last executing test programs: 2.195050993s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) 2.163196438s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 2.086739089s ago: executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioprio_get$pid(0x2, r1) 2.050146505s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x8900003) 2.032393197s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.028022748s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000001000001e0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 1.850306106s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12011c00090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201400905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="200004000000c0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000cc0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="0000040000004bbb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 1.454544367s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000000)='./file0\x00', 0x3004050, &(0x7f0000000540)=ANY=[], 0x2, 0x10629, &(0x7f0000010640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 1.309774529s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0xffffffffffffff93}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200004000000000000000f1ffffff850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.293359681s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000001940)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) recvmmsg(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002, 0x0) 1.218396503s ago: executing program 1: r0 = epoll_create(0x7f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}}], 0x1, 0x4000444) close_range(r0, 0xffffffffffffffff, 0x0) 1.192259296s ago: executing program 1: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xffffffff}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe8c, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.179178608s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000613f7b8a8b0612afad83724e4b8a9d2629b19a70345ccf388488575c67f889"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x8f, &(0x7f00000003c0)=""/143, 0x0, 0x40}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000280)='workqueue_activate_work\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1300000065ffff008000000600395032303030"], 0x13) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private2, 0x4d2, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)={0x48, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xffff, 0x2, 0x3ff, 0x3, 0x1, 0xa7dc, 0x1, 0x8001, 0xc3a, 0x1, 0x9576, 0xfff, 0x1ff, 0x0, 0x7ff, 0x800]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000054}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={0x0, 0x0}, 0x20) syz_open_procfs$userns(0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="8401000010001349c08bc47defe9f500fe880000000000000000000000000001000000000000000000000000000000004e210000000000000000000000000000f74aac20fe31bab854d33b359a4f7fa94c1809ce53604017940623f3117c528728af500df73a10b6256e3583e0c1c4d17196a6ca833619638f8c2591829206cf287e522265cd0d5b982515967fb077", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000032000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/316], 0x184}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty}, {@in6=@private2, 0x0, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) 1.175671309s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x3, 0x0, 0x80000000, 0xfffffffffffffffa}) 1.156075602s ago: executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000091000040"]) 1.130113076s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000007600d30000ff3f87c18000a4e98e"], 0x18}, 0x1, 0x5502000000000000}, 0x0) 1.118973717s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000180), 0x12) write$cgroup_pid(r2, &(0x7f0000000340), 0xfdef) 1.090382022s ago: executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r0}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='ext4_forget\x00', r2}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 1.03857609s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000001000)='GPL\x00'}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000000c0)) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086d042dc20000000000010902240001000000000904000001030000020921000000012205000e0581"], 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) readv(r1, &(0x7f0000002980)=[{0x0}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000100)='\v\x00\x00\x00', 0x4}], 0x1) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x5, {0x5, 0x0, "5cef8d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 851.932179ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 753.651714ms ago: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r5, 0xb}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001a00)={0x0, &(0x7f00000019c0), 0x0, r5, 0x6}) fstatfs(r5, &(0x7f0000000000)=""/111) close_range(r0, 0xffffffffffffffff, 0x0) 658.385668ms ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0xb6, &(0x7f0000000400)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x10}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 650.73908ms ago: executing program 0: r0 = epoll_create(0x7f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}}], 0x1, 0x4000444) close_range(r0, 0xffffffffffffffff, 0x0) 643.205371ms ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f0, 0x2e0, 0x2e0, 0x2e0, 0x538, 0x2e0, 0x620, 0x620, 0x620, 0x620, 0x620, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:devicekit_exec_t:s0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'syzkaller0\x00'}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@inet=@set4={{0x50}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x750) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 164.622195ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) 150.219867ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) 121.714911ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x0) 100.974584ms ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0xb6, &(0x7f0000000400)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140), 0x10}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 13.756148ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007f0000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x10, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f000000d980)=@newchain={0x3e84, 0x64, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x16ac, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1690, 0x6, [@m_connmark={0x12c, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x89, 0x6, "fe5ad9d70a5d3b07e21c835ca951ba331147cab5bfc17021ff178589edee5fe765755867a237f88142e990d40fac0af86fe354751d0e822effa6f951ff63234ee84bb59e4a019cc396cb98201f0ee90af24bdeb8ba22b14aadfe97c6296cf7029e20edb6649556327cac6780cf3fd251357aad1bb8bfa7e7ab5e61e8b0451d5f3a6257ca08"}, {0xc}, {0xc}}}, @m_bpf={0x90, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x21, 0x6, "979da6a5294b0884191c7e4994fe11c1b08b03b7dd68efb772ed512b9d"}, {0xc}, {0xc}}}, @m_bpf={0x1098, 0x0, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x1001, 0x6, "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"}, {0xc}, {0xc}}}, @m_ife={0x168, 0x0, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0xc5, 0x6, "e418a1eb19ac99a3471fdbd3d46ebf71dfd8166b4cbe0bbf5f4d5d7cc9325c2a322f7fba43decb60f4053bc73e7406f1076bd65320a7ba4a4692f1fa8851c545a91e2b490403130ff00bc866972f3737ad5845c2ee92eb89d3cd9a57e824f872e832aa533d2c63cc21e578c7b70f1b37df8dd638f13881680fa05c80c54b5ff2247520d49a32844d8b0d8b19ea7a8e68ce09f091b6fd53c88644561aebddb6ccb4a93fc87db1406687fcf8520b4a032998ee68b64e28085cdf631f1661d90997bc"}, {0xc}, {0xc}}}, @m_sample={0x88, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x41, 0x6, "98f77c59c52b690ea0078b88d6c75749578cf93c8f0ff435b18e9a51dd1a10854902f0ee5ccb1bd5c10c5737a88fad30ce7b3e2cde05ef0a46e36b2644"}, {0xc}, {0xc}}}, @m_csum={0x124, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0xd9, 0x6, "76627c328dcedd779a169cde7178009d8504781e7b901943e686113920dad50d48a61b28272a06a8f7ec3d3585d2475e277304208b904b51e19c2066c0311f6e6dc92fc4273ed1a9e4f49ea04f8db17475a365d795568cd7b1737f9a7ab2ae1e2142538797e1bfe4f80589b85d8b80271e210c1d3d528b4beeaa782228f6101ba7eca05519941d02f3ebe57f09993911454ece7ec4df9e652aad497463e2fa2bcc2aabe8f5f58637e250947b09539c0ba69f89ec4c6fc84624d8b2b6108b6c713e59f1774071f7b81d71fa8ea52be14c81b5a68e89"}, {0xc}, {0xc}}}, @m_tunnel_key={0x124, 0x0, 0x0, 0x0, {{0xf}, {0x6c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x89, 0x6, "d0037ec99ea44a9d86d8907b8ff4c123030f6663c2f447e125bf3bf595a54e896586683925d56c9a25303ad022ecd7536e7c0c550326fda27a51953c8d720bfc2e86a1ff2db9bdf1ed951167431865dd0975da16d279d22548056c702ae566459fea041bc5b193f7f9152049c097fdf0f5ac81eec457b97b9d5fcfb613d3330997b42a40ae"}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x2760, 0x2, [@TCA_CGROUP_POLICE={0x414, 0x2, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE={0x404}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0x444, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_ACT={0x1ee0, 0x1, [@m_sample={0x38, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x9, 0x6, "18a994d7eb"}, {0xc}, {0xc}}}, @m_police={0x1ea4, 0x0, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}]]}, {0xe65, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x3e84}}, 0x0) 0s ago: executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.696637][T11812] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 305.705152][T11812] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.705248][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.718192][T11812] EXT4-fs (loop2): 1 orphan inode deleted [ 305.726668][T11812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.735624][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.750411][T11812] usb usb8: usbfs: process 11812 (syz-executor.2) did not claim interface 0 before use [ 305.760195][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.768616][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.776756][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.783627][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.791787][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 305.806084][T11253] EXT4-fs (loop2): unmounting filesystem. [ 305.813190][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 305.821376][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.828270][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.835570][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 305.844063][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 305.851963][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 305.859990][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 305.875536][T11777] device veth0_vlan entered promiscuous mode [ 305.890361][T11777] device veth1_macvtap entered promiscuous mode [ 305.905708][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.914539][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.923094][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.931178][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.939227][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.947380][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.956640][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 305.965156][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.974843][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.983882][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.992734][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.005128][ T43] device bridge_slave_1 left promiscuous mode [ 306.019780][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.035448][ T43] device bridge_slave_0 left promiscuous mode [ 306.042107][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.052292][ T43] device veth1_macvtap left promiscuous mode [ 306.058633][ T43] device veth0_vlan left promiscuous mode [ 306.297747][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.309478][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.424359][T11837] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.447767][T11837] FAT-fs (loop7): unable to read boot sector [ 306.585912][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 306.626130][T11833] loop2: detected capacity change from 0 to 40427 [ 306.639113][T11833] F2FS-fs (loop2): invalid crc value [ 306.650063][T11833] F2FS-fs (loop2): Found nat_bits in checkpoint [ 306.783765][T11833] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 306.827313][T11855] loop1: detected capacity change from 0 to 512 [ 306.848730][T11855] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 306.871391][T11855] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 306.898276][T11855] EXT4-fs (loop1): 1 orphan inode deleted [ 306.903932][T11855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 306.932642][T11855] usb usb8: usbfs: process 11855 (syz-executor.1) did not claim interface 0 before use [ 306.966023][ T24] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 306.975118][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.986528][ T24] usb 5-1: config 0 descriptor?? [ 307.006708][T11872] xt_bpf: check failed: parse error [ 307.013050][T11548] EXT4-fs (loop1): unmounting filesystem. [ 307.071807][ T24] ums-usbat 5-1:0.0: USB Mass Storage device detected [ 307.079270][ T24] ums-usbat 5-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 307.086602][ T24] ums-usbat 5-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.78-syzkaller-00009-g25216be1ac5e) [ 307.086602][ T24] Please send a copy of this message to and [ 307.250373][ T24] usb 5-1: USB disconnect, device number 21 [ 307.421615][T11886] loop1: detected capacity change from 0 to 40427 [ 307.441524][T11886] F2FS-fs (loop1): invalid crc value [ 307.481902][T11886] F2FS-fs (loop1): Found nat_bits in checkpoint [ 307.588300][T11886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 307.798890][T11909] loop3: detected capacity change from 0 to 512 [ 307.824056][T11911] xt_bpf: check failed: parse error [ 307.832769][T11909] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 