last executing test programs: 4.85630834s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x315, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022a7000000aa9ca829"], 0x0}, 0x0) 3.089580663s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) quotactl$Q_SYNC(0x0, 0x20ffffff, 0xe00f, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000036cd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$cgroup(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000380)={[{@xattr}]}) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='ext4_writepages\x00', r9}, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_type(r5, &(0x7f0000000140), 0x9) 3.065628587s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x2b, 0x0, 0x1, [@typed={0x4, 0x3}]}]}, 0x28}], 0x1}, 0x0) 3.049603579s ago: executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 3.039039331s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) ftruncate(r0, 0x2007ffb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) lseek(r0, 0x0, 0x4) 2.772636932s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000480, &(0x7f0000000380), 0x45, 0x7a5, &(0x7f0000001740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000002540)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = dup(r0) open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) sendfile(r1, r2, 0x0, 0xe0000000) 2.572299583s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}]}]}, 0x70}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) 2.179312713s ago: executing program 2: syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.177135853s ago: executing program 1: 2.119944063s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 2.087967827s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, 0x1c) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 1.598023963s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080047000030000000000006907800000000000000008608ffffffff0102"], 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403"], 0x0) 1.55214588s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 1.23149202s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYBLOB], 0x28}}, 0x0) sync() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x30, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50}, 0x50) fcntl$setpipe(r9, 0x407, 0x0) fcntl$setpipe(r9, 0x407, 0x2000000) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xb, 0x10}, {0x1, 0xffe0}, {0xfff1, 0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3ff, r10}, 0x38) 1.160525651s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 1.081309963s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x73b2}]}}}]}, 0x40}}, 0x0) 1.073046194s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r3}, 0x10) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 1.053419308s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='hrtimer_init\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 1.0388379s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0xc208ae62, 0x0) 994.225956ms ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3d17, 0x0, 0x0, 0x7, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x10) 993.800176ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setgroups(0x0, 0x0) 987.716368ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) chmod(0x0, 0x0) 954.903423ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 952.474733ms ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0xea241, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000480)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}}, 0xa0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="116105cf0000000000000000b702000014001800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000073b2b55900000000009500000000000000d5b80872407d3803cda0cb539c229c9a6fdd0348b05261a650e4fe20100308dbd77dd2689ec1fba338c4af06"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffde9, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000540)=""/115, 0x200005b3}], 0x1, 0x8, 0x0) 947.545993ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000008a000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 889.802913ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0x2) read(r3, 0x0, 0x2006) dup2(r3, r2) 872.549735ms ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000000000406e05fb0000000000000109022400010000100009040000010300000009210700050122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "5254abe2"}]}}, 0x0}, 0x0) 718.352979ms ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000230040120c050000000000000109022d00010000000009040081010300000009210000ff0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@local, @global=@item_4={0x3, 0x1, 0x0, "cdf4e836"}]}}, 0x0}, 0x0) 83.968487ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 3: syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES16, @ANYBLOB="c2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5a052c7197494046b00916b8f07b5b9f05f77f79225aa4996a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828d59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x555b, &(0x7f0000006400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3}) renameat2(r0, &(0x7f0000000380)='./bus\x00', r0, &(0x7f0000000400)='./file1\x00', 0x2) kernel console output (not intermixed with test programs): h=c000003e syscall=231 compat=0 ip=0x7f9b4387cee9 code=0x7fc00000 [ 429.737156][ T39] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 430.107291][ T39] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 430.115535][ T39] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 430.123729][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.133781][ T39] usb 1-1: config 0 has no interface number 0 [ 430.139833][ T39] usb 1-1: config 0 interface 175 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 430.150662][ T39] usb 1-1: config 0 interface 175 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 430.161551][ T39] usb 1-1: config 0 interface 175 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 430.174869][ T39] usb 1-1: config 0 interface 175 has no altsetting 1 [ 430.181649][ T39] usb 1-1: New USB device found, idVendor=059f, idProduct=1061, bcdDevice=8e.4f [ 430.190680][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.199965][ T39] usb 1-1: config 0 descriptor?? [ 430.237700][ T39] usb-storage 1-1:0.175: USB Mass Storage device detected [ 430.245635][ T39] usb-storage 1-1:0.175: Quirks match for vid 059f pid 1061: 44000000 [ 430.352555][T17956] bridge0: port 3(vlan2) entered blocking state [ 430.358677][T17956] bridge0: port 3(vlan2) entered disabled state [ 430.439042][ T39] usb 1-1: USB disconnect, device number 47 [ 430.837715][T17985] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000007' [ 431.107401][ T39] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 431.406979][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 431.437273][ T340] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 431.527135][ T39] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.544552][ T39] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.566533][T18014] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 431.583347][T18014] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.590293][T18014] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.677157][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 431.686332][ T39] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 431.694578][ T39] usb 2-1: Product: syz [ 431.697191][ T340] usb 4-1: Using ep0 maxpacket: 8 [ 431.698553][ T39] usb 2-1: Manufacturer: syz [ 431.747427][ T39] hub 2-1:4.0: USB hub found [ 431.827460][ T3325] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 431.897139][ T19] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 431.967153][ T39] hub 2-1:4.0: 2 ports detected [ 432.057235][ T340] usb 4-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 432.066135][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.073978][ T340] usb 4-1: Product: syz [ 432.077896][ T340] usb 4-1: Manufacturer: syz [ 432.082316][ T340] usb 4-1: SerialNumber: syz [ 432.087238][ T340] usb 4-1: config 0 descriptor?? [ 432.127378][ T340] usb-storage 4-1:0.0: USB Mass Storage device detected [ 432.187230][ T3325] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 432.195213][ T3325] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 432.203238][ T3325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.213142][ T3325] usb 3-1: config 0 has no interface number 0 [ 432.219049][ T3325] usb 3-1: config 0 interface 175 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 432.229666][ T3325] usb 3-1: config 0 interface 175 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 432.240183][ T3325] usb 3-1: config 0 interface 175 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 432.253425][ T3325] usb 3-1: config 0 interface 175 has no altsetting 1 [ 432.260114][ T3325] usb 3-1: New USB device found, idVendor=059f, idProduct=1061, bcdDevice=8e.4f [ 432.269017][ T19] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 432.276914][ T19] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 432.284920][ T3325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.293053][ T19] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.303085][ T3325] usb 3-1: config 0 descriptor?? [ 432.307888][ T19] usb 1-1: config 0 has no interface number 0 [ 432.313723][ T19] usb 1-1: config 0 interface 175 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 432.324330][ T19] usb 1-1: config 0 interface 175 altsetting 168 has an invalid endpoint with address 0x0, skipping [ 432.332792][ T350] usb 4-1: USB disconnect, device number 47 [ 432.335050][ T19] usb 1-1: config 0 interface 175 altsetting 168 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 432.354244][ T3325] usb-storage 3-1:0.175: USB Mass Storage device detected [ 432.361220][ T19] usb 1-1: config 0 interface 175 has no altsetting 1 [ 432.367834][ T19] usb 1-1: New USB device found, idVendor=059f, idProduct=1061, bcdDevice=8e.4f [ 432.377039][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.385045][ T3325] usb-storage 3-1:0.175: Quirks match for vid 059f pid 1061: 44000000 [ 432.394189][ T19] usb 1-1: config 0 descriptor?? [ 432.437421][ T19] usb-storage 1-1:0.175: USB Mass Storage device detected [ 432.444865][ T19] usb-storage 1-1:0.175: Quirks match for vid 059f pid 1061: 44000000 [ 432.557138][ T19] usb 3-1: USB disconnect, device number 47 [ 432.644532][ T3325] usb 1-1: USB disconnect, device number 48 [ 433.180722][ T39] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 433.277129][ T339] hub 2-1:4.0: activate --> -90 [ 433.427142][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 433.547318][ T39] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.558671][ T39] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.674003][T18039] loop0: detected capacity change from 0 to 40427 [ 433.687400][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 433.688126][T18039] F2FS-fs (loop0): Found nat_bits in checkpoint [ 433.702722][ T39] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 433.711226][ T39] usb 4-1: Product: syz [ 433.715318][ T39] usb 4-1: Manufacturer: syz [ 433.749056][T18039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 433.758489][ T39] hub 4-1:4.0: USB hub found [ 433.778061][ T308] usb 2-1: USB disconnect, device number 40 [ 433.791035][T17729] syz-executor.0: attempt to access beyond end of device [ 433.791035][T17729] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 433.997186][ T39] hub 4-1:4.0: 2 ports detected [ 434.016765][T18053] loop0: detected capacity change from 0 to 1024 [ 434.023407][T18053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 434.030417][T18053] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 434.043109][T18053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 434.051194][T18053] System zones: 0-1, 3-36 [ 434.067371][T18053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 434.096652][T17729] EXT4-fs (loop0): unmounting filesystem. [ 434.160316][T18063] loop0: detected capacity change from 0 to 512 [ 434.181060][T18063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 434.189896][T18063] ext4 filesystem being mounted at /root/syzkaller-testdir1703924176/syzkaller.4trexc/37/file0 supports timestamps until 2038 (0x7fffffff) [ 434.210844][T18061] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.211544][T17729] EXT4-fs (loop0): unmounting filesystem. [ 434.218210][T18061] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.231315][T18061] device bridge_slave_0 entered promiscuous mode [ 434.239812][T18061] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.246692][T18061] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.253999][T18061] device bridge_slave_1 entered promiscuous mode [ 434.261838][T18070] loop0: detected capacity change from 0 to 256 [ 434.314600][T18075] loop1: detected capacity change from 0 to 512 [ 434.321907][T18075] EXT4-fs: Ignoring removed nobh option [ 434.329026][T18075] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 434.336443][T18061] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.337481][T18075] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 2 len 1 [ 434.343810][T18061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.343890][T18061] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.343910][T18061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.362298][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.364774][T18075] EXT4-fs (loop1): Remounting filesystem read-only [ 434.391379][T18075] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 