last executing test programs: 9.165562177s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="3900000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) 9.14450425s ago: executing program 3: socket$inet6(0xa, 0x4, 0x7fffffff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001ac000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x44, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x451, &(0x7f0000000480)="$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") quotactl$Q_QUOTAON(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c200000008004b0000400000000000069078a3141400ac1e0001070f08e000000200000000ac1e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ppoll(0x0, 0x7000000, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) getsockopt$sock_buf(r4, 0x1, 0x2, &(0x7f0000000300)=""/70, &(0x7f00000001c0)=0x46) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.485571614s ago: executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fspick(r0, &(0x7f0000000340)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@struct={0x0, 0x5, 0x0, 0x4, 0x0, 0x0, [{0x5, 0x1, 0x8}, {0x2, 0x4, 0x9}, {0x4, 0x5, 0xffff20a6}, {0x800a, 0x3, 0x1}, {0x6, 0x5, 0x7}]}]}}, 0x0, 0x62}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r8, 0x1, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000900)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.453200632s ago: executing program 3: r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x80\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r2 = memfd_create(&(0x7f0000000580)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\xf4\b\xe0\xfa\xb1\xd8N\xb2W\x06\xcd\xba{\x99$\xc3\x93u\x86\xfc\xc3\b\x1b\b\x1d\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x05kR\xfc\xcb[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xf5\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\b\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+\x00\x02X\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\vG\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc3\x0e\t&\xbd\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\x8d~\x01\t\x00\x00\xaa\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/\xf2\x1d\xf0`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\xdem\xe3)q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1x\x17/\v0\x9e\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea\x04\xf0\xd0\x00}\xfa}\xf1\x8bz\xca\xad\x8a\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c\x01@JRY\t\x00Pjk\xf7\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xaa\xa4\xb67\x89D\x93L\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xf6\xf6\xa6\x88\xfd\xc2\xa9\x14\xf3\xe1}\r.\a\x97\xf1A\x16\xbb1\xe3\xb7-\x96\xc1\x19\x85\x00\x00\x00\x00\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x800000b) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 5.325666325s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.29381495s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) dup2(r2, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) ptrace(0x10, 0x1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r4 = open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @aes256, 0x0, '\x00', @d}) chdir(&(0x7f0000000300)='./bus\x00') symlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000001180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/254, 0xfe}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.302483092s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 3.288193737s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f0000000040)) 3.26924896s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x0, 0x0) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x40046208, 0x0) 3.257041822s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='ext4_writepages_result\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 3.234116405s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 2.363319269s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x0, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$keyring(0x0, &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chroot(&(0x7f0000000280)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 2.348861311s ago: executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010700020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000000090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="000017000000c4d333"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.041967918s ago: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ppoll(&(0x7f0000000d40)=[{r0}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 1.971337469s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002208000000aa8cc8a9db"], 0x0}, 0x0) 1.428676371s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 1.419168473s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 436.060313ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 425.288945ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) 416.431036ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000700850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 408.238418ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) 326.42338ms ago: executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000d40)=[{r0}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) 250.160892ms ago: executing program 4: syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x6, 0x14f8, &(0x7f0000001540)="$eJzs3AnYjtXWOPC19t63XpKeJFP22uvmSYZNkmRIkiFJkuRIpoSQJElIvGRKQpJ5SjKHZArJPE+Zk+RIkiQkJNn/S+nS+Trf1/f/zjmfc33v+l3XvuzlftZ+1v2u572n63qfb9oNqFi7UrmazAz/EPz1n1QASAGA3gBwLQBEAFAsc7HMF7en15j6j72J+Od6ZMqVrkBcSdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0P22T/guRlm2ZmuM6GWl3yPP/tEzO/2nSoN8m0v+0Tfr/f1D63wdl9X/1Uul/2ib9T9uk/2mb9D9tk/6nbdJ/IdKy/8Ez4wqP/hs8t/5fHAoArnQN/7JxpT9/QgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHShrPhMgMAv82vdF1CCCGEEEIIIYT45wlXXekKhBBCCCGEEEII8a+HoECDgQjSwVWQAukhA1wNGeEayATXQgKug8xwPWSBGyArZIPskANywo2QCywQOGCIITfkgSTcBHnhZsgH+aEAFAQPhaAw3AJF4FYoCrdBMbgdisMdUAJKQikoDXdCGbgLysLdUA7ugfJQASpCJbgXKsN9UAXuh6rwAFSDB6E6PAQ14GGoCY9ALfgL1IZHoQ48BnWhHtSHBtDwf5T/InSCl6AzdIFU6Ard4GXoDj2gJ/SC3vAK9IFXoS+8Bv2gPwyA12EgvAGD4E0YDENgKAyD4TACRsIoGA1jYCy8BePgbRgP78AEmAiTYDJMgakwDd6F6TADZsJ7MAveh9kwB+bCPJgPH8ACWAiL4ENYDB/BElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW+Bi2wjbYDjtgJ+yC3fAJ7IFPYS98Bvvg8//P/DP/Ib89AgIqVGjQYDpMhymYghkwA2bEjJgJM2ECE5gZM2MWzIJZMStmx+yYE3NiLsyFhISMjLkxNyYxiXkxL+bDfFgAC6BHj4WxMBbBW7EoFsViWAyLY3EsgSWxJJbG0lgGy2BZLIvlsByWx/JYESvivXgv3odVsApWxapYDathdayONbAG1sSaWAtrYW2sjXWwDtbFulgf62NDbIiNsBE2xsbYFJtiM2yGLbAFtsSW2ApbYXNsjW2wDbbFttgO22F77IAd8EV8EV/Cl7ALllddsRt2w+7YHXtiL+yFr2AffBVfxdewH/bHAfg6vo5v4CA8jYNxCA7FoVhGjcCROApZjcGxOBbH4Tgcj+NxAk7EiTgZp+BUnIbTcDrOwBn4Hs7C9/F9nINzcB7Ox/m4ABfiIlyEi/EMLsGluAyX4wpciStwNa7B1bgO1+M63IgbcTNuxo/xYxyG23AH7sBduAs/wU/wU/wU++E+3If7cT8ewAN4EA/iITyEh/EwHsEjeBSP4jE8hsfxBJ7EE3gKT+FpPINn8Syew3N4Hp/P+VWtXfnX9gN1kVFGpVPpVIpKURlUBpVRZVSZVCaVUAmVWWVWWVQWlVVlVdlVdpVT5VS5VC5FihSrWOVWuVVSJVVelXLpmFJAeeVVYVVYFVFFVFFVVBVTt6vi6g5VQpVUTXxpVVqVUU19WXW3KqfKqfKqgqqoKiFAqqqsqqgqqqqqqqqpaqq6ekjVUF2xJz6iLnamtuqPddQArKvqqfqqgXoDH1eN1CBsrJqopupJNQQHYwvVyLdUT6tWaiS2Vs+qUficaqvGYDv1gmqvOqiO6kXVSTX2nVUXNQG7qm5qMnZXPVRP1UtNxwrqYscqqtdUP9VfDVCvq3n4hhqk3lSD1RA1VA1Tw9UINVKNUqPVGDVWvaXGqbfVePWOmqAmqklqspqipqpp6l01Xc0oO1O9p2ap99VsNUfNVfPUfPWBWqAWqkXqQ7VYfaSWqKVqmVquVqiVapVardaotWqdWq82qI1qk9qstqiP1Va1TW1XO9ROtUvtVp+oPepTtVd9pvapz9V+9Vd1QH2hDqov1SH1lTqsvlZH1DfqqPpWHVPfqePqhDqpvlen1A/qtDqjzqof1Tn1kzqvflYXVFCgUSuttdGRTqev0ik6vc6gr9YZ9TU6k75WJ/R1OrO+XmfRN+isOpvOrnPonPpGDerXTrOOdW6dRyf1TTqvvlnn0/l1AV1Qe11IF9a36CL6Vl1U36aL6dt1cX2HLqFL6lK6tL5Tl9F36bL6bl1O36PL6wq6oq6k79WV9X26ir5fV9UP6Gr6QV1dP6Rr6Id1Tf2IrqUbJAEe1XX0Y7qurqfr6wa6oX5cN9JP6Ma6iW6qn9TNdHPdQj+lW+qndSv9jG6tn9Vt9HO6rX5et9Mv6Pa6g+6of9YXdNCddRedqrvqbvpl3V330D11L91bv6L76Fd1X/2a7qf76wH6dT1Qv6EH6Tf1YD1ED9XD9HA9Qo/Uo/RoPUaP1W/pcfptPV6/oyfoiXqSnqyn6Km656WVZv438t/+O/l9f3n3zXqL/lhv1dv0dr1D79S79G69W+/Re/RevVfv0/v0fr1fH9AH9EF9UB/Sh/RhfVgf0Uf0UX1UH9PH9HF9Qv+ov9en9A/6tD6jz+gf9Tl9Tp+/9DMAg0YZbYyJTDpzlUkx6U0Gc7XJaK4xmcy1JmGuM5nN9SaLucFkNdlMdpPD5DQ3mlzGGjLOsIlNbpPHJM1NJq+52eQz+U0BU9B4U8gUNrf8w/l/Vl9D09A0Mo1MY9PYNDVNTTPTzLQwLUxL09K0Mq1Ma9PatDFtTFvT1rQz7Ux70950NB1NJ9PJdDadTapJNd3My6a76WF6ml6mt3nF9DF9TF/T1/Qz/cwAM8AMNAPNIDPIDDaDzVAz1Aw3w81IM9KMNqPNWDPWjDPjzHgz3kwwE8wkM8lMMVPMNDPNTDfTzUwz08wys8xsM9vMNXPNfDPfLDALzCKzyCw2i80Ss9QsNcvNcrPSrDSrzWqz1qw16816s9FsNEvMFrPFbDVbzXaz3ew0O81us9vsMXvMXrPX7DP7zH6z3xwwB8xBc9Acunj4NYfNEXPEHDVHzTFzzBw3x81Jc9KcMqfMaXPanDVnzTlzzpw3580Fc+HiZV+kIhWZyETponRRSpQSZYgyRBmjjFGmKFOUiBJR5ihzlCW6IcoaZYuyRzminNGNUa7IRhS5iKM4yh3liZLRTVHe6OYoX5Q/KhAVjHxUKCoc3RIViW6Nika3RcWi26Pi0R1RiahkVCoqHd0ZlYnuispGd0flonui8lGFqGJUKbo3qhzdF1WJ7o+qRg9E1aIHo+rRQ1GN6OGoZvRIVCsyl84vj0V1o3pR/ahB1PCfun4Ip7M94TvbLjbVdrXd7Mu2u+1he9petrd9xfaxr9q+9jXbz/a3A+zrdqB9ww6yb9rBdogdaofZ4XaEHWlH2dF2jB1r37Lj7Nt2vH3HTrAT7SQ72U6xU+00+66dbmfYmfY9O8u+b2fbOXaunWfTAcACu9Aush/axfYju8QutcvscrvCrrSr7Gq7xq616+x6u8FutJvsZrvFfmy32m12u91hd9pddrf9xO6xn9q99jO7z35u99u/2gP2C3vQfmkP2a/sYfu1PWK/sUftt/aY/c4etyfsSfu9PWV/sKftGXvW/mjP2Z/sefuzvWDDxYv7i6d3MmQoHaWjFEqhDJSBMlJGykSZKEEJykyZKQtloayUlbJTdspJOSkX5aKLmJhyU25KUpLyUl7KR/moABUgT54KU2EqQkWoKBWlYlSMilNxKkElqBSVojvpTrqL7qK76W66h+6hClSBKlElqkyVqQpVoapUlapRNapO1akG1aCaVJNqUS2qTbWpDtWhulSX6lN9akgNqRE1osbUmJpSU2pGzagFtaCW1JJaUStqTa2pDbWhttSW2lE7ak/tqSN1pE7UiTpTZ0qlVOpG3ag7daee1JN6U2/qQ32oL/WlftSPBtAAGkgDaRANosE0hIbSMBpOI2gkjaLRNIbG0lgaR+NoPI2nCTSBJtEkmkJTaBpNo+k0nWbSTJpFs2g2zaa5NJfm03xaQAtoES2ixbSYltASWkbLaAWtoFW0itbQGlpH62gDbaBNtIm20BbaSltpO22nnbSTdtNu2kN7aC/tpX20j/bTfjpAB+ggHaRDdIgO02E6QkfoKB2lY3SMjtNxOkkn6RSdotN0ms7SWTpHP9F5+pkuUKAUl95lcFe7jO4al8ld6/5jnN3lcDndjS6Xsy6ry/Y3MTnn8rn8roAr6Lwr5Aq7W/4Ql3AlXSlX2t3pyri7XNk/xJXdfa6Ku99VdQ+4Su7ev4mruQdd9bKPuhruMVfT1XO1XANX2z3q6rjHXF1Xz9V3DVwz19y1cE+5lu5p18o984d4gVuI4Na6dW692+M+dWfdj+6I+8adcz+5zq6L6+1ecX3cq66ve831c/3/EA91w9xwN8KNdKPcaDfmD/EkN9lNcVPdNPeum+5m/CGe7z5ws9wiN9vNcXPdvF/iBW6hW+Q+dIvdR26JW+qWueVuhVvpVrnVbs2lWpe7jW6T2+x2u0/cVrfNbXc73E6365f44n7sdZ+5fe5zd9h97Q64L9xBd9Qdcl/9El/cv6PuW3fMfeeOuxPupPvenXI/uNPuzC/7f3Hfv3c/uwsuOGBkxZoNR5yOr+IUTs8Z+GrOyNdwJr6WE3wdZ+brOQvfwFk5G2fnHJyTb+RcbJnYMXPMuTkPJ/kmzss3cz7OzwW4IHsuxIX5Fi7Ct3JRvo2L8e1cnO/gElySS3FpvpPL8F1clu/mcnwPl+cKXJEr8b1cme/jKnw/V+UHuBo/yNX5Ia7BD3NNfoRr8V+4Nj/Kdfgxrsv1uD434Ib8ODfiJ7gxN+Gm/CQ34+bcgp/ilvw0t+JnuDU/y5D669mkHb/A7bkDd+QXuRO/xJ25C6dyKnfjl7k79+Ce3It78yvch1/lvvwa9+P+PIBf54H8Bg/iN3kwD+GhPIyH8wgeyaN4NI/hsfwWj+O3eTy/wxN4Ik/iyTyFp/I0fpen8wyeye/xLH6fZ/McnsvzeD5/wAt4IS/iD3kxf8RLeCkv4+W8glfyKl7Na3gtr+P1vIE38ibezFv4Y97K23g77+CdvIt38ye8hz/lvfwZ7+PPeT//lQ/wF3yQv+RD/BUf5q/5CH/DR/lbPsbf8XE+wSf5ez7FP/BpPsNn+Uc+xz/xef6ZL3BgiDFWsY5NHMXp4qvilDh9nGH/sjhjfE2cKb42TsTXxZnj6+Ms8Q1x1jhbnD3OEeeMb4xzxTam2MUcx3HuOE+cjG+K88Y3x/ni/HGBuGDs40Jx4fiWuEh8a1w0vi0uFt8eF4/viEvEJeNHHygd3xmXie+Ky8Z3x+Xie+LycYW4YlwpvjeuHN8XV4nvj6vGD8RF4wfj6vFDcY344bhm/EhcK/5LXDt+NK4TPxbXjevF9eMGccP48bhR/ETcOG4SN42fjJvFzeMW8VNxy/jpuFX8zJ9uT427xt3il+OX4xDu13OT85Lzkx8kFyQXJtNfugZZklyaXJZcnlyRXJlclVydXJNcm1yXXJ/ckNyY3JTcnAyh0lXg0SuvvfGRT+ev8ik+vc/gr/YZ/TU+k7/WJ/x1PrO/3mfxN/isPpvP7nP4nP5Gn8tbT9559rHP7fP4pL/J5/U3+3w+vy/gC3rvC/nCvoFv6Bv6Rv4J39g38U39k/5J39w390/5p/zTvpV/xrf2z/o2/jnf1j/vn/cv+Pa+g+/oX/Sd/Eu+s+/iU32q7+a7+e6+u+/pe/revrfv4/v4vr6v7+f7+QF+gB/oB/pBfpAf7Af7oX6oH+6H+5F+pB/tR/uxfqwf58f58X68n+An+El+kp/ip/hpfpqf7qf7mX6mn5Vvlp/tZ/u5fq6f7+f7BX6BX+QX+cV+sV/il/hlfplf4Vf4VX6VX+PX+HV+nd/gN/hNfpPf4rf4rX6r3+63+51+p9/td/s9fo/f6/f6fX6f3+/3+wP+gD/ov/SH/Ff+sP/aH/Hf+KP+W3/Mf+eP+xP+pP/en/I/+NP+jD/rf/Tn/E/+vP/ZX/DBj028lRiXeDsxPvFOYkJiYmJSYnJiSmJqYlri3cT0xIzEzMR7iVmJ9xOzE3MScxPzEvMTHyQWJBYmFiU+TCxOfJRYkliaWJZYnliRWJkI4catccgd8oRkuCnkDTeHfCF/KBAKBh8KhcLhllAk3BqKhttCsXB7KB7uCCVCyVAqPBbqhnqhfmgQGobHQ6PwRGgcmoSm4cnQLDQPLcJToWV4OrQKz4TW4dnQJjwX2obnQ7vwQmgfOoSO4cXQKbwUOocuITV0Dd3Cy6F76BF6hl6hd3gl9Amvhr7htdAv9A8DwuthYHgjDApvhsFhSBgahoXhYUQYGUaF0WFMGBveCuPC22F8eCdMCBPDpDA5TAlTw7TwbpgeZoSZ4b0wK7wfZoc5YW6YF+aHD8KCsDAsCh+GxeGjsCQsDcvC8rAirAyrwuqwJuCl35WNYVPYHLaEj8PWsC1sDzvCzrAr7A6fhD3h07A3fBb2hc/D/vDXcCB8EQ6GL8Oh8FU4HL4OR8I34Wj4NhwL34Xj4UQ4Gb4Pp8IP4XQ4E86GH8O58FM4H34OF+Rv1oQQQggh/lvG/cn2rn/n/9SlcVE3ALhmW45Dv9+uAWBD1l/nPVTOZgkAeLpLu0d+G+XLp6ZeuvWGJRqiPHMAIAHpfsv/5fsHEr/Ol0JTaA4toQkU+bv19VAdzvGfrJ+8HSDD73JS4HIcuvy2/q3/yfojZv3p+nMA8uW5nHPxDvG3+HL9Rf+T9bM1+pP1038xFqDx73IywuX48vqF4Ql4Blr+zSuFEEIIIYQQQohf9VCl2vzZ/e3F+/Oc5nLOVXA5Xgr4X96fCyGEEEIIIYQQ4sp7rkPHpx5v2bJJmzQ56frvUca//0Rf+rj8blOB4gBXvjCZ/KsmV/jAJIQQQgghhPinu3zRf6UrEUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQggh0q7/ja8Tu9L7KIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQlxp/y8AAP//cNMkHA==") mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x0, 0x0) 174.065604ms ago: executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f00000004c0)) 163.880625ms ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x33e, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2020002, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00004 000000000\t\x00\x00\x00s,gid=\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000%00000000000007,discard,\x00'], 