last executing test programs: 4.031724227s ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 3.989478964s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.874027762s ago: executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3ed, 0x4}, 0x10}}, 0x0) 3.862947804s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff00}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 3.833686978s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.878607148s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fdatasync(0xffffffffffffffff) socketpair(0x0, 0xa, 0x0, &(0x7f0000001080)) 1.004238783s ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private}, {@in=@broadcast, 0x0, 0x33}, @in6=@private0, {}, {}, {}, 0xfffffffe}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 996.570073ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) 974.371477ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 823.632251ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 692.871921ms ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000031c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f00000008c0)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}]}}) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 673.320064ms ago: executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000900000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x114) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[], 0x100000530) 577.591879ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 543.625835ms ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) timerfd_create(0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000280)=""/247, 0xf7) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000380)={&(0x7f00000000c0), &(0x7f0000000100)=""/22, 0x16}) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000019640)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYBLOB="02002abc7000fbdbdf"], 0x14}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x6000}) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) r7 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) ftruncate(r5, 0x81fd) 510.57755ms ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private}, {@in=@broadcast, 0x0, 0x33}, @in6=@private0, {}, {}, {}, 0xfffffffe}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 501.175081ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000100002800c000180080001000300000004000180"], 0x28}}, 0x0) 493.303113ms ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) 461.197608ms ago: executing program 3: unshare(0x22020400) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 449.867129ms ago: executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0xfffe, 0x0, "7f0e279d2e5cf55a61c5c40d6e76943e0347c7cbf6336e676a359b970be7f3f3"}) 430.243952ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x6000400) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) sendfile(r3, r5, 0x0, 0xe065) 381.24887ms ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @ioapic={0x4000}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x4}}) 88.435666ms ago: executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000002300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_INIT(r4, &(0x7f0000000580)={0x50}, 0x50) write$FUSE_OPEN(r4, &(0x7f0000000000)={0x20}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) chmod(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 72.274749ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000780), &(0x7f00000007c0)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 71.591089ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000020086000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000005c0), 0x6, r1}, 0x38) 52.865901ms ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat2(r0, &(0x7f0000001400)='\x00', 0x0, 0x1100) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000280), 0x4) open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x777ca850}}, {@grpquota}]}, 0x0, 0x4eb, &(0x7f0000000540)="$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") 34.885785ms ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private}, {@in=@broadcast, 0x0, 0x33}, @in6=@private0, {}, {}, {}, 0xfffffffe}}, [@XFRMA_IF_ID={0x8}]}, 0x100}}, 0x0) 25.129026ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000100002800c000180080001000300000004000180"], 0x28}}, 0x0) 20.003937ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11.566678ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = dup3(r3, r2, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02130000050000000000000000000000030018"], 0x28}}, 0x0) 0s ago: executing program 0: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r1}, 0x5e) preadv(r0, &(0x7f0000001e00)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): T24868] loop2: detected capacity change from 0 to 512 [ 804.869384][ T6] usb 2-1: 0:2 : does not exist [ 804.874182][ T6] usb 2-1: unit 5 not found! [ 804.879959][ T6] usb 2-1: USB disconnect, device number 53 [ 804.891540][T24868] EXT4-fs (loop2): 1 truncate cleaned up [ 804.897058][T24868] EXT4-fs (loop2): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,nouid32,noload,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 805.630682][T24908] xt_bpf: check failed: parse error [ 805.637639][T24908] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 805.801744][T24925] overlayfs: failed to resolve './file2': -2 [ 805.958679][T16326] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 806.001961][T24950] overlayfs: failed to resolve './file2': -2 [ 806.318699][T16326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.328644][T16326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.408670][T16326] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.418457][T16326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.426533][T16326] usb 2-1: SerialNumber: syz [ 806.709201][T16326] usb 2-1: 0:2 : does not exist [ 806.714197][T16326] usb 2-1: unit 5 not found! [ 806.720147][T16326] usb 2-1: USB disconnect, device number 54 [ 806.751751][ T60] usb 4-1: USB disconnect, device number 52 [ 806.825709][T25000] syz-executor.3[25000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.825777][T25000] syz-executor.3[25000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 807.038200][T25009] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 807.183748][T25020] team0: tun_chr_ioctl cmd 1074812117 [ 807.309244][ T60] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 807.321252][T25031] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 807.329321][T25035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 807.524033][T25041] overlayfs: statfs failed on './file0' [ 807.558594][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 807.567048][T25047] team0: tun_chr_ioctl cmd 1074812117 [ 807.608634][T16326] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 807.678656][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.689551][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.708603][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 807.721445][ T60] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 807.730730][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.749028][ T60] usb 4-1: config 0 descriptor?? [ 807.998819][T16326] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 808.007092][T16326] usb 3-1: config 0 has no interface number 0 [ 808.168703][T16326] usb 3-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 808.177567][T16326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.185428][T16326] usb 3-1: Product: syz [ 808.189384][T16326] usb 3-1: Manufacturer: syz [ 808.193917][T16326] usb 3-1: SerialNumber: syz [ 808.199124][T16326] usb 3-1: config 0 descriptor?? [ 808.229486][ T60] microsoft 0003:045E:07DA.0089: ignoring exceeding usage max [ 808.239172][T16326] ftdi_sio 3-1:0.1: FTDI USB Serial Device converter detected [ 808.246951][ T60] hid_map_usage: 9788 callbacks suppressed [ 808.246962][ T60] HID 045e:07da: Invalid code 65791 type 1 [ 808.259163][T16326] usb 3-1: Detected FT-X [ 808.263487][ T60] HID 045e:07da: Invalid code 768 type 1 [ 808.268946][ T60] HID 045e:07da: Invalid code 769 type 1 [ 808.274406][ T60] HID 045e:07da: Invalid code 770 type 1 [ 808.280316][ T60] HID 045e:07da: Invalid code 771 type 1 [ 808.285859][ T60] HID 045e:07da: Invalid code 772 type 1 [ 808.291391][ T60] HID 045e:07da: Invalid code 773 type 1 [ 808.296818][ T60] HID 045e:07da: Invalid code 774 type 1 [ 808.302282][ T60] HID 045e:07da: Invalid code 775 type 1 [ 808.307744][ T60] HID 045e:07da: Invalid code 776 type 1 [ 808.319488][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0089/input/input126 [ 808.399499][ T60] microsoft 0003:045E:07DA.0089: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 808.440403][ T6] usb 4-1: USB disconnect, device number 53 [ 808.678685][T16326] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 808.698656][T16326] ftdi_sio 3-1:0.1: GPIO initialisation failed: -71 [ 808.705660][T16326] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 808.714065][T16326] usb 3-1: USB disconnect, device number 54 [ 808.720381][T16326] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 808.729629][T16326] ftdi_sio 3-1:0.1: device disconnected [ 808.780181][T25076] overlayfs: statfs failed on './file0' [ 808.806299][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 808.806313][ T30] audit: type=1326 audit(1718616700.000:60406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 808.836144][ T30] audit: type=1326 audit(1718616700.000:60407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 808.860531][ T30] audit: type=1326 audit(1718616700.000:60408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 808.884689][ T30] audit: type=1326 audit(1718616700.000:60409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 808.908672][ T30] audit: type=1326 audit(1718616700.000:60410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 808.933093][ T30] audit: type=1326 audit(1718616700.000:60411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 808.940618][T25079] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 808.957023][ T30] audit: type=1326 audit(1718616700.060:60412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 808.990693][ T30] audit: type=1326 audit(1718616700.060:60413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 809.015146][ T30] audit: type=1326 audit(1718616700.070:60414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 809.039381][ T30] audit: type=1326 audit(1718616700.070:60415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25077 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbbba8f29 code=0x7ffc0000 [ 809.077098][T25079] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.084106][T25079] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.398688][T16326] Bluetooth: hci0: command 0x1003 tx timeout [ 809.404889][ T47] Bluetooth: hci0: sending frame failed (-49) [ 809.518648][ T859] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 809.522423][T25106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.878628][ T859] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.888581][ T859] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 809.968636][ T859] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 809.977524][ T859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 809.985340][ T859] usb 4-1: SerialNumber: syz [ 810.249361][ T859] usb 4-1: 0:2 : does not exist [ 810.671048][ T859] usb 4-1: USB disconnect, device number 54 [ 810.758631][ T6] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 810.974615][T25134] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 811.188690][ T6] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 811.196557][ T6] usb 2-1: config 0 has no interface number 0 [ 811.258611][ T60] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 811.266097][ T859] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 811.368670][ T6] usb 2-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 811.377546][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.385362][ T6] usb 2-1: Product: syz [ 811.389368][ T6] usb 2-1: Manufacturer: syz [ 811.393734][ T6] usb 2-1: SerialNumber: syz [ 811.398802][ T6] usb 2-1: config 0 descriptor?? [ 811.439189][ T6] ftdi_sio 2-1:0.1: FTDI USB Serial Device converter detected [ 811.446660][ T6] usb 2-1: Detected FT-X [ 811.478725][ T843] Bluetooth: hci0: command 0x1001 tx timeout [ 811.484794][ T47] Bluetooth: hci0: sending frame failed (-49) [ 811.508622][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 811.628710][ T859] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 811.639428][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.650097][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.659640][ T859] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 811.669082][ T859] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 811.681942][ T60] usb 1-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00 [ 811.690903][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.699895][ T60] usb 1-1: config 0 descriptor?? [ 811.778675][ T859] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 811.787607][ T859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 811.795348][ T859] usb 3-1: SerialNumber: syz [ 811.818656][T25136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 811.839080][ T859] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 811.868666][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 811.888899][ T6] ftdi_sio 2-1:0.1: GPIO initialisation failed: -71 [ 811.895809][ T6] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 811.904491][ T6] usb 2-1: USB disconnect, device number 55 [ 811.910767][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 811.920003][ T6] ftdi_sio 2-1:0.1: device disconnected [ 812.179779][ T60] apple 0003:05AC:0267.008A: hidraw0: USB HID v0.00 Device [HID 05ac:0267] on usb-dummy_hcd.0-1/input0 [ 812.381614][ T60] usb 1-1: USB disconnect, device number 59 [ 812.480583][T25158] input: syz0 as /devices/virtual/input/input127 [ 812.611602][T25167] syz-executor.1[25167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.611680][T25167] syz-executor.1[25167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 