last executing test programs: 5.131578242s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) tgkill(0x0, 0xffffffffffffffff, 0x0) 5.103475176s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0xc20e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0xb, {0xb, 0x0, "93ffb32e898336e74f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.664336s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x006'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.452676653s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 3.430453236s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000082b6fe8e00000000008040008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "5530ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 3.334671921s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 3.243610806s ago: executing program 2: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close(r3) 2.721301757s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x2, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000005000/0x4000)=nil) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x64000600) 2.371114391s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 2.320432949s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.077533417s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020400) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r0}, {r0}], 0x2, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 1.950978067s ago: executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 1.915565202s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 1.825067216s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) faccessat(0xffffffffffffff9c, 0x0, 0x0) 1.794629441s ago: executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, 0x0}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 1.791730842s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) getcwd(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x813014, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x4) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udp\x00') read$FUSE(r3, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 1.783771452s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) 1.722233092s ago: executing program 3: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.281354781s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x180) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe}, 0x90) syz_read_part_table(0x5ff, &(0x7f0000000000)="$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") socket$inet6(0xa, 0x3, 0xff) 901.9527ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001400), 0x208e24b) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/149, 0x95) 865.516815ms ago: executing program 3: sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) close(r3) 755.228412ms ago: executing program 4: setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000003140)) syz_socket_connect_nvme_tcp() 739.461475ms ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010d26ce58d751eb729a480000304000000000000000000000000479448230ea0b7d60a41bd5f2a88865ade1e509fc74bc0caa91bf7ef81adf67e3775508229a69fa64592"], 0x50}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000070000"], 0x16) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 695.528572ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 679.556084ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x1, 0x8e, 0xe7c9, 0xa}, 0x48) 646.16392ms ago: executing program 0: newfstatat(0xffffffffffffff9c, &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6c00) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f00000003c0)={[{@test_dummy_encryption}, {@journal_checksum}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@i_version}, {@noblock_validity}, {@dioread_nolock}, {@resuid={'resuid', 0x3d, r0}}, {@discard}]}, 0xfe, 0x254, &(0x7f0000000900)="$eJzs3T9oJGUcBuB3Znc9c1nk1EYQ/4CIaCCcnWBzNgoHchyHCCqciNgoiRAT7BIrGwutVVLZBLEzWkqaYKMI2kRNERtBg4XBQouV3UkkJqtJ3LhzZJ4HJjOT+WZ+37DzfrsszE6AxrqQ5FKSVpKpJJ0kxf4G91bThd3V5Yn160mvd+2XYtCuWq/s7TeZZCnJI0nWyiIvt5OF1We3ftt44oG35jv3f7D6zMRYT3LX9tbmkzvvX3nz48sPL3z59U9XilxK92/ndfqKIf9rF8lt/0exG0TRrrsHHMfV1z/6tp/725PcN8h/J2WqF+/tuZvWOnnovX/a952fv7pznH0FTl+v1+m/By71gMYpk3RTlNNJquWynJ6uPsN/1zpfvjI799rUS7PzMy/WPVIBp6WbbD7+6blPJg/k/8dWlf/hWuPtJHAS3wz7vmmYfv6furryfX95R6yhGe6qZv38Tz2/+GDkHxpH/qG55B+aS/6hueQfmkv+4Wy5Nnn8tvIPZ1jn3zfLPzSX/ENzyT801/78AwDN0jtX9x3IQF3qHn8AAAAAAAAAAAAAAAAAAIDDlifWr+9N46r5+bvJ9mNJ2sPqtwbPI05uHvw9/2vRb/aXotptJM/dM+IBRvRhzXdf3/JDvfW/uLve+oszydIbSS6224evv2L3+vvvbj1ie+eFEQuc0MFnAz/69HjrH/THSr31L28kn/XHn4vDxp8ydwzmw8ef7tE/sXykV38f8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMzZ8BAAD//+GoboM=") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0x2004180, &(0x7f0000000000)={[{@quota}]}, 0x13, 0x52a, &(0x7f0000000b00)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x4, 0x2, 0x1, 0xf31}, 0x48) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c616c6c6f775f6f746865722c64656661756c745f703b3b741d665265726d69737369886e732c6d61785f726561643d3078303030303030300008303030303030302c6d61785f726561643d3078303030303030303030303030303033662c6d61785f726561643d3078303030303030303030303030303530312c6d61785f726561643d3078303030303032303038010030303030302c00"]) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00'], 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/59, 0x3b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x64, 0x0, 0x0, 0x1}, {0x6}]}) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 628.449422ms ago: executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8906, 0x0) gettid() r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x1) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 618.450774ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780), &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 400.099198ms ago: executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2008002) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c8}}, 0x0) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) socket$inet6_icmp(0xa, 0x2, 0x3a) 0s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r0, &(0x7f0000000780), &(0x7f0000000900)=@udp=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): ): Try to recover 1th superblock, ret: 0 [ 1360.114115][ T4961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1360.309309][ T4965] loop4: detected capacity change from 0 to 512 [ 1360.364977][T24836] usbhid 3-1:0.0: can't add hid device: -71 [ 1360.371269][T24836] usbhid: probe of 3-1:0.0 failed with error -71 [ 1360.378985][ T4965] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1360.393207][T24836] usb 3-1: USB disconnect, device number 14 [ 1360.397350][ T4965] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1360.411696][ T4965] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1360.425461][ T4965] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1360.438366][ T4965] EXT4-fs (loop4): 1 orphan inode deleted [ 1360.443904][ T4965] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 1360.731790][ T4757] attempt to access beyond end of device [ 1360.731790][ T4757] loop1: rw=524288, want=45072, limit=40427 [ 1360.743113][ T4757] attempt to access beyond end of device [ 1360.743113][ T4757] loop1: rw=0, want=45072, limit=40427 [ 1360.763041][T24555] attempt to access beyond end of device [ 1360.763041][T24555] loop1: rw=2049, want=45120, limit=40427 [ 1360.825184][ T2876] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 1360.832367][ T2876] usb 4-1: USB disconnect, device number 23 [ 1360.981241][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.988151][ T4990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.994950][ T330] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1361.002756][ T4990] device bridge_slave_0 entered promiscuous mode [ 1361.011216][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.018236][ T4990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.026784][ T4990] device bridge_slave_1 entered promiscuous mode [ 1361.114951][T24836] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1361.125294][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.132132][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.139269][ T4990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.146034][ T4990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.167949][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1361.175555][ T2876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.182558][ T2876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.191426][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1361.200030][ T2852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.206883][ T2852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.217225][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1361.225503][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.232324][ T2876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.251115][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1361.260041][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.267808][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1361.279092][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1361.286872][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1361.294033][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1361.301993][ T4990] device veth0_vlan entered promiscuous mode [ 1361.312605][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1361.321271][T24555] device bridge_slave_1 left promiscuous mode [ 1361.327337][T24555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.334840][T24555] device bridge_slave_0 left promiscuous mode [ 1361.341016][T24555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.349411][T24555] device veth1_macvtap left promiscuous mode [ 1361.355293][ T330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.366103][T24555] device veth0_vlan left promiscuous mode [ 1361.371648][ T330] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1361.455056][ T330] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1361.464442][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1361.472301][ T330] usb 5-1: SerialNumber: syz [ 1361.477018][ T4990] device veth1_macvtap entered promiscuous mode [ 1361.489666][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1361.499393][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1361.525050][T24836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.534635][ T4996] syz-executor.1[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.535113][ T4996] syz-executor.1[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.551469][ T4996] syz-executor.1[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.563298][ T4996] syz-executor.1[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1361.626131][ T4998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.645334][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.652662][ T4998] device bridge_slave_0 entered promiscuous mode [ 1361.659665][ T4998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.666656][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.673800][ T4998] device bridge_slave_1 entered promiscuous mode [ 1361.713133][ T5004] loop1: detected capacity change from 0 to 2048 [ 1361.735412][T24836] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1361.738665][ T4998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.751141][ T4998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.758267][ T4998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.765028][ T4998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.772238][T24836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.773081][ T330] usb 5-1: 0:2 : does not exist [ 1361.786992][T24836] usb 3-1: Product: syz [ 1361.791593][T24836] usb 3-1: Manufacturer: syz [ 1361.803923][T24836] usb 3-1: SerialNumber: syz [ 1361.810997][T24836] usb 3-1: config 0 descriptor?? [ 1361.812614][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1361.823339][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.830586][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.841325][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1361.849616][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1361.857563][ T2798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.864392][ T2798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1361.873422][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1361.881625][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1361.889651][T14664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.896492][T14664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1361.915025][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1361.922838][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.930653][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.938450][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1361.952826][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1361.961024][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1361.972177][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1361.980240][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1361.988518][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1361.997089][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1362.004702][ T4998] device veth0_vlan entered promiscuous mode [ 1362.017421][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1362.025397][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1362.034185][ T4998] device veth1_macvtap entered promiscuous mode [ 1362.043405][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1362.051117][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1362.059108][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1362.070816][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1362.079244][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1362.085023][T24836] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 1362.095232][T24836] usb 3-1: USB disconnect, device number 15 [ 1362.198014][ T330] usb 5-1: USB disconnect, device number 34 [ 1362.395812][T24555] device bridge_slave_1 left promiscuous mode [ 1362.401797][T24555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.405014][ T2798] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1362.416174][T24555] device bridge_slave_0 left promiscuous mode [ 1362.422153][T24555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.430251][T24555] device veth1_macvtap left promiscuous mode [ 1362.436316][T24555] device veth0_vlan left promiscuous mode [ 1362.762328][ T5027] loop3: detected capacity change from 0 to 40427 [ 1362.805738][ T5027] F2FS-fs (loop3): Invalid gid value -1 [ 1362.815037][ T2798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.820399][ T5038] loop4: detected capacity change from 0 to 128 [ 1362.826888][ T2798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.841606][T24836] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1362.849371][ T2798] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1362.856956][ T5038] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1362.858240][ T2798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.869015][ T5038] ext4 filesystem being mounted at /root/syzkaller-testdir3467478800/syzkaller.hDwshP/30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1362.877158][ T2798] usb 1-1: config 0 descriptor?? [ 1363.034734][ T5043] loop3: detected capacity