307.857674][T11909] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.003051][T11909] EXT4-fs (loop3): 1 orphan inode deleted [ 308.008794][T11909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 308.034298][T11909] usb usb8: usbfs: process 11909 (syz-executor.3) did not claim interface 0 before use [ 308.158759][T11777] EXT4-fs (loop3): unmounting filesystem. [ 308.190593][T11936] loop7: detected capacity change from 0 to 16384 [ 308.340481][T11936] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 2 [ 308.455841][ T362] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 308.543681][T11947] loop2: detected capacity change from 0 to 40427 [ 308.553089][T11947] F2FS-fs (loop2): invalid crc value [ 308.571911][T11947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 308.669208][T11947] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 308.826533][ T362] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 308.851108][ T362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.869496][ T362] usb 5-1: config 0 descriptor?? [ 308.877944][ T28] kauditd_printk_skb: 2256 callbacks suppressed [ 308.877958][ T28] audit: type=1326 audit(2000000086.849:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 308.909355][T11986] overlayfs: missing 'lowerdir' [ 308.956260][ T362] ums-usbat 5-1:0.0: USB Mass Storage device detected [ 308.989853][ T362] ums-usbat 5-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 309.003730][ T362] ums-usbat 5-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.1.78-syzkaller-00009-g25216be1ac5e) [ 309.003730][ T362] Please send a copy of this message to and [ 309.011417][ T28] audit: type=1326 audit(2000000086.849:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.054822][ T28] audit: type=1326 audit(2000000086.889:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.080312][ T28] audit: type=1326 audit(2000000086.889:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.104464][ T28] audit: type=1326 audit(2000000086.889:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.128326][ T28] audit: type=1326 audit(2000000086.889:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.152141][ T28] audit: type=1326 audit(2000000086.889:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.176333][ T28] audit: type=1326 audit(2000000086.889:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.200176][ T28] audit: type=1326 audit(2000000086.889:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.201787][ T362] usb 5-1: USB disconnect, device number 22 [ 309.275834][ T28] audit: type=1326 audit(2000000086.889:5811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11984 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 309.469945][T12009] loop3: detected capacity change from 0 to 40427 [ 309.478783][T12009] F2FS-fs (loop3): invalid crc value [ 309.486013][T12009] F2FS-fs (loop3): Found nat_bits in checkpoint [ 309.536587][T12009] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 309.567991][T12030] loop2: detected capacity change from 0 to 512 [ 309.595314][T12030] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz-executor.2: corrupted inode contents [ 309.608023][T12030] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz-executor.2: mark_inode_dirty error [ 309.615940][ T332] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 309.619865][T12030] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz-executor.2: corrupted inode contents [ 309.639899][T12030] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz-executor.2: mark_inode_dirty error [ 309.651882][T12030] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz-executor.2: corrupted inode contents [ 309.664410][T12030] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 309.673163][T12030] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz-executor.2: corrupted inode contents [ 309.687287][T12030] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz-executor.2: mark_inode_dirty error [ 309.701635][T12030] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 309.711084][T12030] EXT4-fs (loop2): 1 truncate cleaned up [ 309.717743][T12030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 309.731737][T12030] ext4 filesystem being mounted at /root/syzkaller-testdir1768298332/syzkaller.AwEcpq/52/file1 supports timestamps until 2038 (0x7fffffff) [ 309.770676][T12039] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.105817][ T6] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 310.890076][T12057] loop1: detected capacity change from 0 to 512 [ 310.904940][T12057] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.913948][T12057] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.926068][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.928532][T12057] EXT4-fs (loop1): 1 orphan inode deleted [ 310.937263][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.952059][ T332] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 310.960950][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.968732][T12057] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 310.978387][ T332] usb 1-1: config 0 descriptor?? [ 310.991862][T12057] usb usb8: usbfs: process 12057 (syz-executor.1) did not claim interface 0 before use [ 311.015553][T11548] EXT4-fs (loop1): unmounting filesystem. [ 311.165922][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 311.183218][T12071] loop1: detected capacity change from 0 to 40427 [ 311.189636][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 311.199364][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.208088][T12071] F2FS-fs (loop1): invalid crc value [ 311.213917][ T6] usb 3-1: config 0 descriptor?? [ 311.220691][T12071] F2FS-fs (loop1): Found nat_bits in checkpoint [ 311.256323][ T6] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 311.266246][T12071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 311.408973][T12088] device vlan2 entered promiscuous mode [ 311.427930][T12090] overlayfs: failed to get inode (-116) [ 311.433380][T12090] overlayfs: failed to get inode (-116) [ 311.467616][ T332] hid-led 0003:1D34:000A.0045: unknown main item tag 0x0 [ 311.537742][ T6] usb 3-1: USB disconnect, device number 31 [ 311.551744][T12096] overlayfs: missing 'lowerdir' [ 311.695953][ T332] hid-led: probe of 0003:1D34:000A.0045 failed with error -71 [ 311.709604][ T332] usb 1-1: USB disconnect, device number 27 [ 311.857899][T12129] overlayfs: missing 'lowerdir' [ 312.043117][T11253] EXT4-fs (loop2): unmounting filesystem. [ 312.093754][T12153] loop2: detected capacity change from 0 to 256 [ 312.100496][T12153] exfat: Deprecated parameter 'namecase' [ 312.108270][T12153] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 312.134075][T12157] syz-executor.2[12157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.134151][T12157] syz-executor.2[12157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.488454][T12180] loop1: detected capacity change from 0 to 512 [ 312.506766][ T332] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 312.514358][T12180] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 312.523047][T12180] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 312.531968][ T371] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 312.548194][T12180] EXT4-fs (loop1): 1 orphan inode deleted [ 312.553781][T12180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 312.571717][T12180] usb usb8: usbfs: process 12180 (syz-executor.1) did not claim interface 0 before use [ 312.594966][T11548] EXT4-fs (loop1): unmounting filesystem. [ 312.686102][ T6] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 312.895961][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.906909][ T371] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.915863][ T332] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.916490][ T371] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 312.926853][ T332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.935282][ T371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.952164][ T371] usb 5-1: config 0 descriptor?? [ 312.975886][ T362] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 313.035895][ T332] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.044777][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.045865][ T6] usb 3-1: config index 0 descriptor too short (expected 804, got 36) [ 313.052744][ T332] usb 1-1: SerialNumber: syz [ 313.060751][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.075734][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.085338][ T6] usb 3-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00 [ 313.094244][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.102596][ T6] usb 3-1: config 0 descriptor?? [ 313.335946][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.346453][ T332] usb 1-1: 0:2 : does not exist [ 313.346946][ T362] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.361041][ T362] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 313.365508][ T332] usb 1-1: USB disconnect, device number 28 [ 313.375728][ T362] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.389848][ T362] usb 4-1: config 0 descriptor?? [ 313.436509][ T371] keytouch 0003:0926:3333.0046: fixing up Keytouch IEC report descriptor [ 313.446590][ T371] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0046/input/input51 [ 313.527545][ T371] keytouch 0003:0926:3333.0046: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 313.566435][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 313.572256][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 313.579249][ T6] usb 3-1: USB disconnect, device number 32 [ 313.643238][ T65] usb 5-1: USB disconnect, device number 23 [ 313.866761][ T362] hid-led 0003:1D34:000A.0047: unknown main item tag 0x0 [ 313.998448][T12211] overlayfs: failed to get inode (-116) [ 314.003934][T12211] overlayfs: failed to get inode (-116) [ 314.085875][ T362] hid-led: probe of 0003:1D34:000A.0047 failed with error -71 [ 314.093347][ T28] kauditd_printk_skb: 3027 callbacks suppressed [ 314.093360][ T28] audit: type=1400 audit(2000000092.061:8836): avc: denied { connect } for pid=12219 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 314.096791][T12220] x_tables: duplicate entry at hook 2 [ 314.104019][ T362] usb 4-1: USB disconnect, device number 34 [ 314.415841][ T39] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 314.605799][ T6] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 314.613862][T12240] overlayfs: failed to get inode (-116) [ 314.619388][T12240] overlayfs: failed to get inode (-116) [ 314.673756][T12246] x_tables: duplicate entry at hook 2 [ 314.710632][ T28] audit: type=1400 audit(2000000092.681:8837): avc: denied { read } for pid=12251 comm="syz-executor.1" path="socket:[65162]" dev="sockfs" ino=65162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 314.805861][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.825862][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.885736][ T28] audit: type=1326 audit(2000000092.851:8838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 314.921030][ T28] audit: type=1326 audit(2000000092.861:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 314.945105][ T28] audit: type=1326 audit(2000000092.891:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 314.969137][ T28] audit: type=1326 audit(2000000092.891:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 314.969595][ T39] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 315.001818][ T6] usb 5-1: config index 0 descriptor too short (expected 804, got 36) [ 315.001817][ T1561] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 315.001851][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.010871][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 315.035838][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.045687][ T6] usb 5-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00 [ 315.054736][ T28] audit: type=1326 audit(2000000092.891:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 315.078531][ T39] usb 3-1: SerialNumber: syz [ 315.083300][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.089813][ T28] audit: type=1326 audit(2000000092.891:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 315.092784][ T6] usb 5-1: config 0 descriptor?? [ 315.119984][ T28] audit: type=1326 audit(2000000092.891:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 315.145110][ T28] audit: type=1326 audit(2000000092.891:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x7ffc0000 [ 315.376462][ T39] usb 3-1: 0:2 : does not exist [ 315.385642][ T39] usb 3-1: USB disconnect, device number 33 [ 315.435889][ T1561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.461264][ T1561] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.471056][ T1561] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 315.480014][ T1561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.496059][ T1561] usb 4-1: config 0 descriptor?? [ 315.585861][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 315.591664][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 315.598796][ T6] usb 5-1: USB disconnect, device number 24 [ 316.006211][ T1561] keytouch 0003:0926:3333.0048: fixing up Keytouch IEC report descriptor [ 316.015453][ T1561] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0048/input/input52 [ 316.026787][ T354] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 316.055631][T12277] overlayfs: failed to get inode (-116) [ 316.068855][T12277] overlayfs: failed to get inode (-116) [ 316.120206][ T1561] keytouch 0003:0926:3333.0048: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 317.720434][T12293] loop2: detected capacity change from 0 to 512 [ 317.744978][T12298] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 317.761513][T12293] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 317.774708][T12293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.2: missing EA_INODE flag [ 317.786725][T12293] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 2 err=-117 [ 317.805953][ T826] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 317.816163][T12293] EXT4-fs (loop2): 1 orphan inode deleted [ 317.821722][T12293] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 