812.657782][T25175] loop1: detected capacity change from 0 to 256 [ 813.170723][T25187] input: syz0 as /devices/virtual/input/input128 [ 813.284313][T25195] syz-executor.3[25195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.284362][T25195] syz-executor.3[25195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.318817][ T60] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 813.596614][T16326] Bluetooth: hci0: command 0x1009 tx timeout [ 813.706378][T25214] syz-executor.3[25214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.706457][T25214] syz-executor.3[25214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.768788][ T60] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 813.792306][ T60] usb 1-1: config 0 has no interface number 0 [ 813.848237][T25222] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 813.958712][ T60] usb 1-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 813.968212][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.976240][ T60] usb 1-1: Product: syz [ 813.980720][ T60] usb 1-1: Manufacturer: syz [ 813.985122][ T60] usb 1-1: SerialNumber: syz [ 813.990470][ T60] usb 1-1: config 0 descriptor?? [ 814.003503][T16326] usb 3-1: USB disconnect, device number 55 [ 814.029213][ T60] ftdi_sio 1-1:0.1: FTDI USB Serial Device converter detected [ 814.036938][ T60] usb 1-1: Detected FT-X [ 814.041530][T25247] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 814.528655][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 814.548665][ T60] ftdi_sio 1-1:0.1: GPIO initialisation failed: -71 [ 814.555860][ T60] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 814.564613][ T60] usb 1-1: USB disconnect, device number 60 [ 814.571010][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 814.580306][ T60] ftdi_sio 1-1:0.1: device disconnected [ 814.916483][T25272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25272 comm=syz-executor.2 [ 815.088749][ T6] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 815.108618][ T60] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 815.468671][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 815.479422][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 815.488683][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.489067][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 815.500905][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 815.521414][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.529923][ T6] usb 2-1: config 0 descriptor?? [ 815.588702][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 815.597672][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 815.605636][ T60] usb 4-1: SerialNumber: syz [ 815.628631][T25270] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 815.649030][ T60] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 815.869878][T25294] input: syz0 as /devices/virtual/input/input129 [ 815.936910][T25300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25300 comm=syz-executor.0 [ 815.950028][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 815.955943][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 815.969152][ T6] usb 2-1: USB disconnect, device number 56 [ 816.496752][T25312] IPv6: NLM_F_CREATE should be specified when creating new route [ 816.504681][T25312] IPv6: Can't replace route, no match found [ 816.588718][ T843] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 816.645256][T25314] loop1: detected capacity change from 0 to 256 [ 816.699013][T25314] exfat: Unknown parameter 'uid-0x0000000000000000' [ 816.711647][ T6] usb 4-1: USB disconnect, device number 55 [ 816.881547][T25333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25333 comm=syz-executor.3 [ 816.911703][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 816.911718][ T30] audit: type=1326 audit(1718616708.110:60487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25336 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x0 [ 816.978644][ T843] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 816.986483][ T843] usb 1-1: config 0 has no interface number 0 [ 817.028630][ T329] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 817.148678][ T843] usb 1-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 817.166549][ T843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.201614][ T843] usb 1-1: Product: syz [ 817.205685][ T843] usb 1-1: Manufacturer: syz [ 817.210151][ T843] usb 1-1: SerialNumber: syz [ 817.270863][ T843] usb 1-1: config 0 descriptor?? [ 817.309140][ T843] ftdi_sio 1-1:0.1: FTDI USB Serial Device converter detected [ 817.316617][ T843] usb 1-1: Detected FT-X [ 817.618681][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.629444][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.638940][ T329] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 817.647795][ T329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.656075][ T329] usb 2-1: config 0 descriptor?? [ 817.738657][ T843] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 817.758660][ T843] ftdi_sio 1-1:0.1: GPIO initialisation failed: -71 [ 817.765467][ T843] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 817.773923][ T843] usb 1-1: USB disconnect, device number 61 [ 817.780346][ T843] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 817.789578][ T843] ftdi_sio 1-1:0.1: device disconnected [ 817.903201][T25348] loop4: detected capacity change from 0 to 512 [ 817.929974][T25348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 817.942036][T25348] EXT4-fs (loop4): 1 truncate cleaned up [ 817.947512][T25348] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 818.028595][ T3130] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 818.113869][T25353] loop2: detected capacity change from 0 to 256 [ 818.138989][ T329] hid (null): bogus close delimiter [ 818.169288][T25353] exfat: Unknown parameter 'uid-0x0000000000000000' [ 818.272109][T25363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25363 comm=syz-executor.0 [ 818.419837][ T3130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 818.438097][ T3130] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.447816][ T3130] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 818.538700][ T3130] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.550539][ T3130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 818.558501][ T3130] usb 4-1: SerialNumber: syz [ 818.564689][T25388] loop2: detected capacity change from 0 to 256 [ 818.598671][T25344] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 818.689262][ T3130] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 818.703848][ T329] usb 2-1: string descriptor 0 read error: -71 [ 818.728662][ T329] uclogic 0003:256C:006D.008B: failed retrieving string descriptor #200: -71 [ 818.747467][ T329] uclogic 0003:256C:006D.008B: failed retrieving pen parameters: -71 [ 818.755439][ T329] uclogic 0003:256C:006D.008B: failed probing pen v2 parameters: -71 [ 819.053580][ T6] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 819.061210][ T329] uclogic 0003:256C:006D.008B: failed probing parameters: -71 [ 819.068423][ T329] uclogic: probe of 0003:256C:006D.008B failed with error -71 [ 819.076523][ T329] usb 2-1: USB disconnect, device number 57 [ 819.158959][T25395] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.169726][T25395] FAT-fs (loop9): unable to read boot sector [ 819.538790][ T843] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 819.706749][ T329] usb 4-1: USB disconnect, device number 56 [ 819.718651][ T6] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.726661][ T6] usb 1-1: config 0 has no interface number 0 [ 819.779148][T25427] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 819.790253][T25427] FAT-fs (loop7): unable to read boot sector [ 819.804402][T25431] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.812559][ T30] audit: type=1326 audit(1718616711.010:60488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25430 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x0 [ 819.898666][ T6] usb 1-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 819.907555][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.915472][ T6] usb 1-1: Product: syz [ 819.918673][ T843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.919492][ T6] usb 1-1: Manufacturer: syz [ 819.930278][ T843] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 819.934550][ T6] usb 1-1: SerialNumber: syz [ 819.943499][ T843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.948642][ T6] usb 1-1: config 0 descriptor?? [ 819.959015][ T843] usb 5-1: config 0 descriptor?? [ 820.009107][ T6] ftdi_sio 1-1:0.1: FTDI USB Serial Device converter detected [ 820.016746][ T6] usb 1-1: Detected FT-X [ 820.058597][ T859] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 820.184389][T25440] loop1: detected capacity change from 0 to 8192 [ 820.218884][T25440] loop1: p1 < > p2 < > p3 < > [ 820.223512][T25440] loop1: partition table partially beyond EOD, truncated [ 820.230455][T25440] loop1: p1 start 4177526784 is beyond EOD, truncated [ 820.237112][T25440] loop1: p2 start 131072 is beyond EOD, truncated [ 820.328919][ T30] audit: type=1400 audit(1718616711.530:60489): avc: denied { relabelfrom } for pid=25441 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=141410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 820.328936][T25442] SELinux: Context GPL is not valid (left unmapped). [ 820.359972][ T30] audit: type=1400 audit(1718616711.530:60490): avc: denied { relabelto } for pid=25441 comm="syz-executor.1" name="NETLINK" dev="sockfs" ino=141410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="GPL" [ 820.368703][ T843] usbhid 5-1:0.0: can't add hid device: -71 [ 820.391847][ T843] usbhid: probe of 5-1:0.0 failed with error -71 [ 820.399241][ T843] usb 5-1: USB disconnect, device number 65 [ 820.428684][ T859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.440037][ T859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.448741][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 820.449701][ T859] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 820.465650][ T859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.474397][ T859] usb 3-1: config 0 descriptor?? [ 820.478696][ T6] ftdi_sio 1-1:0.1: GPIO initialisation failed: -71 [ 820.489017][ T6] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 820.498269][ T6] usb 1-1: USB disconnect, device number 62 [ 820.504737][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 820.514036][ T6] ftdi_sio 1-1:0.1: device disconnected [ 820.775796][T25456] loop3: detected capacity change from 0 to 40427 [ 820.812626][T25456] F2FS-fs (loop3): Found nat_bits in checkpoint [ 820.855275][T25456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 820.880412][T23474] attempt to access beyond end of device [ 820.880412][T23474] loop3: rw=2049, want=45104, limit=40427 [ 820.959895][ T859] hid (null): bogus close delimiter [ 821.214647][ T6] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 821.316741][T25485] loop3: detected capacity change from 0 to 512 [ 821.370369][T25485] EXT4-fs error (device loop3): ext4_quota_enable:6362: comm syz-executor.3: Bad quota inum: 5, type: 0 [ 821.381563][T25485] EXT4-fs warning (device loop3): ext4_enable_quotas:6410: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 821.396518][T25485] EXT4-fs (loop3): mount failed [ 821.468672][ T859] usb 3-1: string descriptor 0 read error: -71 [ 821.488653][ T859] uclogic 0003:256C:006D.008C: failed retrieving string descriptor #200: -71 [ 821.497291][ T859] uclogic 0003:256C:006D.008C: failed retrieving pen parameters: -71 [ 821.505235][ T859] uclogic 0003:256C:006D.008C: failed probing pen v2 parameters: -71 [ 821.513080][ T859] uclogic 0003:256C:006D.008C: failed probing parameters: -71 [ 821.520395][ T859] uclogic: probe of 0003:256C:006D.008C failed with error -71 [ 821.528608][ T859] usb 3-1: USB disconnect, device number 56 [ 821.538637][ T843] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 821.588676][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.599446][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 821.612206][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 821.620969][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.629463][ T6] usb 2-1: config 0 descriptor?? [ 821.898740][ T843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.909684][ T843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 821.919257][ T843] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 821.928073][ T843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.937159][ T843] usb 1-1: config 0 descriptor?? [ 822.029921][T25500] device bridge_slave_1 left promiscuous mode [ 822.035958][T25500] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.043501][T25500] device bridge_slave_0 left promiscuous mode [ 822.049524][T25500] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.113982][T25505] device pim6reg1 entered promiscuous mode [ 822.120790][ T6] plantronics 0003:047F:FFFF.008D: unknown main item tag 0x0 [ 822.128256][ T6] plantronics 0003:047F:FFFF.008D: No inputs registered, leaving [ 822.128673][ T3130] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 822.143724][ T6] plantronics 0003:047F:FFFF.008D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 822.245960][T25507] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 822.265250][T25507] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.272208][T25507] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.282959][T25507] device wg2 left promiscuous mode [ 822.399010][ T6] usb 2-1: USB disconnect, device number 58 [ 822.415914][ T30] audit: type=1326 audit(1718616713.610:60491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25515 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x0 [ 822.440026][ T843] apple 0003:05AC:029C.008E: unbalanced delimiter at end of report description [ 822.449015][ T843] apple 0003:05AC:029C.008E: parse failed [ 822.454582][ T843] apple: probe of 0003:05AC:029C.008E failed with error -22 [ 822.528668][ T3130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.539460][ T3130] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 822.548210][ T3130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.556599][ T3130] usb 5-1: config 0 descriptor?? [ 822.642158][ T1691] usb 1-1: USB disconnect, device number 63 [ 822.958706][ T3130] usbhid 5-1:0.0: can't add hid device: -71 [ 822.964593][ T3130] usbhid: probe of 5-1:0.0 failed with error -71 [ 822.971546][ T3130] usb 5-1: USB disconnect, device number 66 [ 822.989342][T25528] loop1: detected capacity change from 0 to 512 [ 823.040294][T25528] EXT4-fs error (device loop1): ext4_quota_enable:6362: comm syz-executor.1: Bad quota inum: 5, type: 0 [ 823.051529][T25528] EXT4-fs warning (device loop1): ext4_enable_quotas:6410: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 823.066491][T25528] EXT4-fs (loop1): mount failed [ 823.098662][ T6] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 823.283428][T25537] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 823.418617][ T843] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 823.488692][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.499453][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.508962][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 823.517797][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.526321][ T6] usb 3-1: config 0 descriptor?? [ 823.600153][ T30] audit: type=1326 audit(1718616714.800:60492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25558 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3564d9af29 code=0x0 [ 823.668636][ T843] usb 1-1: Using ep0 maxpacket: 8 [ 823.788701][ T843] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 823.797041][ T843] usb 1-1: config 179 has no interface number 0 [ 823.803803][ T843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 823.814823][ T843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 823.823469][T25564] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 823.826252][ T843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 823.845222][ T843] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 823.856738][ T843] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 823.869866][ T843] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 823.881572][ T843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.908651][T25533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 823.916143][T25533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 823.930308][ T843] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input130 [ 824.019265][ T6] hid (null): bogus close delimiter [ 824.134354][ T843] usb 1-1: USB disconnect, device number 64 [ 824.148650][ T843] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 824.558663][ T6] usb 3-1: string descriptor 0 read error: -71 [ 824.578666][ T6] uclogic 0003:256C:006D.008F: failed retrieving string descriptor #200: -71 [ 824.587247][ T6] uclogic 0003:256C:006D.008F: failed retrieving pen parameters: -71 [ 824.595209][ T6] uclogic 0003:256C:006D.008F: failed probing pen v2 parameters: -71 [ 824.603283][ T6] uclogic 0003:256C:006D.008F: failed probing parameters: -71 [ 824.610549][ T6] uclogic: probe of 0003:256C:006D.008F failed with error -71 [ 824.618466][ T6] usb 3-1: USB disconnect, device number 57 [ 825.298587][ T1691] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 825.532056][T25606] loop3: detected capacity change from 0 to 131072 [ 825.582934][T25606] F2FS-fs (loop3): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 825.591389][T25606] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 825.610967][T25606] F2FS-fs (loop3): invalid crc value [ 825.618095][T25606] F2FS-fs (loop3): Found nat_bits in checkpoint [ 825.663328][T25606] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 825.670416][T25606] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 825.680805][ T1691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 825.691735][ T1691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 825.701352][ T1691] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 825.714305][T25606] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 825.788819][ T1691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 825.797682][ T1691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 825.805545][ T1691] usb 5-1: SerialNumber: syz [ 825.828696][T25597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 825.849078][ T1691] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 825.868693][ T843] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 826.220978][T25665] x_tables: duplicate underflow at hook 4 [ 826.291767][ T843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.302611][ T859] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 826.310150][ T843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.319921][ T843] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 826.328894][ T843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.337469][ T843] usb 3-1: config 0 descriptor?? [ 826.668681][ T859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.679594][ T859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.689191][ T859] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 826.697983][ T859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.706496][ T859] usb 4-1: config 0 descriptor?? [ 826.840379][ T843] hid (null): bogus close delimiter [ 827.146965][ T30] audit: type=1326 audit(1718616718.340:60493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.171020][ T30] audit: type=1326 audit(1718616718.340:60494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.195083][ T30] audit: type=1326 audit(1718616718.340:60495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.219306][ T30] audit: type=1326 audit(1718616718.340:60496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.243389][ T30] audit: type=1326 audit(1718616718.340:60497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.267375][ T30] audit: type=1326 audit(1718616718.340:60498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.291421][ T30] audit: type=1326 audit(1718616718.340:60499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.315448][ T30] audit: type=1326 audit(1718616718.340:60500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25702 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85acb8f29 code=0x7ffc0000 [ 827.398668][ T859] usb 4-1: language id specifier not provided by device, defaulting to English [ 827.498911][ T843] usb 3-1: string descriptor 0 read error: -71 [ 827.518682][ T843] uclogic 0003:256C:006D.0090: failed retrieving string descriptor #200: -71 [ 827.527333][ T843] uclogic 0003:256C:006D.0090: failed retrieving pen parameters: -71 [ 827.535367][ T843] uclogic 0003:256C:006D.0090: failed probing pen v2 parameters: -71 [ 827.543507][ T843] uclogic 0003:256C:006D.0090: failed probing parameters: -71 [ 827.550801][ T843] uclogic: probe of 0003:256C:006D.0090 failed with error -71 [ 827.558902][ T843] usb 3-1: USB disconnect, device number 58 [ 827.824143][ T329] usb 5-1: USB disconnect, device number 67 [ 827.830229][ T859] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0091/input/input131 [ 827.847651][ T859] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0091/input/input132 [ 827.860427][ T859] uclogic 0003:256C:006D.0091: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 828.032480][ T859] usb 4-1: USB disconnect, device number 57 [ 828.049524][T25762] incfs: Options parsing error. -22 [ 828.054647][T25762] incfs: mount failed -22 [ 828.077730][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 828.077743][ T30] audit: type=1326 audit(1718616719.270:60547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 828.109708][ T30] audit: type=1326 audit(1718616719.270:60548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 828.135322][ T30] audit: type=1326 audit(1718616719.270:60549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 828.161300][ T30] audit: type=1326 audit(1718616719.270:60550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 828.187322][ T30] audit: type=1326 audit(1718616719.270:60551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 828.212833][ T30] audit: type=1326 audit(1718616719.280:60552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 828.239002][ T30] audit: type=1326 audit(1718616719.430:60553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 828.264146][ T30] audit: type=1326 audit(1718616719.430:60554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fc492f6a7 code=0x7ffc0000 [ 828.288076][ T30] audit: type=1326 audit(1718616719.430:60555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fc48f5379 code=0x7ffc0000 [ 828.312356][ T30] audit: type=1326 audit(1718616719.430:60556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25765 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fc492f6a7 code=0x7ffc0000 [ 828.362676][T25780] syz-executor.2[25780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.362749][T25780] syz-executor.2[25780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.377224][T25780] syz-executor.2[25780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.389301][T25780] syz-executor.2[25780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.633163][T25795] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 828.779700][ T859] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 828.795684][T25799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25799 comm=syz-executor.3 [ 828.857848][T25808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 828.868622][T25808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 828.900080][T25811] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 828.945808][T25819] syz-executor.4[25819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.945860][T25819] syz-executor.4[25819] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.996802][T25826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25826 comm=syz-executor.3 [ 829.050350][T25836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.061162][T25836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.127876][T25844] syz-executor.4[25844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.127920][T25844] syz-executor.4[25844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.138708][ T859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.177038][ T859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.187059][ T859] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 829.196090][ T859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.204792][ T859] usb 1-1: config 0 descriptor?? [ 829.222355][T25849] loop4: detected capacity change from 0 to 512 [ 829.252287][T25849] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 829.262816][T25849] EXT4-fs (loop4): orphan cleanup on readonly fs [ 829.270898][T25849] EXT4-fs (loop4): 1 truncate cleaned up [ 829.276816][T25849] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 829.315215][T25854] binder: 25853:25854 ioctl c0306201 20000080 returned -14 [ 829.634865][T25868] incfs: Options parsing error. -22 [ 829.640467][T25868] incfs: mount failed -22 [ 829.738891][ T859] hid (null): bogus close delimiter [ 829.773120][T25870] loop1: detected capacity change from 0 to 40427 [ 829.820438][T25870] F2FS-fs (loop1): invalid crc value [ 829.827186][T25870] F2FS-fs (loop1): Found nat_bits in checkpoint [ 829.866506][T25870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 829.887881][T25870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25870 comm=syz-executor.1 [ 829.980889][T25884] syz-executor.1[25884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.980961][T25884] syz-executor.1[25884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 830.006991][T25886] loop1: detected capacity change from 0 to 256 [ 830.064483][T25886] FAT-fs (loop1): Directory bread(block 64) failed [ 830.070954][T25886] FAT-fs (loop1): Directory bread(block 65) failed [ 830.077337][T25886] FAT-fs (loop1): Directory bread(block 66) failed [ 830.083762][T25886] FAT-fs (loop1): Directory bread(block 67) failed [ 830.107183][T25886] FAT-fs (loop1): Directory bread(block 68) failed [ 830.118823][T25886] FAT-fs (loop1): Directory bread(block 69) failed [ 830.125205][T25886] FAT-fs (loop1): Directory bread(block 70) failed [ 830.133012][T25888] device pim6reg1 entered promiscuous mode [ 830.139166][T25886] FAT-fs (loop1): Directory bread(block 71) failed [ 830.145719][T25886] FAT-fs (loop1): Directory bread(block 72) failed [ 830.152127][T25886] FAT-fs (loop1): Directory bread(block 73) failed [ 830.199922][T20435] attempt to access beyond end of device [ 830.199922][T20435] loop1: rw=1, want=1228, limit=256 [ 830.257499][T25894] loop1: detected capacity change from 0 to 512 [ 830.258724][ T859] usb 1-1: string descriptor 0 read error: -71 [ 830.288663][ T859] uclogic 0003:256C:006D.0092: failed retrieving string descriptor #200: -71 [ 830.297257][ T859] uclogic 0003:256C:006D.0092: failed retrieving pen parameters: -71 [ 830.316814][ T859] uclogic 0003:256C:006D.0092: failed probing pen v2 parameters: -71 [ 830.336327][T25894] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #3: comm syz-executor.1: corrupted inode contents [ 830.352286][ T859] uclogic 0003:256C:006D.0092: failed probing parameters: -71 [ 830.361804][ T859] uclogic: probe of 0003:256C:006D.0092 failed with error -71 [ 830.367766][T25894] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #3: comm syz-executor.1: mark_inode_dirty error [ 830.379805][ T859] usb 1-1: USB disconnect, device number 65 [ 830.385537][T25894] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #3: comm syz-executor.1: corrupted inode contents [ 830.399277][T25894] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz-executor.1: mark_inode_dirty error [ 830.411466][T25894] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz-executor.1: corrupted inode contents [ 830.423761][T25894] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #16: comm syz-executor.1: mark_inode_dirty error [ 830.435795][T25894] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz-executor.1: corrupted inode contents [ 830.448205][T25894] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz-executor.1: mark_inode_dirty error [ 830.470203][T25894] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz-executor.1: corrupted inode contents [ 