0x3, 0x14f5, &(0x7f0000001580)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') read$FUSE(r2, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2080062, &(0x7f0000001340)={[{@prjquota}, {@acl}]}, 0x6, 0x50d, &(0x7f0000008340)="$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") capset(&(0x7f0000000100), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 57.772312ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 38.401885ms ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000008c0)='sys_enter\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 29.007046ms ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0xc, 0x1400}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 9.967759ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) 0s ago: executing program 4: syz_open_dev$usbfs(&(0x7f0000000980), 0x76, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$eJzs3c9rJFkdAPBv9XRn50dmO6sedMF1dVdmFp3uycbdDR7WEURPC+J6H2PSE8J00iHd2Z2EgJm/QBBR0ZNevAj+AYIMePEowoCeFVYU0YweBHVKqrqSyWa6k56xtzs/Ph+oqVevqvr7Xg2vUq/qURXAmfViRNyIiIdpmr4SEdUiv1RMsd2dsu0e7GzNZ1MSafr235JIirzd30qK+aVit/MR8bWvRHwzeTxue2Pz9lyz2Vgrluud5dV6e2Pz2tLy3GJjsbEyMzP9+uwbs6/NXh9KPS9HxJtf+tP3vv3TL7/5y8+++8ebf7maVTsmi/X76/EEskNUPmyDbtUr+bHYle2w9hTBjqtyXsPChV5bpGmaPkyr+3LujqRkAAAclF3AfigiPhURr0Q1zh1+OQsAAACcQOkXJuM/SfcJTQ8TffIBAACAE6SUj4FNSrViLMBklEq1WncM70fiYqnZanc+c6u1vrJw/4eTETEVldKtpWbjejFWeCoqSbY8nacfLb96YHkmIp6LiO9WL+TLtflWc2HcNz8AAADgjLh0oP//z2q3/w8AAACcMlOPZ5XGUQ4AAADgg9Oj/w8AAACcMvr/AAAAcKp99a23sind/f71wjsb67db71xbaLRv15bX52vzrbXV2mKrtZi/s2/5qN9rtlqrn4uV9Tv1TqPdqbc3Nm8ut9ZXOjeX3vcJbAAAAGCEnvvEvd8nEbH9+Qv5lJkYd6GAkSjvpZJi3qP1/+HZ7vy9ERUKGIlzA2zz3jMjKAgwcuVxFwAYm8q4CwCMXXLE+r6Dd35TzD853PIAAADDd+Vj/Z//H/4NgG2fCIATTiOGs+vA8/+0Oq6CACOXP/8fdMCviwU4VSoDjQAETrP/+/n/kdL0iQoEAAAM3WQ+JaVacXtvMkqlWi3icv5ZgEpya6nZuB4Rz0bE76qVZ7Ll6XzP5Mg+AwAAAAAAAAAAAAAAAAAAAAAAAADQlaZJpIe5cehaAAAA4ASIKP05+VX3Xf5Xqi9PHrw/MJH8K/8k8EREvPujt79/Z67TWZvO8v++l9/5QZH/6jjuYAAAAAAH7fbTd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBMD3a25h/sbKX/3tmaH2Xcv34xIqb24udTd005zufz81GJiIv/SKK8b78kIs4NIf723Yj4aK/4SVasvZC94l/44OPHVHEUesW/NIT4cJbdy84/N3q1v1K8mM97t79yxPuWn1b/81/snf/O9Wn/lweM8fz9n9f7xr8b8Xy59/lnN37SJ/5LURoo/je+vrnZb13644gr0Tv+/lj1zvJqvb2xeW1peW6xsdhYmZmZfn32jdnXZq/Xby01G8W/PWN85+O/eHhY/S/2iT91RP1fHqj2Ef+9f2fnw91kpVf8qy/1iP/rnxRbPB6/VPzt+3SRztZf2U1vd9P7vfCz375wWP0XHtW/8iT//1cHrP9QGgoAMDTtjc3bc81mY+0kJCpPs1fWSz8OhZc4folvDfUH0zRNszbVY9W9iBjkd5I4DoclT4z7zAQAAAzbo4v+cZcEAAAAAAAAAAAAAAAAAAAAzq4hvjNsot9r9g7G3N5LJd4MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcG/8LAAD//3uY3uY=") pselect6(0x40, &(0x7f00000045c0), 0x0, &(0x7f0000004640)={0xf8}, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000740)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) readv(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/125, 0x48}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x1) kernel console output (not intermixed with test programs): ive=1 [ 54.691855][ T1333] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 54.719853][ T414] hid (null): bogus close delimiter [ 54.759619][ T615] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 54.765576][ T28] audit: type=1400 audit(1717697269.538:206): avc: denied { relabelfrom } for pid=1338 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.788569][ T28] audit: type=1400 audit(1717697269.538:207): avc: denied { relabelto } for pid=1338 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 54.939622][ T414] usb 5-1: language id specifier not provided by device, defaulting to English [ 55.129570][ T324] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 55.169488][ T1360] loop2: detected capacity change from 0 to 256 [ 55.180411][ T1360] serio: Serial port pts0 [ 55.209655][ T615] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 55.219797][ T615] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.371215][ T414] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0018/input/input14 [ 55.383932][ T414] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0018/input/input15 [ 55.396483][ T414] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0018/input/input16 [ 55.409657][ T615] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 55.409747][ T414] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0018/input/input17 [ 55.418668][ T615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.432065][ T414] uclogic 0003:256C:006D.0018: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 55.438116][ T615] usb 1-1: Product: syz [ 55.454406][ T615] usb 1-1: Manufacturer: syz [ 55.460390][ T615] usb 1-1: SerialNumber: syz [ 55.489603][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 55.500942][ T1367] loop2: detected capacity change from 0 to 2048 [ 55.501013][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 55.518460][ T324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.531648][ T324] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.540786][ T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.549578][ T324] usb 4-1: config 0 descriptor?? [ 55.569787][ T1344] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 55.577967][ T414] usb 5-1: USB disconnect, device number 7 [ 55.670447][ T1373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 56.030584][ T324] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 56.040443][ T324] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 56.048780][ T324] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 56.231457][ T324] usb 4-1: USB disconnect, device number 7 [ 56.312482][ T1411] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 56.399585][ T615] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 56.439592][ T615] cdc_ncm 1-1:1.0: bind() failure [ 56.446323][ T615] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 56.461463][ T615] cdc_ncm 1-1:1.1: bind() failure [ 56.467910][ T615] usb 1-1: USB disconnect, device number 5 [ 56.729545][ T324] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 57.067015][ T1440] loop0: detected capacity change from 0 to 2048 [ 57.119699][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.130589][ T324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.140416][ T324] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.149447][ T324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.158999][ T324] usb 3-1: config 0 descriptor?? [ 57.639865][ T324] hid (null): bogus close delimiter [ 57.648661][ T28] audit: type=1400 audit(1717697272.418:208): avc: denied { bind } for pid=1447 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.827796][ T28] audit: type=1400 audit(1717697272.598:209): avc: denied { create } for pid=1451 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.829098][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 57.859785][ T324] usb 3-1: language id specifier not provided by device, defaulting to English [ 57.869273][ T28] audit: type=1400 audit(1717697272.638:210): avc: denied { create } for pid=1451 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.869834][ T1452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1452 comm=syz-executor.1 [ 57.903573][ T28] audit: type=1400 audit(1717697272.648:211): avc: denied { write } for pid=1451 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.906334][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 57.942721][ T28] audit: type=1400 audit(1717697272.688:212): avc: denied { read } for pid=1451 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 57.968154][ T28] audit: type=1400 audit(1717697272.748:213): avc: denied { create } for pid=1453 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 57.969732][ T414] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 58.060146][ T1458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 58.239591][ T615] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 58.301668][ T324] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input19 [ 58.323682][ T324] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input20 [ 58.349681][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 58.362274][ T324] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input21 [ 58.378948][ T414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 58.391186][ T324] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001A/input/input22 [ 58.402939][ T414] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.417648][ T324] uclogic 0003:256C:006D.001A: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 58.430285][ T414] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.439604][ T414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.449902][ T414] usb 5-1: config 0 descriptor?? [ 58.469859][ T1450] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 58.501538][ T24] usb 3-1: USB disconnect, device number 5 [ 58.619599][ T615] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.633012][ T615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.809619][ T615] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 58.821836][ T615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.838393][ T615] usb 2-1: Product: syz [ 58.843289][ T615] usb 2-1: Manufacturer: syz [ 58.854328][ T615] usb 2-1: SerialNumber: syz [ 58.930533][ T414] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 58.939216][ T414] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 58.948581][ T414] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 59.132211][ T414] usb 5-1: USB disconnect, device number 8 [ 59.147658][ T1484] loop2: detected capacity change from 0 to 40427 [ 59.155359][ T1484] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 59.163259][ T1484] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 59.174360][ T1484] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.219224][ T1484] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 59.226143][ T1484] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.759613][ T615] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed [ 59.809679][ T615] cdc_ncm 2-1:1.0: bind() failure [ 59.815598][ T615] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 59.828951][ T615] cdc_ncm 2-1:1.1: bind() failure [ 59.840891][ T615] usb 2-1: USB disconnect, device number 6 [ 59.967042][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 59.967059][ T28] audit: type=1400 audit(1717697274.738:222): avc: denied { create } for pid=1536 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.579643][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 60.939681][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 60.961824][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 60.997138][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.034846][ T6] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.069568][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.089843][ T6] usb 2-1: config 0 descriptor?? [ 61.109610][ T1563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 61.570598][ T6] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 61.589806][ T6] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 61.610214][ T6] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 61.649596][ T615] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 61.771302][ T6] usb 2-1: USB disconnect, device number 7 [ 61.829638][ T414] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 61.836893][ T414] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 61.844643][ T414] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.010671][ T615] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.020850][ T615] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.127862][ T6] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 62.135219][ T6] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 62.142964][ T6] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.199684][ T615] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 62.208761][ T615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.217192][ T615] usb 4-1: Product: syz [ 62.224647][ T615] usb 4-1: Manufacturer: syz [ 62.229325][ T615] usb 4-1: SerialNumber: syz [ 62.288807][ T348] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 62.296463][ T348] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 62.306428][ T348] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.579776][ T1684] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 62.620547][ T1673] loop1: detected capacity change from 0 to 32768 [ 62.770641][ T28] audit: type=1400 audit(1717697277.548:223): avc: denied { create } for pid=1683 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.804405][ T28] audit: type=1400 audit(1717697277.568:224): avc: denied { bind } for pid=1683 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.129618][ T615] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 63.130539][ T1700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.169605][ T615] cdc_ncm 4-1:1.0: bind() failure [ 63.175734][ T615] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 63.256326][ T615] cdc_ncm 4-1:1.1: bind() failure [ 63.262279][ T615] usb 4-1: USB disconnect, device number 8 [ 63.399066][ T1704] device pim6reg1 entered promiscuous mode [ 63.695902][ T28] audit: type=1400 audit(1717697278.468:225): avc: denied { create } for pid=1705 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 63.721154][ T28] audit: type=1400 audit(1717697278.468:226): avc: denied { write } for pid=1705 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 64.006997][ T28] audit: type=1400 audit(1717697278.778:227): avc: denied { read } for pid=1730 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.032681][ T28] audit: type=1400 audit(1717697278.808:228): avc: denied { open } for pid=1730 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.056527][ T28] audit: type=1400 audit(1717697278.808:229): avc: denied { ioctl } for pid=1730 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=138 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.082975][ T414] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 64.092715][ T28] audit: type=1400 audit(1717697278.868:230): avc: denied { write } for pid=1730 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.135596][ T324] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 64.143227][ T324] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 64.186768][ T324] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 64.219005][ T28] audit: type=1400 audit(1717697278.988:231): avc: denied { relabelfrom } for pid=1743 comm="syz-executor.1" name="" dev="pipefs" ino=18485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 64.302110][ T1752] loop4: detected capacity change from 0 to 2048 [ 64.329554][ T414] usb 4-1: Using ep0 maxpacket: 8 [ 64.449649][ T414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.464987][ T414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.482581][ T414] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 64.498181][ T414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.543322][ T414] usb 4-1: config 0 descriptor?? [ 64.704577][ T1774] device pim6reg1 entered promiscuous mode [ 65.053495][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 65.053512][ T28] audit: type=1326 audit(1717697279.828:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb7567cf69 code=0x0 [ 65.189253][ T28] audit: type=1400 audit(1717697279.958:235): avc: denied { read } for pid=1788 comm="syz-executor.1" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.212395][ T1789] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.229444][ T28] audit: type=1400 audit(1717697279.958:236): avc: denied { open } for pid=1788 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.255681][ T28] audit: type=1400 audit(1717697279.998:237): avc: denied { ioctl } for pid=1788 comm="syz-executor.1" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.280696][ T414] usbhid 4-1:0.0: can't add hid device: -71 [ 65.286735][ T414] usbhid: probe of 4-1:0.0 failed with error -71 [ 65.294043][ T414] usb 4-1: USB disconnect, device number 9 [ 65.322229][ T28] audit: type=1326 audit(1717697280.098:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb7567cf69 code=0x0 [ 65.430258][ T28] audit: type=1326 audit(1717697280.208:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7567cf69 code=0x7ffc0000 [ 65.465193][ T28] audit: type=1326 audit(1717697280.208:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7567cf69 code=0x7ffc0000 [ 65.489886][ T28] audit: type=1326 audit(1717697280.208:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7567cf69 code=0x7ffc0000 [ 65.516117][ T28] audit: type=1326 audit(1717697280.208:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb7567cf69 code=0x7ffc0000 [ 65.541193][ T28] audit: type=1326 audit(1717697280.208:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb7567cf69 code=0x7ffc0000 [ 65.596547][ T1803] loop1: detected capacity change from 0 to 2048 [ 65.869667][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 65.940853][ T1842] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.129536][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 66.259654][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.276601][ T1857] loop3: detected capacity change from 0 to 2048 [ 66.439663][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 66.449192][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.457181][ T24] usb 3-1: Product: syz [ 66.461316][ T24] usb 3-1: Manufacturer: syz [ 66.465860][ T24] usb 3-1: SerialNumber: syz [ 66.470886][ T24] usb 3-1: config 0 descriptor?? [ 66.799900][ T24] usb 3-1: Found UVC 0.00 device syz (8086:0b03) [ 66.809081][ T24] usb 3-1: No valid video chain found. [ 66.857245][ T24] usb 3-1: USB disconnect, device number 6 [ 67.007580][ T1896] loop0: detected capacity change from 0 to 2048 [ 67.655432][ T1918] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.656988][ T1917] loop4: detected capacity change from 0 to 128 [ 67.681989][ T1917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.757666][ T1931] loop2: detected capacity change from 0 to 2048 [ 68.079702][ T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 68.243875][ T1960] loop2: detected capacity change from 0 to 2048 [ 68.267195][ T1958] loop0: detected capacity change from 0 to 8192 [ 68.309591][ T1958] loop0: detected capacity change from 8192 to 8191 [ 68.529676][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 68.551661][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 68.563604][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.587117][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.599321][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.608067][ T24] usb 2-1: config 0 descriptor?? [ 68.639632][ T1937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.778804][ T2001] loop2: detected capacity change from 0 to 8192 [ 68.840968][ T2001] loop2: detected capacity change from 8192 to 8191 [ 68.877224][ T1990] loop0: detected capacity change from 0 to 40427 [ 68.884997][ T1990] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 68.893302][ T1990] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.903011][ T1990] F2FS-fs (loop0): invalid crc value [ 68.925102][ T1990] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.986697][ T1990] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 68.993739][ T1990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 69.100692][ T24] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xd [ 69.113326][ T24] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 69.140798][ T24] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.182891][ T2027] 9pnet: p9_errstr2errno: server reported unknown error áoŽ [ 69.287174][ T2029] loop3: detected capacity change from 0 to 256 [ 69.298911][ T2029] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 69.322379][ T6] usb 2-1: USB disconnect, device number 8 [ 70.282979][ T2034] device pim6reg1 entered promiscuous mode [ 70.922969][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 70.922987][ T28] audit: type=1326 audit(1717697285.698:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2039 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 70.986607][ T28] audit: type=1326 audit(1717697285.698:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2039 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 71.031920][ T28] audit: type=1326 audit(1717697285.698:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2039 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 71.126503][ T2038] loop0: detected capacity change from 0 to 8192 [ 71.149846][ T1102] device bridge_slave_1 left promiscuous mode [ 71.202878][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.402617][ T28] audit: type=1326 audit(1717697285.698:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2039 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 71.435839][ T28] audit: type=1326 audit(1717697285.698:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2039 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 71.461244][ T1102] device bridge_slave_0 left promiscuous mode [ 71.468464][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.476883][ T1102] device veth1_macvtap left promiscuous mode [ 71.482907][ T1102] device veth0_vlan left promiscuous mode [ 71.499589][ T2038] loop0: detected capacity change from 8192 to 8191 [ 71.607799][ T28] audit: type=1400 audit(1717697286.378:300): avc: denied { create } for pid=2064 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 71.656693][ T28] audit: type=1400 audit(1717697286.378:301): avc: denied { create } for pid=2064 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 71.817233][ T28] audit: type=1400 audit(1717697286.378:302): avc: denied { write } for pid=2064 comm="syz-executor.0" path="socket:[19977]" dev="sockfs" ino=19977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 72.009682][ T28] audit: type=1400 audit(1717697286.458:303): avc: denied { ioctl } for pid=2064 comm="syz-executor.0" path="socket:[19977]" dev="sockfs" ino=19977 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 72.044093][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.176392][ T2046] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.190750][ T2046] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.201418][ T2046] device bridge_slave_0 entered promiscuous mode [ 72.213205][ T2046] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.237506][ T2046] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.256945][ T2046] device bridge_slave_1 entered promiscuous mode [ 72.399644][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 72.416773][ T2046] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.423751][ T2046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.430988][ T2046] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.438015][ T2046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.548646][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.557025][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.565022][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.589918][ T2071] loop3: detected capacity change from 0 to 40427 [ 72.589975][ T2081] loop2: detected capacity change from 0 to 40427 [ 72.604411][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.604867][ T2081] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 72.612424][ T2071] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.620479][ T2081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 72.629385][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.639603][ T2071] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.642773][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.652227][ T2071] F2FS-fs (loop3): invalid crc value [ 72.674308][ T2085] loop1: detected capacity change from 0 to 256 [ 72.687235][ T2085] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 72.705500][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.707914][ T2081] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.723373][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.730478][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.753221][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.762692][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.763585][ T2071] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.779771][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 72.801271][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 72.808688][ T2046] device veth0_vlan entered promiscuous mode [ 72.820044][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.829195][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.847833][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.848807][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.868078][ T6] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.874903][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.885647][ T2081] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.892823][ T2081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.900521][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.904486][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.918121][ T6] usb 1-1: config 0 descriptor?? [ 72.928456][ T2046] device veth1_macvtap entered promiscuous mode [ 72.939957][ T2078] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 72.961341][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.981283][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.089636][ T2071] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 73.096760][ T2071] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.428753][ T6] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 73.451070][ T6] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 73.459772][ T6] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 