434.396219][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.407519][T18075] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 434.426924][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.427362][T18075] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 434.448260][T18075] EXT4-fs (loop1): 1 truncate cleaned up [ 434.453730][T18075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 434.475764][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.484383][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.491268][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.498592][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.510275][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.517147][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.524292][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.532632][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.538815][T18075] EXT4-fs error (device loop1): __ext4_remount:6412: comm syz-executor.1: Abort forced by user [ 434.548908][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 434.558538][T18075] EXT4-fs (loop1): Remounting filesystem read-only [ 434.571015][T18061] device veth0_vlan entered promiscuous mode [ 434.577637][T15837] EXT4-fs (loop1): unmounting filesystem. [ 434.578876][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 434.591135][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 434.598524][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 434.614455][T18061] device veth1_macvtap entered promiscuous mode [ 434.622097][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.641447][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.650035][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.658702][T18086] device veth1_macvtap left promiscuous mode [ 434.732951][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 434.732968][ T28] audit: type=1400 audit(1717247920.048:32047): avc: denied { read } for pid=18087 comm="syz-executor.1" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 434.763500][ T28] audit: type=1400 audit(1717247920.048:32048): avc: denied { open } for pid=18087 comm="syz-executor.1" path="/root/syzkaller-testdir3573152106/syzkaller.2XrytR/153/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 434.797111][ T3325] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 434.828447][ T492] device bridge_slave_1 left promiscuous mode [ 434.834472][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.842323][ T492] device bridge_slave_0 left promiscuous mode [ 434.848528][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.856724][ T492] device veth1_macvtap left promiscuous mode [ 434.862682][ T492] device veth0_vlan left promiscuous mode [ 434.864007][ T28] audit: type=1400 audit(1717247920.188:32049): avc: denied { create } for pid=18101 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 434.947446][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 435.177176][ T3325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.187468][ T3325] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 435.188048][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 435.198164][ T3325] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 435.216293][ T3325] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 435.225133][ T3325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.233379][ T3325] usb 1-1: config 0 descriptor?? [ 435.277472][ T3325] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 435.297131][ T339] hub 4-1:4.0: activate --> -90 [ 435.479680][ T3325] usb 1-1: USB disconnect, device number 49 [ 435.557162][ T24] usb 3-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 435.566072][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.573899][ T24] usb 3-1: Product: syz [ 435.577843][ T24] usb 3-1: Manufacturer: syz [ 435.582232][ T24] usb 3-1: SerialNumber: syz [ 435.587187][ T24] usb 3-1: config 0 descriptor?? [ 435.627372][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 435.797836][ T350] usb 4-1: USB disconnect, device number 48 [ 435.838815][ T3325] usb 3-1: USB disconnect, device number 48 [ 439.410576][T18183] loop3: detected capacity change from 0 to 512 [ 439.439555][T18183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 439.491804][T18183] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 439.504867][T18183] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 439.516963][T18183] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 439.663712][T18183] EXT4-fs (loop3): 1 orphan inode deleted [ 439.676975][T18183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 439.796355][T15822] EXT4-fs (loop3): unmounting filesystem. [ 441.310204][T18191] loop3: detected capacity change from 0 to 131072 [ 441.527083][ T308] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 441.607174][T18234] loop3: detected capacity change from 0 to 512 [ 441.618569][T18234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 441.627398][T18234] ext4 filesystem being mounted at /root/syzkaller-testdir3211456448/syzkaller.nhRDEX/222/bus supports timestamps until 2038 (0x7fffffff) [ 442.057104][ T308] usb 2-1: Using ep0 maxpacket: 32 [ 442.197131][ T308] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.212985][ T308] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.367422][ T308] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 442.790587][ T308] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 442.798961][ T308] usb 2-1: Product: syz [ 442.805619][ T308] usb 2-1: Manufacturer: syz [ 442.829379][T15822] EXT4-fs (loop3): unmounting filesystem. [ 442.845309][T18249] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 442.852293][T18249] overlayfs: failed to set xattr on upper [ 442.857627][ T308] hub 2-1:4.0: USB hub found [ 443.067142][ T308] hub 2-1:4.0: 2 ports detected [ 443.207139][ T350] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 443.492722][T18265] loop3: detected capacity change from 0 to 131072 [ 443.577102][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.597060][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.617074][ T350] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 443.625934][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.646614][ T350] usb 3-1: config 0 descriptor?? [ 444.357228][ T308] hub 2-1:4.0: activate --> -90 [ 444.367171][ T350] usb 3-1: string descriptor 0 read error: -71 [ 444.375222][T18289] netem: change failed [ 444.387208][ T350] uclogic 0003:256C:006D.006C: failed retrieving string descriptor #200: -71 [ 444.401842][ T350] uclogic 0003:256C:006D.006C: failed retrieving pen parameters: -71 [ 444.416533][ T350] uclogic 0003:256C:006D.006C: failed probing pen v2 parameters: -71 [ 444.430171][ T350] uclogic 0003:256C:006D.006C: failed probing parameters: -71 [ 444.443035][ T350] uclogic: probe of 0003:256C:006D.006C failed with error -71 [ 444.444766][T18291] device syzkaller0 entered promiscuous mode [ 444.455456][ T350] usb 3-1: USB disconnect, device number 49 [ 444.949014][ T339] usb 2-1: USB disconnect, device number 41 [ 445.704533][ T28] audit: type=1400 audit(1717247931.018:32050): avc: denied { append } for pid=18329 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 445.998863][T18338] loop0: detected capacity change from 0 to 256 [ 446.019288][T18338] FAT-fs (loop0): Directory bread(block 64) failed [ 446.030066][T18338] FAT-fs (loop0): Directory bread(block 65) failed [ 446.041929][T18338] FAT-fs (loop0): Directory bread(block 66) failed [ 446.052704][T18338] FAT-fs (loop0): Directory bread(block 67) failed [ 446.062475][T18338] FAT-fs (loop0): Directory bread(block 68) failed [ 446.073773][T18338] FAT-fs (loop0): Directory bread(block 69) failed [ 446.089022][T18338] FAT-fs (loop0): Directory bread(block 70) failed [ 446.100006][T18338] FAT-fs (loop0): Directory bread(block 71) failed [ 446.109698][T18338] FAT-fs (loop0): Directory bread(block 72) failed [ 446.116188][T18338] FAT-fs (loop0): Directory bread(block 73) failed [ 446.172121][T18340] loop3: detected capacity change from 0 to 256 [ 446.303050][T14893] kworker/u4:7: attempt to access beyond end of device [ 446.303050][T14893] loop0: rw=1, sector=1224, nr_sectors = 544 limit=256 [ 446.317017][T14893] kworker/u4:7: attempt to access beyond end of device [ 446.317017][T14893] loop0: rw=1, sector=1800, nr_sectors = 128 limit=256 [ 446.331682][T14893] kworker/u4:7: attempt to access beyond end of device [ 446.331682][T14893] loop0: rw=1, sector=1960, nr_sectors = 2688 limit=256 [ 446.509821][T14893] kworker/u4:7: attempt to access beyond end of device [ 446.509821][T14893] loop0: rw=1, sector=4648, nr_sectors = 3520 limit=256 [ 446.591170][T14893] kworker/u4:7: attempt to access beyond end of device [ 446.591170][T14893] loop0: rw=1, sector=8168, nr_sectors = 8352 limit=256 [ 446.609471][T14893] kworker/u4:7: attempt to access beyond end of device [ 446.609471][T14893] loop0: rw=1, sector=16520, nr_sectors = 5872 limit=256 [ 446.624803][T14893] kworker/u4:7: attempt to access beyond end of device [ 446.624803][T14893] loop0: rw=1, sector=22392, nr_sectors = 576 limit=256 [ 446.811914][T18358] device syzkaller0 entered promiscuous mode [ 447.386122][T18379] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 447.784265][ T28] audit: type=1326 audit(1717247933.098:32051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973fe7cee9 code=0x7ffc0000 [ 447.826827][ T28] audit: type=1326 audit(1717247933.128:32052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973fe7cee9 code=0x7ffc0000 [ 447.868897][ T28] audit: type=1326 audit(1717247933.128:32053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973fe7cee9 code=0x7ffc0000 [ 447.908211][ T28] audit: type=1326 audit(1717247933.128:32054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973fe7cee9 code=0x7ffc0000 [ 447.940963][ T28] audit: type=1326 audit(1717247933.128:32055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973fe7cee9 code=0x7ffc0000 [ 447.977079][ T28] audit: type=1326 audit(1717247933.128:32056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f973fe7a667 code=0x7ffc0000 [ 448.015257][ T28] audit: type=1326 audit(1717247933.128:32057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f973fe40329 code=0x7ffc0000 [ 448.048989][ T28] audit: type=1326 audit(1717247933.128:32058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973fe7cee9 code=0x7ffc0000 [ 448.073248][ T28] audit: type=1326 audit(1717247933.128:32059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18384 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f973fe7a667 code=0x7ffc0000 [ 448.182899][T18389] loop1: detected capacity change from 0 to 40427 [ 448.191969][T18389] F2FS-fs (loop1): Found nat_bits in checkpoint [ 448.220715][T18389] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 448.253845][T15837] syz-executor.1: attempt to access beyond end of device [ 448.253845][T15837] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 448.991264][T18438] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.998275][T18438] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.005430][T18438] device bridge_slave_0 entered promiscuous mode [ 449.014084][T18438] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.021072][T18438] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.028380][T18438] device bridge_slave_1 entered promiscuous mode [ 449.078450][T18438] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.085310][T18438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.092413][T18438] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.099441][T18438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.121696][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.129666][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.136733][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.173556][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.182072][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.188971][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.196241][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.204415][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.211287][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.234336][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.242852][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.250822][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.258969][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.278402][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.287401][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.304878][T18438] device veth0_vlan entered promiscuous mode [ 449.312604][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.322734][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.331152][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.339125][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.351588][T18438] device veth1_macvtap entered promiscuous mode [ 449.358292][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.366492][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.374479][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.387345][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.395881][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.404498][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.412763][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.558521][T14864] device bridge_slave_1 left promiscuous mode [ 449.564587][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.572201][T14864] device bridge_slave_0 left promiscuous mode [ 449.578303][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.023237][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.032853][T18498] tipc: Started in network mode [ 450.043405][T18498] tipc: Node identity cgroup.pn, cluster identity 8 [ 450.103510][T18506] overlayfs: missing 'lowerdir' [ 450.201258][T18514] loop1: detected capacity change from 0 to 512 [ 450.241809][T18514] EXT4-fs: Ignoring removed orlov option [ 450.282505][T18514] EXT4-fs (loop1): 1 orphan inode deleted [ 450.294697][T18514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 450.316209][T18514] ext4 filesystem being mounted at /root/syzkaller-testdir3573152106/syzkaller.2XrytR/196/file1 supports timestamps until 2038 (0x7fffffff) [ 450.377910][T18514] EXT4-fs error (device loop1): ext4_map_blocks:721: inode #16: block 41: comm syz-executor.1: lblock 0 mapped to illegal pblock 41 (length 2) [ 450.392553][T18514] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 450.402182][T18514] EXT4-fs error (device loop1): ext4_alloc_file_blocks:4477: inode #16: comm syz-executor.1: mark_inode_dirty error [ 450.420600][T15837] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 450.436154][T15837] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 450.445995][T15837] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor.1: mark_inode_dirty error [ 450.461265][T15837] EXT4-fs (loop1): unmounting filesystem. [ 450.487417][T15837] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 450.497548][T15837] EXT4-fs error (device loop1): ext4_quota_off:7041: inode #3: comm syz-executor.1: mark_inode_dirty error [ 450.559376][ T8] tipc: Left network mode [ 450.701647][T18532] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.708710][T18532] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.716161][T18532] device bridge_slave_0 entered promiscuous mode [ 450.724392][T18532] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.731334][T18532] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.738470][T18532] device bridge_slave_1 entered promiscuous mode [ 450.797483][T18532] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.804368][T18532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.811447][T18532] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.818237][T18532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.840877][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.849135][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.858847][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.862963][T18545] loop0: detected capacity change from 0 to 512 [ 450.872809][T18545] EXT4-fs: Ignoring removed orlov option [ 450.888418][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.895063][T18545] EXT4-fs (loop0): 1 orphan inode deleted [ 450.896423][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.901931][T18545] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 450.908651][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.908961][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.927335][T18545] ext4 filesystem being mounted at /root/syzkaller-testdir3955585583/syzkaller.0wDhIE/10/file1 supports timestamps until 2038 (0x7fffffff) [ 450.933165][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.953718][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.979398][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.987419][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.000599][T18545] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #16: block 41: comm syz-executor.0: lblock 0 mapped to illegal pblock 41 (length 2) [ 451.004939][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.029478][T18545] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 451.035098][T18532] device veth0_vlan entered promiscuous mode [ 451.039169][T18545] EXT4-fs error (device loop0): ext4_alloc_file_blocks:4477: inode #16: comm syz-executor.0: mark_inode_dirty error [ 451.050908][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.070141][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.078574][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.096276][T18532] device veth1_macvtap entered promiscuous mode [ 451.104618][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.106953][T18438] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.0: lblock 0 mapped to illegal pblock 3 (length 1) [ 451.128952][T18438] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 451.132418][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.147687][T18438] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #2: comm syz-executor.0: mark_inode_dirty error [ 451.169372][T18438] EXT4-fs (loop0): unmounting filesystem. [ 451.176388][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.201221][T18438] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 451.217580][T18438] EXT4-fs error (device loop0): ext4_quota_off:7041: inode #3: comm syz-executor.0: mark_inode_dirty error [ 451.247736][ T8] device bridge_slave_1 left promiscuous mode [ 451.253679][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.267703][ T8] device bridge_slave_0 left promiscuous mode [ 451.273650][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.307180][ T8] device veth0_vlan left promiscuous mode [ 451.519212][T18577] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.526141][T18577] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.533842][T18577] device bridge_slave_0 entered promiscuous mode [ 451.541032][T18577] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.547983][T18577] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.555115][T18577] device bridge_slave_1 entered promiscuous mode [ 451.609940][T18577] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.612071][T18588] loop3: detected capacity change from 0 to 512 [ 451.616938][T18577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.623979][T18588] EXT4-fs: Ignoring removed orlov option [ 451.630275][T18577] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.642515][T18577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.663553][T18588] EXT4-fs (loop3): 1 orphan inode deleted [ 451.669330][T18588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 451.678870][T18588] ext4 filesystem being mounted at /root/syzkaller-testdir3211456448/syzkaller.nhRDEX/259/file1 supports timestamps until 2038 (0x7fffffff) [ 451.694931][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.702748][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.710632][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.740475][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.743757][T18588] EXT4-fs error (device loop3): ext4_map_blocks:721: inode #18: block 41: comm syz-executor.3: lblock 0 mapped to illegal pblock 41 (length 2) [ 451.748835][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.769740][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.777199][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.785318][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.792277][T18588] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 451.792348][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.809357][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.817252][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.819315][T18588] EXT4-fs error (device loop3): ext4_alloc_file_blocks:4477: inode #18: comm syz-executor.3: mark_inode_dirty error [ 451.836807][T18577] device veth0_vlan entered promiscuous mode [ 451.837428][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.851290][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.859759][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.867381][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.882983][T18577] device veth1_macvtap entered promiscuous mode [ 451.908641][T15822] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.3: lblock 0 mapped to illegal pblock 3 (length 1) [ 451.926845][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.942340][T15822] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 451.959118][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.967690][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.976332][T15822] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor.3: mark_inode_dirty error [ 452.010227][T15822] EXT4-fs (loop3): unmounting filesystem. [ 452.039465][T15822] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 452.055237][T15822] EXT4-fs error (device loop3): ext4_quota_off:7041: inode #3: comm syz-executor.3: mark_inode_dirty error [ 452.191721][T18603] loop2: detected capacity change from 0 to 256 [ 452.886634][T18612] loop2: detected capacity change from 0 to 128 [ 452.919966][ T8] device bridge_slave_1 left promiscuous mode [ 452.957727][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.965250][ T8] device bridge_slave_0 left promiscuous mode [ 452.971973][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.980869][ T8] device veth1_macvtap left promiscuous mode [ 452.991948][ T8] device veth0_vlan left promiscuous mode [ 453.282128][T18627] loop0: detected capacity change from 0 to 128 [ 453.308518][T18610] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.315487][T18610] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.322884][T18610] device bridge_slave_0 entered promiscuous mode [ 453.330332][T18610] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.340661][T18610] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.352967][T18610] device bridge_slave_1 entered promiscuous mode [ 453.415283][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.658717][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.675309][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.683730][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.691797][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.698645][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.718245][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.727558][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.762860][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.772280][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.779144][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.786502][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.794386][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.812533][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.825499][T18610] device veth0_vlan entered promiscuous mode [ 453.832042][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.840758][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.848716][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.870178][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.886635][T18638] device syzkaller0 entered promiscuous mode [ 453.894381][T18610] device veth1_macvtap entered promiscuous mode [ 453.916723][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.931033][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.980586][T18649] loop3: detected capacity change from 0 to 128 [ 454.046236][T18650] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.053221][T18650] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.060831][T18650] device bridge_slave_0 entered promiscuous mode [ 454.071201][T18650] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.078733][T18650] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.086067][T18650] device bridge_slave_1 entered promiscuous mode [ 454.271524][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 454.490135][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.506554][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.529157][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 454.537087][ T340] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 454.544950][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.553066][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.559938][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.567287][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 454.570321][T18660] loop0: detected capacity change from 0 to 128 [ 454.575573][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.621166][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.628131][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.640492][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 454.647962][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 454.655795][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.663675][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.671578][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 454.687175][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 454.697195][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.708409][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.718403][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 454.731492][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 454.741039][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.769845][ T24] usb 2-1: config 0 descriptor?? [ 454.876248][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 454.891481][T18650] device veth0_vlan entered promiscuous mode [ 454.905628][T18650] device veth1_macvtap entered promiscuous mode [ 454.925885][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 454.934838][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 454.944085][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 454.952511][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 454.955436][T18667] loop3: detected capacity change from 0 to 256 [ 454.960839][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 454.974797][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.982880][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.992009][ T8] device bridge_slave_1 left promiscuous mode [ 454.998146][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.005540][ T8] device bridge_slave_0 left promiscuous