317.830278][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.841498][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.851645][ T354] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 317.860650][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.872537][ T354] usb 2-1: config 0 descriptor?? [ 317.933411][T12293] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #19: comm syz-executor.2: Siphash requires key [ 317.975694][T12293] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #19: comm syz-executor.2: Siphash requires key [ 318.033620][T12293] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #19: comm syz-executor.2: Siphash requires key [ 318.097198][T12306] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #19: comm syz-executor.2: Siphash requires key [ 318.109047][T12306] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #19: comm syz-executor.2: Siphash requires key [ 318.121487][T12306] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #19: comm syz-executor.2: Siphash requires key [ 318.133158][T12293] overlayfs: failed to resolve './file0': -2 [ 318.146554][T11253] EXT4-fs (loop2): unmounting filesystem. [ 318.165623][T12303] loop0: detected capacity change from 0 to 40427 [ 318.173059][T12303] F2FS-fs (loop0): invalid crc value [ 318.179775][T12303] F2FS-fs (loop0): Found nat_bits in checkpoint [ 318.202707][T12303] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 318.220972][T11280] syz-executor.0: attempt to access beyond end of device [ 318.220972][T11280] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.376664][ T354] hid-led 0003:1D34:000A.0049: unknown main item tag 0x0 [ 318.425828][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 318.444583][T12325] overlayfs: failed to get inode (-116) [ 318.450247][T12325] overlayfs: failed to get inode (-116) [ 318.547454][T12331] loop0: detected capacity change from 0 to 256 [ 318.553876][T12331] exfat: Deprecated parameter 'namecase' [ 318.562885][T12331] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 318.590783][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.600200][ T354] hid-led: probe of 0003:1D34:000A.0049 failed with error -71 [ 318.611005][ T354] usb 2-1: USB disconnect, device number 30 [ 318.624698][T12335] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 318.696763][ T332] usb 4-1: USB disconnect, device number 35 [ 318.894399][T12344] loop0: detected capacity change from 0 to 128 [ 319.055877][ T24] usb 3-1: config index 0 descriptor too short (expected 804, got 36) [ 319.064040][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.074866][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.084566][ T24] usb 3-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00 [ 319.093580][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.102025][ T24] usb 3-1: config 0 descriptor?? [ 319.505806][ T332] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 319.564145][T12358] loop1: detected capacity change from 0 to 512 [ 319.885959][ T354] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 319.893726][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 319.899898][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 319.906902][ T24] usb 3-1: USB disconnect, device number 34 [ 319.925903][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.936673][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.946258][ T332] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.955099][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.963377][ T332] usb 4-1: config 0 descriptor?? [ 320.030120][T12363] loop4: detected capacity change from 0 to 256 [ 320.036609][T12363] exfat: Deprecated parameter 'namecase' [ 320.044487][T12363] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 320.073235][T12367] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.093578][T12369] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 320.119343][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 320.119358][ T28] audit: type=1326 audit(2000000098.090:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1468a7cea9 code=0x0 [ 320.325909][ T354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.335995][ T354] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.426292][ T354] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 320.435741][ T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 320.444167][ T354] usb 1-1: SerialNumber: syz [ 320.506091][ T39] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 320.549952][ T332] keytouch 0003:0926:3333.004A: fixing up Keytouch IEC report descriptor [ 320.569089][ T332] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.004A/input/input54 [ 320.661164][ T332] keytouch 0003:0926:3333.004A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 320.766801][ T354] usb 1-1: 0:2 : does not exist [ 320.772669][ T332] usb 4-1: USB disconnect, device number 36 [ 320.816952][ T354] usb 1-1: USB disconnect, device number 29 [ 320.895865][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.906622][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.916183][ T39] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 320.924979][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.933364][ T39] usb 2-1: config 0 descriptor?? [ 320.956140][T12383] loop4: detected capacity change from 0 to 512 [ 320.964165][T12383] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 320.977243][T12383] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.4: missing EA_INODE flag [ 320.989132][T12383] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 2 err=-117 [ 321.001953][T12383] EXT4-fs (loop4): 1 orphan inode deleted [ 321.007611][T12383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 321.020057][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz-executor.4: Siphash requires key [ 321.031522][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz-executor.4: Siphash requires key [ 321.042966][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz-executor.4: Siphash requires key [ 321.056908][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #15: comm syz-executor.4: Siphash requires key [ 321.068381][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #15: comm syz-executor.4: Siphash requires key [ 321.079851][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #15: comm syz-executor.4: Siphash requires key [ 321.091327][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #18: comm syz-executor.4: Siphash requires key [ 321.102722][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #18: comm syz-executor.4: Siphash requires key [ 321.114083][T12383] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #18: comm syz-executor.4: Siphash requires key [ 321.135379][T11665] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz-executor.4: Siphash requires key [ 321.187752][T11665] EXT4-fs (loop4): unmounting filesystem. [ 321.238523][T12394] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 321.356053][T12409] loop0: detected capacity change from 0 to 512 [ 321.374840][T12401] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.381802][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.389195][T12401] device bridge_slave_0 entered promiscuous mode [ 321.389492][T12409] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 321.396207][T12401] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.415290][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.427993][T12409] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.0: missing EA_INODE flag [ 321.484430][T12411] loop2: detected capacity change from 0 to 512 [ 321.545514][ T39] hid-led 0003:1D34:000A.004B: unknown main item tag 0x0 [ 321.563475][T12401] device bridge_slave_1 entered promiscuous mode [ 321.610855][T12409] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 2 err=-117 [ 321.623758][T12409] EXT4-fs (loop0): 1 orphan inode deleted [ 321.629393][T12409] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 321.665865][ T39] hid-led: probe of 0003:1D34:000A.004B failed with error -71 [ 321.674695][ T39] usb 2-1: USB disconnect, device number 31 [ 321.682170][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #19: comm syz-executor.0: Siphash requires key [ 321.694953][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #19: comm syz-executor.0: Siphash requires key [ 321.706846][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #19: comm syz-executor.0: Siphash requires key [ 321.727764][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #15: comm syz-executor.0: Siphash requires key [ 321.739422][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #15: comm syz-executor.0: Siphash requires key [ 321.751032][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #15: comm syz-executor.0: Siphash requires key [ 321.770644][T12401] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.777534][T12401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.784592][T12401] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.791398][T12401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.798820][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #18: comm syz-executor.0: Siphash requires key [ 321.812523][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #18: comm syz-executor.0: Siphash requires key [ 321.824337][T12409] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #18: comm syz-executor.0: Siphash requires key [ 321.841251][T11280] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #2: comm syz-executor.0: Siphash requires key [ 321.846017][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.860267][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.867491][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.880543][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.889498][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.896364][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.922062][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.932426][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.939433][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.001962][T11280] EXT4-fs (loop0): unmounting filesystem. [ 322.030429][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 322.099209][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.157847][ T1117] device bridge_slave_1 left promiscuous mode [ 322.166938][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.178742][ T1117] device bridge_slave_0 left promiscuous mode [ 322.184875][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.196680][ T1117] device veth1_macvtap left promiscuous mode [ 322.203006][ T1117] device veth0_vlan left promiscuous mode [ 322.289558][T12425] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 322.329785][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.338124][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.346272][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.353888][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.364100][T12401] device veth0_vlan entered promiscuous mode [ 322.382678][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.390720][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.402715][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.411209][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.420425][T12401] device veth1_macvtap entered promiscuous mode [ 322.435682][T12426] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.442591][T12426] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.449987][T12426] device bridge_slave_0 entered promiscuous mode [ 322.461974][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.470975][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.475842][ T65] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 322.479406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.494453][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.502630][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.511062][T12426] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.518369][T12426] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.526108][T12426] device bridge_slave_1 entered promiscuous mode [ 322.562059][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.664882][T12426] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.671769][T12426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.678861][T12426] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.685624][T12426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.717174][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.724826][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.733277][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.746973][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 322.755351][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.762220][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.842749][T12463] loop4: detected capacity change from 0 to 512 [ 322.963144][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.971408][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.978283][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.000008][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.007889][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.027431][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.035979][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.048834][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.062440][T12426] device veth0_vlan entered promiscuous mode [ 323.070009][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 323.078307][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.085579][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.102085][T12426] device veth1_macvtap entered promiscuous mode [ 323.116220][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.128184][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.135947][ T65] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 323.145077][ T371] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 323.145412][T12465] loop3: detected capacity change from 0 to 40427 [ 323.152629][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 323.160842][T12465] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 