change from 0 to 512 [ 1363.087132][ T5043] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1363.100830][ T5043] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1363.113459][ T5043] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1363.127096][ T5043] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1363.139883][ T5043] EXT4-fs (loop3): 1 orphan inode deleted [ 1363.145589][ T5043] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 1363.235678][T19049] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1363.265021][T24836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.275757][T24836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.285290][T24836] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1363.294116][T24836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.302401][T24836] usb 2-1: config 0 descriptor?? [ 1363.385139][ T2798] hid (null): bogus close delimiter [ 1363.475103][T19049] usb 5-1: Using ep0 maxpacket: 16 [ 1363.594987][T19049] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.604929][T19049] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1363.613668][T19049] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1363.622538][T19049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.623083][ T5054] loop3: detected capacity change from 0 to 40427 [ 1363.631263][T19049] usb 5-1: config 0 descriptor?? [ 1363.685566][ T5054] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1363.691982][ T5054] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1363.702108][ T5054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1363.724226][ T5054] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1363.724959][ T2852] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1363.731107][ T5054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1363.884980][ T2798] usb 1-1: string descriptor 0 read error: -71 [ 1363.914978][ T2798] uclogic 0003:256C:006D.00DA: failed retrieving string descriptor #200: -71 [ 1363.923691][ T2798] uclogic 0003:256C:006D.00DA: failed retrieving pen parameters: -71 [ 1363.931981][ T2798] uclogic 0003:256C:006D.00DA: failed probing pen v2 parameters: -71 [ 1363.940099][ T2798] uclogic 0003:256C:006D.00DA: failed probing parameters: -71 [ 1363.947560][ T2798] uclogic: probe of 0003:256C:006D.00DA failed with error -71 [ 1363.956641][ T2798] usb 1-1: USB disconnect, device number 20 [ 1363.985004][T24836] hid-led: probe of 0003:27B8:01ED.00DB failed with error -71 [ 1363.992901][T24836] usb 2-1: USB disconnect, device number 29 [ 1364.095002][ T2852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.265000][ T2852] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1364.273882][ T2852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.281714][ T2852] usb 3-1: Product: syz [ 1364.285671][ T2852] usb 3-1: Manufacturer: syz [ 1364.290067][ T2852] usb 3-1: SerialNumber: syz [ 1364.295064][ T2852] usb 3-1: config 0 descriptor?? [ 1364.395927][ T4899] attempt to access beyond end of device [ 1364.395927][ T4899] loop3: rw=524288, want=45072, limit=40427 [ 1364.413090][ T4899] attempt to access beyond end of device [ 1364.413090][ T4899] loop3: rw=0, want=45072, limit=40427 [ 1364.440307][ T2849] attempt to access beyond end of device [ 1364.440307][ T2849] loop3: rw=2049, want=41056, limit=40427 [ 1364.654272][ T30] audit: type=1326 audit(1718779585.737:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1364.823390][ T30] audit: type=1326 audit(1718779585.747:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1364.847947][ T5076] overlayfs: failed to resolve './file2': -2 [ 1364.854772][ T30] audit: type=1326 audit(1718779585.747:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1364.878708][ T30] audit: type=1326 audit(1718779585.747:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1364.904273][ T30] audit: type=1326 audit(1718779585.747:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1364.944959][ T30] audit: type=1326 audit(1718779585.747:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1364.968865][ T30] audit: type=1326 audit(1718779585.747:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1364.992710][ T30] audit: type=1326 audit(1718779585.747:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1365.068442][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.075638][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.083133][ T5079] device bridge_slave_0 entered promiscuous mode [ 1365.090086][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.097138][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.104270][ T5079] device bridge_slave_1 entered promiscuous mode [ 1365.149647][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.156506][ T5079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.163568][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.170397][ T5079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.190341][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1365.198121][T14664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.205336][T14664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.216028][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1365.224131][T24836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.230972][T24836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.245535][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1365.253477][T14664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.260317][T14664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.268401][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1365.276283][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1365.291362][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1365.304054][ T5079] device veth0_vlan entered promiscuous mode [ 1365.311961][ T2849] device bridge_slave_1 left promiscuous mode [ 1365.318722][ T2849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.335194][ T2849] device bridge_slave_0 left promiscuous mode [ 1365.341201][ T2849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.349379][ T2849] device veth1_macvtap left promiscuous mode [ 1365.355404][ T2849] device veth0_vlan left promiscuous mode [ 1365.382393][ T5088] loop1: detected capacity change from 0 to 128 [ 1365.407629][ T5088] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1365.418076][ T5088] ext4 filesystem being mounted at /root/syzkaller-testdir936328012/syzkaller.cuY8S4/8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1365.541024][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1365.549243][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1365.556882][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1365.571682][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1365.579719][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1365.587978][ T5079] device veth1_macvtap entered promiscuous mode [ 1365.598818][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1365.608052][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1365.617842][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1365.656031][ T5096] input: syz0 as /devices/virtual/input/input129 [ 1365.715731][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1365.738969][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1365.975445][T24836] usb 5-1: USB disconnect, device number 35 [ 1366.032777][ T5103] loop3: detected capacity change from 0 to 40427 [ 1366.037355][ T5107] loop4: detected capacity change from 0 to 512 [ 1366.065650][ T5103] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1366.072164][ T5103] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1366.081147][ T5107] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1366.093888][ T5103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1366.101132][ T5107] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1366.108256][ T5107] EXT4-fs (loop4): mount failed [ 1366.123084][ T5103] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1366.130131][ T5103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1366.373640][ T5120] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1367.116843][ T5120] device gretap0 entered promiscuous mode [ 1367.123845][ T5122] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1367.132960][ T5122] 0ªX¹¦D: renamed from gretap0 [ 1367.138324][ T5122] device 30ªX¹¦D left promiscuous mode [ 1367.144143][ T5122] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1367.192554][ T2852] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 1367.200563][ T2852] usb 3-1: USB disconnect, device number 16 [ 1367.209540][ T5131] loop4: detected capacity change from 0 to 128 [ 1367.319982][ T5131] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1367.399669][ T30] audit: type=1326 audit(1718779588.487:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5128 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1367.462706][ T5131] ext4 filesystem being mounted at /root/syzkaller-testdir3467478800/syzkaller.hDwshP/34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1367.495579][ T30] audit: type=1326 audit(1718779588.487:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5128 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07211cf29 code=0x7ffc0000 [ 1367.500806][ T5079] attempt to access beyond end of device [ 1367.500806][ T5079] loop3: rw=524288, want=45072, limit=40427 [ 1367.533394][ T5079] attempt to access beyond end of device [ 1367.533394][ T5079] loop3: rw=0, want=45072, limit=40427 [ 1367.558119][ T2849] attempt to access beyond end of device [ 1367.558119][ T2849] loop3: rw=2049, want=41056, limit=40427 [ 1367.755764][ T5153] input: syz0 as /devices/virtual/input/input130 [ 1367.938434][ T330] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1367.939456][ T2852] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1368.022067][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.028975][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.037718][ T5155] device bridge_slave_0 entered promiscuous mode [ 1368.044648][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.051546][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.059228][ T5155] device bridge_slave_1 entered promiscuous mode [ 1368.125608][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.132450][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.139575][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.146347][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.164812][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1368.172335][T19049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.352822][ T2852] usb 3-1: Using ep0 maxpacket: 16 [ 1368.359455][T19049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.371961][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1368.379945][ T2876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.386786][ T2876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.393980][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1368.401984][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.408821][ T2876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.422961][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1368.447534][ T5155] device veth0_vlan entered promiscuous mode [ 1368.460640][ T5155] device veth1_macvtap entered promiscuous mode [ 1368.469034][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1368.477028][ T330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.477381][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1368.487066][ T2852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.494697][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1368.511469][ T2852] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1368.512891][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1368.522925][ T2852] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1368.536783][ T2852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.538454][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1368.553061][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1368.562905][ T2852] usb 3-1: config 0 descriptor?? [ 1368.568029][ T2849] device bridge_slave_1 left promiscuous mode [ 1368.574080][ T2849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.581882][ T2849] device bridge_slave_0 left promiscuous mode [ 1368.588221][ T2849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.596198][ T2849] device veth1_macvtap left promiscuous mode [ 1368.602107][ T2849] device veth0_vlan left promiscuous mode [ 1368.665029][ T330] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1368.673903][ T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.682144][ T330] usb 1-1: Product: syz [ 1368.686151][ T330] usb 1-1: Manufacturer: syz [ 1368.690553][ T330] usb 1-1: SerialNumber: syz [ 1368.696712][ T330] usb 1-1: config 0 descriptor?? [ 1368.708201][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1368.716448][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1368.724467][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1368.732547][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1369.209177][ T5178] loop1: detected capacity change from 0 to 40427 [ 1369.255576][ T5178] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 1369.262026][ T5178] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1369.272484][ T5178] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1369.295916][ T5178] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1369.302780][ T5178] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1369.915994][ T4990] attempt to access beyond end of device [ 1369.915994][ T4990] loop1: rw=524288, want=45072, limit=40427 [ 1369.927480][ T4990] attempt to access beyond end of device [ 1369.927480][ T4990] loop1: rw=0, want=45072, limit=40427 [ 1369.957594][ T1363] attempt to access beyond end of device [ 1369.957594][ T1363] loop1: rw=2049, want=41056, limit=40427 [ 1370.385279][T24836] usb 3-1: USB disconnect, device number 17 [ 1370.532201][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.539111][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.546336][ T5225] device bridge_slave_0 entered promiscuous mode [ 1370.553021][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.559931][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.687313][ T5225] device bridge_slave_1 entered promiscuous mode [ 1370.715014][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1370.715047][ T30] audit: type=1326 audit(1718779591.727:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.742479][ T330] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 1370.754405][ T30] audit: type=1326 audit(1718779591.727:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.769785][ T5234] loop0: detected capacity change from 0 to 2048 [ 1370.778848][ T330] usb 1-1: USB disconnect, device number 21 [ 1370.790551][ T30] audit: type=1326 audit(1718779591.727:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.814820][ T30] audit: type=1326 audit(1718779591.727:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.838989][ T30] audit: type=1326 audit(1718779591.727:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.864557][ T30] audit: type=1326 audit(1718779591.727:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.889565][ T5234] loop0: p2 < > [ 1370.893287][ T30] audit: type=1326 audit(1718779591.737:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.917287][ T2797] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1370.922305][ T30] audit: type=1326 audit(1718779591.737:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5223 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7bae35f29 code=0x7ffc0000 [ 1370.994029][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.000887][ T5225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.007992][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.014758][ T5225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.023458][ T2798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.030906][ T2798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.039459][ T1363] device bridge_slave_1 left promiscuous mode [ 1371.045497][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.052830][ T1363] device bridge_slave_0 left promiscuous mode [ 1371.058866][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.066573][ T1363] device veth1_macvtap left promiscuous mode [ 1371.072387][ T1363] device veth0_vlan left promiscuous mode [ 1371.199599][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1371.207103][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1371.226224][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1371.234339][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1371.243409][ T2876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.250267][ T2876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.257755][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1371.265890][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1371.273841][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.280695][ T2876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.288291][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1371.296738][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1371.337099][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1371.346572][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1371.364019][ T5225] device veth0_vlan entered promiscuous mode [ 1371.371970][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1371.375007][ T2797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1371.380358][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1371.399114][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1371.400863][ T2797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1371.406598][T24836] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1371.424295][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1371.434977][ T2797] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1371.438997][ T5225] device veth1_macvtap entered promiscuous mode [ 1371.443906][ T2797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.460830][ T2797] usb 5-1: config 0 descriptor?? [ 1371.467829][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1371.476505][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1371.483718][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1371.498474][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1371.516934][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1371.547623][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1371.565243][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1371.573428][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1371.592709][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1371.651370][ T30] audit: type=1326 audit(1718779592.747:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5258 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11129ef29 code=0x7fc00000 [ 1371.676431][ T30] audit: type=1326 audit(1718779592.777:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5258 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11129ef29 code=0x7fc00000 [ 1371.724992][T24836] usb 1-1: Using ep0 maxpacket: 16 [ 1371.845029][T24836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.854951][T24836] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1371.863680][T24836] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1371.872569][T24836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.881157][T24836] usb 1-1: config 0 descriptor?? [ 1371.901732][ T5265] loop3: detected capacity change from 0 to 512 [ 1371.935770][ T5265] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1371.955883][ T5265] EXT4-fs (loop3): failed to initialize system zone (-117) [ 1371.962950][ T5265] EXT4-fs (loop3): mount failed [ 1372.024940][T19049] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1372.183532][ T5269] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1372.193958][ T5269] device gretap0 entered promiscuous mode [ 1372.209750][ T5269] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1372.219165][ T5269] 0ªX¹¦D: renamed from gretap0 [ 1372.227017][ T5269] device 30ªX¹¦D left promiscuous mode [ 1372.234681][ T5269] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1372.295015][ T2797] hid-led: probe of 0003:27B8:01ED.00DC failed with error -71 [ 1372.303279][ T2797] usb 5-1: USB disconnect, device number 36 [ 1372.392364][ T5274] loop1: detected capacity change from 0 to 512 [ 1372.416201][ T5274] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1372.437568][ T5274] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1372.452099][ T5274] EXT4-fs (loop1): 1 truncate cleaned up [ 1372.457711][ T5274] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1372.469953][ T5274] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 1372.482309][ T5274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 1372.491103][ T5274] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 1372.503218][ T5274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 1372.544987][T19049] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.563168][ T5280] loop1: detected capacity change from 0 to 2048 [ 1372.615319][ T5280] loop1: p2 < > [ 1372.715011][T19049] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1372.723950][T19049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.732060][T19049] usb 3-1: Product: syz [ 1372.736627][T19049] usb 3-1: Manufacturer: syz [ 1372.741035][T19049] usb 3-1: SerialNumber: syz [ 1372.746627][ T5282] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1372.765557][T19049] usb 3-1: config 0 descriptor?? [ 1372.772825][ T5284] syz-executor.1[5284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1372.772898][ T5284] syz-executor.1[5284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1372.786785][ T5284] syz-executor.1[5284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1372.799155][ T5284] syz-executor.1[5284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1373.675496][ T5314] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1373.697297][ T5316] loop4: detected capacity change from 0 to 512 [ 1373.716050][ T5316] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1373.717666][ T5319] loop3: detected capacity change from 0 to 1024 [ 1373.731684][ T5320] syz-executor.1[5320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1373.731744][ T5320] syz-executor.1[5320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1373.744433][ T5320] syz-executor.1[5320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1373.756046][ T5320] syz-executor.1[5320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1373.757271][ T5319] EXT4-fs (loop3): Ignoring removed orlov option [ 1373.785949][ T5319] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1373.793536][ T5316] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1373.801176][ T5316] EXT4-fs (loop4): mount failed [ 1373.807968][ T5319] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 1373.816169][ T5319] System zones: 0-1, 3-36 [ 1373.821345][ T5319] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1374.243869][ T5338] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1374.253782][ T5338] device 30ªX¹¦D entered promiscuous mode [ 1374.266620][ T5338] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1374.276112][ T5338] 1ªX¹¦D: renamed from 30ªX¹¦D [ 1374.284011][ T5338] device 31ªX¹¦D left promiscuous mode [ 1374.291917][ T5338] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1374.375003][ T2876] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1374.425401][T24836] usb 1-1: USB disconnect, device number 22 [ 1374.767188][ T2876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.779694][ T2876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.785021][T19049] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 1374.796209][T19049] usb 3-1: USB disconnect, device number 18 [ 1374.802672][ T5350] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1374.865015][ T2876] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1374.874024][ T2876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1374.914936][ T2876] usb 2-1: SerialNumber: syz [ 1375.005605][ T5358] syz-executor.2[5358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1375.005658][ T5358] syz-executor.2[5358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1375.107071][ T5364] loop2: detected capacity change from 0 to 1024 [ 1375.136074][ T5364] EXT4-fs (loop2): Ignoring removed orlov option [ 1375.142230][ T5364] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 1375.170490][ T5364] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 1375.185602][ T2876] usb 2-1: 0:2 : does not exist [ 1375.190399][ T5364] System zones: 0-1, 3-36 [ 1375.200993][ T5364] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1375.345844][ T5369] loop0: detected capacity change from 0 to 512 [ 1375.397837][ T5369] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1375.423212][ T5369] EXT4-fs (loop0): failed to initialize system zone (-117) [ 1375.432197][ T5369] EXT4-fs (loop0): mount failed [ 1375.698595][ T330] usb 2-1: USB disconnect, device number 30 [ 1375.801049][ T5387] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1375.811332][ T5387] device gretap0 entered promiscuous mode [ 1375.826409][ T5387] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1375.835912][ T5387] 0ªX¹¦D: renamed from gretap0 [ 1375.843964][ T5387] device 30ªX¹¦D left promiscuous mode [ 1375.851573][ T5387] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1375.887286][T19049] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1376.294282][ T5397] loop1: detected capacity change from 0 to 1024 [ 1376.300647][T19049] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.345596][ T5397] EXT4-fs (loop1): Ignoring removed orlov option [ 1376.351832][ T5397] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1376.360271][ T5397] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 1376.368385][ T5397] System zones: 0-1, 3-36 [ 1376.373309][ T5397] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1376.485039][T19049] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1376.493972][T19049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.511498][T19049] usb 5-1: Product: syz [ 1376.516280][T19049] usb 5-1: Manufacturer: syz [ 1376.520872][T19049] usb 5-1: SerialNumber: syz [ 1376.534797][T19049] usb 5-1: config 0 descriptor?? [ 1376.804940][ T330] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1377.195034][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.205896][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.215446][ T330] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1377.224271][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.232589][ T330] usb 2-1: config 0 descriptor?? [ 1377.375018][ T2876] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1377.587701][ T5427] loop3: detected capacity change from 0 to 512 [ 1377.670351][ T5427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1377.684841][ T5427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1377.699344][ T5427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1377.713200][ T5427] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1377.725838][ T5427] EXT4-fs (loop3): 1 orphan inode deleted [ 1377.731362][ T5427] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 1377.756523][ T2876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1377.767803][ T2876] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1377.785156][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 1377.790962][ T330] usbhid: probe of 2-1:0.0 failed with error -71 [ 1377.797765][ T330] usb 2-1: USB disconnect, device number 31 [ 1377.935013][ T2876] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1377.943918][ T2876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.951869][ T2876] usb 1-1: Product: syz [ 1377.955991][ T2876] usb 1-1: Manufacturer: syz [ 1377.960408][ T2876] usb 1-1: SerialNumber: syz [ 1377.965801][ T2876] usb 1-1: config 0 descriptor?? [ 1378.015753][ T5431] bpf_get_probe_write_proto: 6 callbacks suppressed [ 1378.015764][ T5431] syz-executor.2[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1378.022201][ T5431] syz-executor.2[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1378.034932][ T5431] syz-executor.2[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1378.046817][ T5431] syz-executor.2[5431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1378.445670][T19049] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 1378.446193][ T5448] loop1: detected capacity change from 0 to 256 [ 1378.458473][T19049] usb 5-1: USB disconnect, device number 37 [ 1378.475957][ T2876] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 1378.484824][ T2876] usb 1-1: USB disconnect, device number 23 [ 1378.747933][ T5455] overlayfs: filesystem on './file1' not supported [ 1378.908852][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1378.908865][ T30] audit: type=1400 audit(1718779600.007:1010): avc: denied { name_bind } for pid=5459 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1379.234948][T19049] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1379.264940][T24836] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1379.445017][ T2852] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1379.595005][T19049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1379.606021][T19049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1379.617043][T19049] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1379.629732][T19049] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1379.638618][T19049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.644964][ T2876] Bluetooth: hci0: command 0x1003 tx timeout [ 1379.647030][T19049] usb 5-1: config 0 descriptor?? [ 1379.652308][T24836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.667707][T24836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1379.667724][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1379.675218][ T5460] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1379.677349][T24836] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1379.685019][ T2852] usb 1-1: Using ep0 maxpacket: 32 [ 1379.690029][T24836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.711991][T24836] usb 3-1: config 0 descriptor?? [ 1379.815032][ T2852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1379.826059][ T2852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1379.837076][ T2852] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1379.845932][ T2852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.854149][ T2852] usb 1-1: config 0 descriptor?? [ 1379.875042][ T5480] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1379.895242][ T2852] hub 1-1:0.0: USB hub found [ 1380.114995][ T2852] hub 1-1:0.0: 2 