mode [ 455.011764][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.019608][ T8] device veth1_macvtap left promiscuous mode [ 455.025421][ T8] device veth0_vlan left promiscuous mode [ 455.037087][ T340] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.047257][ T340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.057963][ T340] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.156382][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.163804][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.191836][T18677] device syzkaller0 entered promiscuous mode [ 455.218561][T18681] device syzkaller0 entered promiscuous mode [ 455.227237][ T340] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.236789][ T340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.244914][ T340] usb 3-1: Product: syz [ 455.250259][ T340] usb 3-1: Manufacturer: syz [ 455.254757][ T340] usb 3-1: SerialNumber: syz [ 455.297792][ T340] usb 3-1: selecting invalid altsetting 1 [ 455.311325][T18683] loop3: detected capacity change from 0 to 256 [ 455.368589][T18688] syz-executor.4[18688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.368656][T18688] syz-executor.4[18688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.387931][ T24] prodikeys 0003:041E:2801.006D: unknown main item tag 0x0 [ 455.390049][T18690] loop4: detected capacity change from 0 to 128 [ 455.399567][ T24] prodikeys 0003:041E:2801.006D: unknown main item tag 0x0 [ 455.486964][ T24] prodikeys 0003:041E:2801.006D: unknown main item tag 0x0 [ 455.494050][ T24] prodikeys 0003:041E:2801.006D: unknown main item tag 0x0 [ 455.501091][ T24] prodikeys 0003:041E:2801.006D: unknown main item tag 0x0 [ 455.508799][ T24] prodikeys 0003:041E:2801.006D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 455.510831][T18694] loop0: detected capacity change from 0 to 256 [ 455.816354][ T24] usb 2-1: USB disconnect, device number 42 [ 455.950937][T18707] serio: Serial port pts0 [ 456.059234][T18711] loop3: detected capacity change from 0 to 128 [ 456.121958][T18713] loop0: detected capacity change from 0 to 256 [ 456.157655][ T340] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 456.159995][T18715] device syzkaller0 entered promiscuous mode [ 456.163537][ T340] cdc_ncm 3-1:1.0: bind() failure [ 456.699695][T18727] loop1: detected capacity change from 0 to 256 [ 456.854969][ T340] usb 3-1: USB disconnect, device number 50 [ 456.926456][T18733] loop4: detected capacity change from 0 to 256 [ 456.981364][T18744] loop0: detected capacity change from 0 to 256 [ 456.998066][T18733] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (393216 ns). Using initial count to start timer. [ 457.002187][T18737] syz-executor.2 (18737) used greatest stack depth: 18096 bytes left [ 457.025635][ T8] device bridge_slave_1 left promiscuous mode [ 457.027138][T18746] loop0: detected capacity change from 0 to 256 [ 457.032010][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.043505][T18746] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea07c, utbl_chksum : 0x7319d30d) [ 457.056719][ T8] device bridge_slave_0 left promiscuous mode [ 457.064384][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.073468][ T8] device veth1_macvtap left promiscuous mode [ 457.079473][ T8] device veth0_vlan left promiscuous mode [ 457.082925][T18748] loop0: detected capacity change from 0 to 128 [ 457.247205][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 457.462022][ T3325] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 457.567047][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 457.589384][T18768] device syzkaller0 entered promiscuous mode [ 457.617130][ T19] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 457.670398][T18772] Â: renamed from pim6reg1 [ 457.697171][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.707994][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.717680][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.730293][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.739254][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.747986][ T24] usb 4-1: config 0 descriptor?? [ 457.758838][T18780] syz-executor.2[18780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.758885][T18780] syz-executor.2[18780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.827212][ T3325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.848895][ T3325] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 457.937251][ T3325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.949464][ T3325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 457.966657][ T3325] usb 2-1: SerialNumber: syz [ 457.977117][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.988138][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.999503][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.012591][ T19] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 458.021576][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.036019][ T19] usb 5-1: config 0 descriptor?? [ 458.218285][ T24] microsoft 0003:045E:07DA.006E: No inputs registered, leaving [ 458.229678][ T24] microsoft 0003:045E:07DA.006E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 458.241119][ T24] microsoft 0003:045E:07DA.006E: no inputs found [ 458.247388][ T24] microsoft 0003:045E:07DA.006E: could not initialize ff, continuing anyway [ 458.292412][T18808] syz-executor.2[18808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.292511][T18808] syz-executor.2[18808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.372594][T18820] syz-executor.0[18820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.384585][T18820] syz-executor.0[18820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.418497][ T339] usb 4-1: USB disconnect, device number 49 [ 458.430270][ T3325] usb 2-1: USB disconnect, device number 43 [ 458.517573][ T19] prodikeys 0003:041E:2801.006F: unknown main item tag 0x0 [ 458.524858][ T19] prodikeys 0003:041E:2801.006F: unknown main item tag 0x0 [ 458.531877][ T19] prodikeys 0003:041E:2801.006F: unknown main item tag 0x0 [ 458.539010][ T19] prodikeys 0003:041E:2801.006F: unknown main item tag 0x0 [ 458.546022][ T19] prodikeys 0003:041E:2801.006F: unknown main item tag 0x0 [ 458.553621][ T19] prodikeys 0003:041E:2801.006F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input0 [ 458.720510][ T19] usb 5-1: USB disconnect, device number 55 [ 459.019380][T18831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18831 comm=syz-executor.3 [ 459.034740][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 459.044646][T18832] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.131107][T18834] syz-executor.3[18834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.131185][T18834] syz-executor.3[18834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.255438][T18855] loop4: detected capacity change from 0 to 512 [ 459.263806][T18857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18857 comm=syz-executor.0 [ 459.268141][T18855] EXT4-fs (loop4): inodes count not valid: 3 vs 32 [ 459.277443][T18857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 459.467099][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 459.660094][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 459.660109][ T28] audit: type=1400 audit(1717247944.978:32062): avc: denied { mounton } for pid=18876 comm="syz-executor.4" path="/root/syzkaller-testdir601174856/syzkaller.Ogwvrk/17/file0" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 459.757138][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 459.887122][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.898117][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.908073][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 459.924091][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.938735][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.949034][ T24] usb 4-1: config 0 descriptor?? [ 459.984915][T18896] loop1: detected capacity change from 0 to 256 [ 460.028889][T18906] deleting an unspecified loop device is not supported. [ 460.049985][T18911] input: syz1 as /devices/virtual/input/input109 [ 460.097602][T18918] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.116314][T18917] loop0: detected capacity change from 0 to 2048 [ 460.125119][T18917] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz-executor.0: casefold flag without casefold feature [ 460.138377][T18917] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 460.150226][T18917] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 460.158399][T18917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.170031][ T28] audit: type=1326 audit(1717247945.488:32063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18916 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb487cee9 code=0x0 [ 460.363538][T18927] loop1: detected capacity change from 0 to 256 [ 460.449248][ T24] microsoft 0003:045E:07DA.0070: No inputs registered, leaving [ 460.457012][ T24] microsoft 0003:045E:07DA.0070: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 460.468271][ T24] microsoft 0003:045E:07DA.0070: no inputs found [ 460.474398][ T24] microsoft 0003:045E:07DA.0070: could not initialize ff, continuing anyway [ 460.505117][T18936] loop4: detected capacity change from 0 to 256 [ 460.515073][T18936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 460.543859][T18943] input: syz1 as /devices/virtual/input/input111 [ 460.544328][T18942] loop1: detected capacity change from 0 to 512 [ 460.556935][T18942] EXT4-fs (loop1): inodes count not valid: 3 vs 32 [ 460.631497][T18952] loop1: detected capacity change from 0 to 256 [ 460.654232][ T24] usb 4-1: USB disconnect, device number 50 [ 460.935223][T18577] EXT4-fs (loop0): unmounting filesystem. [ 460.960219][T18965] loop2: detected capacity change from 0 to 256 [ 460.963315][T18967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18967 comm=syz-executor.4 [ 460.969580][T18965] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 460.991042][ T28] audit: type=1400 audit(1717247946.298:32064): avc: denied { read } for pid=18966 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 461.027628][T18973] input: syz1 as /devices/virtual/input/input113 [ 461.090709][T18976] input: syz1 as /devices/virtual/input/input114 [ 461.108894][T18982] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 461.165558][T18993] loop0: detected capacity change from 0 to 256 [ 461.172310][T18993] exfat: Deprecated parameter 'namecase' [ 461.178467][T18993] exfat: Deprecated parameter 'utf8' [ 461.183851][T18993] exfat: Deprecated parameter 'namecase' [ 461.189793][T18993] exfat: Deprecated parameter 'utf8' [ 461.206108][T18993] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 461.255115][T19006] input: syz1 as /devices/virtual/input/input115 [ 461.277301][T19013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.338118][T19019] input: syz1 as /devices/virtual/input/input116 [ 461.366662][T19022] loop2: detected capacity change from 0 to 2048 [ 461.398025][T19022] Alternate GPT is invalid, using primary GPT. [ 461.404373][T19022] loop2: p1 p2 p3 [ 461.473278][T19043] loop2: detected capacity change from 0 to 256 [ 461.548764][T19055] input: syz1 as /devices/virtual/input/input117 [ 461.848816][T19066] loop2: detected capacity change from 0 to 256 [ 461.858083][T19066] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 461.897132][T12757] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 461.904776][ T28] audit: type=1326 audit(1717247947.218:32065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc2a7cee9 code=0x7ffc0000 [ 461.928766][ T28] audit: type=1326 audit(1717247947.218:32066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc2a7cee9 code=0x7ffc0000 [ 461.952758][ T28] audit: type=1326 audit(1717247947.218:32067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfc2a7cee9 code=0x7ffc0000 [ 461.977421][ T28] audit: type=1326 audit(1717247947.218:32068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc2a7cee9 code=0x7ffc0000 [ 462.001413][ T28] audit: type=1326 audit(1717247947.218:32069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfc2a7cee9 code=0x7ffc0000 [ 462.025773][ T28] audit: type=1326 audit(1717247947.348:32070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc2a7cee9 code=0x7ffc0000 [ 462.049747][ T28] audit: type=1326 audit(1717247947.348:32071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19075 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfc2a7a667 code=0x7ffc0000 [ 462.083909][T19076] loop2: detected capacity change from 0 to 16 [ 462.092922][T19076] erofs: (device loop2): mounted with root inode @ nid 36. [ 462.147072][T12757] usb 1-1: Using ep0 maxpacket: 32 [ 462.173302][T19076] syz-executor.2: attempt to access beyond end of device [ 462.173302][T19076] loop2: rw=0, sector=3489784, nr_sectors = 8 limit=16 [ 462.232247][T19090] loop1: detected capacity change from 0 to 256 [ 462.241702][T19090] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 462.267786][T12757] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.270645][T19096] loop1: detected capacity change from 0 to 128 [ 462.280167][T12757] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.294169][T12757] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 462.303063][T12757] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.347402][T12757] hub 1-1:4.0: USB hub found [ 462.365537][T19105] loop4: detected capacity change from 0 to 256 [ 462.372435][T19105] exFAT-fs (loop4): failed to read boot sector [ 462.378657][T19105] exFAT-fs (loop4): failed to recognize exfat type [ 462.464943][T19123] loop4: detected capacity change from 0 to 256 [ 464.028718][T12757] hub 1-1:4.0: 2 ports detected [ 