830.482872][T25894] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 830.491800][T25894] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz-executor.1: corrupted inode contents [ 830.504457][T25894] EXT4-fs error (device loop1): ext4_truncate:4292: inode #16: comm syz-executor.1: mark_inode_dirty error [ 830.517481][T25916] device pim6reg1 entered promiscuous mode [ 830.517516][T25894] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 830.533204][T25894] EXT4-fs (loop1): 1 truncate cleaned up [ 830.538753][T25894] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,resuid=0x0000000000000000,user_xattr,barrier,usrquota,usrquota,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 830.559075][T25894] ext4 filesystem being mounted at /root/syzkaller-testdir3273544032/syzkaller.u1Iw3x/213/file1 supports timestamps until 2038 (0x7fffffff) [ 830.646963][T25894] EXT4-fs error (device loop1): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=8, size=4096 fake=0 [ 830.669712][T25894] EXT4-fs error (device loop1) in ext4_delete_entry:2751: Corrupt filesystem [ 830.673114][T25920] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 830.679854][T25894] EXT4-fs warning (device loop1): ext4_rename_delete:3749: inode #2: comm syz-executor.1: Deleting old file: nlink 5, error=-117 [ 830.840754][T25939] incfs: Options parsing error. -22 [ 830.850117][T25939] incfs: mount failed -22 [ 830.854917][T25947] device pim6reg1 entered promiscuous mode [ 830.918757][ T3130] Bluetooth: hci0: command 0x1003 tx timeout [ 830.924965][ T47] Bluetooth: hci0: sending frame failed (-49) [ 831.125843][T25964] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 831.348692][ T6] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 831.748950][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.759991][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.761187][T25970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 831.769590][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 831.787549][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.802136][T25974] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 831.812944][T25974] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 831.830661][ T6] usb 5-1: config 0 descriptor?? [ 831.886236][T25981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.895854][T25981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.922179][T25985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.268616][ T843] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 832.408851][ T6] hid (null): bogus close delimiter [ 832.684674][ T843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 832.728704][ T843] usb 4-1: not running at top speed; connect to a high speed hub [ 832.748579][T26000] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 832.808703][ T843] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 832.873577][T26004] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 832.978799][ T6] usb 5-1: string descriptor 0 read error: -71 [ 832.998677][ T6] uclogic 0003:256C:006D.0093: failed retrieving string descriptor #200: -71 [ 833.007600][ T6] uclogic 0003:256C:006D.0093: failed retrieving pen parameters: -71 [ 833.015608][ T6] uclogic 0003:256C:006D.0093: failed probing pen v2 parameters: -71 [ 833.025107][ T6] uclogic 0003:256C:006D.0093: failed probing parameters: -71 [ 833.034327][ T6] uclogic: probe of 0003:256C:006D.0093 failed with error -71 [ 833.039068][ T60] Bluetooth: hci0: command 0x1001 tx timeout [ 833.052970][ T6] usb 5-1: USB disconnect, device number 68 [ 833.061089][ T47] Bluetooth: hci0: sending frame failed (-49) [ 833.169793][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 833.179125][ T843] usb 4-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.40 [ 833.188005][ T843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.196152][ T843] usb 4-1: Product: syz [ 833.200275][ T843] usb 4-1: Manufacturer: syz [ 833.204730][ T843] usb 4-1: SerialNumber: syz [ 833.220561][T26017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26017 comm=syz-executor.1 [ 833.249811][ T843] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 833.488410][ T843] usb 4-1: USB disconnect, device number 58 [ 833.937301][T26042] __nla_validate_parse: 1 callbacks suppressed [ 833.937315][T26042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 833.953157][T26042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 834.210614][T26068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 834.221023][T26068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.078811][ T3130] Bluetooth: hci0: command 0x1009 tx timeout [ 836.054650][T26133] IPv6: NLM_F_CREATE should be specified when creating new route [ 837.231573][T26193] input: syz0 as /devices/virtual/input/input133 [ 837.578603][ T60] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 837.647283][T26215] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.654222][T26215] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.661546][T26215] device bridge_slave_0 entered promiscuous mode [ 837.668480][T26215] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.676939][T26215] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.684203][T26215] device bridge_slave_1 entered promiscuous mode [ 837.704684][T26220] binder: 26219:26220 ioctl c0306201 200001c0 returned -14 [ 837.816749][T26215] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.823620][T26215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.830694][T26215] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.837479][T26215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.867838][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 837.875940][T20136] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.883323][T20136] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.899257][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 837.907255][ T1691] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.914100][ T1691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.921511][ T1691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 837.929596][ T1691] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.936431][ T1691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.959427][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 837.967185][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 837.978726][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 837.990114][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 838.001734][T26215] device veth0_vlan entered promiscuous mode [ 838.008891][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 838.017149][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.024481][ T60] usb 2-1: not running at top speed; connect to a high speed hub [ 838.032371][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.046729][T26215] device veth1_macvtap entered promiscuous mode [ 838.053867][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 838.067739][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 838.076487][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 838.085827][ T2745] device bridge_slave_1 left promiscuous mode [ 838.093196][ T2745] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.108673][ T60] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 838.121620][ T2745] device bridge_slave_0 left promiscuous mode [ 838.127573][ T2745] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.278697][ T60] usb 2-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.40 [ 838.292880][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.308427][ T60] usb 2-1: Product: syz [ 838.312448][ T60] usb 2-1: Manufacturer: syz [ 838.316836][ T60] usb 2-1: SerialNumber: syz [ 838.369836][ T60] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 838.419407][T26255] tap0: tun_chr_ioctl cmd 1074025675 [ 838.424548][T26255] tap0: persist enabled [ 838.428867][T26255] tap0: tun_chr_ioctl cmd 1074025675 [ 838.433992][T26255] tap0: persist enabled [ 838.545320][T26276] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 838.571332][ T6] usb 2-1: USB disconnect, device number 59 [ 838.595779][ T2745] tipc: Disabling bearer [ 838.602829][ T2745] tipc: Left network mode [ 838.750048][T26296] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 838.814694][T26304] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 838.988693][ T1691] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 839.105148][ T2745] device bridge_slave_1 left promiscuous mode [ 839.112390][ T2745] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.124661][ T2745] device bridge_slave_0 left promiscuous mode [ 839.134241][ T2745] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.147668][ T2745] device bridge_slave_1 left promiscuous mode [ 839.157448][ T2745] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.165521][ T2745] device bridge_slave_0 left promiscuous mode [ 839.176250][ T2745] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.186213][ T2745] device veth1_macvtap left promiscuous mode [ 839.192102][ T2745] device veth0_vlan left promiscuous mode [ 839.198097][ T2745] device veth1_macvtap left promiscuous mode [ 839.204019][ T2745] device veth0_vlan left promiscuous mode [ 839.368839][ T1691] usb 4-1: config 0 has an invalid interface number: 169 but max is 1 [ 839.377425][ T1691] usb 4-1: config 0 has no interface number 1 [ 839.472801][T26353] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 839.496814][T26353] loop1: detected capacity change from 0 to 256 [ 839.568668][ T1691] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=e9.34 [ 839.581952][ T1691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.598504][ T1691] usb 4-1: Product: syz [ 839.606855][ T1691] usb 4-1: Manufacturer: syz [ 839.615674][ T1691] usb 4-1: SerialNumber: syz [ 839.625788][ T1691] usb 4-1: config 0 descriptor?? [ 839.678600][T26375] sch_fq: defrate 0 ignored. [ 839.687578][T26359] loop2: detected capacity change from 0 to 8192 [ 839.729231][T26359] FAT-fs (loop2): Unrecognized mount option "GPL" or missing value [ 839.795075][T26385] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 839.823100][T26385] loop1: detected capacity change from 0 to 256 [ 839.885550][ T30] kauditd_printk_skb: 242 callbacks suppressed [ 839.885566][ T30] audit: type=1326 audit(1718616730.620:60796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f3e05f6a7 code=0x7ffc0000 [ 839.919404][ T843] usb 4-1: USB disconnect, device number 59 [ 839.956942][ T30] audit: type=1326 audit(1718616730.620:60797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f3e025379 code=0x7ffc0000 [ 839.984525][T26404] sch_fq: defrate 0 ignored. [ 839.994384][ T30] audit: type=1326 audit(1718616730.620:60798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3e061f29 code=0x7ffc0000 [ 840.035463][ T30] audit: type=1326 audit(1718616730.620:60799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f3e05f6a7 code=0x7ffc0000 [ 840.081935][ T30] audit: type=1326 audit(1718616730.620:60800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f3e025379 code=0x7ffc0000 [ 840.121502][T26414] loop2: detected capacity change from 0 to 128 [ 840.134197][ T30] audit: type=1326 audit(1718616730.620:60801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3e061f29 code=0x7ffc0000 [ 840.159632][ T30] audit: type=1326 audit(1718616730.620:60802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f3e05f6a7 code=0x7ffc0000 [ 840.184049][ T30] audit: type=1326 audit(1718616730.620:60803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f3e025379 code=0x7ffc0000 [ 840.216844][ T30] audit: type=1326 audit(1718616730.620:60804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3e061f29 code=0x7ffc0000 [ 840.256564][ T30] audit: type=1326 audit(1718616730.620:60805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26391 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9f3e05f6a7 code=0x7ffc0000 [ 841.015817][T26440] bpf_get_probe_write_proto: 8 callbacks suppressed [ 841.015835][T26440] syz-executor.0[26440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 841.038689][T26440] syz-executor.0[26440] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 841.068946][T26446] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 841.117895][T26446] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 841.256229][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x1 [ 841.263870][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.265565][T26454] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 841.271103][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.271127][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.293625][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.300837][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.323881][T26454] loop1: detected capacity change from 0 to 256 [ 841.328359][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x4 [ 841.337264][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.354419][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x2 [ 841.382929][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.402580][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.430287][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.443742][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.462357][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x4 [ 841.488125][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.499126][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.506487][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.514067][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.522565][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.529995][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.537599][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.552091][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.559813][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.567218][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.574729][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.582119][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.589723][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.597044][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.626750][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.646608][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.662648][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.670161][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.678501][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.692879][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.706658][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.716576][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.724001][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.731427][ T843] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 841.741030][ T843] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz0] on syz0 [ 842.190081][T26501] sch_fq: defrate 0 ignored. [ 842.498588][ T6] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 842.910831][T26547] IPv4: Oversized IP packet from 127.202.26.0 [ 842.959527][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x1 [ 842.971154][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 842.991383][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 842.998857][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.006083][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.013320][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.020538][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x4 [ 843.027772][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.035009][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x2 [ 843.047693][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.056631][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.064164][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.071854][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.079424][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x4 [ 843.088027][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.088714][ T6] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 843.095391][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.110281][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.117762][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.125442][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.132979][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.156156][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.163748][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.170983][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.178400][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.185674][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.193114][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.198780][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.203889][T26556] loop3: detected capacity change from 0 to 128 [ 843.216565][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.223871][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.231078][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.289200][T26560] input: syz1 as /devices/virtual/input/input134 [ 843.313323][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.327845][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.328798][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.335289][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.359058][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.366978][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.374208][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.381463][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.388626][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.395811][T24441] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 843.406047][T24441] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz0] on syz0 [ 843.438702][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.569039][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.668720][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.748597][T24441] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 843.768657][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.858703][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.939765][ T2745] device bridge_slave_1 left promiscuous mode [ 843.945818][ T2745] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.953271][ T2745] device bridge_slave_0 left promiscuous mode [ 843.959331][ T6] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 843.972143][ T2745] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.979101][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 843.988826][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.999330][ T2745] device veth1_macvtap left promiscuous mode [ 844.005206][ T2745] device veth0_vlan left promiscuous mode [ 844.148659][T24441] usb 3-1: unable to get BOS descriptor or descriptor too short [ 844.188652][T24441] usb 3-1: not running at top speed; connect to a high speed hub [ 844.239488][T26641] SELinux: Context  is not valid (left unmapped). [ 844.249604][ T3130] usb 1-1: USB disconnect, device number 66 [ 844.268625][T24441] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 844.373550][T26643] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.380473][T26643] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.387550][T26643] device bridge_slave_0 entered promiscuous mode [ 844.394290][T26643] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.401269][T26643] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.408468][T26643] device bridge_slave_1 entered promiscuous mode [ 844.439842][T24441] usb 3-1: New USB device found, idVendor=056a, idProduct=0017, bcdDevice= 0.40 [ 844.449286][T24441] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.457134][T24441] usb 3-1: Product: syz [ 844.461326][T24441] usb 3-1: Manufacturer: syz [ 844.465752][T24441] usb 3-1: SerialNumber: syz [ 844.509131][T24441] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 844.520125][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 844.527601][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 844.538652][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 844.547260][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 844.555213][T20136] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.562079][T20136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.569224][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 844.577274][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 844.585327][T20136] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.592152][T20136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.601108][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 844.618589][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 844.626522][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 844.643309][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 844.652039][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 844.660257][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 844.668476][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 844.682608][T26643] device veth0_vlan entered promiscuous mode [ 844.689089][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 844.696775][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 844.704956][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 844.715371][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 844.731965][ T6] usb 3-1: USB disconnect, device number 59 [ 844.739831][T26643] device veth1_macvtap entered promiscuous mode [ 844.748061][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 844.756272][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 844.765080][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 844.788817][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 844.796864][T20136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 844.806355][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 844.817643][ T3130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 844.875647][T26679] loop1: detected capacity change from 0 to 1024 [ 844.922077][T26679] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 844.950787][ T2745] device bridge_slave_1 left promiscuous mode [ 844.957105][ T2745] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.966794][ T2745] device bridge_slave_0 left promiscuous mode [ 845.033110][ T2745] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.498602][ T859] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 845.538629][T24441] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 845.546039][ T60] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 845.788781][ T859] usb 1-1: Using ep0 maxpacket: 16 [ 845.899327][T24441] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 845.908782][ T859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.924712][ T859] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 845.938025][ T859] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 845.949862][ T859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.964519][ T859] usb 1-1: config 0 descriptor?? [ 845.978953][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 845.989483][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.000477][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.011111][ T60] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 846.020148][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.029640][ T60] usb 2-1: config 0 descriptor?? [ 846.078779][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 846.121071][T26722] syz-executor.4[26722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.121133][T26722] syz-executor.4[26722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 846.165985][ T30] kauditd_printk_skb: 415 callbacks suppressed [ 846.165999][ T30] audit: type=1326 audit(1718616736.900:61221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3564d9af29 code=0x7ffc0000 [ 846.207586][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 846.213338][ T30] audit: type=1326 audit(1718616736.900:61222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3564d9af29 code=0x7ffc0000 [ 846.241817][ T30] audit: type=1326 audit(1718616736.900:61223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3564d9af29 code=0x7ffc0000 [ 846.266420][ T30] audit: type=1326 audit(1718616736.950:61224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3564d9af29 code=0x7ffc0000 [ 846.290583][ T30] audit: type=1326 audit(1718616736.950:61225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3564d9af29 code=0x7ffc0000 [ 846.308648][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 846.314895][ T30] audit: type=1326 audit(1718616737.010:61226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3564d9af29 code=0x7ffc0000 [ 846.348594][ T30] audit: type=1326 audit(1718616737.010:61227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3564d9af29 code=0x7ffc0000 [ 846.372601][ T30] audit: type=1326 audit(1718616737.010:61228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3564d986a7 code=0x7ffc0000 [ 846.396449][ T30] audit: type=1326 audit(1718616737.010:61229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3564d5e379 code=0x7ffc0000 [ 846.420259][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 846.420333][ T30] audit: type=1326 audit(1718616737.010:61230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26725 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3564d986a7 code=0x7ffc0000 [ 846.467460][ T859] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0096/input/input135 [ 846.498953][ T60] hid (null): bogus close delimiter [ 846.518828][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 846.549577][ T859] microsoft 0003:045E:07DA.0096: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 846.648673][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 846.718760][ T60] usb 2-1: language id specifier not provided by device, defaulting to English [ 846.808919][T24441] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 846.854375][T24441] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 846.872461][T24441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.883305][ T859] usb 1-1: USB disconnect, device number 67 [ 847.153234][ T859] usb 3-1: USB disconnect, device number 60 [ 847.418635][ T60] uclogic 0003:256C:006D.0097: failed retrieving Huion firmware version: -71 [ 847.428857][ T60] uclogic 0003:256C:006D.0097: failed probing parameters: -71 [ 847.436182][ T60] uclogic: probe of 0003:256C:006D.0097 failed with error -71 [ 847.444333][ T60] usb 2-1: USB disconnect, device number 60 [ 847.663620][T26782] 9pnet: Could not find request transport: xen [ 848.014284][T26800] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 848.601014][T24468] tipc: Disabling bearer [ 848.606192][T24468] tipc: Left network mode [ 848.648629][T24441] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 848.663496][T26841] tmpfs: Unknown parameter 'no' [ 848.705923][T26850] syz-executor.2[26850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.705994][T26850] syz-executor.2[26850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.739443][T26854] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.786681][T26861] loop2: detected capacity change from 0 to 256 [ 848.819480][T26861] FAT-fs (loop2): Unrecognized mount option "shortname=win†ÄÇÈÞnt" or missing value [ 848.845696][T26873] tmpfs: Unknown parameter 'no' [ 848.930471][T26880] syz-executor.3[26880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.930526][T26880] syz-executor.3[26880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.008644][T24441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.031272][T24441] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.040906][T24441] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 849.049460][T26887] syz-executor.3[26887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.050003][T24441] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.051644][T26887] syz-executor.3[26887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.062978][T24441] usb 2-1: config 0 descriptor?? [ 849.139656][T24468] device bridge_slave_1 left promiscuous mode [ 849.145579][T24468] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.153260][T24468] device bridge_slave_0 left promiscuous mode [ 849.159279][T24468] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.168744][T24468] device