last executing test programs: 16.965207917s ago: executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) unshare(0x400) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, 0x0) 16.88330073s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000000)={[{@init_itable}, {@noquota}, {@quota}, {@barrier}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@test_dummy_encryption}, {@usrquota}]}, 0x10, 0x4ec, &(0x7f0000000a40)="$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") syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x80}}, 0xc040080) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x4002, 0x0) 14.328480203s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local}, 0x10) 14.212132441s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 13.24562194s ago: executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0) 13.168348852s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r3 = eventfd2(0x800000, 0x0) dup2(r3, r2) write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/55, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1, r3}) 9.453155434s ago: executing program 4: syz_read_part_table(0x609, &(0x7f0000000d40)="$eJzs1E9rXFUYB+DfnczMnSmGBC0oIjRQ6CrEhXQRcLBBVLppQ6niwp0gCHVhoWBXE9ouRYpbIW4qlFLIF9CNlLRQ3LgKLktxbxGhRDwy98aZli5cJBAtz7M45z3vPf8u59wb/tc6qcelVMOM/8n0+nvBS23VTymlTAdc//jyhWnj/VvHbyfra+fOJ0c2Pkqy9NoLycJ0rtlCd55etyzslgzzaDBLVZOim2QjyWcPbjRhdzbL4jObr/fx4jwXtkZf/Jjm3oyGGaSXb5LV79pn4w9efvPDTlXNbmF1ahr2Dmr97WPNxU2dnemcS8n8SvetJPf2MsuTTr+28Xb7rVVnnpyo01Zz7WfwtOEzmQPaPfu1NdpeuHrtYv/rbtN8+O3RB79c6eXEzUuvL7/YuzO+XrWHdyzJoD/5yVXNYc8d8r4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDnz9Zoe6G/F+98Xj9845PuXmux/FVKSVInmXQZtPkqw4UjZVJn42DWv3r/y2Hq0ac7j0sp5VRKOfvb5vxK724vZzf31l2uMn5i2OZuW/f3vwMOU3P+1y6+99Xl0R+329TgyuMzJwZVE9dNOUx+7w/GRy8l6czGDg9lxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf907755eWl87dz5J1R0k6Sze2J48OPlK26Ekr/5w8uaFe2urTXtlUvzZP13Xu+X+249uLf50/Oe7c1mv2+7fd5JSrc6n220TW03ZO4x349/9HQAA///wjWn4") creat(&(0x7f0000000480)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup3(r1, r0, 0x0) io_setup(0x8006, &(0x7f0000000240)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a07}]) 8.280713085s ago: executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 8.071684967s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 7.00942307s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) 6.923098764s ago: executing program 4: creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1) connect$inet6(r0, &(0x7f0000000040), 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 5.468850988s ago: executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000100)) 4.140144312s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x44}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}, @TCA_RATE={0x6}]}, 0x68}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000006280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000180)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2}}}], 0x20}}], 0x1, 0x48040) sendto$unix(r6, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}}) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 4.000231814s ago: executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x5, 0x5, 0x1106, 0xffffffffffffffff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='sys_enter\x00', r6}, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, 0x0, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x40}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000001200000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r8, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x308800, 0x800}, 0x20) syz_usb_connect(0x0, 0x45, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000e44d2082104350312960000000109023300010000000009040000000202ff0005240000000d240f01000000000000000000062413"], 0x0) 3.757856101s ago: executing program 0: creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1) connect$inet6(r0, &(0x7f0000000040), 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 3.668278675s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000000)={[{@init_itable}, {@noquota}, {@quota}, {@barrier}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@test_dummy_encryption}, {@usrquota}]}, 0x10, 0x4ec, &(0x7f0000000a40)="$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") syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x80}}, 0xc040080) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x4002, 0x0) 3.206068926s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x560}]}) 3.127028099s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f61636c2c66617374626f6f74006e6f6c616b7974696d652c66737c6e635f6d6f64653d7374726963742c00943117d12f8dd1f756501f9b3320f59cbfb96561be7420d1d3cff9acece8a4a6a6e4ed8e7c4e791c8750448fe792dda6f215756c0b2ce2746a15156ff1c3b988522badc39d4443eb56b466b74c8325348efff88ee91189898912a9c0a46fcfa48ef117c9eb129652a6ca2216d710bc8a7dd69044934d6b3c979a31bd5b077d4cedc40ef1f54ff5dca6ab8e96552fdb07e5f8912f3bd3d0d383997e8212e4f5e0fff1a1939dee17b8d2518868575604bc51b9cbd9eb31a42a7c07d2ff5f91a20bacb9e9a72a2dc5d7bd3d54ee6e2c04b9212f9b6526c7b7f93f587243a70e9f0d54e4411cb101f227a8add5021c1b121dad14f577a9807ce4bdfe6bda328bbaf25c4c250cce649974ebe565929a26f5a7b80587fdd52c00d9b91577b03bc99ad01d7761a8993455a6120e653241794c28c7c98d146ffbf125a87e64b4fb20185a10062fe8b1e5499e81770f9b0d481fc6221c053848459233a5922ebba66704cdd592d946dc2264c5971bdaff77f855617e64b8eeea0dc0f3b46cfebe178c9c6b1459b90b3ee74281b94c0b16fed4690d0b5a8576f540cc0619f06bd4b8218fdeaf45004db67caa29d01b3fd8a20282b46f891c28639ad398bba2e45d66e794b9a0566cd8abbc0025098220412b224ae69875a348cf0025bf2a5d5bf3a7376d5da45e5aaf7555620642e53c21b6aee5213728859a4c16d5ba5bd3ad716b5a63b60077f9720e1c1ef897c4a01c785a6035ffbb08fc58b43effca6e73905488836fcf5463e988ce32c837a24c4248786dfa760e0c859b6dcb3ed4986227dd07b9e7940573d76f725ebe0aba785cccef42d6a92510ea118dc038eb35cef2f5fe244567f3af411afd06e9c500da949123fb23fc67201ebbfbc30dc278c91eed0dfac998881f1484709bad9776dee56cbde8bf6d", @ANYRES8=0x0, @ANYRES64], 0x43, 0x5542, &(0x7f0000007240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000580)={0x0, 0x1}) 2.118567214s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001cc344000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000000c0)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000840), &(0x7f00000008c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={r1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0xa, 0x4, 0x5, 0x0, r6}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x11, 0x1, 0x101, 0x126b, 0x200, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0xa, 0x4, 0x5, 0x0, r8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r9, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x1, &(0x7f00000005c0)=@raw=[@alu={0x7, 0x0, 0x3, 0xb, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x4f, &(0x7f0000000640)=""/79, 0x40f00, 0x5, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[r5, r6, r1, r1, r1, r1, r7, r9], &(0x7f0000000c40)=[{0x1, 0x4, 0x8, 0x8}, {0x1, 0x1, 0x9, 0xa}, {0x3, 0x3, 0x4, 0x6}, {0x5, 0x2, 0x6, 0x8}, {0x4, 0x3, 0xd, 0x4}, {0x0, 0x5, 0x340, 0x2}], 0x10, 0x6}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000600000000000000fc73000009087f00000200109500000000000000"], &(0x7f0000000880)='GPL\x00', 0x1f, 0x93, &(0x7f0000000cc0)=""/147, 0x0, 0x2, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x8, 0x10, 0x0, 0x0, r3}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xd, &(0x7f0000000300)=@raw=[@ldst={0x1, 0x3, 0x1, 0x2, 0xb, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xdd63}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xdb, &(0x7f0000000380)=""/219, 0x40f00, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x9, 0x6, 0x40}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x10, 0x4}, 0x90) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x4901}) close(r10) 1.865224793s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x4, 0xfff, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='mm_page_alloc\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r8}, 0x10) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) io_setup(0x9, &(0x7f0000000b80)=0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}]) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x8, 0x2}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) mknodat(r2, &(0x7f0000000000)='./file0/file0\x00', 0x8, 0x2) read$FUSE(r1, &(0x7f0000000cc0)={0x2020}, 0x2020) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) r11 = dup2(r2, r2) ioctl$BTRFS_IOC_LOGICAL_INO(r11, 0xc0389424, &(0x7f0000000200)={0x100, 0x28, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$setpipe(r2, 0x407, 0x7000000) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000001c00128042181209000100766c616e000000000c0002800600010000000000080005005d01f8810e02021af2d1cfd70d59ee310c000b653fbc61862811d5180cb1fe2f885cdaef6eed38ce4e253f400566141ee86ca23173235d5c986b6592d036a42069b37b7d6bd61566c8680ac2289807b2f2d7e3992b74d1", @ANYRES32=r13, @ANYBLOB="080004"], 0x4c}}, 0x0) fstatfs(r0, &(0x7f00000002c0)=""/56) 1.641717527s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.542431372s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) 1.492265811s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180300"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {}, {@broadcast, 0x52b3}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000480)={[{@errors_remount}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000000)='./file0\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.380947017s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 529.740459ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18060000000000000000000000000000850000005400000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 187.210261ms ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0xfffffffffffffe6f, &(0x7f0000000000)={0x4000000000003a}, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) ftruncate(0xffffffffffffffff, 0xc17a) syz_emit_ethernet(0xae, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x78, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f267d5", 0x0, 0x2f, 0x0, @remote, @remote, [@srh={0xb8, 0x8, 0x4, 0x4, 0x40, 0x0, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @empty}, @private2, @empty]}]}}}}}}}, 0x0) 125.669921ms ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1e1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349bfd2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'batadv0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x4a) 57.946571ms ago: executing program 1: creat(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1) connect$inet6(r0, &(0x7f0000000040), 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 52.610102ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4500, &(0x7f0000000000)={[{@init_itable}, {@noquota}, {@quota}, {@barrier}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@barrier}, {@test_dummy_encryption}, {@usrquota}]}, 0x10, 0x4ec, &(0x7f0000000a40)="$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") syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x80}}, 0xc040080) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x4002, 0x0) kernel console output (not intermixed with test programs): T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.910110][ T1399] syz-executor.4 (1399) used greatest stack depth: 19448 bytes left [ 91.114711][ T1403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.312299][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.384592][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.416430][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.435541][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.447449][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.454545][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.469452][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.484880][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.493449][ T18] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.500470][ T18] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.564014][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.572066][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.591957][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.614796][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.625081][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.683924][ T1444] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 91.696369][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.697406][ T1444] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 91.708188][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.749663][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.761987][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.865834][ T1447] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 91.865834][ T1447] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 91.865834][ T1447] [ 91.915574][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.930755][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.938252][ T1447] EXT4-fs error (device loop0): ext4_read_inode_bitmap:134: comm syz-executor.0: Invalid inode bitmap blk 4 in block_group 0 [ 91.976193][ T1447] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,noacl,data_err=abort,noload,nobarrier,lazytime,,errors=continue [ 92.010537][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.045309][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.083679][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.101523][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.271705][ T1471] input: syz1 as /devices/virtual/input/input8 [ 92.394026][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.400946][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.435299][ T1433] device bridge_slave_0 entered promiscuous mode [ 92.467368][ T1479] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.476715][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.483582][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.502939][ T1433] device bridge_slave_1 entered promiscuous mode [ 92.975079][ T1483] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 93.496429][ T412] device bridge_slave_1 left promiscuous mode [ 93.510580][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.519375][ T412] device bridge_slave_0 left promiscuous mode [ 93.525822][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.848745][ T1499] 9pnet: Could not find request transport: fd0x000000000000000a [ 93.948160][ T1502] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.984127][ T380] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.005228][ T1505] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.229290][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.268420][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.303523][ T1510] input: syz1 as /devices/virtual/input/input9 [ 94.305071][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.349616][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.354339][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 94.365726][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.377283][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.380484][ T380] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 94.390436][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.406279][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.416089][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.423949][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.443925][ T380] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.459709][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.468950][ T1512] tipc: Started in network mode [ 94.473755][ T1512] tipc: Own node identity , cluster identity 4711 [ 94.478917][ T380] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.481563][ T1512] tipc: Failed to obtain node identity [ 94.497419][ T380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.514768][ T1512] tipc: Enabling of bearer rejected, failed to enable media [ 94.516677][ T380] usb 5-1: config 0 descriptor?? [ 94.544024][ T1501] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 94.545388][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.560266][ T915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.605231][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 94.605261][ T23] audit: type=1400 audit(1718666714.540:230): avc: denied { create } for pid=1513 comm="syz-executor.1" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 94.674107][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.688946][ T23] audit: type=1400 audit(1718666714.570:231): avc: denied { setattr } for pid=1513 comm="syz-executor.1" name="file0" dev="sda1" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 94.705908][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.754780][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.757091][ T23] audit: type=1400 audit(1718666714.570:232): avc: denied { write } for pid=1513 comm="syz-executor.1" name="file0" dev="sda1" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 94.763302][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.787317][ T23] audit: type=1400 audit(1718666714.570:233): avc: denied { open } for pid=1513 comm="syz-executor.1" path="/root/syzkaller-testdir1770470580/syzkaller.CI2zVM/26/file0" dev="sda1" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 94.822687][ T23] audit: type=1400 audit(1718666714.620:234): avc: denied { unlink } for pid=1240 comm="syz-executor.1" name="file0" dev="sda1" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 94.943329][ T1519] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 95.042934][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.055422][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.067340][ T380] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 95.079436][ T380] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 95.082695][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.095012][ T380] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 95.100103][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.141622][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.156895][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.969346][ T1523] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 95.995161][ T457] usb 5-1: USB disconnect, device number 3 [ 96.094240][ T1523] Quota error (device loop0): write_blk: dquota write failed [ 96.096680][ T380] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.101743][ T1523] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 96.138507][ T1523] EXT4-fs (loop0): 1 truncate cleaned up [ 96.144233][ T1523] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 96.153282][ T1523] ext4 filesystem being mounted at /root/syzkaller-testdir1767629637/syzkaller.MylcW0/37/file0 supports timestamps until 2038 (0x7fffffff) [ 96.372491][ T23] audit: type=1400 audit(1718666716.300:235): avc: denied { ioctl } for pid=1537 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.413624][ T1540] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.439084][ T23] audit: type=1400 audit(1718666716.300:236): avc: denied { set_context_mgr } for pid=1537 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 96.488885][ T1544] input: syz1 as /devices/virtual/input/input11 [ 96.504004][ T380] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.559912][ T23] audit: type=1400 audit(1718666716.300:237): avc: denied { map } for pid=1537 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 96.563959][ T380] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 96.634097][ T380] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 96.654705][ T380] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.672950][ T380] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.701682][ T1550] tipc: Started in network mode [ 96.706773][ T1550] tipc: Own node identity , cluster identity 4711 [ 96.715638][ T1550] tipc: Failed to obtain node identity [ 96.722517][ T1550] tipc: Enabling of bearer rejected, failed to enable media [ 96.851493][ T1556] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 96.871181][ T380] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.882003][ T1560] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 96.893362][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.903974][ T1556] EXT4-fs (loop0): 1 truncate cleaned up [ 96.909749][ T1556] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 96.919653][ T380] usb 2-1: Product: syz [ 96.924403][ T380] usb 2-1: Manufacturer: syz [ 96.929379][ T1556] ext4 filesystem being mounted at /root/syzkaller-testdir1767629637/syzkaller.MylcW0/41/file0 supports timestamps until 2038 (0x7fffffff) [ 96.944737][ T380] usb 2-1: SerialNumber: syz [ 97.223728][ T1546] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.264939][ T380] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 97.349435][ T380] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 97.402858][ T380] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 97.424545][ T380] usb 2-1: 2:1 : invalid channels 0 [ 97.521952][ T1579] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 97.555214][ T380] usb 2-1: USB disconnect, device number 4 [ 97.658839][ T1579] EXT4-fs error (device loop4): ext4_orphan_get:1236: inode #15: comm syz-executor.4: iget: bad extended attribute block 19 [ 97.687179][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.704675][ T1579] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 97.738577][ T1579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 97.778818][ T1579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 65: padding at end of block bitmap is not set [ 97.855889][ T1546] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 97.971722][ T1594] attempt to access beyond end of device [ 97.971722][ T1594] loop2: rw=34817, want=78080, limit=40427 [ 97.996246][ T1596] input: syz1 as /devices/virtual/input/input12 [ 98.075006][ T1593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 98.100906][ T1593] ext4 filesystem being mounted at /root/syzkaller-testdir3138002072/syzkaller.gv1R1R/6/file0 supports timestamps until 2038 (0x7fffffff) [ 98.117213][ T1603] Zero length message leads to an empty skb [ 98.137424][ T1593] fs-verity (loop3, inode 13): Unknown hash algorithm number: 0 [ 98.296325][ T1607] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.380280][ T1612] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 98.384375][ T1353] attempt to access beyond end of device [ 98.384375][ T1353] loop2: rw=2049, want=45104, limit=40427 [ 98.916884][ T1627] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 98.947000][ T1627] ext4 filesystem being mounted at /root/syzkaller-testdir1767629637/syzkaller.MylcW0/48/file0 supports timestamps until 2038 (0x7fffffff) [ 99.023455][ T1627] fs-verity (loop0, inode 13): Unknown hash algorithm number: 0 [ 99.741849][ T1669] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 99.809676][ T1669] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 99.830456][ T1669] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 99.850855][ T1669] __quota_error: 17 callbacks suppressed [ 99.850880][ T1669] Quota error (device loop2): write_blk: dquota write failed [ 99.884259][ T1669] Quota error (device loop2): qtree_write_dquot: Error -27 occurred while creating quota [ 99.904836][ T1669] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 99.946000][ T1669] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 99.969709][ T1669] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 99.991484][ T1669] EXT4-fs error (device loop2) in ext4_orphan_del:3211: error 27 [ 100.040444][ T1669] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 100.062289][ T1669] EXT4-fs error (device loop2) in ext4_orphan_cleanup:2816: error 27 [ 100.083122][ T1669] EXT4-fs (loop2): 1 truncate cleaned up [ 100.099376][ T1669] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,resuid=0x0000000000000000,user_xattr,barrier,usrquota,usrquota,resuid=0x0000000000000000,,errors=continue [ 100.150605][ T1669] ext4 filesystem being mounted at /root/syzkaller-testdir946915960/syzkaller.8SZMgf/13/file1 supports timestamps until 2038 (0x7fffffff) [ 100.355342][ T23] audit: type=1400 audit(1718666720.290:251): avc: denied { remove_name } for pid=1668 comm="syz-executor.2" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.447006][ T1669] EXT4-fs error (device loop2): ext4_generic_delete_entry:2620: inode #2: block 3: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=8, size=4096 fake=0 [ 100.544847][ T1669] EXT4-fs error (device loop2) in ext4_delete_entry:2679: Corrupt filesystem [ 100.568931][ T23] audit: type=1400 audit(1718666720.380:252): avc: denied { rename } for pid=1668 comm="syz-executor.2" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 100.570391][ T1669] EXT4-fs warning (device loop2): ext4_rename_delete:3787: inode #2: comm syz-executor.2: Deleting old file: nlink 5, error=-117 [ 100.761004][ T1650] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.983505][ T1710] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 101.069297][ T1650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.466172][ T23] audit: type=1400 audit(1718666721.280:253): avc: denied { execute } for pid=1705 comm="syz-executor.2" path="/root/syzkaller-testdir946915960/syzkaller.8SZMgf/15/file0/bus" dev="tmpfs" ino=20863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 102.057448][ T1721] attempt to access beyond end of device [ 102.057448][ T1721] loop0: rw=34817, want=78080, limit=40427 [ 102.081727][ T1722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=1722 comm=syz-executor.3 [ 102.341433][ T1734] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 102.513409][ T23] audit: type=1400 audit(1718666722.440:254): avc: denied { unmount } for pid=969 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 102.540648][ T969] attempt to access beyond end of device [ 102.540648][ T969] loop0: rw=2049, want=45104, limit=40427 [ 102.764229][ T380] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.798968][ T1745] EXT4-fs error (device loop2): ext4_validate_block_bitmap:418: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set [ 102.827404][ T1745] Quota error (device loop2): write_blk: dquota write failed [ 102.852878][ T1745] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 102.864067][ T1745] EXT4-fs (loop2): 1 truncate cleaned up [ 102.869684][ T1745] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 102.879440][ T1745] ext4 filesystem being mounted at /root/syzkaller-testdir946915960/syzkaller.8SZMgf/18/file0 supports timestamps until 2038 (0x7fffffff) [ 102.880038][ T23] audit: type=1400 audit(1718666722.810:255): avc: denied { mount } for pid=1744 comm="syz-executor.2" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 105.754045][ T380] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 105.761635][ T380] usb 4-1: can't read configurations, error -71 [ 105.806924][ T1778] binder: BINDER_SET_CONTEXT_MGR already set [ 105.843996][ T1778] binder: 1776:1778 ioctl 4018620d 20000040 returned -16 [ 105.945595][ T1775] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 105.946350][ T1781] overlayfs: unrecognized mount option "\" or missing value [ 105.974719][ T1775] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 105.996030][ T1775] Quota error (device loop3): write_blk: dquota write failed [ 106.014050][ T1775] Quota error (device loop3): qtree_write_dquot: Error -27 occurred while creating quota [ 106.045988][ T1775] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 106.062394][ T1775] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 106.144230][ T1775] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 106.170953][ T1775] EXT4-fs error (device loop3) in ext4_orphan_del:3211: error 27 [ 106.194221][ T1775] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 106.262863][ T1775] EXT4-fs error (device loop3) in ext4_orphan_cleanup:2816: error 27 [ 106.271856][ T1775] EXT4-fs (loop3): 1 truncate cleaned up [ 106.277623][ T1775] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,resuid=0x0000000000000000,user_xattr,barrier,usrquota,usrquota,resuid=0x0000000000000000,,errors=continue [ 106.298919][ T1775] ext4 filesystem being mounted at /root/syzkaller-testdir3138002072/syzkaller.gv1R1R/19/file1 supports timestamps until 2038 (0x7fffffff) [ 106.327397][ T23] audit: type=1400 audit(1718666726.260:256): avc: denied { getopt } for pid=1788 comm="syz-executor.2" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.335924][ T1775] EXT4-fs error (device loop3): ext4_generic_delete_entry:2620: inode #2: block 3: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=8, size=4096 fake=0 [ 106.488753][ T1775] EXT4-fs error (device loop3) in ext4_delete_entry:2679: Corrupt filesystem [ 106.580905][ T1775] EXT4-fs warning (device loop3): ext4_rename_delete:3787: inode #2: comm syz-executor.3: Deleting old file: nlink 5, error=-117 [ 107.774385][ T457] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.895447][ T1773] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.117901][ T23] audit: type=1400 audit(1718666728.050:257): avc: denied { read } for pid=1817 comm="syz-executor.4" path="socket:[21062]" dev="sockfs" ino=21062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 108.167262][ T23] audit: type=1326 audit(1718666728.100:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1819 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7f0279f29 code=0x0 [ 108.206875][ T1773] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.224282][ T457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 