ports detected [ 1380.135553][T19049] plantronics 0003:047F:FFFF.00DD: unknown main item tag 0x0 [ 1380.142927][T19049] plantronics 0003:047F:FFFF.00DD: No inputs registered, leaving [ 1380.151385][T19049] plantronics 0003:047F:FFFF.00DD: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1380.285098][T24836] usbhid 3-1:0.0: can't add hid device: -71 [ 1380.291259][T24836] usbhid: probe of 3-1:0.0 failed with error -71 [ 1380.302689][T24836] usb 3-1: USB disconnect, device number 19 [ 1380.604981][ T2852] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1380.606263][ T2798] usb 5-1: USB disconnect, device number 38 [ 1380.611214][ T2852] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1380.724957][ T2852] usbhid 1-1:0.0: can't add hid device: -71 [ 1380.730730][ T2852] usbhid: probe of 1-1:0.0 failed with error -71 [ 1380.765525][ T2852] usb 1-1: USB disconnect, device number 24 [ 1381.194379][ T5512] loop4: detected capacity change from 0 to 512 [ 1381.215964][ T5512] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1381.228263][ T5509] loop1: detected capacity change from 0 to 40427 [ 1381.235095][T24836] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1381.319935][ T30] audit: type=1400 audit(1718779602.407:1011): avc: denied { mounton } for pid=5505 comm="syz-executor.0" path="/root/syzkaller-testdir1609717826/syzkaller.M6tbnl/31/file0" dev="sda1" ino=1952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 1381.356076][ T5509] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 1381.366395][ T5509] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1381.388087][ T5509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1381.406718][ T5512] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1381.421349][ T5512] EXT4-fs (loop4): 1 truncate cleaned up [ 1381.426356][ T5509] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1381.427159][ T5512] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1381.433682][ T5509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1381.456639][ T5512] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 1381.468818][ T5512] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 1381.477841][ T5512] EXT4-fs error (device loop4): ext4_xattr_block_get:546: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 1381.490375][ T5512] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 1381.595085][T24836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1381.606122][T24836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1381.617508][T24836] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1381.626429][T24836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.634834][T24836] usb 3-1: config 0 descriptor?? [ 1381.715427][ T2852] Bluetooth: hci0: command 0x1001 tx timeout [ 1381.725488][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1381.992314][ T5527] 9pnet: Insufficient options for proto=fd [ 1382.018723][ T5225] attempt to access beyond end of device [ 1382.018723][ T5225] loop1: rw=524288, want=45072, limit=40427 [ 1382.035167][ T5225] attempt to access beyond end of device [ 1382.035167][ T5225] loop1: rw=0, want=45072, limit=40427 [ 1382.070272][ T2849] attempt to access beyond end of device [ 1382.070272][ T2849] loop1: rw=2049, want=41056, limit=40427 [ 1382.252630][ T5543] loop0: detected capacity change from 0 to 512 [ 1382.295727][ T5543] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1382.304933][ T5543] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (1540000) [ 1382.324776][ T5543] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1382.334979][T24836] hid-led: probe of 0003:27B8:01ED.00DE failed with error -71 [ 1382.343098][T24836] usb 3-1: USB disconnect, device number 20 [ 1382.363235][ T5546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.370305][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.377768][ T5546] device bridge_slave_0 entered promiscuous mode [ 1382.395257][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.402307][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.411264][ T5546] device bridge_slave_1 entered promiscuous mode [ 1382.479360][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.486230][ T5546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.493328][ T5546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.500129][ T5546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.528644][ T2798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1382.536906][ T2798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.544039][ T2798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.557043][ T5553] loop0: detected capacity change from 0 to 40427 [ 1382.568202][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1382.576121][T24836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.582942][T24836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.590146][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1382.595814][ T5553] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 1382.599100][T24836] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.604415][ T5553] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1382.611240][T24836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.611573][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1382.622331][ T5553] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1382.634303][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1382.653536][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1382.675077][ T4773] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1382.677425][ T5546] device veth0_vlan entered promiscuous mode [ 1382.683433][ T5553] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1382.694792][ T5546] device veth1_macvtap entered promiscuous mode [ 1382.701812][ T5553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1382.710219][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1382.718012][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1382.725311][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1382.732648][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1382.750958][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1382.759229][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1382.786097][T24555] device bridge_slave_1 left promiscuous mode [ 1382.792042][T24555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.800398][T24555] device bridge_slave_0 left promiscuous mode [ 1382.806972][T24555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.815274][T24555] device veth1_macvtap left promiscuous mode [ 1382.821092][T24555] device veth0_vlan left promiscuous mode [ 1382.973844][ T4773] usb 5-1: Using ep0 maxpacket: 16 [ 1383.095422][ T4773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.108309][ T4773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.120351][ T4773] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1383.133429][ T4773] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1383.142514][ T4773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.152936][ T4773] usb 5-1: config 0 descriptor?? [ 1383.285094][ T4998] attempt to access beyond end of device [ 1383.285094][ T4998] loop0: rw=524288, want=45072, limit=40427 [ 1383.296431][ T4998] attempt to access beyond end of device [ 1383.296431][ T4998] loop0: rw=0, want=45072, limit=40427 [ 1383.316110][T24555] attempt to access beyond end of device [ 1383.316110][T24555] loop0: rw=2049, want=41056, limit=40427 [ 1383.493956][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.500877][ T5579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.508178][ T5579] device bridge_slave_0 entered promiscuous mode [ 1383.515168][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.522005][ T5579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.529345][ T5579] device bridge_slave_1 entered promiscuous mode [ 1383.544944][T19049] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1383.578876][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.585744][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.592810][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.599619][ T5579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.637148][ T2852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1383.644720][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.652497][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.659591][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.659822][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1383.667211][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.681272][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.688343][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.695376][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.702370][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.709449][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.716537][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.723577][ T4773] microsoft 0003:045E:07DA.00DF: unknown main item tag 0x0 [ 1383.730870][ T4773] microsoft 0003:045E:07DA.00DF: No inputs registered, leaving [ 1383.738650][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1383.738675][ T4773] microsoft 0003:045E:07DA.00DF: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1383.746959][ T2797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1383.757891][ T4773] microsoft 0003:045E:07DA.00DF: no inputs found [ 1383.764484][ T2797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1383.770867][ T4773] microsoft 0003:045E:07DA.00DF: could not initialize ff, continuing anyway [ 1383.778339][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1383.794258][ T2797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1383.795168][ T2876] Bluetooth: hci0: command 0x1009 tx timeout [ 1383.801109][ T2797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1383.823725][ T5579] device veth0_vlan entered promiscuous mode [ 1383.833639][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1383.843777][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1383.851517][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1383.859145][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1383.866387][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1383.874046][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1383.883270][ T2852] usb 5-1: USB disconnect, device number 39 [ 1383.895289][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1383.903676][ T5579] device veth1_macvtap entered promiscuous mode [ 1383.912936][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1383.923115][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1383.955084][T19049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1383.965953][T19049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1383.975529][T19049] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1383.984403][T19049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.992784][T24555] device bridge_slave_1 left promiscuous mode [ 1383.999882][T24555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.007300][T19049] usb 3-1: config 0 descriptor?? [ 1384.012971][T24555] device bridge_slave_0 left promiscuous mode [ 1384.019240][T24555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.028010][T24555] device veth1_macvtap left promiscuous mode [ 1384.033844][T24555] device veth0_vlan left promiscuous mode [ 1384.039599][T14664] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1384.414999][T14664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.425735][T14664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.435289][T14664] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1384.444083][T14664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.453593][T14664] usb 2-1: config 0 descriptor?? [ 1384.475202][T19049] hid (null): bogus close delimiter [ 1384.918396][ T5608] loop0: detected capacity change from 0 to 1024 [ 1384.955729][ T5608] EXT4-fs (loop0): Ignoring removed orlov option [ 1384.961955][ T5608] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1384.970282][ T5608] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 1384.978293][ T5608] System zones: 0-1, 3-36 [ 1384.983284][ T5608] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1385.005904][T19049] usb 3-1: string descriptor 0 read error: -71 [ 1385.025000][T19049] uclogic 0003:256C:006D.00E0: failed retrieving string descriptor #200: -71 [ 1385.033637][T19049] uclogic 0003:256C:006D.00E0: failed retrieving pen parameters: -71 [ 1385.041567][T19049] uclogic 0003:256C:006D.00E0: failed probing pen v2 parameters: -71 [ 1385.049442][T19049] uclogic 0003:256C:006D.00E0: failed probing parameters: -71 [ 1385.056957][T19049] uclogic: probe of 0003:256C:006D.00E0 failed with error -71 [ 1385.064810][T19049] usb 3-1: USB disconnect, device number 21 [ 1385.144983][T14664] hid-led: probe of 0003:27B8:01ED.00E1 failed with error -71 [ 1385.153104][T14664] usb 2-1: USB disconnect, device number 32 [ 1385.281843][ T5622] 9pnet: Insufficient options for proto=fd [ 1385.966401][ T5642] loop0: detected capacity change from 0 to 1024 [ 1386.015786][ T5642] EXT4-fs (loop0): Ignoring removed orlov option [ 1386.022097][ T5642] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1386.033473][ T5642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 1386.041888][ T5642] System zones: 0-1, 3-36 [ 1386.047038][ T5642] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,init_itable=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 1386.997421][ T5670] loop0: detected capacity change from 0 to 512 [ 1387.035777][ T5670] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1387.047091][ T5670] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (1540000) [ 1387.057032][ T5670] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1387.407178][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.414010][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.421362][ T5693] device bridge_slave_0 entered promiscuous mode [ 1387.430425][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.437341][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.444343][ T5693] device bridge_slave_1 entered promiscuous mode [ 1387.487283][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.494118][ T5693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.501249][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.508020][ T5693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.515175][T14664] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1387.532727][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1387.540275][ T2876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.547737][ T2876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.565879][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1387.573785][ T2876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.580631][ T2876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.587798][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1387.595784][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.602603][ T2876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.609812][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1387.617533][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1387.629731][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1387.641473][ T5693] device veth0_vlan entered promiscuous mode [ 