veth1_macvtap left promiscuous mode [ 849.174608][T24468] device veth0_vlan left promiscuous mode [ 849.232364][T26898] loop3: detected capacity change from 0 to 256 [ 849.477313][T26909] loop3: detected capacity change from 0 to 40427 [ 849.531544][T26909] F2FS-fs (loop3): invalid crc value [ 849.539552][T26909] F2FS-fs (loop3): Found nat_bits in checkpoint [ 849.559292][T24441] hid (null): bogus close delimiter [ 849.576497][T26909] F2FS-fs (loop3): recover fsync data on readonly fs [ 849.583465][T26909] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 849.679591][T26925] loop2: detected capacity change from 0 to 256 [ 849.878677][T24441] usb 2-1: language id specifier not provided by device, defaulting to English [ 850.001255][T26944] tmpfs: Unknown parameter 'no' [ 850.004130][T26942] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 850.041437][T26956] loop2: detected capacity change from 0 to 128 [ 850.106759][T26956] attempt to access beyond end of device [ 850.106759][T26956] loop2: rw=0, want=241, limit=128 [ 850.124467][ T2745] attempt to access beyond end of device [ 850.124467][ T2745] loop2: rw=1, want=1041, limit=128 [ 850.495090][T26971] tmpfs: Unknown parameter 'no' [ 850.542007][T26982] syz-executor.3[26982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.542081][T26982] syz-executor.3[26982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 850.690165][T27000] tmpfs: Unknown parameter 'no' [ 850.748692][T24441] uclogic 0003:256C:006D.0098: failed retrieving Huion firmware version: -71 [ 850.757617][T24441] uclogic 0003:256C:006D.0098: failed probing parameters: -71 [ 850.765031][T24441] uclogic: probe of 0003:256C:006D.0098 failed with error -71 [ 850.773286][T24441] usb 2-1: USB disconnect, device number 61 [ 851.258602][ T859] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 851.323215][T27019] loop1: detected capacity change from 0 to 128 [ 851.544689][ T30] kauditd_printk_skb: 347 callbacks suppressed [ 851.544704][ T30] audit: type=1326 audit(1718616742.280:61578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27022 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7861bcf29 code=0x0 [ 851.629300][T27033] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev ?, type ?) errno=-22 [ 851.629537][ T859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.649574][T27033] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev bpf, type bpf) errno=-22 [ 851.649908][ T859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.669149][ T859] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 851.678001][ T859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.686528][ T859] usb 1-1: config 0 descriptor?? [ 852.038577][T24441] Bluetooth: hci0: command 0x1003 tx timeout [ 852.044475][T26945] Bluetooth: hci0: sending frame failed (-49) [ 852.188889][ T859] hid (null): bogus close delimiter [ 852.385191][T27045] loop1: detected capacity change from 0 to 256 [ 852.434837][T27045] FAT-fs (loop1): Directory bread(block 64) failed [ 852.441466][T27045] FAT-fs (loop1): Directory bread(block 65) failed [ 852.447853][T27045] FAT-fs (loop1): Directory bread(block 66) failed [ 852.454186][T27045] FAT-fs (loop1): Directory bread(block 67) failed [ 852.460517][T27045] FAT-fs (loop1): Directory bread(block 68) failed [ 852.466777][T27045] FAT-fs (loop1): Directory bread(block 69) failed [ 852.473196][T27045] FAT-fs (loop1): Directory bread(block 70) failed [ 852.479620][T27045] FAT-fs (loop1): Directory bread(block 71) failed [ 852.486000][T27045] FAT-fs (loop1): Directory bread(block 72) failed [ 852.492314][T27045] FAT-fs (loop1): Directory bread(block 73) failed [ 852.554001][T27047] loop1: detected capacity change from 0 to 128 [ 852.620709][T27047] attempt to access beyond end of device [ 852.620709][T27047] loop1: rw=0, want=241, limit=128 [ 852.635491][ T10] attempt to access beyond end of device [ 852.635491][ T10] loop1: rw=1, want=1041, limit=128 [ 852.668613][ T859] usb 1-1: string descriptor 0 read error: -71 [ 852.689239][ T859] uclogic 0003:256C:006D.0099: failed retrieving string descriptor #200: -71 [ 852.700012][ T859] uclogic 0003:256C:006D.0099: failed retrieving pen parameters: -71 [ 852.707896][ T859] uclogic 0003:256C:006D.0099: failed probing pen v2 parameters: -71 [ 852.716019][ T859] uclogic 0003:256C:006D.0099: failed probing parameters: -71 [ 852.723386][ T859] uclogic: probe of 0003:256C:006D.0099 failed with error -71 [ 852.737145][ T859] usb 1-1: USB disconnect, device number 68 [ 853.011558][ T30] audit: type=1326 audit(1718616743.740:61579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 853.037230][ T30] audit: type=1326 audit(1718616743.740:61580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 853.061540][ T30] audit: type=1326 audit(1718616743.740:61581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27073 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x7ffc0000 [ 853.154244][T27079] input: syz1 as /devices/virtual/input/input136 [ 853.532681][T27082] loop3: detected capacity change from 0 to 128 [ 853.611790][T27082] attempt to access beyond end of device [ 853.611790][T27082] loop3: rw=0, want=241, limit=128 [ 853.634555][T24468] attempt to access beyond end of device [ 853.634555][T24468] loop3: rw=1, want=1041, limit=128 [ 853.957854][T27123] EXT4-fs (sda1): Unrecognized mount option "" or missing value [ 854.168766][ T859] Bluetooth: hci0: command 0x1001 tx timeout [ 854.175366][T26945] Bluetooth: hci0: sending frame failed (-49) [ 854.755511][T27143] input: syz1 as /devices/virtual/input/input137 [ 854.797461][T24468] device bridge_slave_1 left promiscuous mode [ 854.825269][T24468] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.900027][T24468] device bridge_slave_0 left promiscuous mode [ 854.912174][T24468] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.928643][T24468] device veth1_macvtap left promiscuous mode [ 854.939871][T24468] device veth0_vlan left promiscuous mode [ 855.139780][T27153] device pim6reg1 entered promiscuous mode [ 855.525883][T27169] EXT4-fs (sda1): Unrecognized mount option "" or missing value [ 855.662782][T27187] device pim6reg1 entered promiscuous mode [ 855.795461][T27193] input: syz1 as /devices/virtual/input/input138 [ 855.981412][ T30] audit: type=1326 audit(1718616746.720:61582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27196 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7861bcf29 code=0x0 [ 856.071697][ T30] audit: type=1326 audit(1718616746.810:61583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fc4931f29 code=0x0 [ 856.198632][ T859] Bluetooth: hci0: command 0x1009 tx timeout [ 856.472790][T27217] loop3: detected capacity change from 0 to 256 [ 857.021121][T27233] loop2: detected capacity change from 0 to 2048 [ 857.070516][T27233] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 857.458565][T20136] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 857.476271][T27243] loop2: detected capacity change from 0 to 40427 [ 857.529196][T27243] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 857.536803][T27243] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 857.546206][T27243] F2FS-fs (loop2): invalid crc value [ 857.552747][T27243] F2FS-fs (loop2): Found nat_bits in checkpoint [ 857.582044][T27243] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 857.588971][T27243] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 857.665496][T24061] attempt to access beyond end of device [ 857.665496][T24061] loop2: rw=2051, want=53248, limit=40427 [ 857.676584][T24061] attempt to access beyond end of device [ 857.676584][T24061] loop2: rw=2051, want=77824, limit=40427 [ 857.687579][T24061] attempt to access beyond end of device [ 857.687579][T24061] loop2: rw=2051, want=86016, limit=40427 [ 857.698968][T24061] F2FS-fs (loop2): Issue discard(6144, 6144, 512) failed, ret: -5 [ 857.698998][T24061] F2FS-fs (loop2): Issue discard(7168, 7168, 2560) failed, ret: -5 [ 857.706615][T24061] F2FS-fs (loop2): Issue discard(10240, 10240, 512) failed, ret: -5 [ 857.738576][T20136] usb 2-1: Using ep0 maxpacket: 16 [ 857.798625][ T5071] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 857.804015][T27253] loop2: detected capacity change from 0 to 256 [ 857.938624][T20136] usb 2-1: unable to get BOS descriptor or descriptor too short [ 858.198891][T20136] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 858.209189][ T5071] usb 4-1: Using ep0 maxpacket: 32 [ 858.214114][T20136] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 858.226719][T20136] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 858.237324][T20136] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 858.328682][ T5071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 858.339684][ T5071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 858.350563][ T5071] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 858.359417][ T5071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.367846][ T5071] usb 4-1: config 0 descriptor?? [ 858.388641][T27247] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 858.409177][ T5071] hub 4-1:0.0: USB hub found [ 858.440093][ T30] audit: type=1326 audit(1718616749.180:61584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27258 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3e061f29 code=0x0 [ 858.528612][T20136] usb 2-1: string descriptor 0 read error: -22 [ 858.534683][T20136] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.543499][T20136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.609288][T20136] usb 2-1: found format II with max.bitrate = 7, frame size=0 [ 858.616642][T20136] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 858.688710][ T5071] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 858.732831][T27266] loop2: detected capacity change from 0 to 256 [ 858.769248][T27266] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 858.841110][T20136] usb 2-1: USB disconnect, device number 62 [ 859.008624][ T5071] usbhid 4-1:0.0: can't add hid device: -71 [ 859.014453][ T5071] usbhid: probe of 4-1:0.0 failed with error -71 [ 859.059034][ T5071] usb 4-1: USB disconnect, device number 60 [ 859.610457][T27280] loop2: detected capacity change from 0 to 1024 [ 859.678012][T27286] loop1: detected capacity change from 0 to 256 [ 859.684216][T27280] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 861.027328][T27293] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 861.040674][T27293] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 861.055363][T27293] attempt to access beyond end of device [ 861.055363][T27293] loop2: rw=2049, want=3606377192, limit=1024 [ 861.066793][T27293] EXT4-fs warning (device loop2): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1803188595) [ 861.078461][T27293] Buffer I/O error on device loop2, logical block 1803188595 [ 861.089073][T27293] attempt to access beyond end of device [ 861.089073][T27293] loop2: rw=2049, want=3403208900, limit=1024 [ 861.103853][T27293] EXT4-fs warning (device loop2): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1701604449) [ 861.115619][T27293] Buffer I/O error on device loop2, logical block 1701604449 [ 861.122962][T27293] attempt to access beyond end of device [ 861.122962][T27293] loop2: rw=2049, want=59110, limit=1024 [ 861.134226][T27293] EXT4-fs warning (device loop2): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 29554) [ 861.184784][T27293] Buffer I/O error on device loop2, logical block 29554 [ 861.200297][T24061] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir1894037998/syzkaller.f27w9p/243/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 861.234505][T24061] EXT4-fs (loop2): Inode 15 (ffff88813904e358): i_reserved_data_blocks (1) not cleared! [ 861.464446][T27309] loop3: detected capacity change from 0 to 40427 [ 861.477167][T27315] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.484301][T27315] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.491615][T27315] device bridge_slave_0 entered promiscuous mode [ 861.498512][T27315] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.505513][T27315] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.513542][T27309] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 861.521521][T27315] device bridge_slave_1 entered promiscuous mode [ 861.527847][T27309] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 861.556227][T27309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 861.614709][T27309] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 861.623237][T27309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 861.643977][T27315] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.650944][T27315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.658029][T27315] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.664823][T27315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.691363][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 861.700279][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.707418][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.739954][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 861.748036][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.754886][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.764959][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 861.773134][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.779990][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.791687][T27334] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 861.833475][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 861.848979][ T5071] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 861.865110][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 861.883457][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 861.891584][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 861.892882][T27347] loop1: detected capacity change from 0 to 2048 [ 861.905182][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 861.919246][T27315] device veth0_vlan entered promiscuous mode [ 861.939377][T27347] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 861.980113][ T10] device veth1_macvtap left promiscuous mode [ 861.989338][ T10] device veth0_vlan left promiscuous mode [ 