592][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.364744][ T6356] device veth1_macvtap entered promiscuous mode [ 182.376821][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.386335][ T30] audit: type=1326 audit(1718610395.967:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 182.419729][ T6408] 9pnet: Insufficient options for proto=fd [ 182.425880][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.434114][ T30] audit: type=1326 audit(1718610395.967:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 182.715309][ T45] device bridge_slave_1 left promiscuous mode [ 182.721295][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.754936][ T45] device bridge_slave_0 left promiscuous mode [ 182.771670][ T6427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6427 comm=syz-executor.4 [ 182.794834][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.819506][ T45] device veth1_macvtap left promiscuous mode [ 182.852653][ T45] device veth0_vlan left promiscuous mode [ 183.328252][ T6427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.347539][ T6439] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 183.417576][ T6448] netlink: 4600 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.482734][ T6458] loop3: detected capacity change from 0 to 256 [ 183.520082][ T6458] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 183.571845][ T6464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6464 comm=syz-executor.3 [ 183.585426][ T6464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.697834][ T6462] loop4: detected capacity change from 0 to 40427 [ 183.742181][ T6462] F2FS-fs (loop4): invalid crc value [ 183.762654][ T6462] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.778874][ T6477] loop3: detected capacity change from 0 to 512 [ 183.805065][ T6462] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.887728][ T6477] EXT4-fs (loop3): 1 orphan inode deleted [ 183.893396][ T6477] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 183.915541][ T6477] ext4 filesystem being mounted at /root/syzkaller-testdir1754242279/syzkaller.gz1zXC/20/file1 supports timestamps until 2038 (0x7fffffff) [ 183.933171][ T6486] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.940265][ T6477] EXT4-fs error (device loop3): ext4_ext_remove_space:2840: inode #16: comm syz-executor.3: path[1].p_hdr == NULL [ 183.998000][ T6487] attempt to access beyond end of device [ 183.998000][ T6487] loop4: rw=10241, want=45104, limit=40427 [ 184.017420][ T6487] attempt to access beyond end of device [ 184.017420][ T6487] loop4: rw=2049, want=45112, limit=40427 [ 184.054884][ T6477] EXT4-fs (loop3): Remounting filesystem read-only [ 184.061755][ T6477] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 184.106362][ T6477] EXT4-fs error (device loop3): ext4_punch_hole:4132: inode #16: comm syz-executor.3: mark_inode_dirty error [ 184.172867][ T6473] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 184.222293][ T6473] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 184.236781][ T6473] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 184.251161][ T6473] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 184.265404][ T6473] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 184.279766][ T6473] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 184.293952][ T6473] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 184.295782][ T20] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 184.477327][ T1610] attempt to access beyond end of device [ 184.477327][ T1610] loop4: rw=2049, want=45120, limit=40427 [ 184.511587][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.518462][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.525835][ T6493] device bridge_slave_0 entered promiscuous mode [ 184.531157][ T336] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 184.533758][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.546535][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.553854][ T6493] device bridge_slave_1 entered promiscuous mode [ 184.563079][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 184.619469][ T6493] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.626329][ T6493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.633484][ T6493] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.640341][ T6493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.666761][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.674301][ T871] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.681467][ T871] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.690610][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.698905][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.705773][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.718244][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.726488][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.733518][ T858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.753906][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.762098][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.785464][ T6493] device veth0_vlan entered promiscuous mode [ 184.798422][ T336] usb 1-1: Using ep0 maxpacket: 16 [ 184.806333][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.815571][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.823993][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.832953][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.841347][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.849210][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.863488][ T6493] device veth1_macvtap entered promiscuous mode [ 184.876286][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.884852][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.893064][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.913009][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.921514][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.926715][ T336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.930421][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.941318][ T336] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 184.948507][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.957083][ T20] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=ed.ec [ 184.973475][ T336] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 184.984257][ T336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.992129][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.999892][ T20] usb 2-1: Product: syz [ 185.004715][ T20] usb 2-1: Manufacturer: syz [ 185.009146][ T20] usb 2-1: SerialNumber: syz [ 185.014362][ T20] r8152-cfgselector 2-1: config 0 descriptor?? [ 185.023712][ T341] device bridge_slave_1 left promiscuous mode [ 185.029791][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.037829][ T341] device bridge_slave_0 left promiscuous mode [ 185.043867][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.051530][ T336] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 185.071038][ T341] device veth1_macvtap left promiscuous mode [ 185.080580][ T341] device veth0_vlan left promiscuous mode [ 185.155988][ T6516] netlink: 4600 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.274310][ T513] usb 1-1: USB disconnect, device number 24 [ 185.290113][ T20] r8152-cfgselector 2-1: Unknown version 0x0000 [ 185.311652][ T20] r8152-cfgselector 2-1: Unknown version 0x0000 [ 185.420785][ T6521] loop3: detected capacity change from 0 to 1024 [ 185.498338][ T6521] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.562740][ T20] r8152-cfgselector 2-1: USB disconnect, device number 24 [ 185.863568][ T6539] incfs: iterate_incfs_dir / -22 [ 186.300752][ T6566] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 186.426573][ T6567] loop3: detected capacity change from 0 to 256 [ 186.534343][ T6567] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 186.651100][ T6563] loop4: detected capacity change from 0 to 40427 [ 186.712749][ T6563] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 186.726687][ T6563] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 186.736980][ T6573] loop3: detected capacity change from 0 to 512 [ 186.744510][ T6563] F2FS-fs (loop4): invalid crc value [ 186.751230][ T6563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 186.777872][ T6573] EXT4-fs (loop3): 1 orphan inode deleted [ 186.784562][ T6573] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 186.800826][ T6545] loop0: detected capacity change from 0 to 131072 [ 186.805711][ T6573] ext4 filesystem being mounted at /root/syzkaller-testdir77232208/syzkaller.VaWdjq/7/file1 supports timestamps until 2038 (0x7fffffff) [ 186.815692][ T6563] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 186.832178][ T6563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 186.844587][ T6573] EXT4-fs error (device loop3): ext4_ext_remove_space:2840: inode #16: comm syz-executor.3: path[1].p_hdr == NULL [ 186.857053][ T6573] EXT4-fs (loop3): Remounting filesystem read-only [ 186.863468][ T6573] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 186.873753][ T6545] F2FS-fs (loop0): invalid crc value [ 186.879731][ T6573] EXT4-fs error (device loop3): ext4_punch_hole:4132: inode #16: comm syz-executor.3: mark_inode_dirty error [ 186.891993][ T6572] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 186.906932][ T6572] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 186.921470][ T6572] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 186.936709][ T6572] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 186.952983][ T6572] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 186.968292][ T6572] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 186.982540][ T6572] EXT4-fs error (device loop3): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.3: bad extent address lblock: 0, depth: 1 pblock 0 [ 186.983806][ T6545] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.194219][ T6545] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 187.372064][ T6591] 9pnet: Insufficient options for proto=fd [ 187.383768][ T1610] attempt to access beyond end of device [ 187.383768][ T1610] loop4: rw=2049, want=45104, limit=40427 [ 187.479789][ T6599] syz-executor.2[6599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.479859][ T6599] syz-executor.2[6599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.630722][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.684907][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.692318][ T6600] device bridge_slave_0 entered promiscuous mode [ 187.736224][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.748906][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.767036][ T6600] device bridge_slave_1 entered promiscuous mode [ 187.774105][ T6602] loop2: detected capacity change from 0 to 40427 [ 187.803218][ T6602] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 187.813774][ T6602] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.853183][ T6602] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.906942][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.913848][ T6600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.920940][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.924165][ T6602] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.927945][ T6600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.946679][ T6602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.953138][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.963111][ T871] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.018650][ T871] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.045418][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.048981][ T6619] loop0: detected capacity change from 0 to 512 [ 188.053609][ T858] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.066264][ T858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.073614][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.082224][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.089059][ T858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.199503][ T858] Bluetooth: hci0: command 0x1003 tx timeout [ 188.254263][ T1053] Bluetooth: hci0: sending frame failed (-49) [ 188.264218][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.274554][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.322044][ T341] device bridge_slave_1 left promiscuous mode [ 188.330716][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.339160][ T341] device bridge_slave_0 left promiscuous mode [ 188.345292][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.353649][ T6619] EXT4-fs (loop0): 1 orphan inode deleted [ 188.360175][ T6619] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 188.362494][ T341] device veth1_macvtap left promiscuous mode [ 188.381148][ T6619] ext4 filesystem being mounted at /root/syzkaller-testdir359823900/syzkaller.8DfUFh/14/file1 supports timestamps until 2038 (0x7fffffff) [ 188.387213][ T341] device veth0_vlan left promiscuous mode [ 188.426888][ T6619] EXT4-fs error (device loop0): ext4_ext_remove_space:2840: inode #16: comm syz-executor.0: path[1].p_hdr == NULL [ 188.439572][ T6619] EXT4-fs (loop0): Remounting filesystem read-only [ 188.446229][ T6619] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 188.461129][ T6619] EXT4-fs error (device loop0): ext4_punch_hole:4132: inode #16: comm syz-executor.0: mark_inode_dirty error [ 188.477201][ T6618] EXT4-fs error (device loop0): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.0: bad extent address lblock: 0, depth: 1 pblock 0 [ 188.497042][ T6618] EXT4-fs error (device loop0): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.0: bad extent address lblock: 0, depth: 1 pblock 0 [ 188.538873][ T6618] EXT4-fs error (device loop0): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.0: bad extent address lblock: 0, depth: 1 pblock 0 [ 188.562622][ T6618] EXT4-fs error (device loop0): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.0: bad extent address lblock: 0, depth: 1 pblock 0 [ 188.577021][ T6618] EXT4-fs error (device loop0): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.0: bad extent address lblock: 0, depth: 1 pblock 0 [ 188.591531][ T6618] EXT4-fs error (device loop0): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.0: bad extent address lblock: 0, depth: 1 pblock 0 [ 188.605794][ T6618] EXT4-fs error (device loop0): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.0: bad extent address lblock: 0, depth: 1 pblock 0 [ 188.701430][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.709718][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.718005][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.725377][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.737413][ T6600] device veth0_vlan entered promiscuous mode [ 188.752621][ T6600] device veth1_macvtap entered promiscuous mode [ 188.759353][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.768026][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.776213][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.804415][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.816890][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.825444][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.834166][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.935521][ T6628] loop4: detected capacity change from 0 to 40427 [ 188.990263][ T6628] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 189.001020][ T6628] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 189.032909][ T6628] F2FS-fs (loop4): invalid crc value [ 189.057721][ T6628] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.067287][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.074163][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.109193][ T6634] device bridge_slave_0 entered promiscuous mode [ 189.117131][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.124458][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.132012][ T6634] device bridge_slave_1 entered promiscuous mode [ 189.162561][ T6628] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 189.169477][ T6628] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.209840][ T6647] syz-executor.3[6647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.209997][ T6647] syz-executor.3[6647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.294834][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.313616][ T6634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.320755][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.327690][ T6634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.372143][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.381707][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.699923][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.758255][ T1610] attempt to access beyond end of device [ 189.758255][ T1610] loop4: rw=2049, want=45104, limit=40427 [ 189.770309][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.778472][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.785340][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.833941][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.855485][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.862362][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.887299][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.899541][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.919066][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.927436][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.951242][ T6630] loop2: detected capacity change from 0 to 131072 [ 189.951518][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 189.968214][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.985356][ T6630] F2FS-fs (loop2): invalid crc value [ 189.994068][ T6634] device veth0_vlan entered promiscuous mode [ 190.000226][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.015985][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.030164][ T6630] F2FS-fs (loop2): Found nat_bits in checkpoint [ 190.033761][ T6663] loop4: detected capacity change from 0 to 512 [ 190.047194][ T6634] device veth1_macvtap entered promiscuous mode [ 190.059638][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.067888][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.090577][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.096999][ T6630] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 190.112722][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.121233][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.130551][ T6663] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 190.141451][ T6663] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 190.168273][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.176521][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.210242][ T341] device bridge_slave_1 left promiscuous mode [ 190.216214][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.233978][ T341] device bridge_slave_0 left promiscuous mode [ 190.247231][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.266093][ T341] device veth1_macvtap left promiscuous mode [ 190.293912][ T341] device veth0_vlan left promiscuous mode [ 190.347573][ T6671] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 190.432398][ T6102] Bluetooth: hci0: command 0x1001 tx timeout [ 190.438731][ T1053] Bluetooth: hci0: sending frame failed (-49) [ 190.537053][ T6680] device pim6reg1 entered promiscuous mode [ 190.685670][ T6689] syz-executor.0[6689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.685727][ T6689] syz-executor.0[6689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.699113][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 190.699129][ T30] audit: type=1400 audit(1718610403.899:2254): avc: denied { unlink } for pid=6683 comm="syz-executor.2" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 190.754936][ T6694] loop0: detected capacity change from 0 to 512 [ 190.796044][ T6694] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 190.820892][ T6694] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #15: comm syz-executor.0: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 