323.167438][ T65] usb 3-1: SerialNumber: syz [ 323.174033][T12465] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 323.186904][T12465] F2FS-fs (loop3): invalid crc value [ 323.192245][T12465] F2FS-fs (loop3): invalid crc value [ 323.197506][T12465] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 323.204330][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.456265][ T65] usb 3-1: 0:2 : does not exist [ 323.462483][ T65] usb 3-1: USB disconnect, device number 35 [ 323.469159][ T1117] device bridge_slave_1 left promiscuous mode [ 323.475071][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.483708][ T1117] device bridge_slave_0 left promiscuous mode [ 323.490619][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.511906][ T1117] device veth1_macvtap left promiscuous mode [ 323.523718][ T1117] device veth0_vlan left promiscuous mode [ 323.525870][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.540200][ T371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.550066][ T371] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 323.564539][ T371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.573022][ T371] usb 2-1: config 0 descriptor?? [ 323.577888][ T6] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 323.682115][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.699974][T12483] loop4: detected capacity change from 0 to 512 [ 323.798844][T12483] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 323.812117][T12483] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.4: missing EA_INODE flag [ 323.823995][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 323.824363][T12483] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 2 err=-117 [ 323.841983][T12483] EXT4-fs (loop4): 1 orphan inode deleted [ 323.847685][T12483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 323.863222][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz-executor.4: Siphash requires key [ 323.874802][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz-executor.4: Siphash requires key [ 323.886301][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #19: comm syz-executor.4: Siphash requires key [ 323.901635][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #15: comm syz-executor.4: Siphash requires key [ 323.913329][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #15: comm syz-executor.4: Siphash requires key [ 323.925321][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #15: comm syz-executor.4: Siphash requires key [ 323.936879][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #18: comm syz-executor.4: Siphash requires key [ 323.948290][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #18: comm syz-executor.4: Siphash requires key [ 323.959780][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.960660][T12483] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #18: comm syz-executor.4: Siphash requires key [ 323.981997][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.991708][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.004565][ T6] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 324.013449][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.021864][ T6] usb 4-1: config 0 descriptor?? [ 324.033595][T12401] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz-executor.4: Siphash requires key [ 324.037118][ T371] hid-led 0003:1D34:000A.004C: unknown main item tag 0x0 [ 324.087585][T12401] EXT4-fs (loop4): unmounting filesystem. [ 324.199488][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.206745][T12491] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.213870][T12491] device bridge_slave_0 entered promiscuous mode [ 324.220725][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.227675][T12491] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.234713][T12491] device bridge_slave_1 entered promiscuous mode [ 324.245860][ T371] hid-led: probe of 0003:1D34:000A.004C failed with error -71 [ 324.254557][ T371] usb 2-1: USB disconnect, device number 32 [ 324.262678][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.319911][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.326786][T12491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.333831][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.340652][T12491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.367149][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.374645][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.391446][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.399340][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.406771][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.415022][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.423177][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.430064][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.437401][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.445527][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.453766][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.460647][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.475895][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 324.484103][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 324.491990][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 324.500116][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 324.519074][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 324.528872][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.536116][ T28] audit: type=1400 audit(2000000102.500:8892): avc: denied { write } for pid=435 comm="kworker/0:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=67670 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 324.566504][T12491] device veth0_vlan entered promiscuous mode [ 324.573974][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.581997][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.598569][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.606119][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.625209][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.633144][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.643161][T12491] device veth1_macvtap entered promiscuous mode [ 324.654361][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.661926][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.670013][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.678831][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.687811][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.754529][T12507] loop0: detected capacity change from 0 to 512 [ 324.894560][ T1117] device bridge_slave_1 left promiscuous mode [ 324.900758][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.910494][ T1117] device bridge_slave_0 left promiscuous mode [ 324.916610][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.924558][ T1117] device veth1_macvtap left promiscuous mode [ 324.930520][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 324.930648][ T1117] device veth0_vlan left promiscuous mode [ 324.942138][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 324.949989][ T6] usb 4-1: USB disconnect, device number 37 [ 325.037311][ T28] audit: type=1326 audit(2000000103.010:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12516 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x0 [ 325.039137][T12517] loop4: detected capacity change from 0 to 2048 [ 325.106169][T12517] loop4: p1 < > p4 [ 325.110158][T12517] loop4: p4 size 8388608 extends beyond EOD, truncated [ 325.119412][ T28] audit: type=1400 audit(2000000103.090:8894): avc: denied { read } for pid=12515 comm="syz-executor.4" name="loop4p4" dev="devtmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.144350][ T28] audit: type=1400 audit(2000000103.090:8895): avc: denied { open } for pid=12515 comm="syz-executor.4" path="/dev/loop4p4" dev="devtmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.167905][ T28] audit: type=1400 audit(2000000103.090:8896): avc: denied { ioctl } for pid=12515 comm="syz-executor.4" path="/dev/loop4p4" dev="devtmpfs" ino=874 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 325.245840][ T826] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 325.447486][T12533] device syzkaller0 entered promiscuous mode [ 325.677991][T12537] loop0: detected capacity change from 0 to 512 [ 325.688809][T12537] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz-executor.0: corrupted inode contents [ 325.701125][T12537] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz-executor.0: mark_inode_dirty error [ 325.712960][T12537] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz-executor.0: corrupted inode contents [ 325.725680][T12537] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz-executor.0: mark_inode_dirty error [ 325.737554][ T826] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.737548][T12537] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz-executor.0: corrupted inode contents [ 325.737708][T12537] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 325.747897][ T826] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.759836][T12537] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz-executor.0: corrupted inode contents [ 325.788838][T12537] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz-executor.0: mark_inode_dirty error [ 325.800270][T12537] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 325.809486][T12537] EXT4-fs (loop0): 1 truncate cleaned up [ 325.814986][T12537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 325.823881][T12537] ext4 filesystem being mounted at /root/syzkaller-testdir782094538/syzkaller.jlJmqH/11/file1 supports timestamps until 2038 (0x7fffffff) [ 325.838048][ T1117] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 325.855854][ T826] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 325.865007][ T826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 325.873033][ T826] usb 3-1: SerialNumber: syz [ 325.887236][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.896649][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.091850][ T28] audit: type=1400 audit(2000000104.060:8897): avc: denied { mounton } for pid=12544 comm="syz-executor.4" path="/root/syzkaller-testdir1584206177/syzkaller.Xa2oAj/4/file0/bus" dev="cgroup2" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 326.092259][T12545] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 326.119886][ T435] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 326.166491][ T826] usb 3-1: 0:2 : does not exist [ 326.172958][ T826] usb 3-1: USB disconnect, device number 36 [ 326.206278][ T6] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 326.495863][ T435] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 326.509687][ T435] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 326.518603][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.530043][ T435] usb 1-1: config 0 descriptor?? [ 326.565897][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.577109][ T435] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 326.585277][ T371] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 326.593447][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.603505][ T6] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 326.612967][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.622808][ T6] usb 2-1: config 0 descriptor?? [ 326.825833][ T371] usb 4-1: Using ep0 maxpacket: 32 [ 326.897146][ T435] usb 1-1: USB disconnect, device number 30 [ 326.926720][ T28] audit: type=1326 audit(2000000104.900:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12553 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x0 [ 326.945885][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.960891][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.970513][ T371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 326.980923][ T371] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 326.993764][ T371] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 327.002715][ T371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.016132][ T371] usb 4-1: config 0 descriptor?? [ 327.107069][ T6] hid-led 0003:1D34:000A.004D: unknown main item tag 0x0 [ 327.325866][ T6] hid-led: probe of 0003:1D34:000A.004D failed with error -71 [ 327.333980][ T6] usb 2-1: USB disconnect, device number 33 [ 327.411311][T12426] EXT4-fs (loop0): unmounting filesystem. [ 327.497065][ T371] ntrig 0003:1B96:000A.004E: unknown main item tag 0x0 [ 327.504288][ T371] ntrig 0003:1B96:000A.004E: unknown main item tag 0x0 [ 327.523972][ T371] ntrig 0003:1B96:000A.004E: unknown main item tag 0x0 [ 327.531199][ T371] ntrig 0003:1B96:000A.004E: unknown main item tag 0x0 [ 327.538191][ T371] ntrig 0003:1B96:000A.004E: unknown main item tag 0x0 [ 327.561236][ T371] ntrig 0003:1B96:000A.004E: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 327.702234][ T28] audit: type=1326 audit(2000000105.670:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12565 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x0 [ 327.759432][T12567] loop0: detected capacity change from 0 to 256 [ 327.909315][ T371] usb 4-1: USB disconnect, device number 38 [ 328.334089][T12578] device pim6reg1 entered promiscuous mode [ 328.476807][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.720976][T12588] loop0: detected capacity change from 0 to 512 [ 329.480705][T12607] loop3: detected capacity change from 0 to 40427 [ 329.488466][T12607] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 329.495783][T12607] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 329.505270][T12607] F2FS-fs (loop3): invalid crc value [ 329.510767][T12607] F2FS-fs (loop3): invalid crc value [ 329.516884][T12607] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 329.641718][T12612] loop0: detected capacity change from 0 to 256 [ 329.749185][ T6] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 329.989384][ T28] audit: type=1326 audit(2000000107.960:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x0 [ 329.995818][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 330.095900][ T435] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 