108.241487][ T457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 108.253043][ T457] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.266223][ T457] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.276204][ T457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.287030][ T457] usb 1-1: config 0 descriptor?? [ 108.305990][ T1823] attempt to access beyond end of device [ 108.305990][ T1823] loop1: rw=34817, want=78080, limit=40427 [ 108.317623][ T1803] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 108.514365][ T1240] attempt to access beyond end of device [ 108.514365][ T1240] loop1: rw=2049, want=45104, limit=40427 [ 108.693892][ T399] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.825109][ T457] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 108.841881][ T457] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 108.858034][ T457] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 109.793917][ T587] usb 1-1: USB disconnect, device number 4 [ 109.944072][ T399] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 109.965504][ T1845] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 109.979246][ T1845] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 109.989373][ T1845] Quota error (device loop4): write_blk: dquota write failed [ 110.004152][ T1845] Quota error (device loop4): qtree_write_dquot: Error -27 occurred while creating quota [ 110.015925][ T1845] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 110.025205][ T1845] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 110.033587][ T1845] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 110.042917][ T1845] EXT4-fs error (device loop4) in ext4_orphan_del:3211: error 27 [ 110.051536][ T1845] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 110.061489][ T1845] EXT4-fs error (device loop4) in ext4_orphan_cleanup:2816: error 27 [ 110.170334][ T399] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.40 [ 110.189247][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.232143][ T399] usb 4-1: Product: syz [ 110.252703][ T399] usb 4-1: Manufacturer: ä¿©â€ä›ªå¦§ä„¸æ‡²â”€ç“‹ä´â¤¦â®«æ…痣礅᭭쑯ໆá–狙봶뚘㨼篗짲♿붉碤⳯兎䮕ڌ霦뮟⎇ä½æ®³å´³æ¦•ê­œé¹¿æŒ§îš†äˆˆî²«î±²ä¡¸ç°†ë¾±ï±à¨ºá™™â»­ã‹Ó¬êª¸ì›³ï¥³éº¥âºª [ 110.280396][ T1845] EXT4-fs (loop4): 1 truncate cleaned up [ 110.300482][ T1845] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,resuid=0x0000000000000000,user_xattr,barrier,usrquota,usrquota,resuid=0x0000000000000000,,errors=continue [ 110.463920][ T1845] ext4 filesystem being mounted at /root/syzkaller-testdir3269281140/syzkaller.j2cHGK/103/file1 supports timestamps until 2038 (0x7fffffff) [ 110.503769][ T1845] EXT4-fs error (device loop4): ext4_generic_delete_entry:2620: inode #2: block 3: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=8, size=4096 fake=0 [ 110.513000][ T399] usb 4-1: SerialNumber: syz [ 110.542825][ T23] audit: type=1400 audit(1718666730.470:259): avc: denied { ioctl } for pid=1854 comm="syz-executor.2" path="socket:[22023]" dev="sockfs" ino=22023 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.583240][ T1845] EXT4-fs error (device loop4) in ext4_delete_entry:2679: Corrupt filesystem [ 110.608237][ T1845] EXT4-fs warning (device loop4): ext4_rename_delete:3787: inode #2: comm syz-executor.4: Deleting old file: nlink 5, error=-117 [ 110.625624][ T399] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 110.673296][ T23] audit: type=1400 audit(1718666730.600:260): avc: denied { write } for pid=1863 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 110.891022][ T915] usb 4-1: USB disconnect, device number 4 [ 111.034143][ T399] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.206353][ T1862] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.381707][ T1862] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.474030][ T399] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 111.504331][ T1898] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 111.524957][ T1900] IPv4: Oversized IP packet from 127.202.26.0 [ 111.529586][ T1899] attempt to access beyond end of device [ 111.529586][ T1899] loop2: rw=34817, want=78080, limit=40427 [ 111.694101][ T399] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.703530][ T399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.712279][ T399] usb 1-1: Product: syz [ 111.723291][ T399] usb 1-1: Manufacturer: syz [ 111.738610][ T399] usb 1-1: SerialNumber: syz [ 111.781603][ T1353] attempt to access beyond end of device [ 111.781603][ T1353] loop2: rw=2049, want=45104, limit=40427 [ 111.814468][ T399] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 112.021948][ T399] usb 1-1: USB disconnect, device number 5 [ 112.353866][ T23] audit: type=1400 audit(1718666732.280:261): avc: denied { nlmsg_write } for pid=1934 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 112.409114][ T23] audit: type=1400 audit(1718666732.330:262): avc: denied { relabelfrom } for pid=1932 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 112.584391][ T23] audit: type=1400 audit(1718666732.330:263): avc: denied { relabelto } for pid=1932 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 113.002340][ T23] audit: type=1400 audit(1718666732.930:264): avc: denied { getopt } for pid=1939 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.159672][ T1958] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 114.371150][ T1963] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 114.402101][ T1963] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 114.529107][ T1963] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 114.623160][ T1963] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 114.821241][ T23] audit: type=1400 audit(1718666734.250:265): avc: denied { map } for pid=1949 comm="syz-executor.4" path="/dev/ashmem" dev="devtmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.852736][ T1963] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 114.885030][ T1963] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 114.912791][ T1963] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.948065][ T23] audit: type=1400 audit(1718666734.880:266): avc: denied { getopt } for pid=1956 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 114.973700][ T1958] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.024110][ T1958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.117540][ T1958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1958 comm=syz-executor.1 [ 115.178766][ T1979] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 115.435205][ T23] audit: type=1400 audit(1718666735.370:267): avc: denied { setopt } for pid=1990 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.619228][ T2001] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 115.659286][ T2001] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 115.674301][ T2001] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 115.693434][ T2001] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 115.704854][ T2001] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.774644][ T23] audit: type=1400 audit(1718666735.700:268): avc: denied { read } for pid=2004 comm="syz-executor.0" path="socket:[21485]" dev="sockfs" ino=21485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.830803][ T2003] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 115.864000][ T2012] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program [ 115.886145][ T2003] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.923730][ T2003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.974184][ T2003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2003 comm=syz-executor.2 [ 116.233887][ T915] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.323950][ T457] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.704108][ T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 116.725608][ T457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 116.763895][ T457] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.807518][ T457] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.857095][ T457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.864073][ T915] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 116.868557][ T457] usb 5-1: config 0 descriptor?? [ 117.024689][ T23] audit: type=1400 audit(1718666736.930:269): avc: denied { bind } for pid=2037 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.125992][ T2022] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 117.147667][ T23] audit: type=1400 audit(1718666736.940:270): avc: denied { setopt } for pid=2037 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.265061][ T915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.300231][ T915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.385852][ T915] usb 2-1: Product: syz [ 117.426705][ T915] usb 2-1: Manufacturer: syz [ 117.704441][ T915] usb 2-1: SerialNumber: syz [ 117.815429][ T915] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 117.867072][ T457] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 117.881743][ T457] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 117.909561][ T457] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 118.046754][ T915] usb 2-1: USB disconnect, device number 5 [ 118.205887][ T18] usb 5-1: USB disconnect, device number 4 [ 118.892586][ T2058] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 119.663920][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.046418][ T2083] process 'syz-executor.3' launched './file1' with NULL argv: empty string added [ 120.140464][ T2083] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 120.163978][ T2083] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 120.201177][ T2083] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 120.228983][ T2051] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 120.244061][ T2083] EXT4-fs (loop3): can't mount with dioread_nolock if block size != PAGE_SIZE [ 120.258595][ T2051] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 120.317357][ T2051] F2FS-fs (loop2): invalid crc value [ 120.352708][ T2051] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.625846][ T23] audit: type=1400 audit(1718666740.560:271): avc: denied { shutdown } for pid=2082 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.667540][ T2083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.717842][ T23] audit: type=1400 audit(1718666740.590:272): avc: denied { read } for pid=2082 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.738618][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 120.889189][ T2096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.906199][ T2051] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 120.922936][ T2051] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 120.957756][ T2051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 123.918980][ T23] audit: type=1400 audit(1718666743.850:273): avc: denied { create } for pid=2093 comm="syz-executor.3" dev="anon_inodefs" ino=22858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.003927][ T23] audit: type=1400 audit(1718666743.870:274): avc: denied { ioctl } for pid=2137 comm="syz-executor.4" path="socket:[23939]" dev="sockfs" ino=23939 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 124.073931][ T23] audit: type=1400 audit(1718666743.880:275): avc: denied { ioctl } for pid=2093 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22859 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 124.217340][ T23] audit: type=1400 audit(1718666744.150:276): avc: denied { mount } for pid=2146 comm="syz-executor.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.276481][ T23] audit: type=1400 audit(1718666744.180:277): avc: denied { mounton } for pid=2146 comm="syz-executor.4" path="/root/syzkaller-testdir3269281140/syzkaller.j2cHGK/128/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 124.323888][ T915] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.365225][ T23] audit: type=1400 audit(1718666744.210:278): avc: denied { unmount } for pid=897 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.704036][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.729718][ T915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.759686][ T915] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 124.779135][ T915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.809099][ T915] usb 3-1: config 0 descriptor?? [ 125.691302][ T915] wacom 0003:056A:0028.0005: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 126.050126][ T23] audit: type=1400 audit(1718666745.980:279): avc: denied { setopt } for pid=2161 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.103946][ T23] audit: type=1400 audit(1718666746.000:280): avc: denied { connect } for pid=2161 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.180676][ T915] wacom 0003:056A:0028.0005: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.2-1/input0 [ 126.195275][ T915] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.0005/input/input15 [ 126.213083][ T23] audit: type=1400 audit(1718666746.150:281): avc: denied { read } for pid=146 comm="acpid" name="event3" dev="devtmpfs" ino=24018 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.216303][ T915] usb 3-1: USB disconnect, device number 2 [ 126.326958][ T23] audit: type=1400 audit(1718666746.150:282): avc: denied { open } for pid=146 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=24018 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.437159][ T23] audit: type=1400 audit(1718666746.210:283): avc: denied { ioctl } for pid=146 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=24018 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.562076][ T2158] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.593710][ T2158] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.615551][ T2158] device bridge_slave_0 entered promiscuous mode [ 126.637248][ T1165] device bridge_slave_1 left promiscuous mode [ 126.644671][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.678121][ T1165] device bridge_slave_0 left promiscuous mode [ 126.685763][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.058463][ T2158] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.067903][ T2158] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.095372][ T2158] device bridge_slave_1 entered promiscuous mode [ 128.632012][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.659262][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.741188][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.767195][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.822300][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.829410][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.031313][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.046707][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.058305][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.070209][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.077361][ T457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.164386][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 129.194204][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 129.204371][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.236587][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 129.254837][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.309918][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 129.324663][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.345292][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.353505][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.437690][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 129.456583][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.512636][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.537733][ T2228] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.551039][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.564015][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 129.573428][ T2228] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.624430][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.658884][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.170479][ T23] audit: type=1400 audit(1718666750.020:284): avc: denied { mounton } for pid=2227 comm="syz-executor.3" path="/root/syzkaller-testdir3138002072/syzkaller.gv1R1R/43/file0/file0" dev="loop3" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 132.343376][ T2255] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 132.364986][ T2255] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 132.386783][ T2255] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 132.467463][ T2255] journal_init_common: Cannot get buffer for journal superblock [ 132.522645][ T2255] EXT4-fs (loop4): Could not load journal inode [ 132.879519][ T2278] 9pnet: Insufficient options for proto=fd [ 132.961716][ T23] audit: type=1400 audit(1718666752.890:285): avc: denied { setopt } for pid=2280 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 135.233475][ T23] audit: type=1400 audit(1718666755.150:286): avc: denied { bind } for pid=2290 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.562709][ T23] audit: type=1400 audit(1718666755.160:287): avc: denied { setopt } for pid=2290 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 135.822443][ T23] audit: type=1400 audit(1718666755.170:288): avc: denied { append } for pid=2290 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.044920][ T2307] syz-executor.0[2307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.045138][ T2307] syz-executor.0[2307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.073270][ T2276] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.138258][ T2276] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.159195][ T2276] device bridge_slave_0 entered promiscuous mode [ 136.188433][ T2276] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.203211][ T2276] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.225666][ T2276] device bridge_slave_1 entered promiscuous mode [ 137.522428][ T23] audit: type=1400 audit(1718666757.450:289): avc: denied { ioctl } for pid=2332 comm="syz-executor.0" path="socket:[24833]" dev="sockfs" ino=24833 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 137.631102][ T1165] device bridge_slave_1 left promiscuous mode [ 137.644830][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.659764][ T1165] device bridge_slave_0 left promiscuous mode [ 137.674358][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.389870][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.409219][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.434036][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.895049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.904317][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.911207][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.919807][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.930747][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.940093][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.946984][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.974104][ T2355] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.056559][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.172755][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.269467][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.313869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.322285][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.352378][ T2312] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.369593][ T2312] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.383087][ T2312] device bridge_slave_0 entered promiscuous mode [ 139.417041][ T2312] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.433954][ T2312] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.442375][ T2312] device bridge_slave_1 entered promiscuous mode [ 139.510393][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.522237][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.534035][ T2359] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 139.543227][ T2359] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 139.584718][ T2359] F2FS-fs (loop0): invalid crc value [ 139.611352][ T2359] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.644880][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.653148][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.848910][ T2359] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 139.857051][ T2359] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 139.945822][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.956050][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.961544][ T969] attempt to access beyond end of device [ 139.961544][ T969] loop0: rw=2049, want=45104, limit=40427 [ 139.989772][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.998925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.045103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.064470][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.125469][ T2364] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.132648][ T2364] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.155471][ T2364] device bridge_slave_0 entered promiscuous mode [ 140.195607][ T2364] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.203407][ T2364] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.225181][ T2364] device bridge_slave_1 entered promiscuous mode [ 140.514073][ T1165] device bridge_slave_1 left promiscuous mode [ 140.522023][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.544505][ T1165] device bridge_slave_0 left promiscuous mode [ 140.551440][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.569449][ T1165] device bridge_slave_1 left promiscuous mode [ 140.577033][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.594968][ T1165] device bridge_slave_0 left promiscuous mode [ 140.601152][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.079210][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.087294][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.096003][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.105413][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.114873][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.121889][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.155015][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 141.171275][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 141.188384][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.198515][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.205416][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.263437][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 141.278738][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.314009][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 141.331339][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.480512][ T23] audit: type=1400 audit(1718666761.410:290): avc: denied { view } for pid=2394 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 141.582956][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.609006][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.778386][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.839058][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.855166][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.892215][ T2400] mmap: syz-executor.0 (2400): VmData 29011968 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 141.943620][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.954976][ T587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.979095][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 141.990104][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.998831][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.005857][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.034371][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.043462][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.052918][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.063729][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 142.072970][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 142.079050][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 142.089063][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.096366][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.125735][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.135304][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.174301][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.187614][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.198921][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 142.207477][ T5] usb 3-1: config 0 has no interfaces? [ 142.217069][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 142.228436][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 142.237433][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 142.307041][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.320333][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.344837][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.357217][ T457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.366115][ T5] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.390566][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.404912][ T5] usb 3-1: Product: syz [ 142.409251][ T5] usb 3-1: Manufacturer: syz [ 142.415020][ T5] usb 3-1: SerialNumber: syz [ 142.431009][ T5] usb 3-1: config 0 descriptor?? [ 142.453616][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.478751][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.518772][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.529300][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.548552][ T23] audit: type=1400 audit(1718666762.480:291): avc: denied { getopt } for pid=2415 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 142.558688][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.585747][ T2414] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 142.610106][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.624337][ T2414] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz-executor.0: corrupted xattr block 33 [ 142.652069][ T2414] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 142.695345][ T2414] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz-executor.0: corrupted xattr block 33 [ 142.724224][ T2414] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 142.741097][ T2414] EXT4-fs error (device loop0): ext4_xattr_block_list:717: inode #15: comm syz-executor.0: corrupted xattr block 33 [ 142.774892][ T24] usb 3-1: USB disconnect, device number 3 [ 142.965097][ T23] audit: type=1400 audit(1718666762.900:292): avc: denied { mounton } for pid=2431 comm="syz-executor.4" path="/root/syzkaller-testdir2902347956/syzkaller.jcJwep/18/file0/bus" dev="tmpfs" ino=25524 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 142.966510][ T2433] overlayfs: upper fs does not support tmpfile. [ 143.032426][ T2428] EXT4-fs (loop0): orphan cleanup on readonly fs [ 143.042187][ T2428] Quota error (device loop0): v2_read_file_info: Free block number too big (0 >= 0). [ 143.070611][ T2428] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 143.113934][ T2428] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 143.130778][ T2428] EXT4-fs error (device loop0): ext4_orphan_get:1260: comm syz-executor.0: bad orphan inode 16 [ 143.162745][ T2428] EXT4-fs (loop0): Remounting filesystem read-only [ 143.179499][ T2428] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,max_batch_time=0x0000000000000c23,noquota,max_batch_time=0x0000000000009c52,resgid=0x000000000000ee01,barrier,stripe=0x000000007768e9ec,stripe=0x0000000000000009,nogrpid,grpjquota=,noauto_da_alloc [ 143.284700][ T2428] EXT4-fs error (device loop0): ext4_lookup:1806: inode #2: comm syz-executor.0: bad inode number: 12 [ 143.304715][ T2428] EXT4-fs error (device loop0): ext4_lookup:1806: inode #2: comm syz-executor.0: bad inode number: 12 [ 143.394395][ T2428] EXT4-fs error (device loop0): ext4_lookup:1806: inode #2: comm syz-executor.0: bad inode number: 12 [ 143.438821][ T2428] EXT4-fs error (device loop0): ext4_lookup:1806: inode #2: comm syz-executor.0: bad inode number: 12 [ 143.812188][ T2432] F2FS-fs (loop3): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 143.831578][ T2432] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.854606][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 143.866685][ T2432] F2FS-fs (loop3): invalid crc value [ 143.906685][ T2432] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.922366][ T24] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 144.168259][ T2432] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 144.208204][ T2432] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.220918][ T2432] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 144.294992][ T24] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 144.324752][ T24] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 144.425508][ T24] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 144.503869][ T587] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.509923][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.943862][ T587] usb 2-1: Using ep0 maxpacket: 8 [ 145.434318][ T587] usb 2-1: config 0 has no interfaces? [ 145.556662][ T24] usb 1-1: string descriptor 0 read error: -71 [ 145.571455][ T24] hub 1-1:32.0: USB hub found [ 145.594352][ T587] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.609782][ T587] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.619906][ T587] usb 2-1: Product: syz [ 145.624595][ T587] usb 2-1: Manufacturer: syz [ 145.629461][ T587] usb 2-1: SerialNumber: syz [ 145.643967][ T24] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 145.644056][ T587] usb 2-1: config 0 descriptor?? [ 145.694639][ T24] usb 1-1: USB disconnect, device number 6 [ 145.838379][ T2476] xt_bpf: check failed: parse error [ 146.090466][ T24] usb 2-1: USB disconnect, device number 6 [ 146.657845][ T23] audit: type=1400 audit(1718666766.590:293): avc: denied { getopt } for pid=2497 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.741425][ T2500] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.753988][ T2500] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 148.474817][ T2526] binder: BINDER_SET_CONTEXT_MGR already set [ 148.480712][ T2526] binder: 2523:2526 ioctl 4018620d 20000040 returned -16 [ 148.771949][ T2537] fuse: Bad value for 'fd' [ 149.315378][ T23] audit: type=1400 audit(1718666768.730:294): avc: denied { read } for pid=2524 comm="syz-executor.1" dev="nsfs" ino=4026532668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 149.338128][ T23] audit: type=1400 audit(1718666768.730:295): avc: denied { open } for pid=2524 comm="syz-executor.1" path="net:[4026532668]" dev="nsfs" ino=4026532668 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 149.411315][ T23] audit: type=1400 audit(1718666768.760:296): avc: denied { getopt } for pid=2524 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.596807][ T2539] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 149.610497][ T23] audit: type=1400 audit(1718666769.530:297): avc: denied { read } for pid=2538 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 149.860998][ T2552] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.890438][ T2552] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 149.904911][ T23] audit: type=1400 audit(1718666769.840:298): avc: denied { setattr } for pid=2559 comm="syz-executor.3" name="file0" dev="incremental-fs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.064115][ T2552] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 150.098806][ T2552] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 150.105844][ T2552] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz-executor.4: bad orphan inode 16 [ 150.123854][ T2552] EXT4-fs (loop4): Remounting filesystem read-only [ 150.134193][ T2552] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,max_batch_time=0x0000000000000c23,noquota,max_batch_time=0x0000000000009c52,resgid=0x000000000000ee01,barrier,stripe=0x000000007768e9ec,stripe=0x0000000000000009,nogrpid,grpjquota=,noauto_da_alloc [ 150.853574][ T2552] EXT4-fs error (device loop4): ext4_lookup:1806: inode #2: comm syz-executor.4: bad inode number: 12 [ 150.867011][ T2552] EXT4-fs error (device loop4): ext4_lookup:1806: inode #2: comm syz-executor.4: bad inode number: 12 [ 150.938842][ T2552] EXT4-fs error (device loop4): ext4_lookup:1806: inode #2: comm syz-executor.4: bad inode number: 12 [ 151.655161][ T2585] fuse: Bad value for 'fd' [ 152.583894][ T527] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.823920][ T527] usb 1-1: Using ep0 maxpacket: 8 [ 152.943987][ T527] usb 1-1: config 0 has no interfaces? [ 153.104114][ T527] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.128664][ T527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.151641][ T527] usb 1-1: Product: syz [ 153.167239][ T527] usb 1-1: Manufacturer: syz [ 153.181979][ T527] usb 1-1: SerialNumber: syz [ 153.202674][ T527] usb 1-1: config 0 descriptor?? [ 153.417562][ T2601] F2FS-fs (loop3): Found nat_bits in checkpoint [ 153.465010][ T18] usb 1-1: USB disconnect, device number 7 [ 153.664447][ T2601] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 153.824463][ T2364] attempt to access beyond end of device [ 153.824463][ T2364] loop3: rw=2049, want=45104, limit=40427 [ 154.725565][ T23] audit: type=1400 audit(1718666774.660:299): avc: denied { nlmsg_read } for pid=2651 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.761176][ T2652] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.826006][ T2657] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 1927 (only 8 groups) [ 155.186442][ T23] audit: type=1400 audit(1718666775.120:300): avc: denied { bind } for pid=2658 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.280119][ T23] audit: type=1400 audit(1718666775.140:301): avc: denied { node_bind } for pid=2658 comm="syz-executor.3" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 155.422487][ T23] audit: type=1400 audit(1718666775.350:302): avc: denied { write } for pid=2665 comm="syz-executor.4" name="cgroup.subtree_control" dev="cgroup2" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 155.603893][ T527] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.874977][ T23] audit: type=1400 audit(1718666775.810:303): avc: denied { write } for pid=2686 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 155.983970][ T527] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.004497][ T527] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 156.037950][ T527] usb 4-1: config 1 has no interface number 1 [ 156.055744][ T527] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 209, using maximum allowed: 30 [ 156.077671][ T527] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 156.108815][ T2695] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.523996][ T527] usb 4-1: string descriptor 0 read error: -22 [ 156.543294][ T527] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.556354][ T527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.617689][ T2719] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.765890][ T2719] fuse: Bad value for 'fd' [ 156.781737][ T2719] fuse: Bad value for 'fd' [ 156.984891][ T380] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.188200][ T527] hub 4-1:1.2: bad descriptor, ignoring hub [ 157.194932][ T527] hub: probe of 4-1:1.2 failed with error -5 [ 157.305333][ T527] usb 4-1: USB disconnect, device number 5 [ 157.943864][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 158.214196][ T380] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 158.894554][ T380] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 158.905665][ T380] usb 2-1: config 135 has no interface number 0 [ 158.911809][ T380] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.104237][ T380] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 159.123125][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.153038][ T380] usb 2-1: Product: syz [ 159.168624][ T380] usb 2-1: Manufacturer: syz [ 159.183044][ T380] usb 2-1: SerialNumber: syz [ 159.262329][ T380] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 159.275513][ T380] uvcvideo: No valid video chain found. [ 159.291871][ T2746] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 1927 (only 8 groups) [ 159.436780][ T5] usb 2-1: USB disconnect, device number 7 [ 160.030893][ T2760] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.271030][ T2760] fuse: Bad value for 'fd' [ 160.294648][ T2760] fuse: Bad value for 'fd' [ 160.762660][ T2735] F2FS-fs (loop2): Mismatch start address, segment0(512) cp_blkaddr(175702528) [ 160.786003][ T2735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 160.804853][ T2735] F2FS-fs (loop2): invalid crc value [ 160.837715][ T2735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 160.876793][ T404] device bridge_slave_1 left promiscuous mode [ 160.894647][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.937217][ T404] device bridge_slave_0 left promiscuous mode [ 160.960574][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.871189][ T2735] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 162.164503][ T2762] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.171451][ T2762] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.180309][ T2762] device bridge_slave_0 entered promiscuous mode [ 162.188851][ T2762] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.196138][ T2762] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.204940][ T2762] device bridge_slave_1 entered promiscuous mode [ 162.660949][ T18] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 162.744692][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.761038][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.124042][ T18] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.142923][ T18] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.163135][ T18] usb 2-1: config 1 has no interface number 1 [ 163.193350][ T18] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 163.203632][ T18] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.218934][ T2799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.251715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.265231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.284454][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.291323][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.344018][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.354625][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.394459][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.423335][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.430266][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.524087][ T18] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.543211][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.551164][ T18] usb 2-1: Product: syz [ 163.563884][ T18] usb 2-1: Manufacturer: syz [ 163.568397][ T18] usb 2-1: SerialNumber: syz [ 163.579015][ T2808] loop4: p2 < > p3 p4 < > [ 163.583292][ T2808] loop4: partition table partially beyond EOD, truncated [ 163.585121][ T2806] device syzkaller0 entered promiscuous mode [ 163.598326][ T2808] loop4: p2 start 4294902784 is beyond EOD, truncated [ 163.605149][ T2808] loop4: p3 start 4278191616 is beyond EOD, truncated [ 163.622762][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.645729][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.694048][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.703236][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.727557][ T2158] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 163.736566][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 163.739216][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.758320][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.783625][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.788017][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.819349][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 163.829949][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.837844][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.859192][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 163.873994][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.884987][ T23] audit: type=1400 audit(1718666783.810:304): avc: denied { name_bind } for pid=2812 comm="syz-executor.0" src=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 163.886884][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.906872][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 163.934135][ T18] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 163.962409][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 163.977782][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.985150][ T18] usb 2-1: USB disconnect, device number 8 [ 164.006265][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 164.006423][ T2817] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 164.024044][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.043170][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 164.056880][ T570] udevd[570]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 164.063449][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.101872][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.129803][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.150494][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.151678][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 164.219484][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.263628][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 164.275892][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.290771][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 164.298843][ T373] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 164.310612][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 164.318617][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 164.335320][ T2802] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 164.352109][ T373] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 164.381858][ T2802] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 164.418878][ T2802] F2FS-fs (loop2): invalid crc value [ 164.913873][ T18] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.985000][ T2802] F2FS-fs (loop2): Found nat_bits in checkpoint [ 165.205048][ T18] usb 4-1: Using ep0 maxpacket: 8 [ 165.222197][ T2847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.374142][ T18] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.390719][ T18] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.494854][ T2802] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 165.501910][ T2802] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 165.625517][ T2802] attempt to access beyond end of device [ 165.625517][ T2802] loop2: rw=2049, want=45224, limit=40427 [ 165.634152][ T18] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 165.653874][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 165.661933][ T18] usb 4-1: SerialNumber: syz [ 165.679329][ T18] usb 4-1: config 0 descriptor?? [ 166.458374][ T2276] attempt to access beyond end of device [ 166.458374][ T2276] loop2: rw=2049, want=45232, limit=40427 [ 166.564160][ T18] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 166.572353][ T18] uvcvideo: No valid video chain found. [ 166.596645][ T18] usb 4-1: USB disconnect, device number 6 [ 166.690312][ T2872] FAT-fs (loop1): Directory bread(block 64) failed [ 166.707246][ T2872] FAT-fs (loop1): Directory bread(block 65) failed [ 166.727543][ T2872] FAT-fs (loop1): Directory bread(block 66) failed [ 166.751403][ T2872] FAT-fs (loop1): Directory bread(block 67) failed [ 166.764204][ T2872] FAT-fs (loop1): Directory bread(block 68) failed [ 166.774099][ T2872] FAT-fs (loop1): Directory bread(block 69) failed [ 166.780746][ T2872] FAT-fs (loop1): Directory bread(block 70) failed [ 166.814746][ T2872] FAT-fs (loop1): Directory bread(block 71) failed [ 166.821585][ T2872] FAT-fs (loop1): Directory bread(block 72) failed [ 166.829587][ T2872] FAT-fs (loop1): Directory bread(block 73) failed [ 166.879707][ T2877] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.998833][ T23] audit: type=1400 audit(1718666786.930:305): avc: denied { create } for pid=2881 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 167.623708][ T2898] fuseblk: Unknown parameter 'nystem.posix_acl_access' [ 167.660205][ T2900] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 168.642164][ T2918] 9pnet: Insufficient options for proto=fd [ 168.734033][ T23] audit: type=1400 audit(1718666788.570:306): avc: denied { bind } for pid=2907 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.804181][ T23] audit: type=1400 audit(1718666788.580:307): avc: denied { write } for pid=2907 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.844318][ T2886] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 168.873933][ T2886] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 168.938132][ T2926] fuse: Bad value for 'fd' [ 169.562495][ T399] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.580100][ T2886] F2FS-fs (loop4): Found nat_bits in checkpoint [ 169.697346][ T2886] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 169.725378][ T2886] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 169.943876][ T399] usb 3-1: Using ep0 maxpacket: 8 [ 170.032343][ T2939] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000006,nodelalloc,acl,noinit_itable,,errors=continue [ 170.094921][ T399] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.112988][ T399] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.214103][ T399] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 170.240324][ T399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 170.259451][ T399] usb 3-1: SerialNumber: syz [ 170.276444][ T399] usb 3-1: config 0 descriptor?? [ 170.535601][ T23] audit: type=1400 audit(1718666790.470:308): avc: denied { write } for pid=2963 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 170.614229][ T399] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 170.627973][ T399] uvcvideo: No valid video chain found. [ 170.638932][ T570] print_req_error: 50 callbacks suppressed [ 170.638978][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 170.669775][ T399] usb 3-1: USB disconnect, device number 4 [ 170.698296][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.710122][ T570] buffer_io_error: 40 callbacks suppressed [ 170.710141][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 170.724476][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.744370][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 170.754009][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.764751][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 170.773413][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.784203][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 170.792165][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 170.803012][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 170.930577][ T2970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.825998][ T23] audit: type=1400 audit(1718666791.620:309): avc: denied { listen } for pid=2981 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 171.951564][ T23] audit: type=1400 audit(1718666791.630:310): avc: denied { accept } for pid=2981 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.886554][ T23] audit: type=1400 audit(1718666792.330:311): avc: denied { write } for pid=2966 comm="syz-executor.4" name="hwrng" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 172.965518][ T2994] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,min_batch_time=0x0000000000000006,nodelalloc,acl,noinit_itable,,errors=continue [ 173.056273][ T23] audit: type=1400 audit(1718666792.810:312): avc: denied { ioctl } for pid=2966 comm="syz-executor.4" path="socket:[28483]" dev="sockfs" ino=28483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.163436][ T23] audit: type=1400 audit(1718666792.820:313): avc: denied { getattr } for pid=2966 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.191313][ T23] audit: type=1400 audit(1718666792.820:314): avc: denied { accept } for pid=2966 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 173.294893][ T23] audit: type=1400 audit(1718666793.230:315): avc: denied { mount } for pid=3010 comm="syz-executor.4" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 173.335426][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 173.370112][ T23] audit: type=1400 audit(1718666793.280:316): avc: denied { unmount } for pid=2158 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 173.404930][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.426586][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 173.444037][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.474149][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 173.503033][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.529835][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 173.738269][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 173.756945][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 175.374054][ T23] audit: type=1400 audit(1718666795.290:317): avc: denied { bind } for pid=3030 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 175.726311][ T3003] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 175.838214][ T3045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.886516][ T3003] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 176.501435][ T3003] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 176.678304][ T570] print_req_error: 20 callbacks suppressed [ 176.678347][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 176.697733][ T23] audit: type=1400 audit(1718666796.630:318): avc: denied { remount } for pid=3059 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 176.714760][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.734727][ T570] buffer_io_error: 15 callbacks suppressed [ 176.734756][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 176.748527][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.773895][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 176.785554][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.798022][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 176.814067][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.832275][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 176.854008][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.882754][ T3065] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.902896][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 176.957890][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 176.969953][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 176.981724][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 177.006103][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.018483][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 177.026935][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.044260][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 177.052407][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 177.061733][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 177.605832][ T3027] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.844509][ T23] audit: type=1400 audit(1718666797.780:319): avc: denied { ioctl } for pid=3119 comm="syz-executor.1" path="socket:[30888]" dev="sockfs" ino=30888 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 177.870054][ T3027] usb 5-1: Using ep0 maxpacket: 32 [ 178.243443][ T3027] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 178.444256][ T3027] usb 5-1: string descriptor 0 read error: -71 [ 178.482560][ T3027] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40 [ 178.615982][ T3027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.916359][ T3027] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 178.931593][ T3027] usb 5-1: no configuration chosen from 1 choice [ 178.946589][ T3027] usb 5-1: USB disconnect, device number 5 [ 179.497141][ T3099] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 179.517643][ T3099] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 179.534686][ T3153] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.584920][ T3099] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.692411][ T3164] validate_nla: 2 callbacks suppressed [ 179.692427][ T3164] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 179.858306][ T3099] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.868560][ T3099] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.143972][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.263913][ T399] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.133864][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 182.233985][ T399] usb 5-1: Using ep0 maxpacket: 32 [ 182.264145][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 182.283892][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.304995][ T24] usb 2-1: config 0 descriptor?? [ 182.353999][ T399] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 182.434048][ T399] usb 5-1: string descriptor 0 read error: -71 [ 182.440218][ T399] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.40 [ 182.463920][ T399] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.485091][ T399] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 182.503881][ T399] usb 5-1: no configuration chosen from 1 choice [ 182.514459][ T399] usb 5-1: USB disconnect, device number 6 [ 182.564142][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 182.732698][ T3194] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 182.754627][ T3194] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.770279][ T3194] F2FS-fs (loop0): invalid crc value [ 182.779799][ T3194] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.890456][ T3194] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 182.897825][ T3194] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.981544][ T570] print_req_error: 68 callbacks suppressed [ 182.981585][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 183.039923][ T969] attempt to access beyond end of device [ 183.039923][ T969] loop0: rw=2049, want=45112, limit=40427 [ 183.066719][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.077613][ T570] buffer_io_error: 55 callbacks suppressed [ 183.077632][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.109194][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.134724][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.150990][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.182329][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.190779][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.217111][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.239636][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.259127][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.271192][ T3215] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 183.320858][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 183.354101][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.412464][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.421440][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.440560][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.454776][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 183.466246][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.474400][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 183.482471][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 185.183008][ T23] audit: type=1400 audit(1718666805.110:320): avc: denied { map } for pid=3233 comm="syz-executor.2" path="socket:[30294]" dev="sockfs" ino=30294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 185.267512][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 185.297995][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 185.382431][ T24] asix: probe of 2-1:0.0 failed with error -71 [ 185.452488][ T24] usb 2-1: USB disconnect, device number 9 [ 187.035904][ T3284] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 187.145417][ T3285] EXT4-fs (loop0): Test dummy encryption mode enabled [ 187.187154][ T3285] EXT4-fs error (device loop0): ext4_quota_enable:6056: comm syz-executor.0: inode #16777216: comm syz-executor.0: iget: illegal inode # [ 187.204403][ T3285] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 16777216, type: 2 [ 187.217529][ T3285] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 187.238239][ T3285] EXT4-fs (loop0): mount failed [ 188.098523][ T570] print_req_error: 26 callbacks suppressed [ 188.098558][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 188.130760][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.152460][ T3285] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 188.193523][ T570] buffer_io_error: 20 callbacks suppressed [ 188.278986][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 188.316478][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.377847][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 188.468997][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.562134][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 188.736807][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.803881][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 188.842358][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 188.873477][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 189.178937][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 189.200976][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.212588][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 189.221657][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.240422][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 189.248753][ T570] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.259852][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 189.268201][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 189.276521][ T570] Buffer I/O error on dev loop4p4, logical block 0, async page read [ 189.311423][ T161] udevd[161]: worker [570] terminated by signal 33 (Unknown signal 33) [ 190.815103][ T23] audit: type=1400 audit(1718666810.750:321): avc: denied { append } for pid=3346 comm="syz-executor.1" name="001" dev="devtmpfs" ino=9253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 191.020036][ T3355] FAT-fs (loop3): Directory bread(block 64) failed [ 191.027341][ T3355] FAT-fs (loop3): Directory bread(block 65) failed [ 191.033795][ T3355] FAT-fs (loop3): Directory bread(block 66) failed [ 191.040223][ T3355] FAT-fs (loop3): Directory bread(block 67) failed [ 191.046835][ T3355] FAT-fs (loop3): Directory bread(block 68) failed [ 191.053288][ T3355] FAT-fs (loop3): Directory bread(block 69) failed [ 191.059791][ T3355] FAT-fs (loop3): Directory bread(block 70) failed [ 191.066152][ T3355] FAT-fs (loop3): Directory bread(block 71) failed [ 191.072520][ T3355] FAT-fs (loop3): Directory bread(block 72) failed [ 191.079060][ T3355] FAT-fs (loop3): Directory bread(block 73) failed [ 191.102720][ T3360] EXT4-fs (loop0): Test dummy encryption mode enabled [ 191.152520][ T3360] EXT4-fs error (device loop0): ext4_quota_enable:6056: comm syz-executor.0: inode #16777216: comm syz-executor.0: iget: illegal inode # [ 