1387.647934][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1387.655640][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1387.662763][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1387.676264][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1387.685253][ T5693] device veth1_macvtap entered promiscuous mode [ 1387.694173][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1387.707375][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1387.750219][ T5701] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1387.759435][T14664] usb 5-1: Using ep0 maxpacket: 8 [ 1387.788530][ T5707] loop2: detected capacity change from 0 to 512 [ 1387.805875][T24555] device bridge_slave_1 left promiscuous mode [ 1387.811841][T24555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.819862][ T5707] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1387.829273][T24555] device bridge_slave_0 left promiscuous mode [ 1387.835364][ T5707] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (1540000) [ 1387.847554][T24555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.854604][ T5707] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1387.864494][T24555] device veth1_macvtap left promiscuous mode [ 1387.870578][T24555] device veth0_vlan left promiscuous mode [ 1387.915007][T14664] usb 5-1: config 0 has no interfaces? [ 1388.075083][T14664] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1388.084113][T14664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.092087][T14664] usb 5-1: Product: syz [ 1388.097798][T14664] usb 5-1: Manufacturer: syz [ 1388.102268][T14664] usb 5-1: SerialNumber: syz [ 1388.107858][T14664] usb 5-1: config 0 descriptor?? [ 1388.252810][ T5732] 9pnet: Insufficient options for proto=fd [ 1388.371565][ T2876] usb 5-1: USB disconnect, device number 40 [ 1389.032334][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.039358][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.046908][ T5760] device bridge_slave_0 entered promiscuous mode [ 1389.053852][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.060917][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.068502][ T5760] device bridge_slave_1 entered promiscuous mode [ 1389.113906][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.120899][ T5760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.127975][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.134739][ T5760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.156576][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1389.163952][ T2876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.172098][ T2876] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.196053][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1389.204176][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1389.211957][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1389.219161][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1389.226387][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1389.234288][ T2876] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.241041][ T2876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.248442][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1389.256426][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.263244][ T2876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.271073][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1389.278806][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1389.290836][ T5760] device veth0_vlan entered promiscuous mode [ 1389.301998][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1389.311212][ T5760] device veth1_macvtap entered promiscuous mode [ 1389.321099][ T2876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1389.329140][T24836] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1389.341568][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1389.349721][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1389.447819][ T5775] loop2: detected capacity change from 0 to 40427 [ 1389.495560][ T5775] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 1389.502027][ T5775] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1389.512340][ T5775] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1389.519055][ T1363] device bridge_slave_1 left promiscuous mode [ 1389.525248][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.532996][ T1363] device bridge_slave_0 left promiscuous mode [ 1389.540118][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.549153][ T5775] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1389.556200][ T5775] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1389.556217][ T1363] device veth1_macvtap left promiscuous mode [ 1389.569471][ T2797] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1389.577263][ T1363] device veth0_vlan left promiscuous mode [ 1389.724996][T24836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.748134][ T5784] loop4: detected capacity change from 0 to 256 [ 1389.934991][ T2797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.975271][T24836] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1389.995187][T24836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.037496][ T5789] overlayfs: filesystem on './file1' not supported [ 1390.058662][T24836] usb 1-1: Product: syz [ 1390.079155][T24836] usb 1-1: Manufacturer: syz [ 1390.101289][T24836] usb 1-1: SerialNumber: syz [ 1390.130315][T24836] usb 1-1: config 0 descriptor?? [ 1390.130432][ T2797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.147116][ T2797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1390.159759][ T2797] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1390.168949][ T2797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.182859][ T2797] usb 4-1: config 0 descriptor?? [ 1390.283178][ T5760] attempt to access beyond end of device [ 1390.283178][ T5760] loop2: rw=524288, want=45072, limit=40427 [ 1390.295286][ T5760] attempt to access beyond end of device [ 1390.295286][ T5760] loop2: rw=0, want=45072, limit=40427 [ 1390.385184][ T1363] attempt to access beyond end of device [ 1390.385184][ T1363] loop2: rw=2049, want=41056, limit=40427 [ 1390.415130][T24836] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 1390.422231][T24836] usb 1-1: USB disconnect, device number 25 [ 1390.591354][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.598412][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.605923][ T5793] device bridge_slave_0 entered promiscuous mode [ 1390.612903][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.620244][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.627735][ T5793] device bridge_slave_1 entered promiscuous mode [ 1390.666429][ T2797] wacom 0003:056A:00B3.00E2: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 1390.681067][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 1390.687952][ T5793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1390.695053][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.701896][ T5793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1390.725483][ T2797] wacom 0003:056A:00B3.00E2: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.3-1/input0 [ 1390.745560][ T2797] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B3.00E2/input/input132 [ 1390.773387][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1390.780824][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1390.789264][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1390.798120][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1390.805919][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1390.981525][ T4773] usb 4-1: USB disconnect, device number 24 [ 1391.032344][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1391.045289][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1391.053563][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1391.061693][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1391.071305][ T5793] device veth0_vlan entered promiscuous mode [ 1391.088899][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1391.098619][ T5793] device veth1_macvtap entered promiscuous mode [ 1391.109806][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1391.123756][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1391.156812][ T5809] 9pnet: Insufficient options for proto=fd [ 1391.179259][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.186526][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.193658][ T5806] device bridge_slave_0 entered promiscuous mode [ 1391.202120][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.209015][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.216428][ T5806] device bridge_slave_1 entered promiscuous mode [ 1391.237419][ T1363] device bridge_slave_1 left promiscuous mode [ 1391.243364][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.250608][ T1363] device bridge_slave_0 left promiscuous mode [ 1391.256670][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.264152][ T1363] device veth1_macvtap left promiscuous mode [ 1391.270002][ T1363] device veth0_vlan left promiscuous mode [ 1391.390949][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1391.398358][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1391.408308][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1391.416501][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1391.424414][T24836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.431181][T24836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.434958][ T2797] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1391.438535][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1391.454737][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1391.463092][ T1709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1391.471151][ T1709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.478011][ T1709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.493286][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1391.501359][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1391.509426][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1391.519912][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1391.537173][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1391.545617][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1391.556332][ T5806] device veth0_vlan entered promiscuous mode [ 1391.562632][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1391.602825][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1391.616771][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1391.685377][ T2797] usb 3-1: Using ep0 maxpacket: 8 [ 1391.727617][ T5806] device veth1_macvtap entered promiscuous mode [ 1391.742697][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1391.770360][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1391.785723][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1391.802401][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1391.810842][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1391.844987][ T2797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1391.927212][ T5828] loop4: detected capacity change from 0 to 256 [ 1392.005192][ T2797] usb 3-1: config 0 has no interfaces? [ 1392.121458][ T5836] overlayfs: filesystem on './file1' not supported [ 1392.235003][ T2876] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1392.324930][T19049] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1392.395025][ T2797] usb 3-1: string descriptor 0 read error: -22 [ 1392.401041][ T2797] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1392.410243][ T2797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.418768][ T2797] usb 3-1: config 0 descriptor?? [ 1392.485365][ T1363] device bridge_slave_1 left promiscuous mode [ 1392.491310][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.498597][ T1363] device bridge_slave_0 left promiscuous mode [ 1392.504505][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.512300][ T1363] device veth1_macvtap left promiscuous mode [ 1392.518209][ T1363] device veth0_vlan left promiscuous mode [ 1392.624997][ T2876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.656464][ T2798] usb 3-1: USB disconnect, device number 22 [ 1392.664956][ T4773] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1392.685044][T19049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1392.696415][T19049] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1392.707615][T19049] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1392.720722][T19049] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.729815][T19049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.738837][T19049] usb 2-1: config 0 descriptor?? [ 1392.755410][ T5834] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1392.825033][ T2876] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1392.834008][ T2876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.844297][ T2876] usb 1-1: Product: syz [ 1392.849725][ T2876] usb 1-1: Manufacturer: syz [ 1392.854175][ T2876] usb 1-1: SerialNumber: syz [ 1392.859522][ T2876] usb 1-1: config 0 descriptor?? [ 1393.115141][ T2876] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 1393.122260][ T2876] usb 1-1: USB disconnect, device number 26 [ 1393.128115][ T4773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.139315][ T4773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.149336][ T4773] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1393.158331][ T4773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.168017][ T4773] usb 4-1: config 0 descriptor?? [ 1393.215861][T19049] plantronics 0003:047F:FFFF.00E3: unknown main item tag 0x0 [ 1393.223229][T19049] plantronics 0003:047F:FFFF.00E3: No inputs registered, leaving [ 1393.231562][T19049] plantronics 0003:047F:FFFF.00E3: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1393.576337][ T2798] usb 2-1: USB disconnect, device number 33 [ 1393.645196][ T4773] hid (null): bogus close delimiter [ 1393.914998][ T4773] usb 4-1: string descriptor 0 read error: -71 [ 1393.935014][ T4773] uclogic 0003:256C:006D.00E4: failed retrieving string descriptor #200: -71 [ 1393.943645][ T4773] uclogic 0003:256C:006D.00E4: failed retrieving pen parameters: -71 [ 1393.951552][ T4773] uclogic 0003:256C:006D.00E4: failed probing pen v2 parameters: -71 [ 1393.959453][ T4773] uclogic 0003:256C:006D.00E4: failed probing parameters: -71 [ 1393.966755][ T4773] uclogic: probe of 0003:256C:006D.00E4 failed with error -71 [ 1393.974601][ T4773] usb 4-1: USB disconnect, device number 25 [ 1394.045237][T24836] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1394.445226][T24836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1394.645097][T24836] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1394.654014][T24836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.661797][T24836] usb 5-1: Product: syz [ 1394.664934][T14664] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1394.665817][T24836] usb 5-1: Manufacturer: syz [ 1394.677624][T24836] usb 5-1: SerialNumber: syz [ 1394.682502][T24836] usb 5-1: config 0 descriptor?? [ 1394.844219][ T5883] loop1: detected capacity change from 0 to 128 [ 1394.887033][ T5883] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1394.897452][ T5883] ext4 filesystem being mounted at /root/syzkaller-testdir1240446308/syzkaller.pP5Kfr/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1394.905104][T14664] usb 4-1: Using ep0 maxpacket: 8 [ 1394.945030][T24836] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 