330.135914][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.147428][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.157121][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.167184][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 330.179966][ T6] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 330.188768][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.206558][ T6] usb 2-1: config 0 descriptor?? [ 330.345842][ T435] usb 4-1: Using ep0 maxpacket: 16 [ 330.466665][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.753077][ T6] ntrig 0003:1B96:000A.004F: unknown main item tag 0x0 [ 330.760004][ T6] ntrig 0003:1B96:000A.004F: unknown main item tag 0x0 [ 330.766955][ T435] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.776573][ T6] ntrig 0003:1B96:000A.004F: unknown main item tag 0x0 [ 330.783196][ T6] ntrig 0003:1B96:000A.004F: unknown main item tag 0x0 [ 330.789889][ T435] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.802545][ T6] ntrig 0003:1B96:000A.004F: unknown main item tag 0x0 [ 330.809220][ T435] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 330.818508][ T435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.826411][ T6] ntrig 0003:1B96:000A.004F: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.1-1/input0 [ 330.838036][ T435] usb 4-1: config 0 descriptor?? [ 330.959381][ T6] usb 2-1: USB disconnect, device number 34 [ 331.310113][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.449267][ T28] audit: type=1326 audit(2000000109.420:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5a87cea9 code=0x7fc00000 [ 331.473145][ T28] audit: type=1326 audit(2000000109.420:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf5a87cea9 code=0x7fc00000 [ 331.780569][ T28] audit: type=1326 audit(2000000109.750:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12651 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x0 [ 331.815835][ T435] usbhid 4-1:0.0: can't add hid device: -71 [ 331.821597][ T435] usbhid: probe of 4-1:0.0 failed with error -71 [ 331.828711][ T435] usb 4-1: USB disconnect, device number 39 [ 332.055823][ T354] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 332.199353][ T28] audit: type=1326 audit(2000000110.170:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12640 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf5a87cea9 code=0x7fc00000 [ 332.278079][T12658] device pim6reg1 entered promiscuous mode [ 332.496096][ T354] usb 3-1: config index 0 descriptor too short (expected 804, got 36) [ 332.505821][ T354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.519645][ T354] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.531113][ T354] usb 3-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00 [ 332.544704][ T354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.600557][T12663] loop3: detected capacity change from 0 to 512 [ 332.710504][ T354] usb 3-1: config 0 descriptor?? [ 333.475836][ T354] usbhid 3-1:0.0: can't add hid device: -71 [ 333.481745][ T354] usbhid: probe of 3-1:0.0 failed with error -71 [ 333.489241][ T354] usb 3-1: USB disconnect, device number 37 [ 333.536107][ T826] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 333.825003][ T28] audit: type=1400 audit(2000000111.790:8905): avc: denied { mount } for pid=12684 comm="syz-executor.1" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 333.865575][ T28] audit: type=1400 audit(2000000111.830:8906): avc: denied { remount } for pid=12684 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 333.912198][ T28] audit: type=1400 audit(2000000111.880:8907): avc: denied { unmount } for pid=11548 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 334.035802][ T826] usb 4-1: Using ep0 maxpacket: 32 [ 334.041327][ T28] audit: type=1326 audit(2000000112.010:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113f47cea9 code=0x7fc00000 [ 334.067033][ T28] audit: type=1326 audit(2000000112.010:8909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12686 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f113f47cea9 code=0x7fc00000 [ 334.175861][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.190715][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.207491][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 334.266240][ T826] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 334.281987][ T28] audit: type=1400 audit(2000000112.250:8910): avc: denied { ioctl } for pid=12693 comm="syz-executor.0" path="socket:[68108]" dev="sockfs" ino=68108 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.295810][ T826] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 334.335869][ T826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.355958][ T826] usb 4-1: config 0 descriptor?? [ 334.368232][T12692] loop2: detected capacity change from 0 to 40427 [ 334.375130][T12692] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 334.382039][T12692] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 334.390752][T12692] F2FS-fs (loop2): invalid crc value [ 334.396780][T12692] F2FS-fs (loop2): invalid crc value [ 334.401915][T12692] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 334.785876][ T371] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 334.826557][ T826] ntrig 0003:1B96:000A.0050: unknown main item tag 0x0 [ 334.838077][ T826] ntrig 0003:1B96:000A.0050: unknown main item tag 0x0 [ 334.852539][ T826] ntrig 0003:1B96:000A.0050: unknown main item tag 0x0 [ 334.860092][ T826] ntrig 0003:1B96:000A.0050: unknown main item tag 0x0 [ 334.875871][ T826] ntrig 0003:1B96:000A.0050: unknown main item tag 0x0 [ 334.893366][ T826] ntrig 0003:1B96:000A.0050: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 335.025864][ T371] usb 3-1: Using ep0 maxpacket: 16 [ 335.057982][T12709] loop1: detected capacity change from 0 to 128 [ 335.065689][T12709] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 335.079372][T12709] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 335.100309][ T826] usb 4-1: USB disconnect, device number 40 [ 335.195860][ T371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.217497][ T371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.235886][ T371] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.249815][ T371] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.258978][ T371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.281705][ T371] usb 3-1: config 0 descriptor?? [ 335.971071][T12714] loop0: detected capacity change from 0 to 256 [ 336.002915][T11548] EXT4-fs (loop1): unmounting filesystem. [ 336.695841][ T371] usbhid 3-1:0.0: can't add hid device: -71 [ 336.701612][ T371] usbhid: probe of 3-1:0.0 failed with error -71 [ 336.716480][ T371] usb 3-1: USB disconnect, device number 38 [ 336.729669][T12716] loop1: detected capacity change from 0 to 40427 [ 336.774603][T12716] F2FS-fs (loop1): Found nat_bits in checkpoint [ 336.854546][T12716] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 336.904898][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 336.904914][ T28] audit: type=1400 audit(2000000114.870:8913): avc: denied { setattr } for pid=12715 comm="syz-executor.1" name="#33" dev="loop1" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 336.960755][T11548] syz-executor.1: attempt to access beyond end of device [ 336.960755][T11548] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 336.975906][T11548] syz-executor.1: attempt to access beyond end of device [ 336.975906][T11548] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 337.022785][ T1117] kworker/u4:5: attempt to access beyond end of device [ 337.022785][ T1117] loop1: rw=2049, sector=40960, nr_sectors = 128 limit=40427 [ 337.322164][T12746] loop3: detected capacity change from 0 to 512 [ 337.587108][T12749] loop0: detected capacity change from 0 to 128 [ 337.594729][T12749] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 337.616996][T12749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 337.891592][ T2254] device bridge_slave_1 left promiscuous mode [ 337.898882][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.055903][ T2254] device bridge_slave_0 left promiscuous mode [ 338.061864][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.070004][ T2254] device veth1_macvtap left promiscuous mode [ 338.076015][ T2254] device veth0_vlan left promiscuous mode [ 338.155403][T12426] EXT4-fs (loop0): unmounting filesystem. [ 338.184892][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.326693][T12759] loop3: detected capacity change from 0 to 40427 [ 338.338390][T12759] F2FS-fs (loop3): Found nat_bits in checkpoint [ 338.364569][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.371974][T12751] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.385924][T12751] device bridge_slave_0 entered promiscuous mode [ 338.392779][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.403399][T12751] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.410382][T12759] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 338.418357][T12751] device bridge_slave_1 entered promiscuous mode [ 338.435821][ T6] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 338.481424][T11777] syz-executor.3: attempt to access beyond end of device [ 338.481424][T11777] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 338.497925][T11777] syz-executor.3: attempt to access beyond end of device [ 338.497925][T11777] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 338.550093][ T8] kworker/u4:0: attempt to access beyond end of device [ 338.550093][ T8] loop3: rw=2049, sector=40960, nr_sectors = 128 limit=40427 [ 338.565428][T12751] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.572295][T12751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.579416][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.586181][T12751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.614881][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.622779][ T826] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.629990][ T826] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.667611][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.675637][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.675837][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 338.682521][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.705892][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.713917][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.720785][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.728232][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.736068][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.757261][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.768308][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.776265][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.786131][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.794135][T12751] device veth0_vlan entered promiscuous mode [ 338.805913][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.825809][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.844466][T12751] device veth1_macvtap entered promiscuous mode [ 338.845570][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 338.851305][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.876495][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 338.903629][ T6] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 338.905858][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.920441][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.920828][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.938606][ T6] usb 3-1: config 0 descriptor?? [ 339.056979][T12770] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.063838][T12770] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.071407][T12770] device bridge_slave_0 entered promiscuous mode [ 339.079201][T12770] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.086300][T12770] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.093574][T12770] device bridge_slave_1 entered promiscuous mode [ 339.189503][T12775] loop1: detected capacity change from 0 to 256 [ 339.459221][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.466921][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.484825][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.487608][ T6] ntrig 0003:1B96:000A.0051: unknown main item tag 0x0 [ 339.493458][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.506630][ T6] ntrig 0003:1B96:000A.0051: unknown main item tag 0x0 [ 339.507518][ T826] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.520986][ T826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.522148][ T6] ntrig 0003:1B96:000A.0051: unknown main item tag 0x0 [ 339.534714][ T6] ntrig 0003:1B96:000A.0051: unknown main item tag 0x0 [ 339.541424][ T6] ntrig 0003:1B96:000A.0051: unknown main item tag 0x0 [ 339.545880][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.556359][ T6] ntrig 0003:1B96:000A.0051: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 339.556514][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.575313][ T826] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.582176][ T826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.590043][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.598411][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.617546][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.625966][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.637479][T12770] device veth0_vlan entered promiscuous mode [ 339.643820][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.652116][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.660489][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.676233][T12770] device veth1_macvtap entered promiscuous mode [ 339.684119][ T1561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.697232][ T6] usb 3-1: USB disconnect, device number 39 [ 339.707217][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.716412][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.725149][ T2254] device bridge_slave_1 left promiscuous mode [ 339.731894][ T2254] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.740525][ T2254] device bridge_slave_0 left promiscuous mode [ 339.748407][ T2254] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.756498][ T2254] device veth1_macvtap left