464.107173][T19150] loop1: detected capacity change from 0 to 256 [ 464.108397][T19144] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 464.115864][T19150] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 464.134659][T19150] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 464.185106][T19157] loop2: detected capacity change from 0 to 512 [ 464.190901][T18532] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 464.208370][T19157] EXT4-fs (loop2): 1 truncate cleaned up [ 464.215331][T19157] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 464.215752][T18532] exFAT-fs (loop1): Filesystem has been set read-only [ 464.233757][T19157] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #13: block 25: comm syz-executor.2: lblock 0 mapped to illegal pblock 25 (length 2) [ 464.244330][T18532] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005) [ 464.261665][T18061] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz-executor.2: lblock 0 mapped to illegal pblock 13 (length 1) [ 464.286928][T18061] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block [ 464.312950][T18061] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 464.322479][T18061] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor.2: mark_inode_dirty error [ 464.361194][T18061] EXT4-fs (loop2): unmounting filesystem. [ 464.427123][T12757] hub 1-1:4.0: set hub depth failed [ 464.468127][T12757] usb 1-1: USB disconnect, device number 50 [ 464.542201][T19164] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.556659][T19164] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.567566][T19164] device bridge_slave_0 entered promiscuous mode [ 464.574495][T19164] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.581751][T19164] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.589154][T19164] device bridge_slave_1 entered promiscuous mode [ 464.716895][T19164] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.723779][T19164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.730879][T19164] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.737657][T19164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.798834][T19169] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.805841][T19169] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.813346][T19169] device bridge_slave_0 entered promiscuous mode [ 464.820876][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.829163][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.838440][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.847171][T19169] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.854059][T19169] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.861323][T19169] device bridge_slave_1 entered promiscuous mode [ 464.872775][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.880651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.921640][T19181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 464.936006][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.951563][T19183] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 464.981797][T19185] bpf_get_probe_write_proto: 2 callbacks suppressed [ 464.981816][T19185] syz-executor.3[19185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.994049][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.007460][T19185] syz-executor.3[19185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.015781][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.018000][T19189] loop0: detected capacity change from 0 to 512 [ 465.027725][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.056774][T19164] device veth0_vlan entered promiscuous mode [ 465.057635][T19189] EXT4-fs error (device loop0): mb_free_blocks:1813: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 465.077079][T19189] EXT4-fs (loop0): Remounting filesystem read-only [ 465.083570][T19189] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 1 (level 1) [ 465.097127][T19189] EXT4-fs (loop0): 1 truncate cleaned up [ 465.103609][ T8] device bridge_slave_1 left promiscuous mode [ 465.111210][T19189] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 465.111688][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.129007][ T8] device bridge_slave_0 left promiscuous mode [ 465.135068][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.143802][ T8] device veth1_macvtap left promiscuous mode [ 465.149718][ T8] device veth0_vlan left promiscuous mode [ 465.247633][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.258183][T19164] device veth1_macvtap entered promiscuous mode [ 465.270893][T18577] EXT4-fs (loop0): unmounting filesystem. [ 465.290224][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.300688][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.318019][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.326424][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.388057][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.397644][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.411619][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.426715][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.442591][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.449471][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.469823][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.485662][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.501342][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.508234][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.545366][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.555212][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 465.572163][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.589171][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.608432][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.626717][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 465.637328][T19225] syz-executor.1[19225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.637398][T19225] syz-executor.1[19225] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.656949][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.691016][T19169] device veth0_vlan entered promiscuous mode [ 465.699163][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 465.707180][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.727472][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.734761][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.753888][T19228] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 465.778637][ T28] kauditd_printk_skb: 722 callbacks suppressed [ 465.778652][ T28] audit: type=1400 audit(1717247951.098:32794): avc: denied { relabelto } for pid=19227 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=112696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 465.810681][T19215] loop3: detected capacity change from 0 to 40427 [ 465.823286][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 465.835740][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.845288][T19215] F2FS-fs (loop3): invalid crc value [ 465.853563][T19169] device veth1_macvtap entered promiscuous mode [ 465.861845][T19230] loop1: detected capacity change from 0 to 512 [ 465.878112][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.887853][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.900942][T19215] F2FS-fs (loop3): Found nat_bits in checkpoint [ 465.915421][T19230] EXT4-fs error (device loop1): mb_free_blocks:1813: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 465.932267][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.962750][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 465.975520][T12757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.983530][T19230] EXT4-fs (loop1): Remounting filesystem read-only [ 466.003098][T19230] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 1 (level 1) [ 466.065175][T19215] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 466.077418][T19230] EXT4-fs (loop1): 1 truncate cleaned up [ 466.094959][T19230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 466.113574][ T28] audit: type=1400 audit(1717247951.428:32795): avc: denied { create } for pid=19214 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 466.182591][T19164] EXT4-fs (loop1): unmounting filesystem. [ 466.183110][ T28] audit: type=1400 audit(1717247951.498:32796): avc: denied { write } for pid=19241 comm="syz-executor.2" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 466.212474][T19242] random: crng reseeded on system resumption [ 466.224607][T19244] loop1: detected capacity change from 0 to 256 [ 466.248577][T19244] FAT-fs (loop1): Directory bread(block 64) failed [ 466.257311][ T28] audit: type=1400 audit(1717247951.528:32797): avc: denied { open } for pid=19241 comm="syz-executor.2" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 466.267590][T19244] FAT-fs (loop1): Directory bread(block 65) failed [ 466.287955][T18610] syz-executor.3: attempt to access beyond end of device [ 466.287955][T18610] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.311717][T19244] FAT-fs (loop1): Directory bread(block 66) failed [ 466.325189][T19244] FAT-fs (loop1): Directory bread(block 67) failed [ 466.338256][T19244] FAT-fs (loop1): Directory bread(block 68) failed [ 466.352303][T19244] FAT-fs (loop1): Directory bread(block 69) failed [ 466.365307][T19244] FAT-fs (loop1): Directory bread(block 70) failed [ 466.379318][T19244] FAT-fs (loop1): Directory bread(block 71) failed [ 466.385695][T19244] FAT-fs (loop1): Directory bread(block 72) failed [ 466.398990][T19244] FAT-fs (loop1): Directory bread(block 73) failed [ 466.430786][ T8] device bridge_slave_1 left promiscuous mode [ 466.442215][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.454043][ T8] device bridge_slave_0 left promiscuous mode [ 466.461797][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.472744][ T8] device veth1_macvtap left promiscuous mode [ 466.482326][ T8] device veth0_vlan left promiscuous mode [ 466.546848][T19270] syz-executor.3[19270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.546916][T19270] syz-executor.3[19270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.659295][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 466.830907][T19294] loop2: detected capacity change from 0 to 512 [ 466.842665][T19294] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 466.857468][T19294] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.2: missing EA_INODE flag [ 466.879172][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x1 [ 466.886748][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 466.902864][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 466.911292][T19294] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 2 err=-117 [ 466.935848][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 466.947532][T19294] EXT4-fs (loop2): 1 orphan inode deleted [ 466.953091][T19294] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 466.961635][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 466.962321][T19294] EXT4-fs (loop2): unmounting filesystem. [ 466.982104][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 466.990495][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x4 [ 466.997858][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.005626][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.013914][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.021771][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 467.029899][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.038517][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.045861][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.053314][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.070425][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.077948][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.085293][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.092882][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.100321][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.107812][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.115143][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.122646][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.133859][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.145725][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.157750][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.170156][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.182655][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.198744][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.212389][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.226850][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.242240][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.257118][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.265143][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.272773][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.280546][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.288033][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.295444][ T39] hid-generic 0000:0000:0000.0071: unknown main item tag 0x0 [ 467.314221][T19263] loop1: detected capacity change from 0 to 131072 [ 467.316129][ T39] hid-generic 0000:0000:0000.0071: hidraw0: HID v0.00 Device [syz0] on syz0 [ 467.333024][T19263] F2FS-fs (loop1): QUOTA feature is enabled, so ignore jquota_fmt [ 467.358932][T19263] F2FS-fs (loop1): invalid crc value [ 467.368112][T19263] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 467.397500][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 467.409725][T19263] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 467.427847][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.447379][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.457038][ T28] audit: type=1400 audit(1717247952.768:32798): avc: denied { reparent } for pid=19262 comm="syz-executor.1" name="file0" dev="loop1" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 467.484788][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 467.498165][T19311] loop2: detected capacity change from 0 to 512 [ 467.504305][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.513015][T19311] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 467.525256][ T24] usb 4-1: config 0 descriptor?? [ 467.541892][T19311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 467.551901][T19311] System zones: 1-12 [ 467.557869][T19311] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 467.580988][T19311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 467.597230][T19311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 467.617463][T19311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 467.629544][ T308] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 467.637343][T19311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 467.660844][T19311] EXT4-fs (loop2): 1 orphan inode deleted [ 467.667250][T19311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 467.695726][T19311] SELinux: Context syz: is not valid (left unmapped). [ 467.705947][ T28] audit: type=1400 audit(1717247953.018:32799): avc: denied { relabelto } for pid=19310 comm="syz-executor.2" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="syz:" [ 467.816338][T19169] EXT4-fs (loop2): unmounting filesystem. [ 467.832697][T19319] loop2: detected capacity change from 0 to 256 [ 467.849634][ T28] audit: type=1400 audit(1717247953.168:32800): avc: denied { remount } for pid=19317 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 467.877028][ T308] usb 5-1: Using ep0 maxpacket: 32 [ 467.997121][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 468.008300][ T308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 468.019383][ T308] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 468.029342][T19340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19340 comm=syz-executor.2 [ 468.029438][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.052090][ T308] usb 5-1: config 0 descriptor?? [ 468.067152][T19301] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 468.087367][ T308] hub 5-1:0.0: USB hub found [ 468.307392][ T308] hub 5-1:0.0: 2 ports detected [ 468.327101][ T3325] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 468.567076][ T308] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 468.573349][ T308] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 468.677131][ T308] usbhid 5-1:0.0: can't add hid device: -71 [ 468.684698][ T308] usbhid: probe of 5-1:0.0 failed with error -71 [ 468.691342][ T3325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.695988][T19345] loop0: detected capacity change from 0 to 512 [ 468.702817][ T3325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.708222][ T24] uclogic 0003:256C:006D.0072: failed retrieving string descriptor #200: -71 [ 468.717807][ T3325] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 468.726317][ T24] uclogic 0003:256C:006D.0072: failed retrieving pen parameters: -71 [ 468.735818][ T308] usb 5-1: USB disconnect, device number 56 [ 468.744319][T19345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 468.750480][ T3325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.768698][ T3325] usb 3-1: config 0 descriptor?? [ 468.776080][ T24] uclogic 0003:256C:006D.0072: failed probing pen v2 parameters: -71 [ 468.784653][T19345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 468.788201][T19348] loop1: detected capacity change from 0 to 512 [ 468.792678][T19345] System zones: [ 468.798589][ T24] uclogic 0003:256C:006D.0072: failed probing parameters: -71 [ 468.798679][T19345] 1-12 [ 468.801957][ T24] uclogic: probe of 0003:256C:006D.0072 failed with error -71 [ 468.803146][ T24] usb 4-1: USB disconnect, device number 51 [ 468.809965][T19345] [ 468.813929][T19348] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 468.819976][T19345] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 468.826480][T19348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 468.838260][T19348] System zones: [ 468.851366][T19345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: missing EA_INODE flag [ 468.858773][T19348] 1-12 [ 468.862060][T19345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 12 err=-117 [ 468.873874][T19348] [ 468.876362][T19345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: missing EA_INODE flag [ 468.889357][T19348] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 468.891313][T19345] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 12 err=-117 [ 468.915728][T19345] EXT4-fs (loop0): 1 orphan inode deleted [ 468.928345][T19348] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 468.933216][T19345] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 468.953829][T19348] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 468.966585][T19348] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 468.978644][T19348] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 468.991408][T19348] EXT4-fs (loop1): 1 orphan inode deleted [ 468.997041][T19348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 469.052358][T18577] EXT4-fs (loop0): unmounting filesystem. [ 469.071562][T19354] loop0: detected capacity change from 0 to 256 [ 469.074514][ T28] audit: type=1326 audit(1717247954.388:32801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19342 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f446fc7cee9 code=0x0 [ 469.131395][T19164] EXT4-fs (loop1): unmounting filesystem. [ 469.192861][T19366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19366 comm=syz-executor.1 [ 469.293033][T19377] loop1: detected capacity change from 0 to 512 [ 469.299997][T19377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 469.313825][T19377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 469.322968][T19377] System zones: 1-12 [ 469.327512][T19377] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 469.341074][T19377] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 469.353077][T19377] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 469.365979][T19377] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.1: missing EA_INODE flag [ 469.378272][T19377] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 12 err=-117 [ 469.391194][T19377] EXT4-fs (loop1): 1 orphan inode deleted [ 469.396892][T19377] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 469.408155][ T3325] itetech 0003:06CB:73F5.0073: unknown main item tag 0x0 [ 469.417121][ T3325] itetech 0003:06CB:73F5.0073: hidraw0: USB HID v0.00 Device [HID 06cb:73f5] on usb-dummy_hcd.2-1/input0 [ 469.492214][T19164] EXT4-fs (loop1): unmounting filesystem. [ 469.521154][T19397] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=19397 comm=syz-executor.1 [ 469.554938][T19400] syz-executor.3[19400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.555013][T19400] syz-executor.3[19400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.108464][T19421] device pim6reg1 entered promiscuous mode [ 470.421086][T19436] loop1: detected capacity change from 0 to 2048 [ 470.439173][T19436] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 470.447736][T19436] ext4 filesystem being mounted at /root/syzkaller-testdir2897821377/syzkaller.sJG5ec/28/file0 supports timestamps until 2038 (0x7fffffff) [ 470.477130][T19436] fs-verity: sha512 using implementation "sha512-avx2" [ 470.497591][T19164] EXT4-fs (loop1): unmounting filesystem. [ 470.551011][T19450] device pim6reg1 entered promiscuous mode [ 470.557776][T19452] loop3: detected capacity change from 0 to 512 [ 470.564978][T19452] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 470.577653][T19452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 470.585542][T19452] System zones: [ 470.585575][T19448] device pim6reg1 entered promiscuous mode [ 470.586061][T19452] 1-12 [ 470.597808][T19452] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 470.611242][T19452] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 470.623270][T19452] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 470.636128][T19452] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 470.648129][T19452] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 470.660901][T19452] EXT4-fs (loop3): 1 orphan inode deleted [ 470.666593][T19452] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 470.774287][T18610] EXT4-fs (loop3): unmounting filesystem. [ 470.796098][T19461] loop1: detected capacity change from 0 to 256 [ 470.802835][T19461] exfat: Deprecated parameter 'utf8' [ 470.812992][T19461] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 470.830079][T19461] 9pnet_fd: p9_fd_create_unix (19461): problem connecting socket: ./file0: -13 [ 470.903927][T19471] loop0: detected capacity change from 0 to 2048 [ 470.918596][T19471] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 470.927293][T19471] ext4 filesystem being mounted at /root/syzkaller-testdir2135030970/syzkaller.IZhcV9/68/file0 supports timestamps until 2038 (0x7fffffff) [ 470.956034][T18577] EXT4-fs (loop0): unmounting filesystem. [ 471.065772][ T24] usb 3-1: USB disconnect, device number 51 [ 471.093213][T19488] loop2: detected capacity change from 0 to 512 [ 471.101874][T19488] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 471.114643][T19488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e09c, mo2=0002] [ 471.122588][T19488] System zones: 1-12 [ 471.126842][T19488] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 471.140403][T19488] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 471.152396][T19488] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 471.165268][T19488] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 471.177293][T19488] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 471.190054][T19488] EXT4-fs (loop2): 1 orphan inode deleted [ 471.195934][T19488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 471.300859][T19169] EXT4-fs (loop2): unmounting filesystem. [ 471.396237][T19496] loop3: detected capacity change from 0 to 256 [ 471.405257][T19496] exfat: Deprecated parameter 'utf8' [ 471.413664][T19496] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 471.430639][T19496] 9pnet_fd: p9_fd_create_unix (19496): problem connecting socket: ./file0: -13 [ 471.461743][T19492] loop2: detected capacity change from 0 to 40427 [ 471.469835][T19492] F2FS-fs (loop2): invalid crc value [ 471.476958][T19492] F2FS-fs (loop2): Found nat_bits in checkpoint [ 471.508805][T19492] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 471.604382][T19510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.659491][ T28] audit: type=1400 audit(1717247956.978:32802): avc: denied { getopt } for pid=19514 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 471.767040][ T39] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 471.902292][T19540] ./file0: Can't open blockdev [ 472.017150][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 472.157133][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.167886][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.177451][ T39] usb 4-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 472.186301][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.194752][ T39] usb 4-1: config 0 descriptor?? [ 472.755298][T19591] syz-executor.1[19591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.755370][T19591] syz-executor.1[19591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.769137][T19591] syz-executor.1[19591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.781253][T19591] syz-executor.1[19591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.972540][T19618] syz-executor.0[19618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.984288][T19618] syz-executor.0[19618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.997868][T19618] syz-executor.0[19618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.009923][T19618] syz-executor.0[19618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.277132][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 473.296543][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 473.303609][ T39] usb 4-1: USB disconnect, device number 52 [ 473.309459][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 473.367937][T19651] syz-executor.4[19651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.368013][T19651] syz-executor.4[19651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.598586][T19681] loop2: detected capacity change from 0 to 256 [ 473.697413][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.714719][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.734169][ T24] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 473.753949][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.766343][ T24] usb 2-1: config 0 descriptor?? [ 473.807046][ T308] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 473.810332][T19707] loop0: detected capacity change from 0 to 256 [ 473.835041][T19701] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.842089][T19701] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.849456][T19701] device bridge_slave_0 entered promiscuous mode [ 473.856376][T19701] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.863409][T19701] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.870860][T19701] device bridge_slave_1 entered promiscuous mode [ 