862.016793][T27347] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 862.046794][ T30] audit: type=1326 audit(1718616752.780:61585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27344 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7861bcf29 code=0x0 [ 862.153674][T27356] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #12: block 9: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=13, rec_len=21, size=56 fake=0 [ 862.299913][T27356] EXT4-fs (loop1): Remounting filesystem read-only [ 862.394802][T27315] device veth1_macvtap entered promiscuous mode [ 862.402199][ T843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 862.421840][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 862.430003][T24441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 862.441364][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 862.455774][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 862.540985][T27372] input: syz0 as /devices/virtual/input/input139 [ 862.561135][T27378] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 863.216524][T27414] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 864.138761][T24441] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 864.362992][T27407] loop1: detected capacity change from 0 to 40427 [ 864.410646][T27407] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 864.425345][T27407] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 864.427972][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 864.436186][T27407] F2FS-fs (loop1): Found nat_bits in checkpoint [ 864.461072][ T30] audit: type=1326 audit(1718616755.200:61586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27440 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3e061f29 code=0x0 [ 864.524401][T27407] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 864.555364][T27407] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 864.562991][T27407] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 864.570313][T24441] usb 4-1: Using ep0 maxpacket: 32 [ 864.590599][T27407] attempt to access beyond end of device [ 864.590599][T27407] loop1: rw=34817, want=79872, limit=40427 [ 864.621590][T27459] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27459 comm=syz-executor.4 [ 864.688684][T24441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 864.700211][T24441] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 864.711314][T24441] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 864.720224][T24441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.730801][T24441] usb 4-1: config 0 descriptor?? [ 864.748992][T27405] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 864.800114][T24441] hub 4-1:0.0: USB hub found [ 864.819383][ T859] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 865.038627][T24441] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 865.258954][ T859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.270237][ T859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.280549][ T859] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 865.290769][ T859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.302936][ T859] usb 1-1: config 0 descriptor?? [ 865.328708][T24441] usbhid 4-1:0.0: can't add hid device: -71 [ 865.335332][T24441] usbhid: probe of 4-1:0.0 failed with error -71 [ 865.368905][T24441] usb 4-1: USB disconnect, device number 61 [ 865.585241][T27490] loop2: detected capacity change from 0 to 2048 [ 865.623704][T27490] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 865.782148][ T859] samsung 0003:0419:0001.009A: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 866.315954][ T859] usb 1-1: USB disconnect, device number 69 [ 866.548696][T27531] loop2: detected capacity change from 0 to 40427 [ 866.571481][T27531] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 866.579081][T27531] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 866.599373][T27531] F2FS-fs (loop2): Found nat_bits in checkpoint [ 866.714655][ T3130] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 866.766055][T27531] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 866.896539][ T30] audit: type=1326 audit(1718616757.630:61587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x0 [ 866.919954][T27531] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 866.926747][T27531] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 867.038578][ T3130] usb 2-1: Using ep0 maxpacket: 32 [ 867.139094][T27555] attempt to access beyond end of device [ 867.139094][T27555] loop2: rw=2049, want=45160, limit=40427 [ 867.158880][ T3130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 867.175124][ T3130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 867.193354][ T3130] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 867.202825][ T3130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.212294][ T3130] usb 2-1: config 0 descriptor?? [ 867.228618][T27535] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 867.236854][T27559] incfs_lookup_dentry err:-14 [ 867.241352][T27559] incfs: Can't find or create .incomplete dir in ./file0 [ 867.249100][ T3130] hub 2-1:0.0: USB hub found [ 867.258670][T27559] incfs: mount failed -14 [ 867.278640][ T5071] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 867.508756][ T3130] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 867.516114][T27583] incfs_lookup_dentry err:-14 [ 867.521174][T27583] incfs: Can't find or create .incomplete dir in ./file0 [ 867.528216][T27583] incfs: mount failed -14 [ 867.618592][ T60] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 867.658642][ T5071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 867.669623][ T5071] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.679570][ T5071] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 867.688509][ T5071] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.697355][ T5071] usb 4-1: config 0 descriptor?? [ 867.828695][ T3130] usbhid 2-1:0.0: can't add hid device: -71 [ 867.834797][ T3130] usbhid: probe of 2-1:0.0 failed with error -71 [ 867.874665][ T3130] usb 2-1: USB disconnect, device number 63 [ 867.949086][ T60] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 868.028627][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.118637][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.190165][ T5071] samsung 0003:0419:0001.009B: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 868.208621][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.298753][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.338205][T27604] loop2: detected capacity change from 0 to 1024 [ 868.508891][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.528489][T27604] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 868.666298][T27604] EXT4-fs error (device loop2): ext4_xattr_ibody_get:603: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 868.678877][T27604] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 868.691057][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.691320][T27604] attempt to access beyond end of device [ 868.691320][T27604] loop2: rw=2049, want=3606377192, limit=1024 [ 868.712532][T27604] EXT4-fs warning (device loop2): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1803188595) [ 868.724169][T27604] Buffer I/O error on device loop2, logical block 1803188595 [ 868.731440][T27604] attempt to access beyond end of device [ 868.731440][T27604] loop2: rw=2049, want=3403208900, limit=1024 [ 868.742733][T27604] EXT4-fs warning (device loop2): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1701604449) [ 868.754370][T27604] Buffer I/O error on device loop2, logical block 1701604449 [ 868.761750][T27604] attempt to access beyond end of device [ 868.761750][T27604] loop2: rw=2049, want=59110, limit=1024 [ 868.772723][T27604] EXT4-fs warning (device loop2): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 29554) [ 868.778720][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.783928][T27604] Buffer I/O error on device loop2, logical block 29554 [ 868.817386][T27315] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir3985443335/syzkaller.2ugVFH/26/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 868.845990][T27315] EXT4-fs (loop2): Inode 15 (ffff88813a234048): i_reserved_data_blocks (1) not cleared! [ 868.898646][ T60] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 868.908874][ T60] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 868.917735][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.051317][T27614] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.058193][T27614] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.065483][T27614] device bridge_slave_0 entered promiscuous mode [ 869.072277][T27614] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.079628][T27614] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.086771][T27614] device bridge_slave_1 entered promiscuous mode [ 869.150066][T27614] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.156929][T27614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.164061][T27614] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.170819][T27614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.178220][ T5071] usb 1-1: USB disconnect, device number 70 [ 869.207382][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 869.215135][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.222579][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.239685][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 869.248052][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.254922][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.262244][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 869.270315][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.277171][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.295597][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 869.303982][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 869.321426][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 869.329707][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 869.337555][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 869.344752][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 869.352444][T27614] device veth0_vlan entered promiscuous mode [ 869.364600][T27614] device veth1_macvtap entered promiscuous mode [ 869.371737][ T859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 869.390107][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 869.398313][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 869.417970][T27629] loop2: detected capacity change from 0 to 128 [ 869.442442][T27629] FAT-fs (loop2): bogus sectors per cluster 0 [ 869.448388][T27629] FAT-fs (loop2): Can't find a valid FAT filesystem [ 869.529395][ T10] device bridge_slave_1 left promiscuous mode [ 869.534705][T27629] loop2: detected capacity change from 0 to 1024 [ 869.535449][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.549141][ T10] device bridge_slave_0 left promiscuous mode [ 869.555057][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.563024][ T10] device veth1_macvtap left promiscuous mode [ 869.569012][ T10] device veth0_vlan left promiscuous mode [ 869.579598][T27629] EXT4-fs (loop2): Ignoring removed nobh option [ 869.585881][T27629] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 869.601114][T27629] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,resuid=0x0000000000000000,dioread_nolock,usrjquota=,discard,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 869.833076][ T859] usb 4-1: USB disconnect, device number 62 [ 869.854068][T27648] syz-executor.3[27648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.854154][T27648] syz-executor.3[27648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.869202][T27648] syz-executor.3[27648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.881383][T27648] syz-executor.3[27648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.989953][ T30] audit: type=1400 audit(1718616760.730:61588): avc: denied { getopt } for pid=27668 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 870.084402][T27681] syz-executor.2[27681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.084470][T27681] syz-executor.2[27681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.120510][T27681] syz-executor.2[27681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.134031][T27681] syz-executor.2[27681] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.203920][T27694] device pim6reg1 entered promiscuous mode [ 870.435966][T27718] syz-executor.3[27718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.436050][T27718] syz-executor.3[27718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 870.565147][T27738] loop2: detected capacity change from 0 to 2048 [ 870.602670][ T30] audit: type=1326 audit(1718616761.340:61589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.626744][ T30] audit: type=1326 audit(1718616761.340:61590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.650763][ T30] audit: type=1326 audit(1718616761.340:61591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.675204][ T30] audit: type=1326 audit(1718616761.340:61592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.699443][ T30] audit: type=1326 audit(1718616761.340:61593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.723685][ T30] audit: type=1326 audit(1718616761.340:61594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.748000][ T30] audit: type=1326 audit(1718616761.340:61595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.773755][ T30] audit: type=1326 audit(1718616761.340:61596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.777737][T27738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 870.806667][ T30] audit: type=1326 audit(1718616761.340:61597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27745 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f895b5a9f29 code=0x7ffc0000 [ 870.836382][T27746] loop3: detected capacity change from 0 to 512 [ 870.880452][T27746] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x00000000777ca850,grpquota,,errors=continue. Quota mode: writeback. [ 870.898340][T27746] ext4 filesystem being mounted at /root/syzkaller-testdir1910519142/syzkaller.yrMF70/358/file0 supports timestamps until 2038 (0x7fffffff) [ 