73.605964][ T2117] loop3: detected capacity change from 0 to 128 [ 73.614305][ T2117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.626008][ T302] usb 1-1: USB disconnect, device number 6 [ 73.631888][ T2093] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 74.059984][ T2093] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.072185][ T2093] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.270189][ T2093] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.284711][ T2093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.306003][ T2093] usb 5-1: Product: syz [ 74.315842][ T2128] loop3: detected capacity change from 0 to 40427 [ 74.316723][ T2093] usb 5-1: Manufacturer: syz [ 74.328894][ T2128] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 74.335998][ T2093] usb 5-1: SerialNumber: syz [ 74.341041][ T2128] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.366350][ T2128] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.446129][ T2128] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.453153][ T2128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.472366][ T2143] loop1: detected capacity change from 0 to 128 [ 74.479115][ T2143] FAT-fs (loop1): Unrecognized mount option "vfat" or missing value [ 74.596723][ T2143] loop1: detected capacity change from 0 to 256 [ 74.677172][ T2143] loop1: detected capacity change from 0 to 512 [ 74.759444][ T2137] loop0: detected capacity change from 0 to 40427 [ 74.766873][ T2137] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.780278][ T2137] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.795512][ T2137] F2FS-fs (loop0): invalid crc value [ 74.821218][ T2137] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.861021][ T2137] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.869692][ T2137] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.289590][ T2093] cdc_ncm 5-1:1.0: SET_NTB_FORMAT failed [ 75.329588][ T2093] cdc_ncm 5-1:1.0: bind() failure [ 75.335453][ T2093] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 75.349421][ T2093] cdc_ncm 5-1:1.1: bind() failure [ 75.361768][ T2093] usb 5-1: USB disconnect, device number 9 [ 75.429578][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 75.789653][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 75.804092][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 75.821290][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 75.834390][ T6] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 75.843408][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.853674][ T6] usb 3-1: config 0 descriptor?? [ 75.869680][ T2167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 75.899371][ T2204] loop4: detected capacity change from 0 to 256 [ 75.910303][ T2204] serio: Serial port pts0 [ 76.319636][ T414] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 76.330445][ T6] plantronics 0003:047F:FFFF.0023: unknown main item tag 0xd [ 76.338888][ T6] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 76.347447][ T6] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 76.530897][ T6] usb 3-1: USB disconnect, device number 7 [ 76.807973][ T414] usb 2-1: Using ep0 maxpacket: 8 [ 76.816985][ T28] audit: type=1400 audit(1717697291.598:304): avc: denied { name_bind } for pid=2223 comm="syz-executor.3" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 76.929616][ T414] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.099835][ T414] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 77.108854][ T414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.120075][ T414] usb 2-1: Product: syz [ 77.131627][ T414] usb 2-1: Manufacturer: syz [ 77.136319][ T414] usb 2-1: SerialNumber: syz [ 77.142295][ T414] usb 2-1: config 0 descriptor?? [ 77.165614][ T2243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.239393][ T2093] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 77.689639][ T414] usb 2-1: Found UVC 0.00 device syz (8086:0b03) [ 77.695836][ T414] usb 2-1: No valid video chain found. [ 77.708661][ T414] usb 2-1: USB disconnect, device number 9 [ 77.719900][ T2093] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.741162][ T2093] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.866179][ T2252] loop0: detected capacity change from 0 to 40427 [ 77.873756][ T2252] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 77.881350][ T2252] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 77.892387][ T2252] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.931911][ T2252] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 77.938840][ T2252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.969611][ T2093] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.978728][ T2093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.986587][ T2093] usb 4-1: Product: syz [ 77.990687][ T2093] usb 4-1: Manufacturer: syz [ 77.995129][ T2093] usb 4-1: SerialNumber: syz [ 78.063426][ T2263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.095751][ T28] audit: type=1400 audit(1717697292.868:305): avc: denied { create } for pid=2266 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.097595][ T39] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 78.124331][ T39] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 78.132140][ T39] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 78.600309][ T414] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 78.651283][ T28] audit: type=1326 audit(1717697293.428:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b2f87cf69 code=0x0 [ 78.765515][ T2299] fuse: Bad value for 'fd' [ 78.771227][ T28] audit: type=1400 audit(1717697293.548:307): avc: denied { ioctl } for pid=2298 comm="syz-executor.4" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.808875][ T28] audit: type=1400 audit(1717697293.578:308): avc: denied { create } for pid=2301 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 78.830876][ T2302] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.840163][ T2302] F2FS-fs (loop9): Unable to read 1th superblock [ 78.846723][ T2302] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 78.855786][ T28] audit: type=1326 audit(1717697293.628:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b2f87cf69 code=0x0 [ 78.856715][ T2302] F2FS-fs (loop9): Unable to read 2th superblock [ 78.894112][ T28] audit: type=1400 audit(1717697293.668:310): avc: denied { unlink } for pid=2046 comm="syz-executor.4" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 78.969884][ T28] audit: type=1326 audit(1717697293.748:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2f87cf69 code=0x7ffc0000 [ 78.994265][ T28] audit: type=1326 audit(1717697293.748:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b2f87cf69 code=0x7ffc0000 [ 79.018447][ T28] audit: type=1326 audit(1717697293.748:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2295 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b2f87cf69 code=0x7ffc0000 [ 79.042460][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 79.053654][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 79.065694][ T414] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.069606][ T2093] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 79.078958][ T414] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.093741][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.102155][ T414] usb 2-1: config 0 descriptor?? [ 79.109713][ T2093] cdc_ncm 4-1:1.0: bind() failure [ 79.115911][ T2093] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 79.122796][ T2262] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 79.122814][ T2093] cdc_ncm 4-1:1.1: bind() failure [ 79.124307][ T2093] usb 4-1: USB disconnect, device number 10 [ 79.209560][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 79.459619][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 79.497271][ T2331] loop2: detected capacity change from 0 to 512 [ 79.510681][ T2331] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a803c019, mo2=0000] [ 79.518321][ T2331] System zones: 0-2, 18-18, 34-34 [ 79.524872][ T2331] EXT4-fs error (device loop2): mb_free_blocks:1813: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 79.539452][ T2331] EXT4-fs (loop2): 1 orphan inode deleted [ 79.545230][ T2331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.554039][ T2331] ext4 filesystem being mounted at /root/syzkaller-testdir3083178365/syzkaller.DHskWp/137/file1 supports timestamps until 2038 (0x7fffffff) [ 79.579603][ T39] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.580523][ T414] plantronics 0003:047F:FFFF.0025: unknown main item tag 0xd [ 79.599580][ T414] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 79.609319][ T414] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 79.667834][ T318] EXT4-fs (loop2): unmounting filesystem. [ 79.683574][ T2339] loop2: detected capacity change from 0 to 128 [ 79.691074][ T2339] FAT-fs (loop2): Unrecognized mount option "vfat" or missing value [ 79.768116][ T2339] loop2: detected capacity change from 0 to 256 [ 79.774640][ T39] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 79.784380][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.795202][ T39] usb 5-1: Product: syz [ 79.796693][ T414] usb 2-1: USB disconnect, device number 10 [ 79.799448][ T39] usb 5-1: Manufacturer: syz [ 79.811298][ T39] usb 5-1: SerialNumber: syz [ 79.816520][ T39] usb 5-1: config 0 descriptor?? [ 79.834668][ T2339] loop2: detected capacity change from 0 to 512 [ 80.109591][ T39] usb 5-1: Found UVC 0.00 device syz (8086:0b03) [ 80.119070][ T39] usb 5-1: No valid video chain found. [ 80.130499][ T39] usb 5-1: USB disconnect, device number 10 [ 80.326748][ T2366] loop1: detected capacity change from 0 to 512 [ 80.340644][ T2366] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a803c019, mo2=0000] [ 80.348434][ T2366] System zones: 0-2, 18-18, 34-34 [ 80.355067][ T2366] EXT4-fs error (device loop1): mb_free_blocks:1813: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 80.370176][ T2366] EXT4-fs (loop1): 1 orphan inode deleted [ 80.375821][ T2366] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.384527][ T2366] ext4 filesystem being mounted at /root/syzkaller-testdir1365212055/syzkaller.zqEyUF/158/file1 supports timestamps until 2038 (0x7fffffff) [ 80.808364][ T315] EXT4-fs (loop1): unmounting filesystem. [ 80.849652][ T6] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 80.890580][ T2383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2383 comm=syz-executor.4 [ 81.011462][ T2390] loop1: detected capacity change from 0 to 256 [ 81.058488][ T2390] serio: Serial port pts0 [ 81.210115][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.232471][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.243658][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.253391][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.262277][ T6] usb 4-1: config 0 descriptor?? [ 81.598761][ T2412] loop1: detected capacity change from 0 to 512 [ 81.610943][ T2412] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a803c019, mo2=0000] [ 81.618601][ T2412] System zones: 0-2, 18-18, 34-34 [ 81.625043][ T2412] EXT4-fs error (device loop1): mb_free_blocks:1813: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 81.639986][ T2412] EXT4-fs (loop1): 1 orphan inode deleted [ 81.645796][ T2412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 81.654555][ T348] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 81.654703][ T2412] ext4 filesystem being mounted at /root/syzkaller-testdir1365212055/syzkaller.zqEyUF/163/file1 supports timestamps until 2038 (0x7fffffff) [ 81.731743][ T315] EXT4-fs (loop1): unmounting filesystem. [ 81.849887][ T6] hid (null): bogus close delimiter [ 81.918115][ T2423] loop2: detected capacity change from 0 to 256 [ 81.925320][ T2423] FAT-fs (loop2): Unrecognized mount option "codepage=<66" or missing value [ 82.069619][ T6] usb 4-1: language id specifier not provided by device, defaulting to English [ 82.167081][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 82.176648][ T348] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 82.186168][ T348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.195653][ T348] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 82.239578][ T414] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 82.355849][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 82.355866][ T28] audit: type=1400 audit(1717697297.128:320): avc: denied { set_context_mgr } for pid=2430 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.356824][ T2431] binder_alloc: 2430: binder_alloc_buf, no vma [ 82.364551][ T28] audit: type=1400 audit(1717697297.128:321): avc: denied { call } for pid=2430 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.407902][ T348] usb 1-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 82.417205][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.425203][ T348] usb 1-1: Product: syz [ 82.429241][ T348] usb 1-1: Manufacturer: syz [ 82.433721][ T348] usb 1-1: SerialNumber: syz [ 82.438931][ T348] usb 1-1: config 0 descriptor?? [ 82.460334][ T2437] loop1: detected capacity change from 0 to 256 [ 82.471690][ T2437] serio: Serial port pts0 [ 82.490341][ T348] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 82.498401][ T348] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 82.502027][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0026/input/input29 [ 82.517047][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0026/input/input30 [ 82.530000][ T6] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0026/input/input31 [ 82.543186][ T6] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0026/input/input32 [ 82.556579][ T6] uclogic 0003:256C:006D.0026: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 82.629600][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.640535][ T414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.650813][ T414] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 82.659967][ T414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.668317][ T414] usb 3-1: config 0 descriptor?? [ 82.692271][ T348] usb 1-1: USB disconnect, device number 7 [ 82.698641][ T348] ftdi_sio 1-1:0.0: device disconnected [ 82.707396][ T6] usb 4-1: USB disconnect, device number 11 [ 82.772173][ T2093] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 82.779467][ T2093] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 82.787340][ T2093] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 82.823440][ T28] audit: type=1326 audit(1717697297.598:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9d287cf69 code=0x0 [ 83.018915][ T28] audit: type=1326 audit(1717697297.788:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9d287cf69 code=0x0 [ 83.059695][ T2458] 9pnet_fd: Insufficient options for proto=fd [ 83.122253][ T28] audit: type=1326 audit(1717697297.898:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d287cf69 code=0x7ffc0000 [ 83.147196][ T28] audit: type=1326 audit(1717697297.898:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9d287cf69 code=0x7ffc0000 [ 83.147513][ T414] hid-led 0003:27B8:01ED.0028: unknown main item tag 0x0 [ 83.171279][ T28] audit: type=1326 audit(1717697297.898:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d287cf69 code=0x7ffc0000 [ 83.202090][ T28] audit: type=1326 audit(1717697297.898:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9d287cf69 code=0x7ffc0000 [ 83.228984][ T28] audit: type=1326 audit(1717697297.898:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d287cf69 code=0x7ffc0000 [ 83.254404][ T28] audit: type=1326 audit(1717697297.898:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2445 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d287cf69 code=0x7ffc0000 [ 83.297533][ T6] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 83.305583][ T6] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 83.324954][ T6] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 83.398599][ T2483] loop3: detected capacity change from 0 to 512 [ 83.412254][ T2483] EXT4-fs (loop3): 1 orphan inode deleted [ 83.418132][ T2483] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.428336][ T2483] ext4 filesystem being mounted at /root/syzkaller-testdir1883517268/syzkaller.yTD0d8/150/file1 supports timestamps until 2038 (0x7fffffff) [ 83.450612][ T314] EXT4-fs (loop3): unmounting filesystem. [ 83.574931][ T2489] loop0: detected capacity change from 0 to 7 [ 83.581144][ T414] hid-led: probe of 0003:27B8:01ED.0028 failed with error -71 [ 83.590420][ T414] usb 3-1: USB disconnect, device number 8 [ 83.813896][ T2497] loop4: detected capacity change from 0 to 1024 [ 83.823446][ T2497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.889604][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 83.979606][ T6] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 84.061775][ T39] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 84.069086][ T39] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 84.077088][ T39] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 84.146590][ T2093] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 84.609765][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.621707][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.632035][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.641584][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.655248][ T24] usb 4-1: config 0 descriptor?? [ 84.719657][ T2093] usb 5-1: device descriptor read/64, error -71 [ 84.819668][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 84.829189][ T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 84.838720][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.848139][ T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.998562][ T2518] loop2: detected capacity change from 0 to 256 [ 85.005550][ T2518] exfat: Deprecated parameter 'utf8' [ 85.014634][ T2518] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 85.019679][ T6] usb 1-1: New USB device found, idVendor=04b4, idProduct=009b, bcdDevice=16.89 [ 85.035460][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.043475][ T6] usb 1-1: Product: syz [ 85.047582][ T6] usb 1-1: Manufacturer: syz [ 85.052051][ T6] usb 1-1: SerialNumber: syz [ 85.057289][ T6] usb 1-1: config 0 descriptor?? [ 85.100233][ T6] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 85.107823][ T6] ftdi_sio ttyUSB0: unknown device type: 0x1689 [ 85.159550][ T2093] usb 5-1: device descriptor read/64, error -71 [ 85.225549][ T24] hid (null): bogus close delimiter [ 85.429646][ T2093] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 85.470091][ T24] usb 4-1: language id specifier not provided by device, defaulting to English [ 85.563874][ T471] usb 1-1: USB disconnect, device number 8 [ 85.571283][ T471] ftdi_sio 1-1:0.0: device disconnected [ 85.672124][ T615] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 85.679352][ T615] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 85.687327][ T615] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 85.767236][ T2093] usb 5-1: device descriptor read/64, error -71 [ 85.964408][ T24] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002B/input/input33 [ 85.985978][ T24] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002B/input/input34 [ 86.006957][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002B/input/input35 [ 86.089477][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.002B/input/input36 [ 86.102409][ T2543] loop2: detected capacity change from 0 to 512 [ 86.103267][ T24] uclogic 0003:256C:006D.002B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 86.110282][ T2543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.132785][ T2543] EXT4-fs (loop2): 1 truncate cleaned up [ 86.138297][ T2543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.150169][ T2543] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 86.162557][ T2543] EXT4-fs (loop2): Remounting filesystem read-only [ 86.165863][ T24] usb 4-1: USB disconnect, device number 12 [ 86.170432][ T2543] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1745: inode #15: comm syz-executor.2: unable to update i_inline_off [ 86.249949][ T318] EXT4-fs (loop2): unmounting filesystem. [ 86.271229][ T2549] 9pnet_fd: Insufficient options for proto=fd [ 86.309621][ T2093] usb 5-1: device descriptor read/64, error -71 [ 86.441647][ T2093] usb usb5-port1: attempt power cycle [ 86.651068][ T2557] loop1: detected capacity change from 0 to 256 [ 86.658068][ T2557] FAT-fs (loop1): Unrecognized mount option "codepage=<66" or missing value [ 86.684608][ T2046] EXT4-fs (loop4): unmounting filesystem. [ 86.747274][ T24] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 86.755333][ T24] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 86.764053][ T24] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 86.789645][ T2570] loop4: detected capacity change from 0 to 512 [ 86.800698][ T2570] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a803c019, mo2=0000] [ 86.808760][ T2570] System zones: 0-2, 18-18, 34-34 [ 86.815171][ T2570] EXT4-fs error (device loop4): mb_free_blocks:1813: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 86.830395][ T2570] EXT4-fs (loop4): 1 orphan inode deleted [ 86.836262][ T2570] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.848740][ T2570] ext4 filesystem being mounted at /root/syzkaller-testdir330291550/syzkaller.9Nc4NG/31/file1 supports timestamps until 2038 (0x7fffffff) [ 86.910568][ T2046] EXT4-fs (loop4): unmounting filesystem. [ 86.989607][ T39] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 87.507326][ T2592] device pim6reg1 entered promiscuous mode [ 90.363052][ T39] usb 2-1: device descriptor read/all, error -71 [ 90.527887][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 90.527905][ T28] audit: type=1400 audit(1717697305.298:336): avc: denied { write } for pid=2623 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 91.069542][ T2093] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 91.111522][ T2626] loop0: detected capacity change from 0 to 40427 [ 91.118539][ T2626] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 91.126170][ T2626] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.137163][ T2626] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.177296][ T2626] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.184249][ T2626] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.289634][ T2093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.300695][ T2093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.310454][ T2093] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 91.319413][ T2093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.328152][ T2093] usb 5-1: config 0 descriptor?? [ 91.524967][ T2593] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 91.532627][ T2593] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 91.540796][ T2593] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 91.799799][ T2093] hid (null): bogus close delimiter [ 91.858466][ T2656] loop0: detected capacity change from 0 to 40427 [ 91.865743][ T2656] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 91.873550][ T2656] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.884243][ T2656] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.938002][ T2656] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.945365][ T2656] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 92.019582][ T2093] usb 5-1: language id specifier not provided by device, defaulting to English [ 92.691682][ T2093] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002F/input/input37 [ 92.706170][ T2093] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002F/input/input38 [ 92.720242][ T2093] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002F/input/input39 [ 92.739117][ T2093] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002F/input/input40 [ 92.760383][ T324] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 92.763196][ T2093] uclogic 0003:256C:006D.002F: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 92.767814][ T324] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 92.779814][ T324] hid-generic 0000:0000:0000.0030: hidraw1: HID v0.00 Device [syz0] on syz1 [ 92.816159][ T28] audit: type=1400 audit(1717697307.588:337): avc: denied { map } for pid=2691 comm="syz-executor.3" path="socket:[22777]" dev="sockfs" ino=22777 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 92.891988][ T2093] usb 5-1: USB disconnect, device number 13 [ 92.914641][ T2702] cgroup: Unknown subsys name 'devices' [ 93.876153][ T324] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 93.904576][ T39] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 93.912116][ T39] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 93.920374][ T39] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.005798][ T2730] cgroup: Unknown subsys name 'devices' [ 94.017252][ T28] audit: type=1400 audit(1717697308.788:338): avc: denied { write } for pid=2731 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.017370][ T2732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.046583][ T28] audit: type=1400 audit(1717697308.788:339): avc: denied { nlmsg_write } for pid=2731 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.159634][ T324] usb 4-1: device descriptor read/64, error -71 [ 94.258812][ T39] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 94.266399][ T39] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 94.274225][ T39] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 94.549589][ T324] usb 4-1: device descriptor read/64, error -71 [ 94.609535][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 94.650945][ T2766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.795626][ T28] audit: type=1400 audit(1717697309.568:340): avc: denied { write } for pid=2771 