190.838987][ T336] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 190.849397][ T6694] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 190.869659][ T6694] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.877202][ T6699] loop2: detected capacity change from 0 to 512 [ 190.880488][ T6694] ext2 filesystem being mounted at /root/syzkaller-testdir1027820121/syzkaller.ishWz1/6/file0 supports timestamps until 2038 (0x7fffffff) [ 190.904189][ T30] audit: type=1400 audit(1718610404.086:2255): avc: denied { setattr } for pid=6693 comm="syz-executor.0" name="work" dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.904243][ T6694] overlayfs: upper fs needs to support d_type. [ 190.932749][ T30] audit: type=1400 audit(1718610404.114:2256): avc: denied { remove_name } for pid=6693 comm="syz-executor.0" name="#2f" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 190.957652][ T30] audit: type=1400 audit(1718610404.114:2257): avc: denied { unlink } for pid=6693 comm="syz-executor.0" name="#2f" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 190.959733][ T6694] overlayfs: upper fs needs to support d_type. [ 190.983032][ T6699] EXT4-fs (loop2): 1 orphan inode deleted [ 190.991701][ T6699] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 190.994049][ T30] audit: type=1400 audit(1718610404.170:2258): avc: denied { create } for pid=6693 comm="syz-executor.0" name="#33" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.037216][ T30] audit: type=1400 audit(1718610404.207:2259): avc: denied { link } for pid=6693 comm="syz-executor.0" name="#33" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.046373][ T6699] ext4 filesystem being mounted at /root/syzkaller-testdir939663605/syzkaller.HUTQeO/383/file1 supports timestamps until 2038 (0x7fffffff) [ 191.065448][ T30] audit: type=1400 audit(1718610404.207:2260): avc: denied { rename } for pid=6693 comm="syz-executor.0" name="#34" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 191.126441][ T6699] EXT4-fs error (device loop2): ext4_ext_remove_space:2840: inode #16: comm syz-executor.2: path[1].p_hdr == NULL [ 191.138736][ T6699] EXT4-fs (loop2): Remounting filesystem read-only [ 191.145079][ T6699] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 191.154707][ T6699] EXT4-fs error (device loop2): ext4_punch_hole:4132: inode #16: comm syz-executor.2: mark_inode_dirty error [ 191.167290][ T6698] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 191.193565][ T6698] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 191.208319][ T6698] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 191.233075][ T6698] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 191.247433][ T6698] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 191.262322][ T6698] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 191.367974][ T6714] loop3: detected capacity change from 0 to 1024 [ 191.378280][ T6698] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 191.394589][ T6713] netem: change failed [ 191.467253][ T6714] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.541395][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.552162][ T336] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.561066][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.572144][ T336] usb 5-1: config 0 descriptor?? [ 191.592993][ T6721] syz-executor.0[6721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.593052][ T6721] syz-executor.0[6721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.768398][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.787147][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.794706][ T6730] device bridge_slave_0 entered promiscuous mode [ 191.803987][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.810880][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.818181][ T6730] device bridge_slave_1 entered promiscuous mode [ 191.873675][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.880543][ T6730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.887676][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.894534][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.919453][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.927302][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.934868][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.946253][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.954362][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.961309][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.980700][ T858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.989112][ T858] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.995992][ T858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.048142][ T6730] device veth0_vlan entered promiscuous mode [ 192.057851][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.066540][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.068648][ T336] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor [ 192.078720][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.091128][ T336] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002D/input/input44 [ 192.091318][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.109827][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 192.117795][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.131540][ T6730] device veth1_macvtap entered promiscuous mode [ 192.140791][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.151142][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.159185][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.170663][ T6737] device syzkaller0 entered promiscuous mode [ 192.181505][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.187970][ T336] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 192.201862][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.214652][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.222826][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.262415][ T6745] loop2: detected capacity change from 0 to 512 [ 192.302240][ T6682] UDC core: couldn't find an available UDC or it's busy: -16 [ 192.316736][ T6682] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 192.324345][ T6751] syz-executor.3[6751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.324958][ T6751] syz-executor.3[6751] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.342674][ T6745] EXT4-fs (loop2): 1 orphan inode deleted [ 192.360684][ T6745] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 192.382710][ T6745] ext4 filesystem being mounted at /root/syzkaller-testdir2363515589/syzkaller.ul9B8b/1/file1 supports timestamps until 2038 (0x7fffffff) [ 192.412161][ T6745] EXT4-fs error (device loop2): ext4_ext_remove_space:2840: inode #16: comm syz-executor.2: path[1].p_hdr == NULL [ 192.426230][ T6745] EXT4-fs (loop2): Remounting filesystem read-only [ 192.432839][ T6745] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5820: Corrupt filesystem [ 192.443284][ T6745] EXT4-fs error (device loop2): ext4_punch_hole:4132: inode #16: comm syz-executor.2: mark_inode_dirty error [ 192.455494][ T6744] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 192.470876][ T341] device bridge_slave_1 left promiscuous mode [ 192.471053][ T6744] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 192.480381][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.491864][ T6744] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 192.512719][ T6744] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 192.526952][ T341] device bridge_slave_0 left promiscuous mode [ 192.527016][ T6744] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 192.535341][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.554082][ T6744] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 192.568290][ T6744] EXT4-fs error (device loop2): ext4_ext_map_blocks:4160: inode #16: comm syz-executor.2: bad extent address lblock: 0, depth: 1 pblock 0 [ 192.655988][ T871] Bluetooth: hci0: command 0x1009 tx timeout [ 192.709304][ T6102] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 192.748904][ T515] usb 5-1: USB disconnect, device number 18 [ 192.968935][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.975788][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.983139][ T6758] device bridge_slave_0 entered promiscuous mode [ 192.990209][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.997060][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.004763][ T6758] device bridge_slave_1 entered promiscuous mode [ 193.099683][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.106565][ T6758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.113686][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.120449][ T6758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.144339][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 193.152252][ T515] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.159432][ T515] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.168749][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 193.177111][ T6102] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.188155][ T871] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.195029][ T871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.202416][ T6102] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.211196][ T6102] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 193.248580][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 193.259884][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 193.269957][ T871] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.276832][ T871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.318928][ T6102] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.389393][ T6102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.411548][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.418610][ T6102] usb 4-1: SerialNumber: syz [ 193.420698][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.431864][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.439801][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.458081][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.466375][ T513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.481134][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.489185][ T871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.501688][ T6758] device veth0_vlan entered promiscuous mode [ 193.508088][ T30] audit: type=1326 audit(1718610406.518:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 193.533649][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.541258][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.556761][ T6758] device veth1_macvtap entered promiscuous mode [ 193.563403][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.572041][ T30] audit: type=1326 audit(1718610406.518:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 193.596795][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.605141][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.609126][ T30] audit: type=1326 audit(1718610406.518:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6772 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 193.645824][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.653957][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.662297][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.670523][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.704458][ T6102] usb 4-1: 0:2 : does not exist [ 193.709272][ T6102] usb 4-1: unit 5 not found! [ 193.719294][ T6102] usb 4-1: USB disconnect, device number 20 [ 193.727224][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.102197][ T6805] loop0: detected capacity change from 0 to 2048 [ 194.144312][ T341] device bridge_slave_1 left promiscuous mode [ 194.153084][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.172542][ T341] device bridge_slave_0 left promiscuous mode [ 194.179542][ T6805] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.195648][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.247362][ T341] device veth1_macvtap left promiscuous mode [ 194.255267][ T341] device veth0_vlan left promiscuous mode [ 194.345117][ T6812] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 194.434995][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.500941][ T6834] loop2: detected capacity change from 0 to 2048 [ 194.511716][ T6836] syz-executor.0[6836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.511775][ T6836] syz-executor.0[6836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.677770][ T6847] loop0: detected capacity change from 0 to 256 [ 194.719764][ T6847] exfat: Deprecated parameter 'utf8' [ 194.720526][ T6102] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 194.729957][ T6847] exfat: Deprecated parameter 'utf8' [ 194.827968][ T6848] loop3: detected capacity change from 0 to 1024 [ 194.902279][ T6847] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 194.925951][ T6848] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 195.168213][ T6102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.179601][ T6855] loop0: detected capacity change from 0 to 2048 [ 195.183404][ T6102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.195484][ T6102] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 195.204434][ T6102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.213077][ T6102] usb 5-1: config 0 descriptor?? [ 195.239379][ T6855] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 195.254620][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.445252][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 196.445271][ T30] audit: type=1400 audit(1718610409.268:2283): avc: denied { ioctl } for pid=6880 comm="syz-executor.3" path="socket:[46401]" dev="sockfs" ino=46401 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.525522][ T6888] loop0: detected capacity change from 0 to 2048 [ 196.627751][ T6888] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.808159][ T30] audit: type=1400 audit(1718610409.614:2284): avc: denied { ioctl } for pid=6901 comm="syz-executor.0" path="socket:[45625]" dev="sockfs" ino=45625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 197.484991][ T6905] loop1: detected capacity change from 0 to 40427 [ 197.525726][ T6905] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 197.538073][ T6905] F2FS-fs (loop1): invalid crc value [ 197.543699][ T6905] F2FS-fs (loop1): invalid crc value [ 197.549025][ T6905] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 197.575269][ T6102] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002E/input/input45 [ 197.594160][ T6102] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002E/input/input46 [ 197.619977][ T6102] uclogic 0003:256C:006D.002E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 197.620304][ T6924] loop2: detected capacity change from 0 to 256 [ 197.716152][ T6917] loop3: detected capacity change from 0 to 40427 [ 197.737346][ T6905] input: syz0 as /devices/virtual/input/input47 [ 197.746222][ T6905] overlayfs: unrecognized mount option " [ 197.746222][ T6905] B: KEY=10000000000000 0 [ 197.746222][ T6905] [ 197.746222][ T6905] I: Bus=0019 Vendor=0000 Product=0003 Version=0000 [ 197.746222][ T6905] N: Name="Sleep Button" [ 197.746222][ T6905] P: Phys=LNXSLPBN/button/input0 [ 197.746222][ T6905] S: Sysfs=/devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 197.746222][ T6905] U: Uniq= [ 197.746222][ T6905] H: Handlers=kbd event1 [ 197.746222][ T6905] B: PROP=0 [ 197.746222][ T6905] B: EV=3 [ 197.746222][ T6905] B: KEY=4000 0 0 [ 197.746222][ T6905] [ 197.746222][ T6905] I: Bus=0011 Vendor=0001 Product=0001 Version=abba [ 197.746222][ T6905] N: Name="AT Translated Set 2 keyboard" [ 197.746222][ T6905] P: Phys=isa0060/serio0/input0 [ 197.746222][ T6905] S: Sysfs=/devices/platform/i8042/serio0/input/input2 [ 197.746222][ T6905] U: Uniq= [ 197.746222][ T6905] H: Handlers=kbd leds event2 [ 197.746222][ T6905] B: PROP=0 [ 197.746222][ T6905] B: EV=120013 [ 197.792897][ T6917] F2FS-fs (loop3): invalid crc value [ 197.882654][ T858] usb 5-1: USB disconnect, device number 19 [ 197.955971][ T6935] loop0: detected capacity change from 0 to 512 [ 197.967753][ T6917] F2FS-fs (loop3): Found nat_bits in checkpoint [ 198.005928][ T6935] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 198.095230][ T6917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 198.103043][ T6935] EXT4-fs warning (device loop0): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 198.367665][ T6944] attempt to access beyond end of device [ 198.367665][ T6944] loop3: rw=10241, want=45104, limit=40427 [ 198.385897][ T6944] attempt to access beyond end of device [ 198.385897][ T6944] loop3: rw=2049, want=45112, limit=40427 [ 198.627845][ T6600] attempt to access beyond end of device [ 198.627845][ T6600] loop3: rw=2049, want=45120, limit=40427 [ 198.639245][ T336] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 198.673923][ T30] audit: type=1326 audit(1718610411.354:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 198.742559][ T30] audit: type=1326 audit(1718610411.391:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 198.787602][ T30] audit: type=1326 audit(1718610411.391:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd3e1a3ea9 code=0x7ffc0000 [ 198.894124][ T30] audit: type=1326 audit(1718610411.560:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4e9deea9 code=0x7ffc0000 [ 198.940024][ T30] audit: type=1326 audit(1718610411.560:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4e9deea9 code=0x7ffc0000 [ 198.975585][ T30] audit: type=1326 audit(1718610411.588:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f4e9deea9 code=0x7ffc0000 [ 199.000587][ T30] audit: type=1326 audit(1718610411.588:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4e9deea9 code=0x7ffc0000 [ 199.036212][ T6977] loop4: detected capacity change from 0 to 512 [ 199.048926][ T30] audit: type=1326 audit(1718610411.588:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6961 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f4e9deea9 code=0x7ffc0000 [ 199.081116][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.103549][ T6977] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: fsck is running on the filesystem [ 199.123802][ T336] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.132993][ T6977] EXT4-fs warning (device loop4): ext4_multi_mount_protect:326: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 199.155888][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.246913][ T336] usb 3-1: config 0 descriptor?? [ 199.283446][ T6979] loop3: detected capacity change from 0 to 40427 [ 199.487412][ T6979] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 199.516326][ T6979] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 199.596439][ T6979] F2FS-fs (loop3): invalid crc value [ 199.616472][ T6979] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.722868][ T6979] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 199.735438][ T6979] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 199.765844][ T336] keytouch 0003:0926:3333.002F: fixing up Keytouch IEC report descriptor [ 199.780025][ T336] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002F/input/input48 [ 199.874528][ T336] keytouch 0003:0926:3333.002F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 200.246830][ T6998] UDC core: couldn't find an available UDC or it's busy: -16 [ 200.254071][ T6998] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.287197][ T6600] attempt to access beyond end of device [ 200.287197][ T6600] loop3: rw=2049, want=45104, limit=40427 [ 200.293529][ T6973] loop0: detected capacity change from 0 to 131072 [ 200.308701][ T7002] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 200.344139][ T6973] F2FS-fs (loop0): invalid crc value [ 200.376132][ T6973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.421995][ T6973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 200.563416][ T7034] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 200.582555][ T7036] syz-executor.4[7036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.582637][ T7036] syz-executor.4[7036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.677241][ T7029] loop3: detected capacity change from 0 to 40427 [ 200.717260][ T336] usb 3-1: USB disconnect, device number 24 [ 200.729075][ T7029] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 200.736649][ T7029] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 200.750093][ T7029] F2FS-fs (loop3): invalid crc value [ 200.760972][ T7029] F2FS-fs (loop3): Found nat_bits in checkpoint [ 200.809569][ T7029] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 200.816669][ T7029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 201.136171][ T7062] syz-executor.4[7062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.137187][ T7062] syz-executor.4[7062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.438535][ T6600] attempt to access beyond end of device [ 201.438535][ T6600] loop3: rw=2049, want=45104, limit=40427 [ 201.814601][ T7076] netem: change failed [ 201.870072][ T7088] syz-executor.0[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.870194][ T7088] syz-executor.0[7088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.026941][ T7092] loop0: detected capacity change from 0 to 40427 [ 202.085822][ T7092] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 202.093351][ T7092] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.102622][ T7092] F2FS-fs (loop0): invalid crc value [ 202.109401][ T7092] F2FS-fs (loop0): Found nat_bits in checkpoint [ 202.117057][ T871] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 202.144850][ T7092] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.152450][ T7092] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 202.258419][ T7107] loop0: detected capacity change from 0 to 256 [ 202.259916][ T7105] device pim6reg1 entered promiscuous mode [ 202.275259][ T7107] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 202.277428][ T858] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 202.287441][ T7107] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 202.308882][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 202.308898][ T30] audit: type=1400 audit(1718610414.749:2416): avc: denied { remove_name } for pid=7106 comm="syz-executor.0" name="file1" dev="loop0" ino=1048695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.338626][ T30] audit: type=1400 audit(1718610414.749:2417): avc: denied { unlink } for pid=7106 comm="syz-executor.0" name="file1" dev="loop0" ino=1048695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 202.409479][ T7113] syz-executor.0[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.409558][ T7113] syz-executor.0[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.422120][ T7113] syz-executor.0[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.433967][ T7113] syz-executor.0[7113] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.551486][ T871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.574199][ T871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.586976][ T871] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.596279][ T871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.604732][ T871] usb 5-1: config 0 descriptor?? [ 202.790967][ T858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.857647][ T858] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.929575][ T30] audit: type=1400 audit(1718610415.311:2418): avc: denied { map } for pid=7130 comm="syz-executor.1" path="socket:[46901]" dev="sockfs" ino=46901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 202.954912][ T7133] loop2: detected capacity change from 0 to 256 [ 202.961067][ T858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.972349][ T858] usb 4-1: config 0 descriptor?? [ 202.985169][ T7135] device pim6reg1 entered promiscuous mode [ 202.991489][ T7133] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 203.003778][ T7133] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 203.224376][ T7152] device sit0 entered promiscuous mode [ 203.372690][ T7158] loop2: detected capacity change from 0 to 1024 [ 203.567487][ T7158] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.603731][ T858] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 203.616858][ T858] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0030/input/input51 [ 203.671015][ T30] audit: type=1400 audit(1718610416.031:2419): avc: denied { mounton } for pid=7162 comm="syz-executor.0" path="/root/syzkaller-testdir1027820121/syzkaller.ishWz1/53/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 203.707195][ T858] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 203.747627][ T7168] device pim6reg1 entered promiscuous mode [ 203.839818][ T7097] UDC core: couldn't find an available UDC or it's busy: -16 [ 203.847330][ T7097] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 204.021469][ T7173] loop0: detected capacity change from 0 to 40427 [ 204.082690][ T7173] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 204.094217][ T7173] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 204.104179][ T7173] F2FS-fs (loop0): invalid crc value [ 204.111341][ T7173] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.170227][ T7186] device sit0 left promiscuous mode [ 204.178425][ T7173] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 204.185968][ T7173] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.207817][ T7186] device sit0 entered promiscuous mode [ 204.256357][ T39] usb 4-1: USB disconnect, device number 21 [ 204.427866][ T7199] loop0: detected capacity change from 0 to 40427 [ 204.526882][ T7204] loop1: detected capacity change from 0 to 1024 [ 204.559925][ T7199] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 204.567953][ T7199] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 204.610795][ T7199] F2FS-fs (loop0): invalid crc value [ 204.674034][ T7204] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 204.698098][ T20] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 204.723115][ T7199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.756312][ T7199] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 204.763392][ T7199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.763419][ T871] usbhid 5-1:0.0: can't add hid device: -71 [ 204.776499][ T871] usbhid: probe of 5-1:0.0 failed with error -71 [ 204.784139][ T871] usb 5-1: USB disconnect, device number 20 [ 205.257990][ T6634] attempt to access beyond end of device [ 205.257990][ T6634] loop0: rw=2049, want=45104, limit=40427 [ 205.377791][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.389390][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.399158][ T20] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 205.408062][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.741959][ T20] usb 3-1: config 0 descriptor?? [ 205.822333][ T7240] device pim6reg1 entered promiscuous mode [ 205.879360][ T7232] loop0: detected capacity change from 0 to 40427 [ 205.944376][ T7232] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 205.952043][ T7232] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 205.961505][ T7232] F2FS-fs (loop0): invalid crc value [ 205.971947][ T7232] F2FS-fs (loop0): Found nat_bits in checkpoint [ 206.012216][ T7232] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 206.019208][ T7232] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.383855][ T20] wacom 0003:056A:00F8.0031: unbalanced delimiter at end of report description [ 206.397220][ T20] wacom 0003:056A:00F8.0031: parse failed [ 206.407440][ T20] wacom: probe of 0003:056A:00F8.0031 failed with error -22 [ 206.527979][ T7255] loop1: detected capacity change from 0 to 40427 [ 206.565258][ T7255] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 206.572799][ T7255] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 206.582072][ T7255] F2FS-fs (loop1): invalid crc value [ 206.589039][ T7255] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.600783][ T336] usb 3-1: USB disconnect, device number 25 [ 206.636081][ T7255] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 206.643160][ T7255] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 207.073963][ T7274] loop3: detected capacity change from 0 to 256 [ 207.408927][ T7274] loop_set_status: loop3 () has still dirty pages (nrpages=1) [ 207.441987][ T30] audit: type=1400 audit(1718610419.323:2420): avc: denied { mounton } for pid=7273 comm="syz-executor.3" path="/root/syzkaller-testdir2849453760/syzkaller.ozYIJN/42/file0/bus" dev="loop3" ino=1048698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 207.481692][ T6206] attempt to access beyond end of device [ 207.481692][ T6206] loop1: rw=2049, want=45104, limit=40427 [ 207.553378][ T6600] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 207.573786][ T6600] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 207.611717][ T7281] incfs: Error accessing: ./file0. [ 207.633591][ T7281] incfs: mount failed -20 [ 207.807062][ T7291] device pim6reg1 entered promiscuous mode [ 207.840617][ T7297] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 207.904781][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.911852][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.919179][ T7295] device bridge_slave_0 entered promiscuous mode [ 207.926736][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.933678][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.940983][ T7295] device bridge_slave_1 entered promiscuous mode [ 207.947243][ T20] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 208.105279][ T7313] incfs: Error accessing: ./file0. [ 208.131139][ T7313] incfs: mount failed -20 [ 208.210708][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 208.284324][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.295918][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.305452][ T341] device bridge_slave_1 left promiscuous mode [ 208.312430][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.325730][ T341] device bridge_slave_0 left promiscuous mode [ 208.337658][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.339116][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.356253][ T341] device veth1_macvtap left promiscuous mode [ 208.365380][ T341] device veth0_vlan left promiscuous mode [ 208.368331][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.394563][ T20] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 208.585097][ T20] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.599718][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.608477][ T20] usb 3-1: Product: syz [ 208.609318][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.612545][ T20] usb 3-1: Manufacturer: syz [ 208.624880][ T20] usb 3-1: SerialNumber: syz [ 208.628020][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.648281][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.655336][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.662877][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.676154][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.684449][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.691326][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.713892][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.721756][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.730532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.752440][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.768272][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.825511][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.833046][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.842242][ T7295] device veth0_vlan entered promiscuous mode [ 208.860384][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.870685][ T7295] device veth1_macvtap entered promiscuous mode [ 208.883186][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.897518][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.137334][ T7332] loop0: detected capacity change from 0 to 1024 [ 209.267632][ T7332] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.440448][ T20] usb 3-1: 0:2 : does not exist [ 209.446931][ T20] usb 3-1: USB disconnect, device number 26 [ 209.505887][ T7344] loop3: detected capacity change from 0 to 256 [ 209.570679][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.590064][ T7344] loop3: detected capacity change from 256 to 0 [ 209.600507][ C1] blk_update_request: I/O error, dev loop3, sector 80 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.611686][ C1] blk_update_request: I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.623255][ C1] blk_update_request: I/O error, dev loop3, sector 88 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.634468][ C1] blk_update_request: I/O error, dev loop3, sector 92 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.645677][ C1] blk_update_request: I/O error, dev loop3, sector 96 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.656881][ C1] blk_update_request: I/O error, dev loop3, sector 100 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.668080][ C1] blk_update_request: I/O error, dev loop3, sector 104 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.679332][ C1] blk_update_request: I/O error, dev loop3, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 209.690541][ C1] blk_update_request: I/O error, dev loop3, sector 80 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.701529][ T7344] FAT-fs (loop3): Directory bread(block 20) failed [ 209.708795][ C1] blk_update_request: I/O error, dev loop3, sector 84 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 209.719803][ T7344] FAT-fs (loop3): Directory bread(block 21) failed [ 209.726494][ T7344] FAT-fs (loop3): Directory bread(block 22) failed [ 209.734342][ T7344] FAT-fs (loop3): Directory bread(block 23) failed [ 209.740885][ T7344] FAT-fs (loop3): Directory bread(block 24) failed [ 209.763613][ T7344] FAT-fs (loop3): Directory bread(block 25) failed [ 209.770086][ T7344] FAT-fs (loop3): Directory bread(block 26) failed [ 209.776631][ T7344] FAT-fs (loop3): Directory bread(block 27) failed [ 209.806986][ T7295] FAT-fs (loop3): Directory bread(block 3) failed [ 209.824393][ T7295] FAT-fs (loop3): unable to read boot sector to mark fs as dirty [ 209.839592][ T7363] loop1: detected capacity change from 0 to 128 [ 209.885488][ T7363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.902372][ T7363] ext4 filesystem being mounted at /root/syzkaller-testdir3411225778/syzkaller.PHu2Ha/83/mnt supports timestamps until 2038 (0x7fffffff) [ 209.917008][ T7368] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 209.982938][ T7363] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.1: No space for directory leaf checksum. Please run e2fsck -D. [ 210.006784][ T7363] EXT4-fs error (device loop1): __ext4_find_entry:1695: inode #2: comm syz-executor.1: checksumming directory block 0 [ 210.202357][ T7373] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.209234][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.218379][ T7386] loop0: detected capacity change from 0 to 256 [ 210.225098][ T7373] device bridge_slave_0 entered promiscuous mode [ 210.238231][ T7373] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.245116][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.252839][ T7373] device bridge_slave_1 entered promiscuous mode [ 210.828715][ T7392] loop4: detected capacity change from 0 to 1024 [ 210.949619][ T7392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.085875][ T7386] loop0: detected capacity change from 256 to 0 [ 211.097369][ T7393] FAT-fs (loop0): Directory bread(block 20) failed [ 211.117474][ T7393] FAT-fs (loop0): Directory bread(block 21) failed [ 211.128260][ T7393] FAT-fs (loop0): Directory bread(block 22) failed [ 211.135355][ T7393] FAT-fs (loop0): Directory bread(block 23) failed [ 211.196023][ T7393] FAT-fs (loop0): Directory bread(block 24) failed [ 211.202873][ T7393] FAT-fs (loop0): Directory bread(block 25) failed [ 211.220215][ T7393] FAT-fs (loop0): Directory bread(block 26) failed [ 211.227991][ T341] device bridge_slave_1 left promiscuous mode [ 211.233973][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.244851][ T7393] FAT-fs (loop0): Directory bread(block 27) failed [ 211.247746][ T341] device bridge_slave_0 left promiscuous mode [ 211.262098][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.269231][ T6634] FAT-fs (loop0): Directory bread(block 3) failed [ 211.276812][ T341] device veth1_macvtap left promiscuous mode [ 211.284592][ T6634] FAT-fs (loop0): unable to read boot sector to mark fs as dirty [ 211.298359][ T341] device veth0_vlan left promiscuous mode [ 211.331490][ T7418] syz-executor.2[7418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.331572][ T7418] syz-executor.2[7418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.360862][ T7418] syz-executor.2[7418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.404949][ T7418] syz-executor.2[7418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.495632][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.526058][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.576619][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.589873][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.607246][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.614593][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.826730][ T7421] loop1: detected capacity change from 0 to 40427 [ 211.928558][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.929087][ T7421] F2FS-fs (loop1): invalid crc value [ 211.936897][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.949726][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.956610][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.975128][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.983829][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.992485][ T7421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.026979][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.038342][ T515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.092585][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 212.105246][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 212.147413][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 212.158233][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 212.166069][ T7421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 212.176505][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 212.184010][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 212.198678][ T7373] device veth0_vlan entered promiscuous mode [ 212.268374][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.279943][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.297324][ T7373] device veth1_macvtap entered promiscuous mode [ 212.322882][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.330933][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.339145][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.420383][ T7435] attempt to access beyond end of device [ 212.420383][ T7435] loop1: rw=10241, want=45104, limit=40427 [ 212.441255][ T7435] attempt to access beyond end of device [ 212.441255][ T7435] loop1: rw=2049, want=45112, limit=40427 [ 212.713643][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.725830][ T6206] attempt to access beyond end of device [ 212.725830][ T6206] loop1: rw=2049, want=45120, limit=40427 [ 212.743614][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.751995][ T6102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.765554][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.772409][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.779912][ T7429] device bridge_slave_0 entered promiscuous mode [ 212.787389][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.794526][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.805705][ T7429] device bridge_slave_1 entered promiscuous mode [ 212.909123][ T7455] loop3: detected capacity change from 0 to 1024 [ 212.948402][ T7455] JBD2: no valid journal superblock found [ 212.957394][ T7455] EXT4-fs (loop3): error loading journal [ 212.959002][ T7459] loop4: detected capacity change from 0 to 256 [ 