971.588491][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 971.595274][ C0] (detected by 0, t=10002 jiffies, g=166885, q=359) [ 971.601776][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295034380-4295024377), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 971.614969][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g166885 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 971.626078][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 971.636049][ C0] rcu: RCU grace-period kthread stack dump: [ 971.641753][ C0] task:rcu_preempt state:R running task stack:27976 pid: 14 ppid: 2 flags:0x00004000 [ 971.652352][ C0] Call Trace: [ 971.655466][ C0] [ 971.658254][ C0] __schedule+0xccc/0x1590 [ 971.662501][ C0] ? __sched_text_start+0x8/0x8 [ 971.667185][ C0] ? __kasan_check_write+0x14/0x20 [ 971.672134][ C0] schedule+0x11f/0x1e0 [ 971.676128][ C0] schedule_timeout+0x18c/0x370 [ 971.680810][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 971.685846][ C0] ? console_conditional_schedule+0x30/0x30 [ 971.691576][ C0] ? update_process_times+0x200/0x200 [ 971.696781][ C0] ? prepare_to_swait_event+0x308/0x320 [ 971.702167][ C0] rcu_gp_fqs_loop+0x2af/0xf80 [ 971.706845][ C0] ? debug_smp_processor_id+0x17/0x20 [ 971.711987][ C0] ? __note_gp_changes+0x4ab/0x920 [ 971.716914][ C0] ? rcu_gp_init+0xc30/0xc30 [ 971.721343][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 971.726376][ C0] ? rcu_gp_init+0x9cf/0xc30 [ 971.730808][ C0] rcu_gp_kthread+0xa4/0x350 [ 971.735232][ C0] ? _raw_spin_lock+0x1b0/0x1b0 [ 971.739919][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 971.744430][ C0] ? __kasan_check_read+0x11/0x20 [ 971.749291][ C0] ? __kthread_parkme+0xb2/0x200 [ 971.754063][ C0] kthread+0x421/0x510 [ 971.757972][ C0] ? wake_nocb_gp+0x1e0/0x1e0 [ 971.762486][ C0] ? kthread_blkcg+0xd0/0xd0 [ 971.767025][ C0] ret_from_fork+0x1f/0x30 [ 971.771284][ C0] [ 971.774140][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 971.780308][ C0] Sending NMI from CPU 0 to CPUs 1: [ 971.785345][ C1] NMI backtrace for cpu 1 [ 971.785354][ C1] CPU: 1 PID: 27776 Comm: syz-executor.3 Not tainted 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 971.785371][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 971.785384][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 971.785402][ C1] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 971.785415][ C1] RSP: 0018:ffffc90000c7f9d8 EFLAGS: 00040206 [ 971.785429][ C1] RAX: 0000000000000003 RBX: ffffffff8602c300 RCX: 00007f895a923f80 [ 971.785440][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000040000 [ 971.785450][ C1] RBP: ffffc90000c7fb70 R08: 0000000000000000 R09: fffffbfff0c05866 [ 971.785461][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 00007f895a923d80 [ 971.785472][ C1] R13: 0000000000000007 R14: dffffc0000000000 R15: 0000000000000000 [ 971.785482][ C1] FS: 00007f895a9246c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 971.785496][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 971.785507][ C1] CR2: 00007f895a923d00 CR3: 000000012bd0f000 CR4: 00000000003506a0 [ 971.785520][ C1] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 971.785529][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 971.785539][ C1] Call Trace: [ 971.785543][ C1] [ 971.785548][ C1] ? show_regs+0x58/0x60 [ 971.785564][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 971.785582][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 971.785601][ C1] ? __put_user_nocheck_4+0x3/0x11 [ 971.785613][ C1] ? __put_user_nocheck_4+0x3/0x11 [ 971.785627][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 971.785645][ C1] ? nmi_handle+0xa8/0x280 [ 971.785660][ C1] ? __put_user_nocheck_4+0x3/0x11 [ 971.785673][ C1] ? default_do_nmi+0x69/0x160 [ 971.785694][ C1] ? exc_nmi+0xaf/0x120 [ 971.785708][ C1] ? end_repeat_nmi+0x16/0x31 [ 971.785726][ C1] ? __put_user_nocheck_4+0x3/0x11 [ 971.785740][ C1] ? __put_user_nocheck_4+0x3/0x11 [ 971.785754][ C1] ? __put_user_nocheck_4+0x3/0x11 [ 971.785767][ C1] [ 971.785772][ C1] [ 971.785776][ C1] ? copy_fpstate_to_sigframe+0x839/0x9a0 [ 971.785797][ C1] ? fpregs_set+0x6f0/0x6f0 [ 971.785812][ C1] ? __kasan_check_write+0x14/0x20 [ 971.785828][ C1] ? recalc_sigpending+0x1a5/0x230 [ 971.785845][ C1] ? dequeue_signal+0x22f/0x520 [ 971.785859][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 971.785875][ C1] ? unhandled_signal+0x150/0x150 [ 971.785889][ C1] ? fpu__alloc_mathframe+0x89/0x150 [ 971.785905][ C1] get_sigframe+0x378/0x4b0 [ 971.785918][ C1] ? memcpy+0x56/0x70 [ 971.785933][ C1] ? restore_sigcontext+0x710/0x710 [ 971.785951][ C1] arch_do_signal_or_restart+0x2ad/0x1680 [ 971.785968][ C1] ? __kasan_check_write+0x14/0x20 [ 971.785983][ C1] ? _copy_from_user+0x96/0xd0 [ 971.785998][ C1] ? restore_altstack+0x274/0x400 [ 971.786015][ C1] ? get_sigframe_size+0x10/0x10 [ 971.786029][ C1] ? __se_sys_futex+0x37b/0x3e0 [ 971.786050][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 971.786066][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 971.786081][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 971.786098][ C1] do_syscall_64+0x49/0xb0 [ 971.786112][ C1] ? sysvec_irq_work+0x52/0xb0 [ 971.786127][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 971.786142][ C1] RIP: 0033:0x7f895b5a9f27 [ 971.786155][ C1] Code: 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 [ 971.786167][ C1] RSP: 002b:00007f895a924178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 971.786181][ C1] RAX: 00000000000000ca RBX: 00007f895b6e0f88 RCX: 00007f895b5a9f29 [ 971.786192][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f895b6e0f88 [ 971.786202][ C1] RBP: 00007f895b6e0f80 R08: 00007f895a9246c0 R09: 00007f895a9246c0 [ 971.786213][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f895b6e0f8c [ 971.786223][ C1] R13: 000000000000000b R14: 00007ffea3875070 R15: 00007ffea3875158 [ 971.786237][ C1] [ 1145.558570][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 273s! [ 1145.567311][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 273s! [ 1145.576182][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 273s! [ 1145.584855][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 272s! [ 1145.593727][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 273s! [ 1145.601976][ C0] Showing busy workqueues and worker pools: [ 1145.607665][ C0] workqueue events: flags=0x0 [ 1145.612223][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 1145.612269][ C0] in-flight: 843:bpf_map_free_deferred [ 1145.612314][ C0] pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker [ 1145.612394][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=11/256 refcnt=12 [ 1145.612436][ C0] pending: bpf_prog_free_deferred, bpf_prog_free_deferred, vmstat_shepherd, kfree_rcu_monitor, xfrm_state_gc_task, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 1145.612628][ C0] workqueue events_long: flags=0x0 [ 1145.671148][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 1145.671190][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 1145.671250][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=12/256 refcnt=13 [ 1145.671286][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 1145.671442][ C0] workqueue events_unbound: flags=0x2 [ 1145.723034][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 1145.723079][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 1145.723139][ C0] workqueue events_power_efficient: flags=0x80 [ 1145.743560][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 1145.743610][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, reg_check_chans_work, gc_worker [ 1145.743687][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 1145.743723][ C0] pending: neigh_periodic_work, check_lifetime [ 1145.743771][ C0] workqueue rcu_gp: flags=0x8 [ 1145.779721][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.779763][ C0] pending: process_srcu [ 1145.779802][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1145.796634][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.796672][ C0] pending: vmstat_update [ 1145.796708][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.796741][ C0] pending: vmstat_update [ 1145.796778][ C0] workqueue writeback: flags=0x4a [ 1145.825398][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 1145.825439][ C0] pending: wb_update_bandwidth_workfn, wb_workfn, wb_workfn, wb_workfn [ 1145.825516][ C0] workqueue kblockd: flags=0x18 [ 1145.845637][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 1145.845681][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 1145.845729][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 1145.845768][ C0] pending: blk_mq_timeout_work [ 1145.845820][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1145.878030][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.878070][ C0] pending: work_fn [ 1145.878108][ C0] workqueue mld: flags=0x40008 [ 1145.893989][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=7 [ 1145.894026][ C0] pending: mld_dad_work [ 1145.894047][ C0] inactive: mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_dad_work [ 1145.894117][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 1145.920535][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 1145.920579][ C0] pending: addrconf_verify_work [ 1145.920668][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1145.938101][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.938141][ C0] pending: wg_packet_encrypt_worker [ 1145.938185][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1145.956014][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1145.956053][ C0] pending: wg_packet_handshake_send_worker [ 1145.956090][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1145.974150][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.974195][ C0] pending: wg_packet_encrypt_worker [ 1145.974232][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1145.974265][ C0] pending: wg_packet_encrypt_worker [ 1145.974307][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1146.004788][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.004824][ C0] pending: wg_packet_handshake_send_worker [ 1146.004863][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.022966][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.023005][ C0] pending: wg_packet_encrypt_worker [ 1146.023041][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.023075][ C0] pending: wg_packet_encrypt_worker [ 1146.023115][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1146.053740][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.053776][ C0] pending: wg_packet_handshake_send_worker [ 1146.053815][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1146.071923][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.071965][ C0] pending: wg_packet_encrypt_worker [ 1146.072003][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.072038][ C0] pending: wg_packet_encrypt_worker [ 1146.072076][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1146.102670][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.102715][ C0] pending: wg_packet_handshake_send_worker [ 1146.102760][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.120921][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.120969][ C0] pending: wg_packet_encrypt_worker [ 1146.121005][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.121040][ C0] pending: wg_packet_encrypt_worker [ 1146.121080][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1146.151667][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.151705][ C0] pending: wg_packet_handshake_send_worker [ 1146.151750][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1146.169913][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.169952][ C0] pending: wg_packet_encrypt_worker [ 1146.169989][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.170023][ C0] pending: wg_packet_encrypt_worker [ 1146.170060][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1146.200623][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.200660][ C0] pending: wg_packet_handshake_send_worker [ 1146.200699][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.218764][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.218812][ C0] pending: wg_packet_encrypt_worker [ 1146.218854][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.218895][ C0] pending: wg_packet_encrypt_worker [ 1146.218936][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1146.249522][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.249559][ C0] pending: wg_packet_handshake_send_worker [ 1146.249597][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.267729][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.267768][ C0] pending: wg_packet_encrypt_worker [ 1146.267805][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.267841][ C0] pending: wg_packet_encrypt_worker [ 1146.267890][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1146.298459][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.298503][ C0] pending: wg_packet_handshake_send_worker [ 1146.298547][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1146.316762][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.316802][ C0] pending: wg_packet_encrypt_worker [ 1146.316838][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.316872][ C0] pending: wg_packet_encrypt_worker [ 1146.316910][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1146.347716][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.347754][ C0] pending: wg_packet_encrypt_worker [ 1146.347794][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.347829][ C0] pending: wg_packet_encrypt_worker [ 1146.347864][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1146.378423][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1146.378462][ C0] pending: wg_packet_handshake_send_worker [ 1146.378507][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1146.396645][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.396690][ C0] pending: wg_packet_encrypt_worker [ 1146.396733][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1146.396774][ C0] pending: wg_packet_encrypt_worker [ 1146.396818][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=274s workers=6 idle: 859 60 3130 16326 24441