promiscuous mode [ 339.762353][ T2254] device veth0_vlan left promiscuous mode [ 340.327662][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 340.857195][T12795] loop2: detected capacity change from 0 to 128 [ 340.864491][T12795] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 340.892168][T12795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 341.276140][ T6] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 341.512725][T11253] EXT4-fs (loop2): unmounting filesystem. [ 341.685850][ T6] usb 2-1: config index 0 descriptor too short (expected 804, got 36) [ 341.697206][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.718844][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.747606][ T6] usb 2-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00 [ 341.756745][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.766235][ T6] usb 2-1: config 0 descriptor?? [ 341.879774][T12813] loop2: detected capacity change from 0 to 256 [ 342.236815][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.375859][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 342.381789][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 342.388755][ T6] usb 2-1: USB disconnect, device number 35 [ 342.825788][ T371] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 343.455881][ T371] usb 3-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 343.464493][ T371] usb 3-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 343.474100][ T371] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.484978][ T371] usb 3-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.494675][ T371] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 343.503590][ T371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.962571][T12836] loop1: detected capacity change from 0 to 128 [ 343.970302][T12836] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 343.981756][T12836] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 344.070212][ T371] uclogic 0003:5543:0042.0052: unexpected long global item [ 344.078327][ T371] uclogic 0003:5543:0042.0052: parse failed [ 344.084154][ T371] uclogic: probe of 0003:5543:0042.0052 failed with error -22 [ 344.271439][ T1561] usb 3-1: USB disconnect, device number 40 [ 344.295977][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 344.296058][ T7514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.706339][T12751] EXT4-fs (loop1): unmounting filesystem. [ 345.123485][T12861] loop2: detected capacity change from 0 to 512 [ 345.510366][T12859] loop1: detected capacity change from 0 to 256 [ 346.099393][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 346.111071][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.735823][ T1561] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 347.095904][ T1561] usb 4-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 347.106820][ T1561] usb 4-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 347.124582][ T1561] usb 4-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.136503][ T1561] usb 4-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.146313][ T1561] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 347.155335][ T1561] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.303613][T12893] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 347.312268][T12893] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.528187][T12897] loop2: detected capacity change from 0 to 512 [ 347.642178][ T1561] uclogic 0003:5543:0042.0053: unexpected long global item [ 347.660941][ T1561] uclogic 0003:5543:0042.0053: parse failed [ 347.688489][ T1561] uclogic: probe of 0003:5543:0042.0053 failed with error -22 [ 347.843253][ T1561] usb 4-1: USB disconnect, device number 41 [ 348.135963][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 348.141812][ T7514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 350.075631][ T826] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 350.212984][ T2254] Bluetooth: hci0: Frame reassembly failed (-84) [ 350.274036][ T28] audit: type=1400 audit(2000000128.240:8914): avc: denied { getopt } for pid=12928 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.502037][T12933] loop2: detected capacity change from 0 to 512 [ 350.627729][ T826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.658251][ T826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.705954][ T826] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 350.748373][ T826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.791710][ T826] usb 2-1: config 0 descriptor?? [ 351.286354][ T826] keytouch 0003:0926:3333.0054: fixing up Keytouch IEC report descriptor [ 351.296034][ T826] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0054/input/input55 [ 351.388826][ T826] keytouch 0003:0926:3333.0054: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 351.405291][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.412183][T12943] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.419438][T12943] device bridge_slave_0 entered promiscuous mode [ 351.426147][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.432990][T12943] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.440347][T12943] device bridge_slave_1 entered promiscuous mode [ 351.651417][ T826] usb 2-1: USB disconnect, device number 36 [ 351.844640][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.851531][T12943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.858611][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.865379][T12943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.885302][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 351.892705][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.900171][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.909138][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.917262][ T826] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.924108][ T826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.942598][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.950551][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.957408][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.964597][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.972882][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.983590][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.994228][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.002032][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.009327][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.017252][T12943] device veth0_vlan entered promiscuous mode [ 352.026765][ T43] device bridge_slave_1 left promiscuous mode [ 352.032742][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.039904][ T43] device bridge_slave_0 left promiscuous mode [ 352.046029][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.053593][ T43] device veth1_macvtap left promiscuous mode [ 352.059732][ T43] device veth0_vlan left promiscuous mode [ 352.149388][T12943] device veth1_macvtap entered promiscuous mode [ 352.156565][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.167112][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.221024][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.229182][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.285823][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 352.291701][ T7514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 352.329374][T12966] loop3: detected capacity change from 0 to 256 [ 352.357105][T12966] FAT-fs (loop3): Directory bread(block 64) failed [ 352.363550][T12966] FAT-fs (loop3): Directory bread(block 65) failed [ 352.369906][T12966] FAT-fs (loop3): Directory bread(block 66) failed [ 352.376444][T12966] FAT-fs (loop3): Directory bread(block 67) failed [ 352.382838][T12966] FAT-fs (loop3): Directory bread(block 68) failed [ 352.392384][T12966] FAT-fs (loop3): Directory bread(block 69) failed [ 352.398857][T12966] FAT-fs (loop3): Directory bread(block 70) failed [ 352.405311][T12966] FAT-fs (loop3): Directory bread(block 71) failed [ 352.413507][T12966] FAT-fs (loop3): Directory bread(block 72) failed [ 352.419906][T12966] FAT-fs (loop3): Directory bread(block 73) failed [ 352.545810][T12976] loop2: detected capacity change from 0 to 512 [ 352.955957][ T65] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 353.197550][ T826] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 353.259910][T12998] loop2: detected capacity change from 0 to 256 [ 353.345251][T12998] FAT-fs (loop2): Directory bread(block 64) failed [ 353.352099][T12998] FAT-fs (loop2): Directory bread(block 65) failed [ 353.358922][T12998] FAT-fs (loop2): Directory bread(block 66) failed [ 353.365653][T12998] FAT-fs (loop2): Directory bread(block 67) failed [ 353.372364][T12998] FAT-fs (loop2): Directory bread(block 68) failed [ 353.379456][T12998] FAT-fs (loop2): Directory bread(block 69) failed [ 353.386118][T12998] FAT-fs (loop2): Directory bread(block 70) failed [ 353.392811][T12998] FAT-fs (loop2): Directory bread(block 71) failed [ 353.399765][T12998] FAT-fs (loop2): Directory bread(block 72) failed [ 353.408391][T12998] FAT-fs (loop2): Directory bread(block 73) failed [ 353.566138][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.601239][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.610996][ T826] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 353.619906][ T826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.628352][ T826] usb 4-1: config 0 descriptor?? [ 353.645841][ T65] usb 2-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 353.654584][ T65] usb 2-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 353.663662][ T65] usb 2-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.674544][ T65] usb 2-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.684261][ T65] usb 2-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 353.693326][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.310715][ T826] keytouch 0003:0926:3333.0055: fixing up Keytouch IEC report descriptor [ 354.320392][ T826] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0055/input/input56 [ 354.406073][ T826] keytouch 0003:0926:3333.0055: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 354.462951][T13018] loop4: detected capacity change from 0 to 512 [ 354.836834][ T65] uclogic 0003:5543:0042.0056: unexpected long global item [ 354.844035][ T65] uclogic 0003:5543:0042.0056: parse failed [ 354.849823][ T65] uclogic: probe of 0003:5543:0042.0056 failed with error -22 [ 354.865652][ T65] usb 2-1: USB disconnect, device number 37 [ 354.872806][ T6] usb 4-1: USB disconnect, device number 42 [ 355.158891][T13031] loop4: detected capacity change from 0 to 256 [ 355.170568][T13031] FAT-fs (loop4): Directory bread(block 64) failed [ 355.177184][T13031] FAT-fs (loop4): Directory bread(block 65) failed [ 355.183518][T13031] FAT-fs (loop4): Directory bread(block 66) failed [ 355.189884][T13031] FAT-fs (loop4): Directory bread(block 67) failed [ 355.196517][T13031] FAT-fs (loop4): Directory bread(block 68) failed [ 355.202894][T13031] FAT-fs (loop4): Directory bread(block 69) failed [ 355.209218][T13031] FAT-fs (loop4): Directory bread(block 70) failed [ 355.215560][T13031] FAT-fs (loop4): Directory bread(block 71) failed [ 355.221896][T13031] FAT-fs (loop4): Directory bread(block 72) failed [ 355.228235][T13031] FAT-fs (loop4): Directory bread(block 73) failed [ 355.289901][ T28] audit: type=1400 audit(2000000133.260:8915): avc: denied { watch } for pid=13040 comm="syz-executor.4" path="/sys/fs/cgroup" dev="sysfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 355.388056][ T28] audit: type=1400 audit(2000000133.350:8916): avc: denied { bind } for pid=13046 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 355.791108][T13051] loop4: detected capacity change from 0 to 256 [ 356.586230][T13056] loop3: detected capacity change from 0 to 512 [ 356.773556][T13062] loop1: detected capacity change from 0 to 256 [ 356.790251][T13062] FAT-fs (loop1): Directory bread(block 64) failed [ 356.797047][T13062] FAT-fs (loop1): Directory bread(block 65) failed [ 356.804958][T13062] FAT-fs (loop1): Directory bread(block 66) failed [ 356.811442][T13062] FAT-fs (loop1): Directory bread(block 67) failed [ 356.817933][T13062] FAT-fs (loop1): Directory bread(block 68) failed [ 356.824370][T13062] FAT-fs (loop1): Directory bread(block 69) failed [ 356.831614][T13062] FAT-fs (loop1): Directory bread(block 70) failed [ 356.838386][T13062] FAT-fs (loop1): Directory bread(block 71) failed [ 356.846716][T13062] FAT-fs (loop1): Directory bread(block 72) failed [ 356.853279][T13062] FAT-fs (loop1): Directory bread(block 73) failed [ 357.009982][T13091] loop4: detected capacity change from 0 to 128 [ 357.116942][T13093] loop1: detected capacity change from 0 to 256 [ 357.372413][ T332] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 357.641855][T13103] loop3: detected capacity change from 0 to 256 [ 357.667917][T13103] FAT-fs (loop3): Directory bread(block 64) failed [ 357.674766][T13103] FAT-fs (loop3): Directory bread(block 65) failed [ 357.682153][T13103] FAT-fs (loop3): Directory bread(block 66) failed [ 357.689071][T13103] FAT-fs (loop3): Directory bread(block 67) failed [ 357.696380][T13103] FAT-fs (loop3): Directory bread(block 68) failed [ 357.703336][T13103] FAT-fs (loop3): Directory bread(block 69) failed [ 357.709995][T13103] FAT-fs (loop3): Directory bread(block 70) failed [ 357.717198][T13103] FAT-fs (loop3): Directory bread(block 71) failed [ 357.723802][T13103] FAT-fs (loop3): Directory bread(block 72) failed [ 357.730534][T13103] FAT-fs (loop3): Directory bread(block 73) failed [ 357.776059][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.874858][ T332] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.887499][ T332] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 357.896560][ T332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.907645][ T332] usb 3-1: config 0 descriptor?? [ 358.143913][T13122] loop4: detected capacity change from 0 to 128 [ 358.207263][T13130] loop4: detected capacity change from 0 to 256 [ 358.218193][T13130] FAT-fs (loop4): Directory bread(block 64) failed [ 358.226203][T13130] FAT-fs (loop4): Directory bread(block 65) failed [ 