473.937190][T19701] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.944074][T19701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.951175][T19701] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.957961][T19701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.985776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.993930][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.001351][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.024776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 474.033283][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.040150][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.047437][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.055474][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.062332][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.077787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.086155][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.098621][ T3325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.112444][T19701] device veth0_vlan entered promiscuous mode [ 474.119005][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.127500][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.134965][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.149579][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.161377][T19701] device veth1_macvtap entered promiscuous mode [ 474.167115][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.178435][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.184480][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 474.188534][ T308] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 474.205559][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.214250][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 474.222517][ T308] usb 4-1: config 0 descriptor?? [ 474.337312][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 474.343149][ T24] usbhid: probe of 2-1:0.0 failed with error -71 [ 474.357846][ T24] usb 2-1: USB disconnect, device number 44 [ 474.631506][T19771] loop0: detected capacity change from 0 to 2048 [ 474.648622][T19771] Alternate GPT is invalid, using primary GPT. [ 474.654899][T19771] loop0: p1 p2 p3 [ 474.708767][T19776] loop2: detected capacity change from 0 to 256 [ 474.715244][T19776] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ01777777777777777777777017777777777777777777770x00000000000000040xffffffffffffffff' [ 474.767132][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 474.773064][ T308] usbhid: probe of 4-1:0.0 failed with error -71 [ 474.783654][ T308] usb 4-1: USB disconnect, device number 53 [ 474.827738][T19792] loop2: detected capacity change from 0 to 1024 [ 474.838694][T19792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 474.853361][T19701] EXT4-fs (loop2): unmounting filesystem. [ 474.879379][T19799] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 474.905472][T19803] loop2: detected capacity change from 0 to 512 [ 474.913431][T19803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 474.923650][T19803] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 216: padding at end of block bitmap is not set [ 475.027074][ T339] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 475.217915][T19808] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 475.437567][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.448365][ T339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.458011][ T339] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 475.458757][T19701] EXT4-fs (loop2): unmounting filesystem. [ 475.466864][ T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.467681][ T339] usb 2-1: config 0 descriptor?? [ 475.490944][ T28] audit: type=1400 audit(1717247960.808:32803): avc: denied { read } for pid=19819 comm="syz-executor.2" name="/" dev="configfs" ino=12289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.515522][ T28] audit: type=1400 audit(1717247960.808:32804): avc: denied { open } for pid=19819 comm="syz-executor.2" path="/root/syzkaller-testdir1367507186/syzkaller.MDSC6W/21/file0" dev="configfs" ino=12289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 475.545843][ T308] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 475.555856][T19825] loop4: detected capacity change from 0 to 16 [ 475.563334][T19825] erofs: (device loop4): mounted with root inode @ nid 36. [ 475.571474][T19825] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 475.580852][T19825] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -12 in[45, 4051] out[1851] [ 475.593586][T19827] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 475.600570][T19825] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 475.875877][ T28] audit: type=1400 audit(1717247961.188:32805): avc: denied { mount } for pid=19867 comm="syz-executor.4" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 475.898645][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 475.900880][ T28] audit: type=1400 audit(1717247961.188:32806): avc: denied { watch } for pid=19867 comm="syz-executor.4" path="/root/syzkaller-testdir601174856/syzkaller.Ogwvrk/133/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 475.933317][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.944294][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.953961][ T308] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 475.962920][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.972079][ T308] usb 4-1: config 0 descriptor?? [ 476.031300][ T28] audit: type=1400 audit(1717247961.348:32807): avc: denied { unmount } for pid=18650 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 476.068001][T19874] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 476.082483][T19876] loop4: detected capacity change from 0 to 16 [ 476.089495][T19876] erofs: (device loop4): mounted with root inode @ nid 36. [ 476.104321][T19876] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 476.130655][T19880] tmpfs: Bad value for 'uid' [ 476.274724][T19892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19892 comm=syz-executor.4 [ 476.287895][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.288137][T19892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 476.298771][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.317601][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 476.326393][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.334802][ T24] usb 3-1: config 0 descriptor?? [ 476.527134][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 476.532968][ T308] usbhid: probe of 4-1:0.0 failed with error -71 [ 476.539745][ T308] usb 4-1: USB disconnect, device number 54 [ 476.667098][ T339] uclogic 0003:256C:006D.0074: failed retrieving string descriptor #200: -71 [ 476.675747][ T339] uclogic 0003:256C:006D.0074: failed retrieving pen parameters: -71 [ 476.683616][ T339] uclogic 0003:256C:006D.0074: failed probing pen v2 parameters: -71 [ 476.691509][ T339] uclogic 0003:256C:006D.0074: failed probing parameters: -71 [ 476.698786][ T339] uclogic: probe of 0003:256C:006D.0074 failed with error -71 [ 476.706926][ T339] usb 2-1: USB disconnect, device number 45 [ 476.797343][ T9368] Bluetooth: hci0: command 0x1003 tx timeout [ 476.797779][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 476.826152][T19897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19897 comm=syz-executor.0 [ 476.839095][T19897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.857118][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 476.863053][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 476.870238][ T24] usb 3-1: USB disconnect, device number 52 [ 476.959661][T19900] loop3: detected capacity change from 0 to 16 [ 476.966340][T19900] erofs: (device loop3): mounted with root inode @ nid 36. [ 476.987212][T19900] erofs: (device loop3): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 477.015650][T19904] tmpfs: Bad value for 'uid' [ 477.036890][T19908] loop3: detected capacity change from 0 to 16 [ 477.043590][T19908] erofs: (device loop3): mounted with root inode @ nid 36. [ 477.052241][T19908] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 477.061782][T19908] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -12 in[45, 4051] out[1851] [ 477.073720][T19908] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 477.160514][ T28] audit: type=1400 audit(1717247962.478:32808): avc: denied { setattr } for pid=19919 comm="syz-executor.4" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 477.214641][T19923] loop4: detected capacity change from 0 to 16 [ 477.221810][T19923] erofs: (device loop4): mounted with root inode @ nid 36. [ 477.251658][T19927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64812 sclass=netlink_route_socket pid=19927 comm=syz-executor.1 [ 477.253050][T19923] erofs: (device loop4): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 477.281868][T19927] loop1: detected capacity change from 0 to 1024 [ 477.289372][T19927] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 477.410600][T19941] loop4: detected capacity change from 0 to 512 [ 477.439080][T19941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 477.448106][T19941] ext4 filesystem being mounted at /root/syzkaller-testdir601174856/syzkaller.Ogwvrk/150/file0 supports timestamps until 2038 (0x7fffffff) [ 477.470520][T18650] EXT4-fs (loop4): unmounting filesystem. [ 477.577129][ T3325] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 477.618303][T19958] device bridge_slave_0 left promiscuous mode [ 477.624597][T19958] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.632523][T19958] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 477.721503][T19966] loop4: detected capacity change from 0 to 1024 [ 477.738800][T19966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 477.762984][T18650] EXT4-fs (loop4): unmounting filesystem. [ 477.775245][T19972] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 477.817314][ T3325] usb 3-1: Using ep0 maxpacket: 8 [ 477.937208][ T3325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.976745][T19980] tmpfs: Bad value for 'uid' [ 478.027187][ T3325] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 478.036331][ T3325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 478.044348][ T3325] usb 3-1: SerialNumber: syz [ 478.049729][ T3325] usb 3-1: config 0 descriptor?? [ 478.073227][T19988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19988 comm=syz-executor.3 [ 478.086226][T19988] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 478.096004][ T3325] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 478.103162][ T3325] usb 3-1: Failed to create links for entity 255 [ 478.109369][ T3325] usb 3-1: Failed to register entities (-22). [ 478.169844][T19996] incfs: Can't find or create .index dir in ./file0 [ 478.176355][T19996] incfs: mount failed -14 [ 478.199726][T19999] incfs: Can't find or create .index dir in ./file0 [ 478.206340][T19999] incfs: mount failed -14 [ 478.229588][T20003] bpf_get_probe_write_proto: 6 callbacks suppressed [ 478.229601][T20003] syz-executor.4[20003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.236138][T20003] syz-executor.4[20003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.299240][ T3325] usb 3-1: USB disconnect, device number 53 [ 478.409299][T20022] incfs: Can't find or create .index dir in ./file0 [ 478.415811][T20022] incfs: mount failed -14 [ 478.530941][T20026] loop4: detected capacity change from 0 to 40427 [ 478.538212][T20026] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1281) [ 478.545852][T20026] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 478.556037][T20026] F2FS-fs (loop4): Found nat_bits in checkpoint [ 478.584012][T20037] syz-executor.0[20037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.584089][T20037] syz-executor.0[20037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.593896][T20026] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 478.615419][T20026] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 478.687513][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 478.836596][T20053] loop2: detected capacity change from 0 to 256 [ 478.925333][ T28] audit: type=1400 audit(1717247964.238:32809): avc: denied { nlmsg_write } for pid=20057 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 479.007805][T20064] device bridge_slave_0 left promiscuous mode [ 479.020727][T20064] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.034183][T20064] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 479.092218][T20071] loop4: detected capacity change from 0 to 1024 [ 479.115442][T20071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 479.127133][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.146967][T20056] loop2: detected capacity change from 0 to 40427 [ 479.150322][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.164467][T20056] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1281) [ 479.165070][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 479.181227][T20056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 479.189637][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.192953][T20056] F2FS-fs (loop2): Found nat_bits in checkpoint [ 479.198945][ T24] usb 2-1: config 0 descriptor?? [ 479.214273][T18650] EXT4-fs (loop4): unmounting filesystem. [ 479.235104][T20056] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 479.242070][T20056] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 479.477482][T14845] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 479.650963][T20099] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 479.727525][ T24] wacom 0003:056A:0315.0075: unbalanced delimiter at end of report description [ 479.736652][ T24] wacom 0003:056A:0315.0075: parse failed [ 479.742198][ T24] wacom: probe of 0003:056A:0315.0075 failed with error -22 [ 479.757086][T14845] usb 4-1: Using ep0 maxpacket: 8 [ 