1394.952670][T24836] usb 5-1: USB disconnect, device number 41 [ 1395.094983][T14664] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1395.135033][T19049] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1395.342013][T14664] usb 4-1: config 0 has no interfaces? [ 1395.585021][T14664] usb 4-1: string descriptor 0 read error: -22 [ 1395.591160][T14664] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1395.600044][T14664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.608323][T14664] usb 4-1: config 0 descriptor?? [ 1395.665004][T19049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.675909][T19049] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.685484][T19049] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1395.698060][T19049] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 1395.706903][T19049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.715297][T19049] usb 3-1: config 0 descriptor?? [ 1395.847090][ T2797] usb 4-1: USB disconnect, device number 26 [ 1396.039147][ T5910] loop4: detected capacity change from 0 to 256 [ 1396.233365][ T5912] overlayfs: filesystem on './file1' not supported [ 1396.331470][T14664] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1396.339787][T19049] wacom 0003:056A:00B3.00E5: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 1396.349620][T19049] wacom 0003:056A:00B3.00E5: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.2-1/input0 [ 1396.361375][T19049] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B3.00E5/input/input135 [ 1396.478886][T19049] usb 3-1: USB disconnect, device number 23 [ 1396.595775][T14664] usb 2-1: Using ep0 maxpacket: 16 [ 1396.725193][T14664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.735943][T14664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.745428][T14664] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1396.758064][T14664] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1396.766863][T14664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.775223][T14664] usb 2-1: config 0 descriptor?? [ 1397.073533][ T5925] fuse: Bad value for 'fd' [ 1397.254951][T24836] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1397.325770][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.332835][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.339886][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.346881][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.354104][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.361188][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.368203][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.375232][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.382223][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.389445][T14664] microsoft 0003:045E:07DA.00E6: unknown main item tag 0x0 [ 1397.396830][T14664] microsoft 0003:045E:07DA.00E6: No inputs registered, leaving [ 1397.404651][T14664] microsoft 0003:045E:07DA.00E6: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1397.406782][ T5929] 9pnet: Insufficient options for proto=fd [ 1397.415912][T14664] microsoft 0003:045E:07DA.00E6: no inputs found [ 1397.427725][T14664] microsoft 0003:045E:07DA.00E6: could not initialize ff, continuing anyway [ 1397.475513][ T4773] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1397.524949][T24836] usb 3-1: Using ep0 maxpacket: 8 [ 1397.528561][T14664] usb 2-1: USB disconnect, device number 34 [ 1397.675445][ T5934] loop0: detected capacity change from 0 to 2048 [ 1397.725102][T24836] usb 3-1: config 0 has no interfaces? [ 1397.864000][ T5936] loop4: detected capacity change from 0 to 40427 [ 1397.885021][ T4773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1397.894562][T24836] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1397.903370][T24836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.911199][T24836] usb 3-1: Product: syz [ 1397.915756][T24836] usb 3-1: Manufacturer: syz [ 1397.920227][T24836] usb 3-1: SerialNumber: syz [ 1397.924632][ T5936] F2FS-fs (loop4): Invalid gid value -1 [ 1397.930721][T24836] usb 3-1: config 0 descriptor?? [ 1398.064986][ T4773] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1398.073840][ T4773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.096644][ T4773] usb 4-1: Product: syz [ 1398.100675][ T4773] usb 4-1: Manufacturer: syz [ 1398.105248][ T4773] usb 4-1: SerialNumber: syz [ 1398.115127][ T4773] usb 4-1: config 0 descriptor?? [ 1398.176037][T14664] usb 3-1: USB disconnect, device number 24 [ 1398.375056][ T4773] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 1398.382608][ T4773] usb 4-1: USB disconnect, device number 27 [ 1398.664950][T14664] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1398.833820][ T5964] fuse: Bad value for 'fd' [ 1399.144934][T14664] usb 1-1: Using ep0 maxpacket: 8 [ 1399.343402][ T5979] loop3: detected capacity change from 0 to 2048 [ 1399.484977][T14664] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1399.556472][ T5977] loop1: detected capacity change from 0 to 40427 [ 1399.586307][ T5977] F2FS-fs (loop1): Invalid gid value -1 [ 1399.595051][T14664] usb 1-1: config 0 has no interfaces? [ 1399.834931][ T4773] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1399.844941][T14664] usb 1-1: string descriptor 0 read error: -22 [ 1399.850945][T14664] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1399.864912][T14664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.873383][T14664] usb 1-1: config 0 descriptor?? [ 1400.035471][ T5994] loop4: detected capacity change from 0 to 256 [ 1400.118541][T24836] usb 1-1: USB disconnect, device number 27 [ 1400.217632][ T6004] overlayfs: filesystem on './file1' not supported [ 1400.227880][ T4773] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1400.405016][ T4773] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1400.414011][ T4773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.422126][ T4773] usb 3-1: Product: syz [ 1400.426362][ T4773] usb 3-1: Manufacturer: syz [ 1400.430813][ T4773] usb 3-1: SerialNumber: syz [ 1400.436076][ T4773] usb 3-1: config 0 descriptor?? [ 1400.534953][T14664] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1400.695043][ T4773] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 1400.702233][ T4773] usb 3-1: USB disconnect, device number 25 [ 1400.925072][T14664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.935877][T14664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.945753][T14664] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1400.954596][T14664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.963423][T14664] usb 4-1: config 0 descriptor?? [ 1401.096286][ T6020] fuse: Invalid rootmode [ 1401.246041][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1401.959964][T14664] uclogic 0003:5543:0522.00E7: unknown main item tag 0x0 [ 1401.989505][T14664] uclogic 0003:5543:0522.00E7: unknown main item tag 0x0 [ 1402.095117][T14664] uclogic 0003:5543:0522.00E7: unknown main item tag 0x0 [ 1402.102103][T14664] uclogic 0003:5543:0522.00E7: unknown main item tag 0x0 [ 1402.113273][T14664] uclogic 0003:5543:0522.00E7: unknown main item tag 0x0 [ 1402.120599][T14664] uclogic 0003:5543:0522.00E7: No inputs registered, leaving [ 1402.128498][T14664] uclogic 0003:5543:0522.00E7: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 1402.223924][T14664] usb 4-1: USB disconnect, device number 28 [ 1402.536447][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.543500][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.553694][ T6059] device bridge_slave_0 entered promiscuous mode [ 1402.560132][ T2876] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1402.578698][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.586388][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.605835][ T6064] fuse: Invalid rootmode [ 1402.619299][ T6059] device bridge_slave_1 entered promiscuous mode [ 1402.830676][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.837651][ T6059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.844715][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.851542][ T6059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.871091][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1402.879441][T19049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.884981][ T2876] usb 2-1: device descriptor read/64, error -71 [ 1402.896833][T19049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.921068][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1402.937120][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.943983][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.951990][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1402.961246][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.968126][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1403.057963][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1403.075365][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1403.098805][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1403.120790][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1403.129411][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1403.138250][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1403.157917][ T6059] device veth0_vlan entered promiscuous mode [ 1403.245233][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1403.265481][ T6059] device veth1_macvtap entered promiscuous mode [ 1403.342650][ T2876] usb 2-1: device descriptor read/64, error -71 [ 1403.384153][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1403.401369][T14664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1403.454469][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1403.466469][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1403.676569][ T2876] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1403.724614][ T6098] loop2: detected capacity change from 0 to 128 [ 1403.759215][ T6098] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1403.772785][ T6098] ext4 filesystem being mounted at /root/syzkaller-testdir3673014561/syzkaller.RjTjHQ/2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1403.817645][ T1363] device bridge_slave_1 left promiscuous mode [ 1403.823722][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.845000][ T1363] device bridge_slave_0 left promiscuous mode [ 1403.861423][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.878825][ T1363] device veth1_macvtap left promiscuous mode [ 1403.884649][ T1363] device veth0_vlan left promiscuous mode [ 1403.984913][ T2876] usb 2-1: device descriptor read/64, error -71 [ 1403.984970][T19049] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1404.202932][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.209877][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.217147][ T6118] device bridge_slave_0 entered promiscuous mode [ 1404.223801][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.230948][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.238392][ T6118] device bridge_slave_1 entered promiscuous mode [ 1404.288001][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.294844][ T6118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.295025][ T60] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1404.301967][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.316115][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.336520][ T2797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1404.343979][ T2797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.351334][ T2797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.365532][T18483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1404.373485][T18483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.375035][T19049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.380335][T18483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1404.391415][T19049] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.407676][T19049] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1404.408206][T18483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1404.416448][T19049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.424282][ T2876] usb 2-1: device descriptor read/64, error -71 [ 1404.432748][T19049] usb 4-1: config 0 descriptor?? [ 1404.438744][T18483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.449776][T18483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.457079][T18483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1404.475537][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1404.483778][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.493382][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1404.501758][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1404.515954][ T6118] device veth0_vlan entered promiscuous mode [ 1404.525225][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1404.532835][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1404.540623][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1404.548529][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1404.556938][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1404.564161][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1404.575930][ T6118] device veth1_macvtap entered promiscuous mode [ 1404.585053][ T2876] usb usb2-port1: attempt power cycle [ 1404.591264][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1404.598777][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1404.607070][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1404.615195][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1404.623164][ T4773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1404.705016][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1404.715894][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1404.725469][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1404.734462][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.744519][ T60] usb 1-1: config 0 descriptor?? [ 1404.920497][T19049] uclogic 0003:5543:0522.00E8: unknown main item tag 0x0 [ 1404.929478][ T1363] device bridge_slave_1 left promiscuous mode [ 1404.935461][T19049] uclogic 0003:5543:0522.00E8: unknown main item tag 0x0 [ 1404.940370][ T1363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.949621][T19049] uclogic 0003:5543:0522.00E8: unknown main item tag 0x0 [ 1404.956586][T19049] uclogic 0003:5543:0522.00E8: unknown main item tag 0x0 [ 1404.956829][ T1363] device bridge_slave_0 left promiscuous mode [ 1404.971109][ T1363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.972062][T19049] uclogic 0003:5543:0522.00E8: unknown main item tag 0x0 [ 1404.985616][T19049] uclogic 0003:5543:0522.00E8: No inputs registered, leaving [ 1404.994824][T19049] uclogic 0003:5543:0522.00E8: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 1404.998150][ T1363] device veth1_macvtap left promiscuous mode [ 1405.016088][ T1363] device veth0_vlan left promiscuous mode [ 1405.025046][ T2876] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1405.128430][ T2797] usb 4-1: USB disconnect, device number 29 [ 1405.225088][ T2876] usb 2-1: device descriptor read/8, error -71 [ 1405.445106][ T2876] usb 2-1: device descriptor read/8, error -71 [ 1405.465044][ T60] usb 1-1: language id specifier not provided by device, defaulting to English [ 1405.554642][ T6131] loop2: detected capacity change from 0 to 40427 [ 1405.595840][ T6131] F2FS-fs (loop2): Invalid gid value -1 [ 1405.822767][ T6148] loop3: detected capacity change