358.233011][T13130] FAT-fs (loop4): Directory bread(block 66) failed [ 358.239381][T13130] FAT-fs (loop4): Directory bread(block 67) failed [ 358.245700][T13130] FAT-fs (loop4): Directory bread(block 68) failed [ 358.252081][T13130] FAT-fs (loop4): Directory bread(block 69) failed [ 358.257596][T13107] loop3: detected capacity change from 0 to 131072 [ 358.258664][T13130] FAT-fs (loop4): Directory bread(block 70) failed [ 358.269285][T13107] F2FS-fs (loop3): Found nat_bits in checkpoint [ 358.271288][T13130] FAT-fs (loop4): Directory bread(block 71) failed [ 358.283729][T13130] FAT-fs (loop4): Directory bread(block 72) failed [ 358.290265][T13130] FAT-fs (loop4): Directory bread(block 73) failed [ 358.307173][T13107] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 358.328476][ T28] audit: type=1326 audit(2000000136.300:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78c267cea9 code=0x0 [ 358.386288][ T332] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 358.396953][ T332] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0057/input/input57 [ 358.477093][ T332] keytouch 0003:0926:3333.0057: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 358.533079][T13155] loop4: detected capacity change from 0 to 8192 [ 358.591456][ T332] usb 3-1: USB disconnect, device number 41 [ 358.856551][ T28] audit: type=1400 audit(2000000136.830:8918): avc: denied { create } for pid=13161 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 359.175844][ T312] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 359.203610][ T28] audit: type=1326 audit(2000000137.170:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 359.227515][ T28] audit: type=1326 audit(2000000137.170:8920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 359.252238][ T28] audit: type=1326 audit(2000000137.170:8921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 359.276793][ T28] audit: type=1326 audit(2000000137.170:8922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 359.303341][ T28] audit: type=1326 audit(2000000137.170:8923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 359.327257][ T28] audit: type=1326 audit(2000000137.170:8924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 359.367717][T13188] overlayfs: failed to resolve './file1': -2 [ 359.387428][T13192] loop2: detected capacity change from 0 to 128 [ 359.595929][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 359.605684][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 359.616381][ T312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 359.655842][ T826] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 359.825876][ T312] usb 4-1: New USB device found, idVendor=045e, idProduct=0446, bcdDevice=d4.30 [ 359.834795][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.842584][ T312] usb 4-1: Product: syz [ 359.846681][ T312] usb 4-1: Manufacturer: syz [ 359.851092][ T312] usb 4-1: SerialNumber: syz [ 359.857087][ T312] usb 4-1: config 0 descriptor?? [ 360.015882][ T826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.026613][ T826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.036227][ T826] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 360.045083][ T826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.053343][ T826] usb 2-1: config 0 descriptor?? [ 360.098847][ T65] usb 4-1: USB disconnect, device number 43 [ 360.308247][T13252] overlayfs: failed to resolve './file1': -2 [ 360.332193][T13256] xt_CT: No such helper "snmp" [ 360.390979][ T28] kauditd_printk_skb: 622 callbacks suppressed [ 360.390994][ T28] audit: type=1326 audit(2000000138.360:9547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 360.421910][ T28] audit: type=1326 audit(2000000138.360:9548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 360.446140][ T28] audit: type=1326 audit(2000000138.360:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 360.470095][ T28] audit: type=1326 audit(2000000138.360:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 360.494283][ T28] audit: type=1326 audit(2000000138.360:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 360.518235][ T28] audit: type=1326 audit(2000000138.360:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 360.542265][ T28] audit: type=1326 audit(2000000138.400:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f647cea9 code=0x7ffc0000 [ 360.542828][ T826] keytouch 0003:0926:3333.0058: fixing up Keytouch IEC report descriptor [ 360.566959][ T28] audit: type=1326 audit(2000000138.400:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0f647a627 code=0x7ffc0000 [ 360.598230][ T28] audit: type=1326 audit(2000000138.400:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc0f6440309 code=0x7ffc0000 [ 360.599358][ T826] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0058/input/input58 [ 360.622156][ T28] audit: type=1326 audit(2000000138.400:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13261 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc0f647a627 code=0x7ffc0000 [ 360.698585][ T826] keytouch 0003:0926:3333.0058: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 360.771660][T13276] overlayfs: failed to resolve './file1': -2 [ 360.801669][ T312] usb 2-1: USB disconnect, device number 38 [ 360.834257][T13282] xt_CT: No such helper "snmp" [ 361.048156][T13272] loop3: detected capacity change from 0 to 131072 [ 361.057048][T13272] F2FS-fs (loop3): Found nat_bits in checkpoint [ 361.080055][T13272] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 361.125832][ T826] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 361.324581][T13310] bridge0: port 3(syz_tun) entered blocking state [ 361.330908][T13310] bridge0: port 3(syz_tun) entered disabled state [ 361.337487][T13310] device syz_tun entered promiscuous mode [ 361.343107][T13310] bridge0: port 3(syz_tun) entered blocking state [ 361.349280][T13310] bridge0: port 3(syz_tun) entered forwarding state [ 361.362493][T13312] xt_CT: No such helper "snmp" [ 361.485842][ T826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 361.495466][ T826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 361.506026][ T826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 361.665859][ T826] usb 3-1: New USB device found, idVendor=045e, idProduct=0446, bcdDevice=d4.30 [ 361.674741][ T826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.682978][ T826] usb 3-1: Product: syz [ 361.687015][ T826] usb 3-1: Manufacturer: syz [ 361.691373][ T826] usb 3-1: SerialNumber: syz [ 361.696690][ T826] usb 3-1: config 0 descriptor?? [ 361.829308][T13336] bridge0: port 3(syz_tun) entered blocking state [ 361.835597][T13336] bridge0: port 3(syz_tun) entered disabled state [ 361.842335][T13336] device syz_tun entered promiscuous mode [ 361.848107][T13336] bridge0: port 3(syz_tun) entered blocking state [ 361.854536][T13336] bridge0: port 3(syz_tun) entered forwarding state [ 361.871878][T13340] xt_CT: No such helper "snmp" [ 361.874740][T13338] device pim6reg1 entered promiscuous mode [ 361.940106][ T826] usb 3-1: USB disconnect, device number 42 [ 361.956132][T13354] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 362.009552][T13363] device syzkaller0 entered promiscuous mode [ 362.016323][T13363] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 362.366373][T13397] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.397919][T13407] loop1: detected capacity change from 0 to 128 [ 362.460135][T13413] loop4: detected capacity change from 0 to 8192 [ 362.539912][T13422] device pim6reg1 entered promiscuous mode [ 362.584316][T13426] loop4: detected capacity change from 0 to 256 [ 362.596679][T12943] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 362.604251][T12943] FAT-fs (loop4): Filesystem has been set read-only [ 362.611077][T12943] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 362.627277][T12943] bridge0: port 3(syz_tun) entered disabled state [ 362.639321][T12943] device syz_tun left promiscuous mode [ 362.646880][T12943] bridge0: port 3(syz_tun) entered disabled state [ 362.673815][T13434] loop2: detected capacity change from 0 to 256 [ 362.745156][T13441] syz-executor.2[13441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.745226][T13441] syz-executor.2[13441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.822192][T13445] loop2: detected capacity change from 0 to 256 [ 362.864726][T11253] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 362.864746][T11253] FAT-fs (loop2): Filesystem has been set read-only [ 362.864814][T11253] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 362.926433][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.933283][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.950106][T13411] loop1: detected capacity change from 0 to 131072 [ 362.956963][T13446] device bridge_slave_0 entered promiscuous mode [ 362.965268][T13411] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 362.974531][T13411] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 362.974661][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.983301][T13411] F2FS-fs (loop1): invalid crc value [ 362.995153][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.009089][T13446] device bridge_slave_1 entered promiscuous mode [ 363.033076][T13411] F2FS-fs (loop1): Found nat_bits in checkpoint [ 363.106249][T13411] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 363.113215][T13411] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 363.131540][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.138433][T13446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.145497][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.152309][T13446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.245791][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.253395][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.262127][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.308757][ T43] device bridge_slave_1 left promiscuous mode [ 363.314716][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.326632][ T43] device bridge_slave_0 left promiscuous mode [ 363.334172][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.347571][ T43] device veth1_macvtap left promiscuous mode [ 363.353797][ T43] device veth0_vlan left promiscuous mode [ 363.485405][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.493719][ T826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.508941][T13460] syz-executor.1[13460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.509145][T13460] syz-executor.1[13460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.526139][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.575122][T13446] device veth0_vlan entered promiscuous mode [ 363.583101][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.587815][T13464] loop1: detected capacity change from 0 to 256 [ 363.590986][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.603936][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.617990][T13456] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.624996][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.637295][T13456] device bridge_slave_0 entered promiscuous mode [ 363.654123][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.661233][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.669238][T13456] device bridge_slave_1 entered promiscuous mode [ 363.688250][T13446] device veth1_macvtap entered promiscuous mode [ 363.732417][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.746632][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.754613][T13472] loop4: detected capacity change from 0 to 8192 [ 363.757272][T13476] loop3: detected capacity change from 0 to 512 [ 363.767300][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.774835][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.777533][T13476] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 363.783292][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.791538][T13476] ext4 filesystem being mounted at /root/syzkaller-testdir3834293983/syzkaller.02rWRS/48/file0 supports timestamps until 2038 (0x7fffffff) [ 364.029295][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.037414][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.070526][T13476] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 364.102970][T13476] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor.3: mark_inode_dirty error [ 364.137977][T13482] loop1: detected capacity change from 0 to 40427 [ 364.142686][T13476] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 364.156174][T13482] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 364.156397][T13476] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 364.163667][T13482] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 364.198654][T13482] F2FS-fs (loop1): Found nat_bits in checkpoint [ 364.233154][T13476] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.242635][T13482] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 364.242682][T13476] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 364.249739][T13482] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 364.281240][T13473] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 364.290807][T13473] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 364.292369][T12770] EXT4-fs (loop3): unmounting filesystem. [ 364.306200][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.317119][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.324532][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.331823][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 364.339932][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 364.347957][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.354812][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.362059][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 364.370307][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 364.378531][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.385366][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.393202][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.402631][T13492] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.408932][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 