191.167490][ T3355] attempt to access beyond end of device [ 191.167490][ T3355] loop3: rw=2049, want=1256, limit=256 [ 191.178825][ T3355] attempt to access beyond end of device [ 191.178825][ T3355] loop3: rw=2049, want=1376, limit=256 [ 191.189999][ T3360] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 16777216, type: 2 [ 191.216964][ T3360] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 191.233023][ T3360] EXT4-fs (loop0): mount failed [ 191.383960][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.476400][ T3360] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 193.824055][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 193.845176][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 193.896786][ T24] usb 5-1: config 1 has no interface number 1 [ 193.920280][ T24] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 193.939394][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.962688][ T3382] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.103764][ T3382] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 194.114251][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.118845][ T3392] attempt to access beyond end of device [ 194.118845][ T3392] loop2: rw=2049, want=45104, limit=40427 [ 194.132116][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.185150][ T24] usb 5-1: Product: syz [ 194.189966][ T23] audit: type=1400 audit(1718666814.120:322): avc: denied { write } for pid=3409 comm="syz-executor.4" name="vga_arbiter" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.195984][ T24] usb 5-1: Manufacturer: syz [ 194.240447][ T24] usb 5-1: SerialNumber: syz [ 194.250048][ T23] audit: type=1400 audit(1718666814.150:323): avc: denied { open } for pid=3409 comm="syz-executor.4" path="/dev/vga_arbiter" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 194.289653][ T24] usb 5-1: can't set config #1, error -71 [ 194.298267][ T24] usb 5-1: USB disconnect, device number 7 [ 194.328478][ T3408] FAT-fs (loop0): Directory bread(block 64) failed [ 194.343409][ T3408] FAT-fs (loop0): Directory bread(block 65) failed [ 194.350163][ T3408] FAT-fs (loop0): Directory bread(block 66) failed [ 194.369388][ T3408] FAT-fs (loop0): Directory bread(block 67) failed [ 194.376086][ T3408] FAT-fs (loop0): Directory bread(block 68) failed [ 194.384633][ T3408] FAT-fs (loop0): Directory bread(block 69) failed [ 194.395205][ T3408] FAT-fs (loop0): Directory bread(block 70) failed [ 194.401588][ T3408] FAT-fs (loop0): Directory bread(block 71) failed [ 194.418143][ T3408] FAT-fs (loop0): Directory bread(block 72) failed [ 194.425417][ T3408] FAT-fs (loop0): Directory bread(block 73) failed [ 194.438469][ T3384] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 194.501146][ T3408] attempt to access beyond end of device [ 194.501146][ T3408] loop0: rw=2049, want=1256, limit=256 [ 194.512346][ T3408] attempt to access beyond end of device [ 194.512346][ T3408] loop0: rw=2049, want=1376, limit=256 [ 194.596540][ T3422] EXT4-fs (loop3): Test dummy encryption mode enabled [ 194.608433][ T3422] EXT4-fs error (device loop3): ext4_quota_enable:6056: comm syz-executor.3: inode #16777216: comm syz-executor.3: iget: illegal inode # [ 194.622774][ T3422] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz-executor.3: Bad quota inode: 16777216, type: 2 [ 194.635016][ T3422] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 194.651514][ T3422] EXT4-fs (loop3): mount failed [ 194.893516][ T3439] PF_BRIDGE: br_mdb_parse() with invalid entry [ 194.916413][ T3422] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 196.965874][ T3458] FAT-fs (loop2): Directory bread(block 1285) failed [ 196.990227][ T3458] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.004901][ T3458] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.021959][ T3458] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.045119][ T3469] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.051718][ T3469] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.084873][ T3469] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.086663][ T3475] PF_BRIDGE: br_mdb_parse() with invalid entry [ 197.113475][ T3458] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.124023][ T3458] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.131444][ T3458] FAT-fs (loop2): Directory bread(block 1285) failed [ 197.242757][ T23] audit: type=1400 audit(1718666817.170:324): avc: denied { read } for pid=3483 comm="syz-executor.0" name="usbmon0" dev="devtmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.270156][ T23] audit: type=1400 audit(1718666817.170:325): avc: denied { open } for pid=3483 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 197.341431][ T3491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.370671][ T3446] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.459408][ T3446] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.480463][ T3494] EXT4-fs (loop3): Test dummy encryption mode enabled [ 197.506636][ T23] audit: type=1400 audit(1718666817.440:326): avc: denied { ioctl } for pid=3500 comm="syz-executor.0" path="socket:[31710]" dev="sockfs" ino=31710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.544732][ T3494] EXT4-fs error (device loop3): ext4_quota_enable:6056: comm syz-executor.3: inode #16777216: comm syz-executor.3: iget: illegal inode # [ 197.562301][ T3489] attempt to access beyond end of device [ 197.562301][ T3489] loop1: rw=2049, want=45104, limit=40427 [ 197.579441][ T3494] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz-executor.3: Bad quota inode: 16777216, type: 2 [ 197.580455][ T3509] device lo entered promiscuous mode [ 197.604885][ T3494] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 197.621134][ T3494] EXT4-fs (loop3): mount failed [ 197.623029][ T23] audit: type=1400 audit(1718666817.560:327): avc: denied { setopt } for pid=3500 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.635499][ T3509] device lo left promiscuous mode [ 197.787406][ T3494] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 197.846470][ T3517] PF_BRIDGE: br_mdb_parse() with invalid entry [ 198.110775][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.127325][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.140751][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.174301][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.277809][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.285346][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.292225][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.306666][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.315968][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 198.323014][ T3518] FAT-fs (loop4): Directory bread(block 1285) failed [ 199.180850][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.645410][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.773720][ T3523] device bridge_slave_0 entered promiscuous mode [ 199.876039][ T3545] device lo entered promiscuous mode [ 199.884535][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.893708][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.902152][ T3523] device bridge_slave_1 entered promiscuous mode [ 199.913155][ T3545] device lo left promiscuous mode [ 200.117885][ T3555] EXT4-fs (loop3): Test dummy encryption mode enabled [ 200.166967][ T3555] EXT4-fs error (device loop3): ext4_quota_enable:6056: comm syz-executor.3: inode #16777216: comm syz-executor.3: iget: illegal inode # [ 200.199658][ T3555] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz-executor.3: Bad quota inode: 16777216, type: 2 [ 200.222019][ T3555] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 200.237574][ T425] device bridge_slave_1 left promiscuous mode [ 200.243620][ T425] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.257260][ T3555] EXT4-fs (loop3): mount failed [ 200.264846][ T425] device bridge_slave_0 left promiscuous mode [ 200.270901][ T425] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.334376][ T587] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 200.446879][ T3555] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 200.471356][ T3538] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.730831][ T3538] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 200.775253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.777446][ T3567] attempt to access beyond end of device [ 200.777446][ T3567] loop1: rw=2049, want=45104, limit=40427 [ 200.784308][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.984734][ T587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 201.444160][ T587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 201.485635][ T587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 201.539219][ T587] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 201.563892][ T587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.606684][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.624194][ T587] usb 1-1: config 0 descriptor?? [ 201.629862][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.643604][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.653123][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.660019][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.667787][ T3556] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 201.675086][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.683752][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.694649][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.701517][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.709344][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.717644][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.725845][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.734075][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.742335][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.750884][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.759367][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.767598][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.778854][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.801027][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 201.810953][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 201.829501][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 201.838294][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.186011][ T587] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 202.353607][ T587] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 202.528273][ T587] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 202.701965][ T587] usb 1-1: USB disconnect, device number 8 [ 202.912579][ T3594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.923541][ T3594] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 203.066997][ T3619] EXT4-fs (loop3): Test dummy encryption mode enabled [ 203.122258][ T3619] EXT4-fs error (device loop3): ext4_quota_enable:6056: comm syz-executor.3: inode #16777216: comm syz-executor.3: iget: illegal inode # [ 203.154200][ T3619] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz-executor.3: Bad quota inode: 16777216, type: 2 [ 203.178801][ T3619] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 203.234475][ T3619] EXT4-fs (loop3): mount failed [ 203.241408][ T3617] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 203.267367][ T3617] EXT4-fs (loop1): orphan cleanup on readonly fs [ 203.269597][ T3631] device lo entered promiscuous mode [ 203.277015][ T3617] EXT4-fs error (device loop1): ext4_orphan_get:1260: comm syz-executor.1: bad orphan inode 15 [ 203.302453][ T3617] ext4_test_bit(bit=14, block=18) = 1 [ 203.313277][ T3617] is_bad_inode(inode)=0 [ 203.321712][ T3617] NEXT_ORPHAN(inode)=1023 [ 203.330362][ T3617] max_ino=32 [ 203.339035][ T3631] device lo left promiscuous mode [ 203.342887][ T3617] i_nlink=0 [ 203.349442][ T3617] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2930: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 203.384978][ T3617] EXT4-fs warning (device loop1): ext4_evict_inode:321: xattr delete (err -117) [ 203.407181][ T3619] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 203.418355][ T3617] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,grpquota,,errors=continue [ 203.634899][ T3617] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor.1: path /root/syzkaller-testdir1900961621/syzkaller.AZBzEU/80/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=4096 fake=0 [ 205.555240][ T3665] device lo entered promiscuous mode [ 205.586852][ T3665] device lo left promiscuous mode [ 205.593948][ T413] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 205.901250][ T3663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.951293][ T3663] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 206.120806][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.145761][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.152373][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.159144][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.166261][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.172897][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.180012][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.187794][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.194410][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.201052][ T3684] FAT-fs (loop0): Directory bread(block 1285) failed [ 206.303991][ T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 206.315116][ T23] audit: type=1400 audit(1718666826.240:328): avc: denied { read } for pid=3686 comm="syz-executor.0" path="socket:[33163]" dev="sockfs" ino=33163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.343923][ T413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 206.373907][ T413] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.376853][ T23] audit: type=1400 audit(1718666826.290:329): avc: denied { connect } for pid=3686 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.393978][ T413] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.433928][ T413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.454298][ T413] usb 5-1: config 0 descriptor?? [ 206.473990][ T3655] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 206.666188][ T3677] F2FS-fs (loop1): Found nat_bits in checkpoint [ 206.718329][ T3696] EXT4-fs (loop2): Test dummy encryption mode enabled [ 206.766459][ T3696] EXT4-fs error (device loop2): ext4_quota_enable:6056: comm syz-executor.2: inode #16777216: comm syz-executor.2: iget: illegal inode # [ 206.795153][ T3696] EXT4-fs error (device loop2): ext4_quota_enable:6059: comm syz-executor.2: Bad quota inode: 16777216, type: 2 [ 206.817332][ T3696] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 206.833719][ T23] audit: type=1400 audit(1718666826.760:330): avc: denied { write } for pid=3686 comm="syz-executor.0" laddr=::1 lport=5 