from 0 to 40427 [ 1405.865637][ T6148] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1405.872085][ T6148] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1405.887249][ T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00E9/input/input139 [ 1405.900306][ T60] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.00E9/input/input140 [ 1405.913479][ T60] uclogic 0003:256C:006D.00E9: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1405.928150][ T6148] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1405.934936][ T2876] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1405.968587][ T6148] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1405.975464][ T6148] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1406.089313][ T330] usb 1-1: USB disconnect, device number 28 [ 1406.175061][ T2876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1406.248688][ T6161] overlayfs: failed to resolve './file2': -2 [ 1406.304660][ T6161] loop2: detected capacity change from 0 to 2048 [ 1406.465691][ T6163] loop4: detected capacity change from 0 to 128 [ 1406.496981][ T5155] attempt to access beyond end of device [ 1406.496981][ T5155] loop3: rw=524288, want=45072, limit=40427 [ 1406.505024][ T2876] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1406.510839][ T5155] attempt to access beyond end of device [ 1406.510839][ T5155] loop3: rw=0, want=45072, limit=40427 [ 1406.517544][ T2876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.531841][ T6163] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1406.535948][ T2876] usb 2-1: Product: syz [ 1406.546479][ T6163] ext4 filesystem being mounted at /root/syzkaller-testdir1119504820/syzkaller.bGBSgp/4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1406.550125][ T2876] usb 2-1: Manufacturer: syz [ 1406.596917][ T2876] usb 2-1: SerialNumber: syz [ 1406.601984][ T2876] usb 2-1: config 0 descriptor?? [ 1406.603264][ T2849] attempt to access beyond end of device [ 1406.603264][ T2849] loop3: rw=2049, want=41056, limit=40427 [ 1406.628946][ T6167] 9pnet: Insufficient options for proto=fd [ 1406.725516][ T6175] loop0: detected capacity change from 0 to 128 [ 1406.749766][ T6175] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1406.756694][ T6175] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1406.775996][ T6175] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 1406.822831][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.829725][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.836935][ T6178] device bridge_slave_0 entered promiscuous mode [ 1406.843630][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.850703][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.854256][ T6175] loop0: detected capacity change from 0 to 512 [ 1406.864143][ T6178] device bridge_slave_1 entered promiscuous mode [ 1406.875043][ T2876] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 1406.882987][ T2876] usb 2-1: USB disconnect, device number 38 [ 1406.895746][ T6175] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 1406.933153][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.940026][ T6178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1406.947122][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.953886][ T6178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.968112][ T6175] fuse: Bad value for 'fd' [ 1406.973767][ T30] audit: type=1326 audit(1718779628.067:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6174 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f310c997f29 code=0x0 [ 1406.982539][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1407.005666][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.014350][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.037524][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1407.045856][T19049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.052697][T19049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1407.060664][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1407.068735][T19049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.075594][T19049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.083777][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1407.091653][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1407.106852][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1407.117939][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.125718][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1407.132979][T19049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1407.146767][ T6178] device veth0_vlan entered promiscuous mode [ 1407.160588][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1407.170193][ T2849] device bridge_slave_1 left promiscuous mode [ 1407.177184][ T2849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.187905][ T2849] device bridge_slave_0 left promiscuous mode [ 1407.196940][ T2849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.208104][ T2849] device veth1_macvtap left promiscuous mode [ 1407.214092][ T2849] device veth0_vlan left promiscuous mode [ 1407.321274][ T6178] device veth1_macvtap entered promiscuous mode [ 1407.332767][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1407.347662][T24836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1507.364840][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1507.371269][ C1] rcu: 1-...!: (9999 ticks this GP) idle=529/0/0x3 softirq=173875/173875 fqs=0 last_accelerate: b045/d755 dyntick_enabled: 1 [ 1507.384104][ C1] (t=10001 jiffies g=200553 q=150) [ 1507.389133][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10001 jiffies! g200553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1507.401371][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=65292 [ 1507.409096][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g200553 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1507.420379][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1507.430199][ C1] rcu: RCU grace-period kthread stack dump: [ 1507.435915][ C1] task:rcu_preempt state:I stack:27976 pid: 14 ppid: 2 flags:0x00004000 [ 1507.444945][ C1] Call Trace: [ 1507.448067][ C1] [ 1507.450851][ C1] __schedule+0xccc/0x1590 [ 1507.455098][ C1] ? __sched_text_start+0x8/0x8 [ 1507.459783][ C1] ? __kasan_check_write+0x14/0x20 [ 1507.464732][ C1] schedule+0x11f/0x1e0 [ 1507.468724][ C1] schedule_timeout+0x18c/0x370 [ 1507.473408][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1507.478444][ C1] ? console_conditional_schedule+0x30/0x30 [ 1507.484171][ C1] ? update_process_times+0x200/0x200 [ 1507.489383][ C1] ? prepare_to_swait_event+0x308/0x320 [ 1507.494761][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 1507.499448][ C1] ? debug_smp_processor_id+0x17/0x20 [ 1507.504652][ C1] ? __note_gp_changes+0x4ab/0x920 [ 1507.509601][ C1] ? rcu_gp_init+0xc30/0xc30 [ 1507.514028][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1507.519063][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 1507.523489][ C1] rcu_gp_kthread+0xa4/0x350 [ 1507.527916][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 1507.532601][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 1507.537118][ C1] ? __kasan_check_read+0x11/0x20 [ 1507.541974][ C1] ? __kthread_parkme+0xb2/0x200 [ 1507.546751][ C1] kthread+0x421/0x510 [ 1507.550654][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 1507.555169][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1507.559593][ C1] ret_from_fork+0x1f/0x30 [ 1507.563848][ C1] [ 1507.566711][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1507.572880][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1507.577935][ C0] NMI backtrace for cpu 0 [ 1507.577947][ C0] CPU: 0 PID: 6189 Comm: syz-executor.3 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 1507.577965][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1507.577975][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 1507.577994][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1507.578007][ C0] RSP: 0018:ffffc900012a7340 EFLAGS: 00000246 [ 1507.578022][ C0] RAX: 0000000000000003 RBX: 1ffff92000254e6c RCX: ffffffff8154fb7f [ 1507.578034][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88813800ce28 [ 1507.578046][ C0] RBP: ffffc900012a73f0 R08: dffffc0000000000 R09: ffffed10270019c6 [ 1507.578057][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1507.578069][ C0] R13: ffff88813800ce28 R14: 0000000000000003 R15: 1ffff92000254e70 [ 1507.578080][ C0] FS: 00007fc10b0286c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1507.578095][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1507.578106][ C0] CR2: 00007fc10b027070 CR3: 000000011e953000 CR4: 00000000003506b0 [ 1507.578121][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1507.578130][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1507.578140][ C0] Call Trace: [ 1507.578145][ C0] [ 1507.578153][ C0] ? show_regs+0x58/0x60 [ 1507.578176][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 1507.578195][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1507.578214][ C0] ? kvm_wait+0x147/0x180 [ 1507.578228][ C0] ? kvm_wait+0x147/0x180 [ 1507.578243][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1507.578260][ C0] ? nmi_handle+0xa8/0x280 [ 1507.578276][ C0] ? kvm_wait+0x147/0x180 [ 1507.578290][ C0] ? default_do_nmi+0x69/0x160 [ 1507.578307][ C0] ? exc_nmi+0xaf/0x120 [ 1507.578322][ C0] ? end_repeat_nmi+0x16/0x31 [ 1507.578339][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1507.578365][ C0] ? kvm_wait+0x147/0x180 [ 1507.578379][ C0] ? kvm_wait+0x147/0x180 [ 1507.578393][ C0] ? kvm_wait+0x147/0x180 [ 1507.578407][ C0] [ 1507.578412][ C0] [ 1507.578417][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1507.578433][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 1507.578449][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1507.578468][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 1507.578487][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1507.578505][ C0] ? page_ext_put+0x1c/0x30 [ 1507.578523][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 1507.578541][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1507.578559][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1507.578578][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 1507.578596][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x8d4 [ 1507.578611][ C0] bpf_trace_run2+0x159/0x210 [ 1507.578628][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 1507.578644][ C0] ? sock_map_unref+0x352/0x4d0 [ 1507.578661][ C0] ? sock_map_unref+0x352/0x4d0 [ 1507.578677][ C0] __bpf_trace_kfree+0x6f/0x90 [ 1507.578692][ C0] ? sock_map_unref+0x352/0x4d0 [ 1507.578707][ C0] __traceiter_kfree+0x2a/0x40 [ 1507.578721][ C0] ? sock_map_unref+0x352/0x4d0 [ 1507.578736][ C0] kfree+0x1f3/0x220 [ 1507.578753][ C0] sock_map_unref+0x352/0x4d0 [ 1507.578772][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 1507.578790][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x8d4 [ 1507.578803][ C0] bpf_trace_run2+0x159/0x210 [ 1507.578818][ C0] ? xas_create+0x1437/0x15d0 [ 1507.578834][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 1507.578850][ C0] ? ida_alloc_range+0x987/0xa80 [ 1507.578867][ C0] ? ida_alloc_range+0x987/0xa80 [ 1507.578882][ C0] __bpf_trace_kfree+0x6f/0x90 [ 1507.578897][ C0] ? ida_alloc_range+0x987/0xa80 [ 1507.578912][ C0] __traceiter_kfree+0x2a/0x40 [ 1507.578925][ C0] ? ida_alloc_range+0x987/0xa80 [ 1507.578941][ C0] kfree+0x1f3/0x220 [ 1507.578956][ C0] ? xas_nomem+0x19a/0x1d0 [ 1507.578972][ C0] ida_alloc_range+0x987/0xa80 [ 1507.578990][ C0] ? idr_replace+0x230/0x230 [ 1507.579008][ C0] ? __kasan_check_write+0x14/0x20 [ 1507.579023][ C0] ? _copy_from_user+0x96/0xd0 [ 1507.579038][ C0] raw_ioctl+0x1a38/0x3510 [ 1507.579056][ C0] ? ioctl_has_perm+0x3f5/0x560 [ 1507.579072][ C0] ? audio_source_pcm_show+0xd0/0xd0 [ 1507.579088][ C0] ? has_cap_mac_admin+0x3c0/0x3c0 [ 1507.579115][ C0] ? security_file_ioctl+0x84/0xb0 [ 1507.579132][ C0] ? audio_source_pcm_show+0xd0/0xd0 [ 1507.579149][ C0] __se_sys_ioctl+0x114/0x190 [ 1507.579168][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1507.579182][ C0] do_syscall_64+0x3d/0xb0 [ 1507.579197][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1507.579212][ C0] RIP: 0033:0x7fc10bcadc8b [ 1507.579226][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1507.579239][ C0] RSP: 002b:00007fc10b025fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.579254][ C0] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fc10bcadc8b [ 1507.579265][ C0] RDX: 00007fc10b027070 RSI: 0000000041015500 RDI: 0000000000000007 [ 1507.579275][ C0] RBP: 00007fc10b027070 R08: 0000000000000010 R09: 00332e6364755f79 [ 1507.579286][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.579296][ C0] R13: 00007fc10b026040 R14: 0000000020000000 R15: 00007fc10bf11320 [ 1507.579311][ C0] [ 1507.579945][ C1] NMI backtrace for cpu 1 [ 1508.102913][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 1508.113671][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1508.123565][ C1] Call Trace: [ 1508.126691][ C1] [ 1508.129389][ C1] dump_stack_lvl+0x151/0x1b7 [ 1508.133892][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1508.139362][ C1] ? ttwu_do_wakeup+0x187/0x430 [ 1508.144048][ C1] dump_stack+0x15/0x17 [ 1508.148040][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 1508.152826][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1508.158802][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 1508.164098][ C1] ? __kasan_check_write+0x14/0x20 [ 1508.169044][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 1508.173731][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1508.179633][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 1508.185449][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 1508.191350][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 1508.197077][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 1508.202026][ C1] print_cpu_stall+0x315/0x5f0 [ 1508.206625][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 1508.211661][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 1508.217647][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 1508.222683][ C1] update_process_times+0x198/0x200 [ 1508.227716][ C1] tick_sched_timer+0x188/0x240 [ 1508.232403][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 1508.237783][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 1508.242821][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 1508.247766][ C1] ? clockevents_program_event+0x22f/0x300 [ 1508.253406][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 1508.259308][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 1508.264084][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1508.269811][ C1] sysvec_apic_timer_interrupt+0x44/0xc0 [ 1508.275278][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1508.281093][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 1508.285870][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1508.305308][ C1] RSP: 0018:ffffc900001d07c0 EFLAGS: 00000246 [ 1508.311210][ C1] RAX: 0000000000000001 RBX: 1ffff9200003a0fc RCX: 1ffffffff0d1aa9c [ 1508.319021][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 1508.326832][ C1] RBP: ffffc900001d0870 R08: dffffc0000000000 R09: ffffed103ee2715b [ 1508.334642][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1508.342454][ C1] R13: ffff8881f7138ad4 R14: 0000000000000001 R15: 