213.003916][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.010808][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.017939][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.024823][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.061527][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.081162][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.107105][ T7459] loop4: detected capacity change from 256 to 0 [ 213.119831][ T7459] FAT-fs (loop4): Directory bread(block 20) failed [ 213.123374][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.126370][ T7459] FAT-fs (loop4): Directory bread(block 21) failed [ 213.139782][ T7459] FAT-fs (loop4): Directory bread(block 22) failed [ 213.140559][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.146222][ T7459] FAT-fs (loop4): Directory bread(block 23) failed [ 213.164758][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.171602][ T7459] FAT-fs (loop4): Directory bread(block 24) failed [ 213.182551][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.200065][ T7459] FAT-fs (loop4): Directory bread(block 25) failed [ 213.200103][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.213278][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.221103][ T7459] FAT-fs (loop4): Directory bread(block 26) failed [ 213.242152][ T7459] FAT-fs (loop4): Directory bread(block 27) failed [ 213.248609][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.263476][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.279492][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.286385][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.319514][ T1610] FAT-fs (loop4): Directory bread(block 3) failed [ 213.322206][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.343348][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.353647][ T1610] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 213.374543][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.383257][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.414548][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 213.424590][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 213.437127][ T7429] device veth0_vlan entered promiscuous mode [ 213.449186][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 213.457826][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 213.490536][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 213.501315][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 213.526530][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.535265][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.552566][ T7429] device veth1_macvtap entered promiscuous mode [ 213.582590][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 213.596074][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.612442][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.642871][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.657213][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.712942][ T7479] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 213.729213][ T341] device bridge_slave_1 left promiscuous mode [ 213.735311][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.746096][ T341] device bridge_slave_0 left promiscuous mode [ 213.757981][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.769068][ T341] device veth1_macvtap left promiscuous mode [ 213.775526][ T341] device veth0_vlan left promiscuous mode [ 213.959335][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.025103][ T7477] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.032025][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.039581][ T7477] device bridge_slave_0 entered promiscuous mode [ 214.052211][ T7477] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.086832][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.118986][ T7477] device bridge_slave_1 entered promiscuous mode [ 214.150502][ T7508] loop3: detected capacity change from 0 to 1024 [ 214.220209][ T7517] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 214.228200][ T7517] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 214.242483][ T7508] JBD2: no valid journal superblock found [ 214.248784][ T7508] EXT4-fs (loop3): error loading journal [ 214.249308][ T7519] loop1: detected capacity change from 0 to 512 [ 214.307105][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.317134][ T7519] EXT4-fs (loop1): orphan cleanup on readonly fs [ 214.324190][ T7519] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 97: padding at end of block bitmap is not set [ 214.339993][ T7519] Quota error (device loop1): write_blk: dquota write failed [ 214.357466][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.357573][ T7519] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 214.365980][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.399562][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.407522][ T7519] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 214.421479][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.429583][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.436465][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.443560][ T7519] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -117) [ 214.443916][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.461031][ T7519] EXT4-fs (loop1): 1 orphan inode deleted [ 214.462704][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.475361][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.482212][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.482386][ T341] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 214.489503][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.505666][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.522558][ T7477] device veth0_vlan entered promiscuous mode [ 214.529388][ T7519] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 214.530308][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.549660][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.558692][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.568024][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.575539][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.578940][ T7519] fuse: Bad value for 'fd' [ 214.599135][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.610279][ T7477] device veth1_macvtap entered promiscuous mode [ 214.627317][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.655013][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 214.684672][ T7551] loop3: detected capacity change from 0 to 512 [ 214.702203][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.726015][ T7551] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 214.752639][ T7551] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.3: invalid block [ 214.766093][ T7551] EXT4-fs (loop3): Remounting filesystem read-only [ 214.772651][ T7551] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 214.787037][ T7551] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 4294967295 (level 1) [ 214.802115][ T7551] EXT4-fs (loop3): 2 truncates cleaned up [ 214.809157][ T7551] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 214.852196][ T7551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1711042110 (109506695040 ns) > initial count (32441559296 ns). Using initial count to start timer. [ 214.923108][ T7571] loop4: detected capacity change from 0 to 512 [ 214.948226][ T7571] EXT4-fs (loop4): orphan cleanup on readonly fs [ 214.956461][ T7571] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 97: padding at end of block bitmap is not set [ 214.972941][ T7571] Quota error (device loop4): write_blk: dquota write failed [ 214.980214][ T7571] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 214.990582][ T7571] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 215.005179][ T7571] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 215.014267][ T7571] EXT4-fs (loop4): 1 orphan inode deleted [ 215.031387][ T341] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 215.040204][ T7571] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,,errors=continue. Quota mode: writeback. [ 215.055002][ T7571] fuse: Bad value for 'fd' [ 215.139701][ T7585] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.279403][ T7599] bridge: RTM_NEWNEIGH with invalid ether address [ 215.406998][ T7618] loop4: detected capacity change from 0 to 1024 [ 215.449927][ T7618] JBD2: no valid journal superblock found [ 215.456686][ T7618] EXT4-fs (loop4): error loading journal [ 215.523693][ T7627] bridge: RTM_NEWNEIGH with invalid ether address [ 216.208573][ T7653] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 216.226768][ T7653] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 216.286747][ T7655] device pim6reg1 entered promiscuous mode [ 216.380312][ T7663] device pim6reg1 entered promiscuous mode [ 216.464697][ T7674] bridge: RTM_NEWNEIGH with invalid ether address [ 216.512735][ T7690] loop4: detected capacity change from 0 to 16 [ 216.561005][ T7690] erofs: (device loop4): mounted with root inode @ nid 36. [ 216.568374][ T7694] device pim6reg1 entered promiscuous mode [ 216.576446][ T48] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 216.600070][ T7690] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 216.645752][ T26] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 216.999802][ T30] audit: type=1326 audit(1718610428.500:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ee7eea9 code=0x7ffc0000 [ 217.023946][ T30] audit: type=1326 audit(1718610428.500:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ee7eea9 code=0x7ffc0000 [ 217.055694][ T30] audit: type=1326 audit(1718610428.518:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fe27ee7eea9 code=0x7ffc0000 [ 217.082900][ T30] audit: type=1326 audit(1718610428.518:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7705 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27ee7eea9 code=0x7ffc0000 [ 217.107386][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.118325][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.128279][ T26] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 