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.874398][ T3696] EXT4-fs (loop2): mount failed [ 206.885494][ T3677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 206.937805][ T413] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 206.958705][ T413] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 207.004271][ T413] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 207.029567][ T3696] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 207.054751][ T3690] attempt to access beyond end of device [ 207.054751][ T3690] loop1: rw=2049, want=45104, limit=40427 [ 207.296998][ T527] usb 5-1: USB disconnect, device number 8 [ 208.445603][ T3720] loop4: p2 < > [ 210.001817][ T3714] F2FS-fs (loop2): Invalid log blocks per segment (4278190089) [ 210.023886][ T3714] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 210.047969][ T3714] F2FS-fs (loop2): invalid crc value [ 210.087022][ T3714] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.234961][ T3749] EXT4-fs (loop0): Test dummy encryption mode enabled [ 210.266150][ T3714] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 210.273124][ T3714] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 210.287942][ T3749] EXT4-fs error (device loop0): ext4_quota_enable:6056: comm syz-executor.0: inode #16777216: comm syz-executor.0: iget: illegal inode # [ 210.325344][ T3714] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 210.341382][ T3749] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 16777216, type: 2 [ 210.365408][ T3749] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 210.415996][ T3749] EXT4-fs (loop0): mount failed [ 210.534859][ T3759] loop4: p2 < > [ 210.776052][ T3749] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 211.568141][ T3764] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.588728][ T3764] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 211.596530][ T23] audit: type=1400 audit(1718666831.530:331): avc: denied { nlmsg_write } for pid=3771 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 211.841755][ T23] audit: type=1400 audit(1718666831.770:332): avc: denied { bind } for pid=3771 comm="syz-executor.2" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.076280][ T23] audit: type=1400 audit(1718666831.770:333): avc: denied { name_bind } for pid=3771 comm="syz-executor.2" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 212.441158][ T23] audit: type=1400 audit(1718666831.770:334): avc: denied { node_bind } for pid=3771 comm="syz-executor.2" saddr=10.1.1.0 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 213.300462][ T3807] EXT4-fs (loop2): Test dummy encryption mode enabled [ 213.354120][ T3807] EXT4-fs error (device loop2): ext4_quota_enable:6056: comm syz-executor.2: inode #16777216: comm syz-executor.2: iget: illegal inode # [ 213.394148][ T3807] EXT4-fs error (device loop2): ext4_quota_enable:6059: comm syz-executor.2: Bad quota inode: 16777216, type: 2 [ 213.424147][ T3807] EXT4-fs warning (device loop2): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 213.454352][ T3807] EXT4-fs (loop2): mount failed [ 213.625944][ T3807] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 214.116575][ T3797] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 214.283899][ T3797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 214.299240][ T3797] F2FS-fs (loop1): invalid crc value [ 214.408576][ T3797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 214.442952][ T3815] loop0: p2 < > [ 214.472702][ T96] Bluetooth: hci0: sending frame failed (-49) [ 214.525756][ T3797] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 214.532783][ T3797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 214.600645][ T3797] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 214.647119][ T23] audit: type=1326 audit(1718666834.580:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3830 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46abca8f29 code=0x0 [ 214.894304][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 214.965951][ T3835] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.976461][ T3835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.066211][ T3833] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.084812][ T3833] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 215.919442][ T23] audit: type=1400 audit(1718666835.850:336): avc: denied { accept } for pid=3850 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 215.974012][ T23] audit: type=1326 audit(1718666835.900:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46abca8f29 code=0x7ffc0000 [ 216.024326][ T23] audit: type=1326 audit(1718666835.900:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46abca8f29 code=0x7ffc0000 [ 216.080016][ T23] audit: type=1326 audit(1718666835.910:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46abca8f29 code=0x7ffc0000 [ 216.142963][ T23] audit: type=1326 audit(1718666835.920:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46abca8f29 code=0x7ffc0000 [ 216.263479][ T3861] EXT4-fs (loop1): Test dummy encryption mode enabled [ 216.304196][ T3861] EXT4-fs error (device loop1): ext4_quota_enable:6056: comm syz-executor.1: inode #16777216: comm syz-executor.1: iget: illegal inode # [ 216.338480][ T3861] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz-executor.1: Bad quota inode: 16777216, type: 2 [ 216.364175][ T3861] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 216.393886][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 216.405146][ T3861] EXT4-fs (loop1): mount failed [ 216.493877][ T13] Bluetooth: hci0: command 0x1003 tx timeout [ 216.499772][ T3826] Bluetooth: hci0: sending frame failed (-49) [ 216.643972][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 216.667648][ T3861] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 216.764011][ T5] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.783919][ T5] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=96.12 [ 216.803456][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.874306][ T5] usb 3-1: config 0 descriptor?? [ 216.915245][ T5] usb 3-1: bad CDC descriptors [ 217.664027][ T397] usb 3-1: USB disconnect, device number 5 [ 218.017617][ T23] kauditd_printk_skb: 23 callbacks suppressed [ 218.017647][ T23] audit: type=1326 audit(1718666837.950:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff97a410f29 code=0x0 [ 218.158828][ T3871] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 218.173953][ T3871] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 218.207226][ T3871] F2FS-fs (loop0): invalid crc value [ 218.219512][ T3871] F2FS-fs (loop0): Found nat_bits in checkpoint [ 218.281868][ T3880] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.301726][ T3880] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.350060][ T3871] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 218.359237][ T3871] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 218.427373][ T3871] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 218.574104][ T13] Bluetooth: hci0: command 0x1001 tx timeout [ 218.576673][ T3890] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.580131][ T3826] Bluetooth: hci0: sending frame failed (-49) [ 218.590794][ T3890] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 219.826280][ T23] audit: type=1400 audit(1718666839.760:365): avc: denied { ioctl } for pid=3902 comm="syz-executor.2" path="socket:[32758]" dev="sockfs" ino=32758 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 219.938046][ T3904] device syzkaller0 entered promiscuous mode [ 219.947568][ T3910] EXT4-fs (loop0): Test dummy encryption mode enabled [ 220.036058][ T3910] ================================================================== [ 220.044005][ T3910] BUG: KASAN: use-after-free in __ext4_iget+0x384/0x4330 [ 220.051018][ T3910] Read of size 8 at addr ffff8881db2c6c10 by task syz-executor.0/3910 [ 220.058979][ T3910] [ 220.061187][ T3910] CPU: 0 PID: 3910 Comm: syz-executor.0 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 220.071149][ T3910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 220.081031][ T3910] Call Trace: 2024/06/17 23:27:20 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 220.084179][ T3910] dump_stack+0x1d8/0x241 [ 220.088345][ T3910] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 220.093990][ T3910] ? printk+0xd1/0x111 [ 220.097902][ T3910] ? __ext4_iget+0x384/0x4330 [ 220.102420][ T3910] print_address_description+0x8c/0x600 [ 220.107920][ T3910] ? _raw_spin_lock+0xa4/0x1b0 [ 220.112506][ T3910] ? _raw_spin_trylock_bh+0x190/0x190 [ 220.117715][ T3910] ? __ext4_iget+0x384/0x4330 [ 220.122236][ T3910] __kasan_report+0xf3/0x120 [ 220.126661][ T3910] ? __ext4_iget+0x384/0x4330 [ 220.131177][ T3910] kasan_report+0x30/0x60 [ 220.135334][ T3910] __ext4_iget+0x384/0x4330 [ 220.139699][ T3910] ? idr_replace+0x230/0x230 [ 220.144186][ T3910] ? ext4_get_projid+0x140/0x140 [ 220.148956][ T3910] ? _raw_write_lock+0xa4/0x170 [ 220.153654][ T3910] ? __proc_create+0x65a/0xa00 [ 220.158367][ T3910] ext4_enable_quotas+0x528/0x940 [ 220.163244][ T3910] ? ext4_fill_flex_info+0x5e0/0x5e0 [ 220.168344][ T3910] ? proc_create+0x230/0x230 [ 220.172775][ T3910] ? ext4_fill_flex_info+0x53b/0x5e0 [ 220.177882][ T3910] ? ext4_register_sysfs+0x1d9/0x210 [ 220.183027][ T3910] ext4_fill_super+0x84f0/0x8d90 [ 220.187821][ T3910] ? ext4_mount+0x40/0x40 [ 220.191939][ T3910] ? vscnprintf+0x80/0x80 [ 220.196119][ T3910] mount_bdev+0x267/0x370 [ 220.200280][ T3910] ? ext4_mount+0x40/0x40 [ 220.204525][ T3910] legacy_get_tree+0xdf/0x170 [ 220.209052][ T3910] ? ext4_lazyinit_thread+0xc60/0xc60 [ 220.214246][ T3910] vfs_get_tree+0x85/0x260 [ 220.218514][ T3910] do_new_mount+0x292/0x570 [ 220.222856][ T3910] ? do_move_mount_old+0x160/0x160 [ 220.227791][ T3910] ? security_capable+0x86/0xb0 [ 220.232476][ T3910] do_mount+0x688/0xe10 [ 220.236470][ T3910] ? copy_mount_string+0x30/0x30 [ 220.241238][ T3910] ? copy_mount_options+0x29a/0x300 [ 220.246281][ T3910] ksys_mount+0xc2/0xf0 [ 220.250361][ T3910] __x64_sys_mount+0xb1/0xc0 [ 220.254790][ T3910] do_syscall_64+0xca/0x1c0 [ 220.259133][ T3910] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 220.264857][ T3910] RIP: 0033:0x7f20af51462a [ 220.269189][ T3910] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 220.288712][ T3910] RSP: 002b:00007f20ae88cef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 220.296970][ T3910] RAX: ffffffffffffffda RBX: 00007f20ae88cf80 RCX: 00007f20af51462a [ 220.304783][ T3910] RDX: 0000000020000080 RSI: 0000000020000500 RDI: 00007f20ae88cf40 [ 220.312679][ T3910] RBP: 0000000020000080 R08: 00007f20ae88cf80 R09: 0000000000004500 [ 220.320481][ T3910] R10: 0000000000004500 R11: 0000000000000202 R12: 0000000020000500 [ 220.328299][ T3910] R13: 00007f20ae88cf40 R14: 00000000000004ec R15: 0000000020000000 [ 220.336107][ T3910] [ 220.338272][ T3910] Allocated by task 3194: [ 220.342461][ T3910] __kasan_kmalloc+0x171/0x210 [ 220.347071][ T3910] kmem_cache_alloc+0xd9/0x250 [ 220.351653][ T3910] f2fs_alloc_inode+0x22/0x3c0 [ 220.356403][ T3910] new_inode_pseudo+0x60/0x210 [ 220.361415][ T3910] new_inode+0x25/0x1d0 [ 220.365399][ T3910] f2fs_new_inode+0x11a/0x1470 [ 220.370008][ T3910] f2fs_create+0x163/0x11c0 [ 220.374350][ T3910] path_openat+0x184a/0x34b0 [ 220.378770][ T3910] do_filp_open+0x20b/0x450 [ 220.383111][ T3910] do_sys_open+0x39c/0x810 [ 220.387359][ T3910] do_syscall_64+0xca/0x1c0 [ 220.391708][ T3910] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 220.397564][ T3910] [ 220.399739][ T3910] Freed by task 17: [ 220.403585][ T3910] __kasan_slab_free+0x1b5/0x270 [ 220.408456][ T3910] kmem_cache_free+0x10b/0x2c0 [ 220.413148][ T3910] rcu_do_batch+0x492/0xa00 [ 220.417796][ T3910] rcu_core+0x4c8/0xcb0 [ 220.422687][ T3910] __do_softirq+0x23b/0x6b7 [ 220.427103][ T3910] [ 220.429277][ T3910] The buggy address belongs to the object at ffff8881db2c6750 [ 220.429277][ T3910] which belongs to the cache f2fs_inode_cache of size 1264 [ 220.443700][ T3910] The buggy address is located 1216 bytes inside of [ 220.443700][ T3910] 1264-byte region [ffff8881db2c6750, ffff8881db2c6c40) [ 220.457045][ T3910] The buggy address belongs to the page: [ 220.462552][ T3910] page:ffffea00076cb000 refcount:1 mapcount:0 mapping:ffff8881f0cfac80 index:0xffff8881db2c1b30 compound_mapcount: 0 [ 220.474615][ T3910] flags: 0x8000000000010200(slab|head) [ 220.479908][ T3910] raw: 8000000000010200 0000000000000000 0000000100000001 ffff8881f0cfac80 [ 220.488333][ T3910] raw: ffff8881db2c1b30 0000000080170006 00000001ffffffff 0000000000000000 [ 220.496710][ T3910] page dumped because: kasan: bad access detected [ 220.503227][ T3910] page_owner tracks the page as allocated [ 220.508885][ T3910] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 220.526428][ T3910] prep_new_page+0x18f/0x370 [ 220.531134][ T3910] get_page_from_freelist+0x2d13/0x2d90 [ 220.536736][ T3910] __alloc_pages_nodemask+0x393/0x840 [ 220.541939][ T3910] alloc_slab_page+0x39/0x3c0 [ 220.546526][ T3910] new_slab+0x97/0x440 [ 220.550438][ T3910] ___slab_alloc+0x2fe/0x490 [ 220.554865][ T3910] __slab_alloc+0x62/0xa0 [ 220.559206][ T3910] kmem_cache_alloc+0x109/0x250 [ 220.563904][ T3910] f2fs_alloc_inode+0x22/0x3c0 [ 220.568488][ T3910] iget_locked+0x143/0x790 [ 220.572826][ T3910] f2fs_iget+0x52/0x4970 [ 220.576921][ T3910] f2fs_fill_super+0x4ce5/0x8310 [ 220.581698][ T3910] mount_bdev+0x267/0x370 [ 220.585854][ T3910] legacy_get_tree+0xdf/0x170 [ 220.590377][ T3910] vfs_get_tree+0x85/0x260 [ 220.594627][ T3910] do_new_mount+0x292/0x570 [ 220.598935][ T3910] page_owner free stack trace missing [ 220.604274][ T3910] [ 220.606414][ T3910] Memory state around the buggy address: [ 220.612150][ T3910] ffff8881db2c6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.620042][ T3910] ffff8881db2c6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.627948][ T3910] >ffff8881db2c6c00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 220.635834][ T3910] ^ [ 220.640322][ T3910] ffff8881db2c6c80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 220.648173][ T3910] ffff8881db2c6d00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 220.656057][ T3910] ================================================================== [ 220.663950][ T3910] Disabling lock debugging due to kernel taint [ 220.670544][ T23] audit: type=1400 audit(1718666839.970:366): avc: denied { write } for pid=346 comm="syz-fuzzer" path="pipe:[10622]" dev="pipefs" ino=10622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 220.719958][ T3910] EXT4-fs error (device loop0): ext4_quota_enable:6056: inode #3: comm syz-executor.0: unexpected EA_INODE flag [ 220.741559][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 220.853922][ T3910] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 3, type: 0 [ 220.873910][ T3910] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 220.904367][ T3910] EXT4-fs (loop0): mount failed