364.427868][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.436200][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.443932][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.451657][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.459554][T13456] device veth0_vlan entered promiscuous mode [ 364.474149][T13456] device veth1_macvtap entered promiscuous mode [ 364.480980][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.494335][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.502773][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.628114][T13509] loop1: detected capacity change from 0 to 256 [ 364.642881][T12751] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 364.650566][T12751] FAT-fs (loop1): Filesystem has been set read-only [ 364.661436][T12751] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 364.675387][T12751] bridge0: port 3(syz_tun) entered disabled state [ 364.682798][T12751] device syz_tun left promiscuous mode [ 364.690133][T12751] bridge0: port 3(syz_tun) entered disabled state [ 364.735689][T13507] loop3: detected capacity change from 0 to 40427 [ 364.742868][T13507] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 364.750600][T13507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 364.760391][T13507] F2FS-fs (loop3): invalid crc value [ 364.767533][T13507] F2FS-fs (loop3): Found nat_bits in checkpoint [ 364.804953][T13507] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 364.812463][T13507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 364.841002][ T2254] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 364.850380][ T2254] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 364.916576][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.923520][T13519] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.931382][T13519] device bridge_slave_0 entered promiscuous mode [ 364.938704][ T43] device bridge_slave_1 left promiscuous mode [ 364.944669][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.952196][ T43] device bridge_slave_0 left promiscuous mode [ 364.958398][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.965807][ T371] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 364.973881][ T43] device veth1_macvtap left promiscuous mode [ 364.987904][ T43] device veth0_vlan left promiscuous mode [ 365.088727][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.095786][T13519] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.103107][T13519] device bridge_slave_1 entered promiscuous mode [ 365.177530][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.184518][T13519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.191704][T13519] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.198523][T13519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.232425][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.239714][ T371] usb 3-1: Using ep0 maxpacket: 8 [ 365.246705][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.263819][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.275469][T13536] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.288075][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.296202][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.303046][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.321729][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.331056][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.337925][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.345400][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.353395][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.365855][ T371] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 365.376024][T13538] tipc: Started in network mode [ 365.380627][T13538] tipc: Node identity f0, cluster identity 4711 [ 365.386995][ T371] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 365.396204][T13524] loop3: detected capacity change from 0 to 131072 [ 365.399931][T13538] tipc: Node number set to 240 [ 365.410681][ T371] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 365.411617][T13524] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 365.419737][ T371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.436346][T13524] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 365.447691][T13524] F2FS-fs (loop3): invalid crc value [ 365.451136][T13519] device veth0_vlan entered promiscuous mode [ 365.476562][T13524] F2FS-fs (loop3): Found nat_bits in checkpoint [ 365.479655][ T371] usb 3-1: config 0 descriptor?? [ 365.508997][T13519] device veth1_macvtap entered promiscuous mode [ 365.520274][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 365.525082][T13524] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 365.535118][T13524] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 365.536269][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 365.550436][ T371] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 365.566262][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 365.573492][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 365.592750][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.617456][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 365.637320][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.666504][T13548] SELinux: Context  is not valid (left unmapped). [ 365.802249][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 365.802265][ T28] audit: type=1400 audit(2000000143.770:9636): avc: denied { setopt } for pid=13557 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.863097][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.908661][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.915840][T13561] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.923165][T13561] device bridge_slave_0 entered promiscuous mode [ 365.931337][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.939968][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.947554][T13561] device bridge_slave_1 entered promiscuous mode [ 366.086742][ T43] device bridge_slave_1 left promiscuous mode [ 366.095848][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.106218][ T43] device bridge_slave_0 left promiscuous mode [ 366.112198][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.139111][ T43] device veth1_macvtap left promiscuous mode [ 366.147533][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.147638][ T43] device veth0_vlan left promiscuous mode [ 366.211041][T13587] loop1: detected capacity change from 0 to 40427 [ 366.220650][T13587] F2FS-fs (loop1): Found nat_bits in checkpoint [ 366.262929][T13587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 366.297983][T13611] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 366.335101][T13519] syz-executor.1: attempt to access beyond end of device [ 366.335101][T13519] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 366.336551][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.355875][T13561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.362979][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.369857][T13561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.409070][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.417698][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.425058][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.442269][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.450899][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.457777][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.465312][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.474881][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.481764][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.507182][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.515826][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.532280][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.541436][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.550651][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.558300][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.571318][T13561] device veth0_vlan entered promiscuous mode [ 366.599704][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.610344][T13561] device veth1_macvtap entered promiscuous mode [ 366.636306][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.647501][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.655784][ T312] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 366.692916][T13625] tipc: Started in network mode [ 366.697923][T13625] tipc: Node identity f0, cluster identity 4711 [ 366.704057][T13625] tipc: Node number set to 240 [ 366.719832][ T28] audit: type=1400 audit(2000000144.690:9637): avc: denied { lock } for pid=13626 comm="syz-executor.1" path="socket:[73760]" dev="sockfs" ino=73760 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 366.865347][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.886974][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.906392][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 367.035984][ T312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.054910][T13649] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.064325][ T312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.097142][T13655] syz-executor.4[13655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.097212][T13655] syz-executor.4[13655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.126570][ T43] device bridge_slave_1 left promiscuous mode [ 367.144418][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.152633][ T43] device bridge_slave_0 left promiscuous mode [ 367.159201][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.167957][ T43] device veth1_macvtap left promiscuous mode [ 367.173944][ T43] device veth0_vlan left promiscuous mode [ 367.205889][ T312] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 367.216195][ T312] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 367.224376][ T312] usb 4-1: Product: syz [ 367.232911][ T312] usb 4-1: Manufacturer: syz [ 367.264368][T13631] loop0: detected capacity change from 0 to 131072 [ 367.271894][T13631] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 367.281236][T13631] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 367.290121][T13631] F2FS-fs (loop0): invalid crc value [ 367.297169][T13631] F2FS-fs (loop0): Found nat_bits in checkpoint [ 367.306079][ T312] hub 4-1:4.0: USB hub found [ 367.321911][T13631] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 367.329359][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 367.329960][T13631] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 367.455820][ T435] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 367.515829][ T312] hub 4-1:4.0: 2 ports detected [ 367.672711][T13677] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 367.695782][ T435] usb 5-1: Using ep0 maxpacket: 8 [ 367.695815][ T24] usb 2-1: config 0 has no interfaces? [ 367.695837][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 367.740810][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.776309][ T24] usb 2-1: config 0 descriptor?? [ 367.793020][ T826] usb 3-1: USB disconnect, device number 43 [ 367.815826][ T435] usb 5-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 367.829387][ T435] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.844558][ T435] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 367.860558][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.874947][ T435] usb 5-1: config 0 descriptor?? [ 368.077082][ T826] usb 2-1: USB disconnect, device number 39 [ 368.117824][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.125047][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.132311][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.139498][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.146990][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.154184][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.161462][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.168634][ T371] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 368.175834][ T371] hid-generic 0000:0000:0000.0059: item fetching failed at offset 8/43 [ 368.183959][ T371] hid-generic: probe of 0000:0000:0000.0059 failed with error -22 [ 368.214313][T13702] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 368.225844][T13702] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 368.234091][T13702] CPU: 1 PID: 13702 Comm: syz-executor.2 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 368.244067][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 368.253962][T13702] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 2033/05/18 03:35:46 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 368.260034][T13702] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 ac 07 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 04 25 00 48 89 5c 24 18 4c 8b [ 368.279483][T13702] RSP: 0018:ffffc900007b76c0 EFLAGS: 00010246 [ 368.285386][T13702] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 368.293201][T13702] RDX: ffffc90007d0a000 RSI: 0000000000000466 RDI: 0000000000000467 [ 368.301005][T13702] RBP: ffffc900007b7818 R08: 0000000000000005 R09: ffffffff8411e7b3 [ 368.308911][T13702] R10: 0000000000000004 R11: ffff88812a8ad100 R12: dffffc0000000000 [ 368.316725][T13702] R13: ffff888142a1cb40 R14: 1ffff920000f6ee4 R15: 0000000000000000 [ 368.324539][T13702] FS: 00007fa12b1876c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 368.333305][T13702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.339810][T13702] CR2: 0000000020010000 CR3: 0000000141b4c000 CR4: 00000000003506a0 [ 368.347624][T13702] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.355432][T13702] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.363242][T13702] Call Trace: [ 368.366371][T13702] [ 368.369144][T13702] ? __die_body+0x62/0xb0 [ 368.373353][T13702] ? die_addr+0x9f/0xd0 [ 368.377400][T13702] ? exc_general_protection+0x317/0x4c0 [ 368.382778][T13702] ? asm_exc_general_protection+0x27/0x30 [ 368.388343][T13702] ? xdp_do_generic_redirect+0x303/0xad0 [ 368.393813][T13702] ? dev_map_generic_redirect+0x90/0x7d0 [ 368.399263][T13702] ? __free_pages_core+0x180/0x180 [ 368.404210][T13702] ? __this_cpu_preempt_check+0x13/0x20 [ 368.409590][T13702] ? bq_enqueue+0x3e0/0x3e0 [ 368.413931][T1