1ffff9200003a100 [ 1508.350276][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1508.356255][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1508.361291][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 1508.367192][ C1] ? kasan_set_track+0x5d/0x70 [ 1508.371791][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1508.378039][ C1] ? rcu_do_batch+0x57a/0xc10 [ 1508.382552][ C1] ? rcu_core_si+0x9/0x10 [ 1508.386721][ C1] ? __do_softirq+0x26d/0x5bf [ 1508.391232][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 1508.395748][ C1] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1508.401385][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1508.407377][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 1508.412150][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1508.417184][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1508.422478][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 1508.427514][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x8d4 [ 1508.432895][ C1] bpf_trace_run2+0x159/0x210 [ 1508.437407][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 1508.442092][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1508.447388][ C1] ? __kasan_check_write+0x14/0x20 [ 1508.452334][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1508.457195][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1508.462491][ C1] __bpf_trace_kfree+0x6f/0x90 [ 1508.467142][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1508.472384][ C1] __traceiter_kfree+0x2a/0x40 [ 1508.476982][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1508.482278][ C1] kfree+0x1f3/0x220 [ 1508.486009][ C1] ? fib6_nh_release+0x3b4/0x3f0 [ 1508.490783][ C1] ? fib6_info_alloc+0xe0/0xe0 [ 1508.495384][ C1] fib6_info_destroy_rcu+0x168/0x1b0 [ 1508.500505][ C1] ? fib6_info_alloc+0xe0/0xe0 [ 1508.505108][ C1] rcu_do_batch+0x57a/0xc10 [ 1508.509445][ C1] ? local_bh_enable+0x20/0x20 [ 1508.514043][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 1508.519684][ C1] ? note_gp_changes+0x159/0x260 [ 1508.524462][ C1] ? raw_spin_rq_unlock+0x9/0x10 [ 1508.529231][ C1] ? update_blocked_averages+0xfab/0x10d0 [ 1508.534786][ C1] rcu_core+0x517/0x1020 [ 1508.538867][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1508.543902][ C1] rcu_core_si+0x9/0x10 [ 1508.547895][ C1] __do_softirq+0x26d/0x5bf [ 1508.552233][ C1] __irq_exit_rcu+0x50/0xf0 [ 1508.556572][ C1] irq_exit_rcu+0x9/0x10 [ 1508.560650][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1508.566122][ C1] [ 1508.568895][ C1] [ 1508.571673][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1508.577488][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 1508.582873][ C1] Code: 89 de 48 83 e6 08 31 ff e8 f7 30 a7 fc 48 83 e3 08 0f 85 b0 00 00 00 0f 1f 44 00 00 e8 a3 2c a7 fc 0f 00 2d fc 41 c0 00 fb f4 e9 e1 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 1508.602312][ C1] RSP: 0018:ffffc90000157c30 EFLAGS: 000002d3 [ 1508.608214][ C1] RAX: ffffffff84c90abd RBX: 0000000000000000 RCX: ffff8881003362c0 [ 1508.616023][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1508.623838][ C1] RBP: ffffc90000157c70 R08: ffffffff84c90aa9 R09: ffffed1020066c59 [ 1508.631648][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1508.639458][ C1] R13: ffff888101fcf004 R14: dffffc0000000000 R15: ffff8881059b2064 [ 1508.647273][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 1508.652044][ C1] ? acpi_idle_enter+0x40d/0x760 [ 1508.656821][ C1] ? intel_idle_ibrs+0x130/0x130 [ 1508.661590][ C1] cpuidle_enter_state+0x5e1/0x1550 [ 1508.666627][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 1508.671836][ C1] ? menu_enable_device+0x380/0x380 [ 1508.676866][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 1508.681553][ C1] cpuidle_enter+0x5f/0xa0 [ 1508.685806][ C1] do_idle+0x36b/0x5d0 [ 1508.689712][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1508.694746][ C1] cpu_startup_entry+0x18/0x20 [ 1508.699344][ C1] start_secondary+0x2e6/0x3a0 [ 1508.703945][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 1508.709676][ C1] [ 1651.020788][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 246s! [syz-executor.3:6189] [ 1651.029201][ C0] Modules linked in: [ 1651.032930][ C0] CPU: 0 PID: 6189 Comm: syz-executor.3 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 1651.044384][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1651.054285][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 1651.059052][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1651.079015][ C0] RSP: 0018:ffffc900012a7340 EFLAGS: 00000246 [ 1651.084915][ C0] RAX: 0000000000000003 RBX: 1ffff92000254e6c RCX: ffffffff8154fb7f [ 1651.092727][ C0] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff88813800ce28 [ 1651.100538][ C0] RBP: ffffc900012a73f0 R08: dffffc0000000000 R09: ffffed10270019c6 [ 1651.108350][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1651.116166][ C0] R13: ffff88813800ce28 R14: 0000000000000003 R15: 1ffff92000254e70 [ 1651.123974][ C0] FS: 00007fc10b0286c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1651.132741][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.139162][ C0] CR2: 00007fc10b027070 CR3: 000000011e953000 CR4: 00000000003506b0 [ 1651.146975][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1651.154786][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1651.162595][ C0] Call Trace: [ 1651.165721][ C0] [ 1651.168420][ C0] ? show_regs+0x58/0x60 [ 1651.172489][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 1651.177437][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 1651.182557][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 1651.187768][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 1651.192710][ C0] ? clockevents_program_event+0x22f/0x300 [ 1651.198354][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 1651.204256][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 1651.209205][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1651.215106][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 1651.220744][ C0] [ 1651.223523][ C0] [ 1651.226301][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1651.232289][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1651.238380][ C0] ? kvm_wait+0x147/0x180 [ 1651.242530][ C0] ? asm_common_interrupt+0x27/0x40 [ 1651.247566][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 1651.252511][ C0] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1651.258590][ C0] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 1651.264490][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1651.270740][ C0] ? page_ext_put+0x1c/0x30 [ 1651.275078][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 1651.279850][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1651.284887][ C0] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1651.290180][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 1651.295215][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x8d4 [ 1651.300594][ C0] bpf_trace_run2+0x159/0x210 [ 1651.305109][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 1651.309793][ C0] ? sock_map_unref+0x352/0x4d0 [ 1651.314481][ C0] ? sock_map_unref+0x352/0x4d0 [ 1651.319170][ C0] __bpf_trace_kfree+0x6f/0x90 [ 1651.323767][ C0] ? sock_map_unref+0x352/0x4d0 [ 1651.328455][ C0] __traceiter_kfree+0x2a/0x40 [ 1651.333056][ C0] ? sock_map_unref+0x352/0x4d0 [ 1651.337741][ C0] kfree+0x1f3/0x220 [ 1651.341475][ C0] sock_map_unref+0x352/0x4d0 [ 1651.345989][ C0] sock_hash_delete_elem+0x274/0x2f0 [ 1651.351109][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x8d4 [ 1651.356489][ C0] bpf_trace_run2+0x159/0x210 [ 1651.361001][ C0] ? xas_create+0x1437/0x15d0 [ 1651.365517][ C0] ? bpf_trace_run1+0x1c0/0x1c0 [ 1651.370200][ C0] ? ida_alloc_range+0x987/0xa80 [ 1651.374978][ C0] ? ida_alloc_range+0x987/0xa80 [ 1651.379748][ C0] __bpf_trace_kfree+0x6f/0x90 [ 1651.384349][ C0] ? ida_alloc_range+0x987/0xa80 [ 1651.389123][ C0] __traceiter_kfree+0x2a/0x40 [ 1651.393724][ C0] ? ida_alloc_range+0x987/0xa80 [ 1651.398497][ C0] kfree+0x1f3/0x220 [ 1651.402228][ C0] ? xas_nomem+0x19a/0x1d0 [ 1651.406482][ C0] ida_alloc_range+0x987/0xa80 [ 1651.411083][ C0] ? idr_replace+0x230/0x230 [ 1651.415510][ C0] ? __kasan_check_write+0x14/0x20 [ 1651.420458][ C0] ? _copy_from_user+0x96/0xd0 [ 1651.425056][ C0] raw_ioctl+0x1a38/0x3510 [ 1651.429309][ C0] ? ioctl_has_perm+0x3f5/0x560 [ 1651.433995][ C0] ? audio_source_pcm_show+0xd0/0xd0 [ 1651.439122][ C0] ? has_cap_mac_admin+0x3c0/0x3c0 [ 1651.444067][ C0] ? security_file_ioctl+0x84/0xb0 [ 1651.449010][ C0] ? audio_source_pcm_show+0xd0/0xd0 [ 1651.454131][ C0] __se_sys_ioctl+0x114/0x190 [ 1651.458645][ C0] __x64_sys_ioctl+0x7b/0x90 [ 1651.463069][ C0] do_syscall_64+0x3d/0xb0 [ 1651.467326][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1651.473050][ C0] RIP: 0033:0x7fc10bcadc8b [ 1651.477308][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1651.496745][ C0] RSP: 002b:00007fc10b025fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1651.504990][ C0] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fc10bcadc8b [ 1651.512801][ C0] RDX: 00007fc10b027070 RSI: 0000000041015500 RDI: 0000000000000007 [ 1651.520615][ C0] RBP: 00007fc10b027070 R08: 0000000000000010 R09: 00332e6364755f79 [ 1651.528426][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1651.536235][ C0] R13: 00007fc10b026040 R14: 0000000020000000 R15: 00007fc10bf11320 [ 1651.544056][ C0] [ 1651.546913][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1651.551965][ C1] NMI backtrace for cpu 1 [ 1651.551976][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W 5.15.149-syzkaller-00165-g85445b5a2107 #0 [ 1651.551995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1651.552005][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 1651.552026][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 4b 02 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1651.552041][ C1] RSP: 0018:ffffc900001d07c0 EFLAGS: 00000246 [ 1651.552056][ C1] RAX: 0000000000000001 RBX: 1ffff9200003a0fc RCX: 1ffffffff0d1aa9c [ 1651.552069][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7138ad4 [ 1651.552080][ C1] RBP: ffffc900001d0870 R08: dffffc0000000000 R09: ffffed103ee2715b [ 1651.552093][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1651.552105][ C1] R13: ffff8881f7138ad4 R14: 0000000000000001 R15: 1ffff9200003a100 [ 1651.552117][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1651.552132][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.552145][ C1] CR2: 0000001b2dd23000 CR3: 000000011943c000 CR4: 00000000003506a0 [ 1651.552160][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1651.552171][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1651.552182][ C1] Call Trace: [ 1651.552187][ C1] [ 1651.552195][ C1] ? show_regs+0x58/0x60 [ 1651.552213][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 1651.552234][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1651.552255][ C1] ? kvm_wait+0x147/0x180 [ 1651.552270][ C1] ? kvm_wait+0x147/0x180 [ 1651.552285][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1651.552303][ C1] ? nmi_handle+0xa8/0x280 [ 1651.552321][ C1] ? kvm_wait+0x147/0x180 [ 1651.552336][ C1] ? default_do_nmi+0x69/0x160 [ 1651.552354][ C1] ? exc_nmi+0xaf/0x120 [ 1651.552371][ C1] ? end_repeat_nmi+0x16/0x31 [ 1651.552391][ C1] ? kvm_wait+0x147/0x180 [ 1651.552407][ C1] ? kvm_wait+0x147/0x180 [ 1651.552422][ C1] ? kvm_wait+0x147/0x180 [ 1651.552438][ C1] [ 1651.552450][ C1] [ 1651.552455][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1651.552473][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1651.552492][ C1] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 1651.552514][ C1] ? kasan_set_track+0x5d/0x70 [ 1651.552531][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1651.552550][ C1] ? rcu_do_batch+0x57a/0xc10 [ 1651.552568][ C1] ? rcu_core_si+0x9/0x10 [ 1651.552584][ C1] ? __do_softirq+0x26d/0x5bf [ 1651.552600][ C1] ? __irq_exit_rcu+0x50/0xf0 [ 1651.552617][ C1] ? sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1651.552635][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1651.552654][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 1651.552672][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1651.552692][ C1] ? sock_hash_bucket_hash+0x36d/0x7e0 [ 1651.552713][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 1651.552732][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x8d4 [ 1651.552747][ C1] bpf_trace_run2+0x159/0x210 [ 1651.552765][ C1] ? bpf_trace_run1+0x1c0/0x1c0 [ 1651.552783][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1651.552800][ C1] ? __kasan_check_write+0x14/0x20 [ 1651.552818][ C1] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 1651.552836][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1651.552853][ C1] __bpf_trace_kfree+0x6f/0x90 [ 1651.552869][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1651.552885][ C1] __traceiter_kfree+0x2a/0x40 [ 1651.552899][ C1] ? fib6_info_destroy_rcu+0x168/0x1b0 [ 1651.552916][ C1] kfree+0x1f3/0x220 [ 1651.552932][ C1] ? fib6_nh_release+0x3b4/0x3f0 [ 1651.552952][ C1] ? fib6_info_alloc+0xe0/0xe0 [ 1651.552967][ C1] fib6_info_destroy_rcu+0x168/0x1b0 [ 1651.552983][ C1] ? fib6_info_alloc+0xe0/0xe0 [ 1651.552998][ C1] rcu_do_batch+0x57a/0xc10 [ 1651.553020][ C1] ? local_bh_enable+0x20/0x20 [ 1651.553037][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 1651.553056][ C1] ? note_gp_changes+0x159/0x260 [ 1651.553075][ C1] ? raw_spin_rq_unlock+0x9/0x10 [ 1651.553093][ C1] ? update_blocked_averages+0xfab/0x10d0 [ 1651.553116][ C1] rcu_core+0x517/0x1020 [ 1651.553136][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1651.553158][ C1] rcu_core_si+0x9/0x10 [ 1651.553174][ C1] __do_softirq+0x26d/0x5bf [ 1651.553192][ C1] __irq_exit_rcu+0x50/0xf0 [ 1651.553209][ C1] irq_exit_rcu+0x9/0x10 [ 1651.553225][ C1] sysvec_apic_timer_interrupt+0x9a/0xc0 [ 1651.553245][ C1] [ 1651.553249][ C1] [ 1651.553255][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1651.553272][ C1] RIP: 0010:acpi_idle_enter+0x416/0x760 [ 1651.553292][ C1] Code: 89 de 48 83 e6 08 31 ff e8 f7 30 a7 fc 48 83 e3 08 0f 85 b0 00 00 00 0f 1f 44 00 00 e8 a3 2c a7 fc 0f 00 2d fc 41 c0 00 fb f4 e9 e1 00 00 00 49 83 c7 04 4c 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 1651.553306][ C1] RSP: 0018:ffffc90000157c30 EFLAGS: 000002d3 [ 1651.553320][ C1] RAX: ffffffff84c90abd RBX: 0000000000000000 RCX: ffff8881003362c0 [ 1651.553332][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1651.553342][ C1] RBP: ffffc90000157c70 R08: ffffffff84c90aa9 R09: ffffed1020066c59 [ 1651.553355][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1651.553365][ C1] R13: ffff888101fcf004 R14: dffffc0000000000 R15: ffff8881059b2064 [ 1651.553380][ C1] ? acpi_idle_enter+0x3f9/0x760 [ 1651.553397][ C1] ? acpi_idle_enter+0x40d/0x760 [ 1651.553418][ C1] ? intel_idle_ibrs+0x130/0x130 [ 1651.553436][ C1] cpuidle_enter_state+0x5e1/0x1550 [ 1651.553461][ C1] ? cpuidle_enter_s2idle+0x600/0x600 [ 1651.553479][ C1] ? menu_enable_device+0x380/0x380 [ 1651.553498][ C1] ? sched_clock_cpu+0x18/0x3b0 [ 1651.553516][ C1] cpuidle_enter+0x5f/0xa0 [ 1651.553533][ C1] do_idle+0x36b/0x5d0 [ 1651.553551][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1651.553572][ C1] cpu_startup_entry+0x18/0x20 [ 1651.553588][ C1] start_secondary+0x2e6/0x3a0 [ 1651.553605][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 1651.553626][ C1]