217.137323][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.146589][ T26] usb 1-1: config 0 descriptor?? [ 217.184466][ T7724] device pim6reg1 entered promiscuous mode [ 217.307428][ T7730] device syzkaller0 entered promiscuous mode [ 217.473542][ T7748] device pim6reg1 entered promiscuous mode [ 217.683579][ T26] dragonrise 0003:0079:0006.0032: unknown main item tag 0x0 [ 217.693119][ T26] dragonrise 0003:0079:0006.0032: unknown main item tag 0x0 [ 217.706552][ T26] dragonrise 0003:0079:0006.0032: unknown main item tag 0x0 [ 217.724560][ T26] dragonrise 0003:0079:0006.0032: unknown main item tag 0x0 [ 217.735283][ T26] dragonrise 0003:0079:0006.0032: unknown main item tag 0x0 [ 217.752626][ T26] dragonrise 0003:0079:0006.0032: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 217.775474][ T26] dragonrise 0003:0079:0006.0032: no inputs found [ 217.800139][ T26] dragonrise 0003:0079:0006.0032: force feedback init failed [ 217.900906][ T20] usb 1-1: USB disconnect, device number 25 [ 217.927612][ T7764] loop3: detected capacity change from 0 to 512 [ 217.966742][ T7764] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 217.984341][ T7770] Invalid ELF header type: 0 != 1 [ 217.989019][ T7764] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 218.011041][ T7764] System zones: 1-12 [ 218.017149][ T7764] EXT4-fs (loop3): orphan cleanup on readonly fs [ 218.023545][ T7764] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz-executor.3: Inode bitmap for bg 0 marked uninitialized [ 218.037179][ T7764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 218.132113][ T7773] loop4: detected capacity change from 0 to 16 [ 218.175270][ T7773] erofs: (device loop4): mounted with root inode @ nid 36. [ 218.184193][ T49] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 218.205967][ T7773] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 218.314796][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.350020][ T7803] incfs: mount failed -22 [ 218.367395][ T7807] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.374689][ T7807] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.381607][ T7807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.467830][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.496311][ T7829] incfs: mount failed -22 [ 218.520820][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.531441][ T7835] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.538348][ T7835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.613181][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.656788][ T7861] incfs: mount failed -22 [ 218.733709][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.741533][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.748380][ T7869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.791643][ T7879] Invalid ELF header type: 0 != 1 [ 218.847893][ T20] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 219.334695][ T7892] incfs: mount failed -22 [ 219.478712][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.489845][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.731055][ T20] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 219.740072][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.775785][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.783131][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.790017][ T7902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.806042][ T20] usb 2-1: config 0 descriptor?? [ 219.816476][ T7906] loop0: detected capacity change from 0 to 512 [ 219.834318][ T7906] EXT4-fs (loop0): bad s_want_extra_isize: 11962 [ 219.879110][ T7912] device syzkaller0 entered promiscuous mode [ 219.936323][ T7916] loop0: detected capacity change from 0 to 256 [ 219.958574][ T7918] incfs: mount failed -22 [ 220.027321][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.034594][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.041555][ T7926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.569446][ T20] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 220.576602][ T20] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 220.583814][ T20] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 220.591379][ T20] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 220.599878][ T20] dragonrise 0003:0079:0006.0033: unknown main item tag 0x0 [ 220.608025][ T20] dragonrise 0003:0079:0006.0033: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 220.619794][ T20] dragonrise 0003:0079:0006.0033: no inputs found [ 220.626656][ T20] dragonrise 0003:0079:0006.0033: force feedback init failed [ 220.646186][ T7939] loop4: detected capacity change from 0 to 512 [ 220.666631][ T7939] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 220.670488][ T6102] usb 2-1: USB disconnect, device number 25 [ 220.829649][ T7943] device syzkaller0 entered promiscuous mode [ 220.911923][ T7945] netem: change failed [ 220.923838][ T7947] loop0: detected capacity change from 0 to 256 [ 221.091295][ T7958] loop0: detected capacity change from 0 to 256 [ 221.287502][ T7958] FAT-fs (loop0): Directory bread(block 64) failed [ 221.338410][ T7958] FAT-fs (loop0): Directory bread(block 65) failed [ 221.370068][ T7958] FAT-fs (loop0): Directory bread(block 66) failed [ 221.401129][ T7958] FAT-fs (loop0): Directory bread(block 67) failed [ 221.424035][ T7958] FAT-fs (loop0): Directory bread(block 68) failed [ 221.430486][ T7958] FAT-fs (loop0): Directory bread(block 69) failed [ 221.437021][ T7958] FAT-fs (loop0): Directory bread(block 70) failed [ 221.443370][ T7958] FAT-fs (loop0): Directory bread(block 71) failed [ 221.449961][ T7958] FAT-fs (loop0): Directory bread(block 72) failed [ 221.456231][ T7958] FAT-fs (loop0): Directory bread(block 73) failed [ 221.476912][ T7963] loop1: detected capacity change from 0 to 512 [ 221.488457][ T336] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 221.506199][ T7965] loop0: detected capacity change from 0 to 512 [ 221.521446][ T7963] EXT4-fs (loop1): bad geometry: first data block 1 is beyond end of filesystem (0) [ 221.542780][ T7965] EXT4-fs (loop0): bad s_want_extra_isize: 11962 [ 221.641635][ T7969] loop0: detected capacity change from 0 to 128 [ 222.118561][ T7975] device syzkaller0 entered promiscuous mode [ 222.133806][ T336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.144584][ T336] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 222.157262][ T336] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 222.166150][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.174881][ T336] usb 5-1: config 0 descriptor?? [ 222.870841][ T7989] loop0: detected capacity change from 0 to 1024 [ 222.900827][ T7989] EXT4-fs (loop0): Ignoring removed orlov option [ 222.907070][ T7989] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 222.923484][ T7989] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 222.949779][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 222.949795][ T30] audit: type=1400 audit(1718610434.056:2426): avc: denied { map } for pid=7988 comm="syz-executor.0" path="/root/syzkaller-testdir747345904/syzkaller.myL1aN/57/file1/file0/bus" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 222.962257][ T7989] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.0: corrupt xattr in inline inode [ 222.998319][ T7989] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr [ 223.019012][ T7429] ================================================================== [ 223.026985][ T7429] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 223.034875][ T7429] Read of size 4 at addr ffff888130e68000 by task syz-executor.0/7429 [ 223.042864][ T7429] [ 223.045030][ T7429] CPU: 1 PID: 7429 Comm: syz-executor.0 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 223.056571][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 223.066478][ T7429] Call Trace: [ 223.069594][ T7429] 2024/06/17 07:47:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 223.072369][ T7429] dump_stack_lvl+0x151/0x1b7 [ 223.076888][ T7429] ? io_uring_drop_tctx_refs+0x190/0x190 [ 223.082529][ T7429] ? panic+0x751/0x751 [ 223.086435][ T7429] print_address_description+0x87/0x3b0 [ 223.091818][ T7429] kasan_report+0x179/0x1c0 [ 223.096157][ T7429] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 223.101711][ T7429] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 223.107182][ T7429] __asan_report_load4_noabort+0x14/0x20 [ 223.112648][ T7429] ext4_xattr_delete_inode+0xcd0/0xce0 [ 223.117942][ T7429] ? sb_end_intwrite+0x120/0x120 [ 223.122713][ T7429] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 223.128617][ T7429] ? ext4_journal_check_start+0x16c/0x230 [ 223.134170][ T7429] ? __kasan_check_read+0x11/0x20 [ 223.139042][ T7429] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 223.144755][ T7429] ? ext4_evict_inode+0xb8d/0x14e0 [ 223.149708][ T7429] ext4_evict_inode+0xea1/0x14e0 [ 223.154476][ T7429] ? _raw_spin_unlock+0x4d/0x70 [ 223.159172][ T7429] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 223.164895][ T7429] ? _raw_spin_unlock+0x4d/0x70 [ 223.169583][ T7429] ? inode_io_list_del+0x18b/0x1a0 [ 223.174527][ T7429] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 223.180257][ T7429] evict+0x2a3/0x630 [ 223.183991][ T7429] iput+0x63b/0x7e0 [ 223.187635][ T7429] vfs_rmdir+0x359/0x470 [ 223.191713][ T7429] do_rmdir+0x3ab/0x630 [ 223.195713][ T7429] ? d_delete_notify+0x160/0x160 [ 223.200484][ T7429] __x64_sys_unlinkat+0xdf/0xf0 [ 223.205165][ T7429] do_syscall_64+0x3d/0xb0 [ 223.209418][ T7429] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 223.215157][ T7429] RIP: 0033:0x7fe7097fa687 [ 223.219400][ T7429] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 223.238846][ T7429] RSP: 002b:00007fffe6c1ea28 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 223.247096][ T7429] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fe7097fa687 [ 223.254904][ T7429] RDX: 0000000000000200 RSI: 00007fffe6c1fbd0 RDI: 00000000ffffff9c [ 223.262707][ T7429] RBP: 00007fe709857636 R08: 0000000000000000 R09: 0000000000000000 [ 223.270522][ T7429] R10: 0000000000000100 R11: 00000