479.897505][T14845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.971461][ T24] usb 2-1: USB disconnect, device number 46 [ 479.997176][T14845] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 480.006105][T14845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 480.014078][T14845] usb 4-1: SerialNumber: syz [ 480.018935][T14845] usb 4-1: config 0 descriptor?? [ 480.057521][T14845] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 480.064276][T14845] usb 4-1: Failed to create links for entity 255 [ 480.070438][T14845] usb 4-1: Failed to register entities (-22). [ 480.082682][T20109] loop4: detected capacity change from 0 to 256 [ 480.089310][T20109] FAT-fs (loop4): bogus logical sector size 0 [ 480.095187][T20109] FAT-fs (loop4): Can't find a valid FAT filesystem [ 480.195002][T20114] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 480.221128][T20110] netlink: 1280 bytes leftover after parsing attributes in process `syz-executor.4'. [ 480.222169][T20118] syz-executor.2[20118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.230704][T20118] syz-executor.2[20118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.260171][ T24] usb 4-1: USB disconnect, device number 55 [ 480.495609][T20121] loop1: detected capacity change from 0 to 2048 [ 480.518768][T20121] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 480.567141][T20121] loop1: detected capacity change from 2048 to 0 [ 480.574235][ C1] I/O error, dev loop1, sector 20 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 480.583618][ C1] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.584657][T20121] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #15: block 5: comm syz-executor.1: unable to read itable block [ 480.592932][ C1] I/O error, dev loop1, sector 28 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.592963][ C1] I/O error, dev loop1, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.611250][ T8] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.615147][ C1] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.624661][ C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 480.651065][ C0] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 480.660338][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.668433][T20121] EXT4-fs (loop1): I/O error while writing superblock [ 480.686830][ C1] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 480.699850][ C1] I/O error, dev loop1, sector 20 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 480.708853][T20129] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 480.709222][ C1] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 480.717727][T19164] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #15: block 5: comm syz-executor.1: unable to read itable block [ 480.740302][ T365] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.748717][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.756808][T19164] EXT4-fs (loop1): I/O error while writing superblock [ 480.763866][T19164] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: IO failure [ 480.777771][ T365] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.785901][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.793991][T19164] EXT4-fs (loop1): I/O error while writing superblock [ 480.800682][T19164] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #15: comm syz-executor.1: mark_inode_dirty error [ 480.812479][ T365] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.820611][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.828683][T19164] EXT4-fs (loop1): I/O error while writing superblock [ 480.835591][T19164] EXT4-fs error (device loop1): ext4_get_inode_loc:4635: inode #2: block 4: comm syz-executor.1: unable to read itable block [ 480.848558][ T365] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.856611][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.864624][T19164] EXT4-fs (loop1): I/O error while writing superblock [ 480.871329][T19164] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: IO failure [ 480.880107][ T365] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.888117][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.896364][T19164] EXT4-fs (loop1): I/O error while writing superblock [ 480.903154][T19164] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz-executor.1: mark_inode_dirty error [ 480.915080][ T365] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.923223][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.931348][T19164] EXT4-fs (loop1): I/O error while writing superblock [ 480.938515][ T365] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4620: inode #15: block 5: comm kworker/u4:3: unable to read itable block [ 480.952291][ T8] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.960321][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 480.968534][ T365] EXT4-fs (loop1): I/O error while writing superblock [ 480.975699][ T365] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4620: inode #2: block 4: comm kworker/u4:3: unable to read itable block [ 480.989403][ T8] loop: Write error at byte offset 9223372036854775807, length 2048. [ 480.998649][ C1] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 481.006785][ T365] EXT4-fs (loop1): I/O error while writing superblock [ 481.014651][ T365] loop: Write error at byte offset 9223372036854775807, length 2048. [ 481.022903][ C0] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 481.082294][T20142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.117377][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.287512][T20149] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.294461][T20149] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.301807][T20149] device bridge_slave_0 entered promiscuous mode [ 481.309367][T20149] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.316478][T20149] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.325840][T20149] device bridge_slave_1 entered promiscuous mode [ 481.408828][T20149] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.415846][T20149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.422918][T20149] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.429701][T20149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.437376][T20144] loop2: detected capacity change from 0 to 40427 [ 481.455548][T20144] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 481.457090][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.471034][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.473935][T20144] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 481.486122][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.488157][T20144] F2FS-fs (loop2): Found nat_bits in checkpoint [ 481.511510][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.521816][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.528694][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.536158][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.544735][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.551613][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.558901][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.566774][T20144] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 481.578120][T20144] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 481.578396][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.594808][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.605250][T20149] device veth0_vlan entered promiscuous mode [ 481.613140][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.632162][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.640481][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.647873][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.658373][T20149] device veth1_macvtap entered promiscuous mode [ 481.670863][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.685895][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 481.719128][T20163] loop0: detected capacity change from 0 to 256 [ 481.726519][T20163] exfat: Deprecated parameter 'namecase' [ 481.738789][T20163] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 481.800874][ T28] audit: type=1400 audit(1717247967.118:32810): avc: denied { ioctl } for pid=20168 comm="syz-executor.0" path="socket:[115921]" dev="sockfs" ino=115921 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 481.841898][T20175] syz-executor.0[20175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.841970][T20175] syz-executor.0[20175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.898829][ T28] audit: type=1326 audit(1717247967.218:32811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7da87cee9 code=0x7ffc0000 [ 481.935167][ T28] audit: type=1326 audit(1717247967.218:32812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7da87cee9 code=0x7ffc0000 [ 481.959447][ T28] audit: type=1326 audit(1717247967.218:32813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7da87cee9 code=0x7ffc0000 [ 481.984958][ T28] audit: type=1326 audit(1717247967.218:32814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7da87cee9 code=0x7ffc0000 [ 481.993152][T20181] overlayfs: missing 'lowerdir' [ 482.009077][ T3325] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 482.014384][ T28] audit: type=1326 audit(1717247967.218:32815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7da87cee9 code=0x7ffc0000 [ 482.046022][ T28] audit: type=1326 audit(1717247967.218:32816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7da87cee9 code=0x7ffc0000 [ 482.070343][ T28] audit: type=1326 audit(1717247967.228:32817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20176 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7da87cee9 code=0x7ffc0000 [ 482.106791][T20185] loop0: detected capacity change from 0 to 1024 [ 482.107077][ T308] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 482.113864][T20185] EXT4-fs: Ignoring removed orlov option [ 482.126145][T20185] EXT4-fs: Ignoring removed nomblk_io_submit option [ 482.133052][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 482.142475][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 482.148691][T20185] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 482.171627][T20185] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.0: corrupt xattr in inline inode [ 482.185763][T20185] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr [ 482.204342][T18577] EXT4-fs (loop0): unmounting filesystem. [ 482.357106][ T308] usb 3-1: Using ep0 maxpacket: 8 [ 482.378396][T20215] serio: Serial port pts0 [ 482.624621][ T3325] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 482.637608][ T3325] usb 2-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 482.646457][ T3325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.654956][ T3325] usb 2-1: config 0 descriptor?? [ 482.667076][ T339] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 482.677076][ T308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.697431][ T3325] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 482.767110][ T308] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 482.776013][ T308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 482.783995][ T308] usb 3-1: SerialNumber: syz [ 482.789632][ T308] usb 3-1: config 0 descriptor?? [ 482.827488][ T308] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 482.834266][ T308] usb 3-1: Failed to create links for entity 255 [ 482.840413][ T308] usb 3-1: Failed to register entities (-22). [ 482.857119][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 482.917597][ T308] usb 2-1: USB disconnect, device number 47 [ 483.034511][ T350] usb 3-1: USB disconnect, device number 54 [ 483.067182][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.078054][ T339] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.087776][ T339] usb 5-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 483.096643][ T339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.104950][ T339] usb 5-1: config 0 descriptor?? [ 483.177920][T20224] loop3: detected capacity change from 0 to 1024 [ 483.184426][T20224] EXT4-fs: Ignoring removed orlov option [ 483.190853][T20224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 483.208617][T20224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 483.225447][T20224] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 483.238941][T20224] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 483.256870][T18610] ================================================================== [ 483.264734][T18610] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 2024/06/01 13:19:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 483.272545][T18610] Read of size 4 at addr ffff88815bf60000 by task syz-executor.3/18610 [ 483.280628][T18610] [ 483.282800][T18610] CPU: 1 PID: 18610 Comm: syz-executor.3 Tainted: G W 6.1.78-syzkaller-00133-g74c507aab139 #0 [ 483.294249][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 483.304142][T18610] Call Trace: [ 483.307265][T18610] [ 483.310044][T18610] dump_stack_lvl+0x151/0x1b7 [ 483.314565][T18610] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 483.319849][T18610] ? _printk+0xd1/0x111 [ 483.323847][T18610] ? __virt_addr_valid+0x242/0x2f0 [ 483.328805][T18610] print_report+0x158/0x4e0 [ 483.333139][T18610] ? __virt_addr_valid+0x242/0x2f0 [ 483.338077][T18610] ? kasan_addr_to_slab+0xd/0x80 [ 483.342847][T18610] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 483.348319][T18610] kasan_report+0x13c/0x170 [ 483.352658][T18610] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 483.358126][T18610] __asan_report_load4_noabort+0x14/0x20 [ 483.363594][T18610] ext4_xattr_delete_inode+0xcd0/0xce0 [ 483.368893][T18610] ? sb_end_intwrite+0x130/0x130 [ 483.373664][T18610] ? ext4_expand_extra_isize_ea+0x1c40/