comm="syz-executor.4" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 94.812904][ T2772] kvm [2771]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4e500000098 [ 94.819619][ T324] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 94.829756][ T2772] kvm [2771]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x55e00000008 [ 94.847076][ T2772] kvm [2771]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x5f600000064 [ 94.860026][ T2772] kvm [2771]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x7750000001a [ 95.009670][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.020917][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.030985][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.040270][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.049237][ T39] usb 3-1: config 0 descriptor?? [ 95.099539][ T324] usb 4-1: device descriptor read/64, error -71 [ 95.489558][ T324] usb 4-1: device descriptor read/64, error -71 [ 95.559809][ T39] hid (null): bogus close delimiter [ 95.609793][ T324] usb usb4-port1: attempt power cycle [ 95.617226][ T336] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 95.627210][ T336] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 95.635205][ T336] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz1 [ 95.769691][ T39] usb 3-1: language id specifier not provided by device, defaulting to English [ 95.803249][ T2780] kvm [2779]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x896 [ 95.813283][ T2780] kvm [2779]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x888 [ 95.824389][ T2780] kvm [2779]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8cc [ 95.834018][ T2780] kvm [2779]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x85 [ 95.860764][ T2780] kvm [2779]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x896 [ 95.871198][ T2780] kvm [2779]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x888 [ 95.999079][ T2798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.026018][ T338] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 96.040821][ T338] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 96.089707][ T338] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 96.202278][ T39] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input41 [ 96.217489][ T39] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input42 [ 96.250471][ T39] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input43 [ 96.278876][ T39] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input44 [ 96.298570][ T39] uclogic 0003:256C:006D.0033: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 96.430025][ T338] usb 3-1: USB disconnect, device number 9 [ 96.749563][ T39] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 96.988264][ T2593] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 96.995819][ T2593] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 97.006664][ T2593] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz0] on syz1 [ 97.087400][ T2833] device pim6reg1 entered promiscuous mode [ 97.119736][ T39] usb 1-1: device descriptor read/64, error -71 [ 97.826405][ T39] usb 1-1: device descriptor read/64, error -71 [ 98.209544][ T2593] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 98.217013][ T39] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 98.529651][ T39] usb 1-1: device descriptor read/64, error -71 [ 98.599605][ T2593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.610502][ T2593] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.620253][ T2593] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.629458][ T2593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.637803][ T2593] usb 5-1: config 0 descriptor?? [ 98.768723][ T338] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 98.776248][ T338] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 98.784104][ T338] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz0] on syz1 [ 98.982286][ T39] usb 1-1: device descriptor read/64, error -71 [ 99.122495][ T2882] device pim6reg1 entered promiscuous mode [ 99.138086][ T39] usb usb1-port1: attempt power cycle [ 99.211740][ T2593] hid (null): bogus close delimiter [ 99.348501][ T2886] loop2: detected capacity change from 0 to 512 [ 99.357183][ T2886] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000079f) [ 99.364979][ T2886] FAT-fs (loop2): Filesystem has been set read-only [ 99.429675][ T2593] usb 5-1: language id specifier not provided by device, defaulting to English [ 99.450372][ T2093] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 99.457656][ T2093] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 99.465384][ T2093] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz1 [ 99.872611][ T2593] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0038/input/input45 [ 99.892852][ T2593] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0038/input/input46 [ 99.916563][ T2593] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0038/input/input47 [ 99.939859][ T2593] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0038/input/input48 [ 99.965108][ T2593] uclogic 0003:256C:006D.0038: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 100.072082][ T338] usb 5-1: USB disconnect, device number 14 [ 100.082550][ T2912] loop2: detected capacity change from 0 to 256 [ 100.093497][ T2912] serio: Serial port pts0 [ 100.149583][ T324] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 100.289269][ T2921] loop0: detected capacity change from 0 to 512 [ 100.300874][ T2921] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a803c019, mo2=0000] [ 100.308574][ T2921] System zones: 0-2, 18-18, 34-34 [ 100.315138][ T2921] EXT4-fs error (device loop0): mb_free_blocks:1813: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 100.329903][ T2921] EXT4-fs (loop0): 1 orphan inode deleted [ 100.335509][ T2921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 100.345233][ T2921] ext4 filesystem being mounted at /root/syzkaller-testdir268084316/syzkaller.63C73O/183/file1 supports timestamps until 2038 (0x7fffffff) [ 100.369598][ T313] EXT4-fs (loop0): unmounting filesystem. [ 100.398320][ T338] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 100.406327][ T338] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 100.414286][ T338] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 100.423912][ T324] usb 4-1: device descriptor read/64, error -71 [ 100.497093][ T2939] loop2: detected capacity change from 0 to 128 [ 100.504025][ T2939] FAT-fs (loop2): Unrecognized mount option "vfat" or missing value [ 100.537102][ T2939] loop2: detected capacity change from 0 to 256 [ 100.667826][ T2939] loop2: detected capacity change from 0 to 512 [ 101.305677][ T324] usb 4-1: device descriptor read/64, error -71 [ 101.439280][ T2956] loop0: detected capacity change from 0 to 256 [ 101.454664][ T2956] serio: Serial port pts0 [ 101.579590][ T324] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 101.607555][ T39] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 101.615430][ T39] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 101.634818][ T39] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 101.753472][ T2978] loop0: detected capacity change from 0 to 128 [ 101.772541][ T2978] FAT-fs (loop0): Unrecognized mount option "vfat" or missing value [ 101.842354][ T2978] loop0: detected capacity change from 0 to 256 [ 101.859555][ T324] usb 4-1: device descriptor read/64, error -71 [ 101.906598][ T2978] loop0: detected capacity change from 0 to 512 [ 101.982220][ T39] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 102.216387][ T2997] loop0: detected capacity change from 0 to 1024 [ 102.249582][ T324] usb 4-1: device descriptor read/64, error -71 [ 102.267254][ T2997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.280306][ T28] audit: type=1400 audit(1717697317.058:341): avc: denied { mounton } for pid=2996 comm="syz-executor.0" path="/root/syzkaller-testdir268084316/syzkaller.63C73O/191/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.327267][ T313] EXT4-fs (loop0): unmounting filesystem. [ 102.369869][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.371648][ T338] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 102.388260][ T324] usb usb4-port1: attempt power cycle [ 102.390152][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.403518][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.403870][ T338] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 102.424311][ T338] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 102.432620][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.485155][ T39] usb 5-1: config 0 descriptor?? [ 102.674649][ T3018] loop0: detected capacity change from 0 to 128 [ 102.685338][ T3018] FAT-fs (loop0): Unrecognized mount option "vfat" or missing value [ 102.788103][ T3020] loop0: detected capacity change from 0 to 256 [ 102.821971][ T3024] loop2: detected capacity change from 0 to 256 [ 102.831685][ T3024] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.857221][ T3018] loop0: detected capacity change from 0 to 512 [ 102.909581][ T324] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 102.989990][ T39] hid (null): bogus close delimiter [ 103.152972][ T3041] device pim6reg1 entered promiscuous mode [ 103.199990][ T39] usb 5-1: language id specifier not provided by device, defaulting to English [ 103.429262][ T3031] loop2: detected capacity change from 0 to 40427 [ 103.437405][ T3031] F2FS-fs (loop2): invalid crc value [ 103.444136][ T3031] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.498116][ T3031] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 103.519074][ T28] audit: type=1400 audit(1717697318.288:342): avc: denied { rename } for pid=3030 comm="syz-executor.2" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.541417][ T318] syz-executor.2: attempt to access beyond end of device [ 103.541417][ T318] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.542985][ T28] audit: type=1400 audit(1717697318.288:343): avc: denied { write } for pid=3030 comm="syz-executor.2" name="file1" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.580519][ T28] audit: type=1400 audit(1717697318.288:344): avc: denied { add_name } for pid=3030 comm="syz-executor.2" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.601201][ T28] audit: type=1400 audit(1717697318.288:345): avc: denied { reparent } for pid=3030 comm="syz-executor.2" name="file0" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.624407][ T28] audit: type=1400 audit(1717697318.288:346): avc: denied { remove_name } for pid=3030 comm="syz-executor.2" name="file2" dev="loop2" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.629663][ T324] usb 4-1: device not accepting address 18, error -71 [ 103.650164][ T39] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003D/input/input49 [ 103.665844][ T28] audit: type=1400 audit(1717697318.288:347): avc: denied { rmdir } for pid=3030 comm="syz-executor.2" name="file0" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 103.702609][ T39] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003D/input/input50 [ 103.724450][ T39] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003D/input/input51 [ 103.758116][ T39] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.003D/input/input52 [ 103.783044][ T39] uclogic 0003:256C:006D.003D: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 103.850436][ T39] usb 5-1: USB disconnect, device number 15 [ 103.875761][ T3068] loop0: detected capacity change from 0 to 128 [ 103.882921][ T3068] FAT-fs (loop0): Unrecognized mount option "vfat" or missing value [ 103.908652][ T3068] loop0: detected capacity change from 0 to 256 [ 103.961593][ T3068] loop0: detected capacity change from 0 to 512 [ 103.982911][ T3078] syz-executor.2[3078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.982992][ T3078] syz-executor.2[3078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.049546][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 104.303227][ T471] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.339618][ T24] usb 2-1: device descriptor read/64, error -71 [ 104.432928][ T3105] loop4: detected capacity change from 0 to 512 [ 104.456488][ T3105] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000079f) [ 104.464308][ T3105] FAT-fs (loop4): Filesystem has been set read-only [ 104.679601][ T471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.696277][ T471] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.716934][ T471] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 104.729596][ T24] usb 2-1: device descriptor read/64, error -71 [ 104.737354][ T471] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.761972][ T471] usb 3-1: config 0 descriptor?? [ 104.797546][ T3143] 9pnet_fd: Insufficient options for proto=fd [ 104.804813][ T3117] loop0: detected capacity change from 0 to 40427 [ 104.822202][ T3117] F2FS-fs (loop0): invalid crc value [ 104.837021][ T3117] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.889116][ T3117] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.928536][ T313] syz-executor.0: attempt to access beyond end of device [ 104.928536][ T313] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.999558][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 105.238196][ T3011] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 105.247704][ T3011] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 105.251033][ T471] hid-generic 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 105.264628][ T3011] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 105.271242][ T471] hid-generic 0003:0D8C:0022.003F: unknown main item tag 0x0 [ 105.274363][ T24] usb 2-1: device descriptor read/64, error -71 [ 105.294035][ T471] hid-generic 0003:0D8C:0022.003F: hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 105.384651][ T3182] 9pnet_fd: Insufficient options for proto=fd [ 105.456641][ T19] usb 3-1: USB disconnect, device number 10 [ 105.949624][ T24] usb 2-1: device descriptor read/64, error -71 [ 106.005081][ T3208] 9pnet_fd: Insufficient options for proto=fd [ 106.070186][ T24] usb usb2-port1: attempt power cycle [ 106.086891][ T28] audit: type=1400 audit(1717697320.858:348): avc: denied { mount } for pid=3213 comm="syz-executor.3" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.111610][ T28] audit: type=1400 audit(1717697320.858:349): avc: denied { mounton } for pid=3213 comm="syz-executor.3" path="/root/syzkaller-testdir1883517268/syzkaller.yTD0d8/192/file0" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.479559][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 106.659598][ T24] usb 2-1: device descriptor read/8, error -71 [ 106.869609][ T24] usb 2-1: device descriptor read/8, error -71 [ 106.957234][ T28] audit: type=1400 audit(1717697321.728:350): avc: denied { unmount } for pid=314 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.055108][ T3255] 9pnet: Could not find request transport: rdma [ 107.259558][ T324] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 107.346684][ T3011] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 107.709640][ T3011] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.719867][ T3011] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.728955][ T3011] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.749542][ T324] usb 4-1: Using ep0 maxpacket: 8 [ 107.875021][ T3294] loop0: detected capacity change from 0 to 128 [ 107.882081][ T3294] FAT-fs (loop0): Unrecognized mount option "vfat" or missing value [ 107.889621][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.899632][ T3011] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.901135][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.915227][ T3011] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.919934][ T324] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 107.932897][ T3011] usb 3-1: Product: syz [ 107.940871][ T3011] usb 3-1: Manufacturer: syz [ 107.945572][ T3011] usb 3-1: SerialNumber: syz [ 107.953107][ T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.962191][ T324] usb 4-1: config 0 descriptor?? [ 107.970675][ T3294] loop0: detected capacity change from 0 to 256 [ 107.990010][ T3011] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 107.996977][ T3011] cdc_ncm 3-1:1.0: bind() failure [ 108.016584][ T3294] loop0: detected capacity change from 0 to 512 [ 108.315461][ T3291] loop1: detected capacity change from 0 to 131072 [ 108.330324][ T3291] F2FS-fs (loop1): invalid crc value [ 108.369877][ T3291] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.433576][ T324] belkin 0003:1020:0006.0040: unknown main item tag 0x0 [ 108.440728][ T324] belkin 0003:1020:0006.0040: unknown main item tag 0x0 [ 108.447933][ T3291] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 108.447953][ T324] belkin 0003:1020:0006.0040: unknown main item tag 0x0 [ 108.462452][ T324] belkin 0003:1020:0006.0040: unknown main item tag 0x0 [ 108.669670][ T324] belkin 0003:1020:0006.0040: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 108.692435][ T324] usb 4-1: USB disconnect, device number 20 [ 109.211927][ T3331] loop3: detected capacity change from 0 to 128 [ 109.218800][ T3331] FAT-fs (loop3): Unrecognized mount option "vfat" or missing value [ 109.259573][ T3011] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 109.271697][ T3331] loop3: detected capacity change from 0 to 256 [ 109.326513][ T3331] loop3: detected capacity change from 0 to 512 [ 109.619628][ T3011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 109.632550][ T3011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 109.643594][ T3011] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.657136][ T3011] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.666189][ T3011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.674744][ T3011] usb 1-1: config 0 descriptor?? [ 109.699667][ T3312] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.711055][ T3355] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 109.720254][ T3355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.730150][ T3355] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.737439][ T3355] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.744903][ T3357] loop1: detected capacity change from 0 to 256 [ 109.745127][ T3355] device bridge0 entered promiscuous mode [ 109.763053][ T3357] serio: Serial port pts0 [ 110.040811][ T39] usb 3-1: USB disconnect, device number 11 [ 110.049861][ T471] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 110.160624][ T3011] plantronics 0003:047F:FFFF.0041: unknown main item tag 0xd [ 110.170797][ T3011] plantronics 0003:047F:FFFF.0041: No inputs registered, leaving [ 110.179939][ T3011] plantronics 0003:047F:FFFF.0041: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 110.739448][ T471] usb 4-1: Using ep0 maxpacket: 8 [ 110.748708][ T19] usb 1-1: USB disconnect, device number 12 [ 110.869619][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.884910][ T471] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.903320][ T471] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 110.912525][ T471] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.922227][ T471] usb 4-1: config 0 descriptor?? [ 110.949125][ T3393] loop4: detected capacity change from 0 to 256 [ 110.962373][ T3393] serio: Serial port pts0 [ 111.319570][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 111.400824][ T471] belkin 0003:1020:0006.0042: unknown main item tag 0x0 [ 111.407641][ T471] belkin 0003:1020:0006.0042: unknown main item tag 0x0 [ 111.426776][ T471] belkin 0003:1020:0006.0042: unknown main item tag 0x0 [ 111.441683][ T471] belkin 0003:1020:0006.0042: unknown main item tag 0x0 [ 111.457503][ T471] belkin 0003:1020:0006.0042: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0 [ 111.601152][ T302] usb 4-1: USB disconnect, device number 21 [ 111.679684][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.694326][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.709604][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.889607][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.901923][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.917454][ T24] usb 2-1: Product: syz [ 111.926081][ T24] usb 2-1: Manufacturer: syz [ 111.935274][ T24] usb 2-1: SerialNumber: syz [ 111.980008][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 111.986755][ T24] cdc_ncm 2-1:1.0: bind() failure [ 112.196605][ T3430] loop3: detected capacity change from 0 to 256 [ 112.222300][ T3430] serio: Serial port pts0 [ 112.319521][ T3442] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 112.829528][ T471] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 113.079711][ T471] usb 1-1: Using ep0 maxpacket: 8 [ 113.209623][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.229550][ T471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.239337][ T471] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 113.279561][ T471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.292109][ T471] usb 1-1: config 0 descriptor?? [ 113.760576][ T471] belkin 0003:1020:0006.0043: unknown main item tag 0x0 [ 113.767767][ T471] belkin 0003:1020:0006.0043: unknown main item tag 0x0 [ 113.784866][ T471] belkin 0003:1020:0006.0043: unknown main item tag 0x0 [ 113.798301][ T471] belkin 0003:1020:0006.0043: unknown main item tag 0x0 [ 113.806256][ T471] belkin 0003:1020:0006.0043: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0 [ 113.961281][ T324] usb 1-1: USB disconnect, device number 13 [ 114.060406][ T24] usb 2-1: USB disconnect, device number 17 [ 115.507452][ T3563] loop3: detected capacity change from 0 to 256 [ 115.518895][ T3563] serio: Serial port pts0 [ 116.804291][ T3618] loop4: detected capacity change from 0 to 128 [ 116.811092][ T3618] FAT-fs (loop4): Unrecognized mount option "vfat" or missing value [ 116.873756][ T3618] loop4: detected capacity change from 0 to 256 [ 116.935383][ T3618] loop4: detected capacity change from 0 to 512 [ 117.329616][ T324] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 117.709581][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 117.720607][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 117.731644][ T324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.744324][ T324] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.753152][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.763223][ T324] usb 2-1: config 0 descriptor?? [ 117.789649][ T3658] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.626194][ T324] plantronics 0003:047F:FFFF.0044: unknown main item tag 0xd [ 118.637735][ T324] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 118.651893][ T324] plantronics 0003:047F:FFFF.0044: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 118.806789][ T324] usb 2-1: USB disconnect, device number 18 [ 119.370296][ T3730] device pim6reg1 entered promiscuous mode [ 120.570186][ T3761] device pim6reg1 entered promiscuous mode [ 121.101791][ T3768] loop3: detected capacity change from 0 to 512 [ 121.279826][ T3769] device pim6reg1 entered promiscuous mode [ 121.643241][ T3768] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.653414][ T28] audit: type=1400 audit(1717697335.818:351): avc: denied { remount } for pid=3762 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 121.835974][ T3768] EXT4-fs (loop3): 1 orphan inode deleted [ 121.841757][ T3768] EXT4-fs (loop3): 1 truncate cleaned up [ 121.847416][ T3768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 121.855553][ T302] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 121.902852][ T302] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 121.913559][ T302] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.007033][ T314] EXT4-fs (loop3): unmounting filesystem. [ 122.151010][ T3786] loop4: detected capacity change from 0 to 40427 [ 122.158534][ T3786] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 122.166440][ T3786] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 122.176343][ T3786] F2FS-fs (loop4): invalid crc value [ 122.184098][ T3786] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.222164][ T3786] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 122.229562][ T302] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 122.230594][ T3786] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.619635][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 122.630994][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 122.642275][ T302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.654951][ T302] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.663798][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.672364][ T302] usb 2-1: config 0 descriptor?? [ 122.689616][ T3784] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.873304][ T28] audit: type=1400 audit(1717697337.648:352): avc: denied { getopt } for pid=3800 comm="syz-executor.3" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 122.926045][ T2093] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 122.937813][ T2093] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 122.954836][ T2093] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz0] on syz1 [ 122.966240][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 122.979925][ T43] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 123.202279][ T302] plantronics 0003:047F:FFFF.0047: unknown main item tag 0xd [ 123.213084][ T302] plantronics 0003:047F:FFFF.0047: No inputs registered, leaving [ 123.232045][ T302] plantronics 0003:047F:FFFF.0047: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.201511][ T3824] loop2: detected capacity change from 0 to 512 [ 124.210244][ T3824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.232655][ T324] usb 2-1: USB disconnect, device number 19 [ 124.264790][ T3824] EXT4-fs (loop2): 1 orphan inode deleted [ 124.270444][ T3824] EXT4-fs (loop2): 1 truncate cleaned up [ 124.275970][ T3824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 124.444078][ T318] EXT4-fs (loop2): unmounting filesystem. [ 124.495453][ T3833] loop2: detected capacity change from 0 to 2048 [ 124.528143][ T3833] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 124.547114][ T28] audit: type=1400 audit(1717697339.318:353): avc: denied { setattr } for pid=3832 comm="syz-executor.2" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.570704][ T28] audit: type=1400 audit(1717697339.348:354): avc: denied { rmdir } for pid=318 comm="syz-executor.2" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.599620][ T28] audit: type=1400 audit(1717697339.348:355): avc: denied { unlink } for pid=318 comm="syz-executor.2" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 124.645272][ T3848] loop0: detected capacity change from 0 to 256 [ 124.653181][ T318] EXT4-fs (loop2): unmounting filesystem. [ 124.657410][ T3848] serio: Serial port pts0 [ 124.816944][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.824231][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.832136][ T3854] device bridge_slave_0 entered promiscuous mode [ 124.839452][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.846593][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.854197][ T3854] device bridge_slave_1 entered promiscuous mode [ 124.913622][ T3854] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.919588][ T39] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 124.920502][ T3854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.920617][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.941863][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.096191][ T3863] loop1: detected capacity change from 0 to 512 [ 125.107134][ T3863] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.159543][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 125.224572][ T3863] EXT4-fs (loop1): 1 orphan inode deleted [ 125.230280][ T3863] EXT4-fs (loop1): 1 truncate cleaned up [ 125.235802][ T3863] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.271502][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.279623][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.286529][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.290437][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.306837][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 125.319929][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.320817][ T39] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 125.335865][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.345079][ T39] usb 4-1: config 0 descriptor?? [ 125.354832][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.371750][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.379007][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.386495][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.394625][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.401507][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.412176][ T10] device bridge_slave_1 left promiscuous mode [ 125.418195][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.425706][ T10] device bridge_slave_0 left promiscuous mode [ 125.432207][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.441671][ T10] device veth1_macvtap left promiscuous mode [ 125.447546][ T10] device veth0_vlan left promiscuous mode [ 125.605569][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.668976][ T315] EXT4-fs (loop1): unmounting filesystem. [ 125.673958][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.690707][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.699159][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.701232][ T3880] loop1: detected capacity change from 0 to 256 [ 125.707960][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.721734][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.731227][ T3854] device veth0_vlan entered promiscuous mode [ 125.738256][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.745929][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.750162][ T3880] exfat: Deprecated parameter 'namecase' [ 125.766749][ T3854] device veth1_macvtap entered promiscuous mode [ 125.774314][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.783211][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.791819][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.800170][ T3880] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 125.821486][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.830063][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.830624][ T39] ntrig 0003:1B96:000A.0048: unknown main item tag 0x0 [ 125.838255][ T3880] exFAT-fs (loop1): failed to load upcase table [ 125.852301][ T39] ntrig 0003:1B96:000A.0048: unknown main item tag 0x0 [ 125.852333][ T39] ntrig 0003:1B96:000A.0048: unknown main item tag 0x0 [ 125.852358][ T39] ntrig 0003:1B96:000A.0048: unknown main item tag 0x0 [ 125.852390][ T39] ntrig 0003:1B96:000A.0048: unknown main item tag 0x0 [ 125.853452][ T39] ntrig 0003:1B96:000A.0048: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 125.895330][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.903563][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.937853][ T3880] exFAT-fs (loop1): failed to recognize exfat type [ 125.994131][ T3011] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 125.997167][ T3884] loop2: detected capacity change from 0 to 8192 [ 126.004856][ T3011] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 126.022749][ T3884] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.027254][ T3011] hid-generic 0000:0000:0000.0049: hidraw1: HID v0.00 Device [syz0] on syz1 [ 126.124490][ T3895] loop1: detected capacity change from 0 to 256 [ 126.132166][ T39] usb 4-1: USB disconnect, device number 22 [ 126.160976][ T3895] serio: Serial port pts0 [ 126.251130][ T3890] loop4: detected capacity change from 0 to 40427 [ 126.258967][ T3890] F2FS-fs (loop4): invalid crc value [ 126.265351][ T3890] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.301842][ T3890] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.379572][ T338] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 126.570039][ T28] audit: type=1400 audit(1717697341.288:356): avc: denied { mounton } for pid=3889 comm="syz-executor.4" path="/root/syzkaller-testdir330291550/syzkaller.9Nc4NG/149/file0/bus" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.605687][ T28] audit: type=1400 audit(1717697341.288:357): avc: denied { setattr } for pid=3889 comm="syz-executor.4" name="work" dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 126.628680][ T28] audit: type=1400 audit(1717697341.298:358): avc: denied { unlink } for pid=3889 comm="syz-executor.4" name="#5" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.713057][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.723178][ T28] audit: type=1326 audit(1717697341.508:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.748099][ T28] audit: type=1326 audit(1717697341.508:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.775041][ T28] audit: type=1326 audit(1717697341.508:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.798971][ T28] audit: type=1326 audit(1717697341.508:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.823086][ T28] audit: type=1326 audit(1717697341.508:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.847209][ T28] audit: type=1326 audit(1717697341.508:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.872395][ T28] audit: type=1326 audit(1717697341.508:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.896739][ T28] audit: type=1326 audit(1717697341.508:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.922018][ T2046] syz-executor.4: attempt to access beyond end of device [ 126.922018][ T2046] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 126.924092][ T28] audit: type=1326 audit(1717697341.508:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 126.937288][ T2046] syz-executor.4: attempt to access beyond end of device [ 126.937288][ T2046] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 126.961110][ T28] audit: type=1326 audit(1717697341.508:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78dbc7cf69 code=0x7ffc0000 [ 127.010510][ T10] kworker/u4:1: attempt to access beyond end of device [ 127.010510][ T10] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 127.039641][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 127.051010][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 127.065618][ T338] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.092489][ T338] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.101488][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.110343][ T338] usb 3-1: config 0 descriptor?? [ 127.129684][ T3892] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 127.305514][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.312901][ T3923] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.320237][ T3923] device bridge_slave_0 entered promiscuous mode [ 127.327738][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.334854][ T3923] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.342395][ T3923] device bridge_slave_1 entered promiscuous mode [ 127.398608][ T3923] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.405588][ T3923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.412800][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.419599][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.446139][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.453884][ T3011] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.461125][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.475297][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.483402][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.490374][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.497571][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.505789][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.512881][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.531192][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.539053][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.564777][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.580830][ T338] plantronics 0003:047F:FFFF.004A: unknown main item tag 0xd [ 127.590567][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.594089][ T338] plantronics 0003:047F:FFFF.004A: No inputs registered, leaving [ 127.600991][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.619450][ T338] plantronics 0003:047F:FFFF.004A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 127.622332][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.644871][ T3934] loop1: detected capacity change from 0 to 256 [ 127.649252][ T3923] device veth0_vlan entered promiscuous mode [ 127.662025][ T10] device bridge_slave_1 left promiscuous mode [ 127.662983][ T3934] serio: Serial port pts0 [ 127.669170][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.679872][ T10] device bridge_slave_0 left promiscuous mode [ 127.685947][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.694670][ T10] device veth1_macvtap left promiscuous mode [ 127.700847][ T10] device veth0_vlan left promiscuous mode [ 127.782354][ T338] usb 3-1: USB disconnect, device number 12 [ 127.800848][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.810722][ T3923] device veth1_macvtap entered promiscuous mode [ 127.826394][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.841485][ T2593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.868644][ T324] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 127.893887][ T324] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 127.906112][ T324] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 127.970658][ T3945] loop4: detected capacity change from 0 to 2048 [ 128.026181][ T3952] loop0: detected capacity change from 0 to 1024 [ 128.028756][ T3945] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.044050][ T3952] EXT4-fs: Ignoring removed nomblk_io_submit option [ 128.070296][ T3955] loop1: detected capacity change from 0 to 512 [ 128.091351][ T3952] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 128.131342][ T313] EXT4-fs (loop0): unmounting filesystem. [ 128.204746][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.323436][ T3971] loop2: detected capacity change from 0 to 1024 [ 128.350383][ T3971] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 128.358651][ T3971] System zones: 0-1, 3-12 [ 128.365230][ T3971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.388779][ T3854] EXT4-fs (loop2): unmounting filesystem. [ 128.420721][ T3977] loop2: detected capacity change from 0 to 128 [ 128.509205][ T3981] loop3: detected capacity change from 0 to 256 [ 128.557352][ T3981] loop3: detected capacity change from 0 to 512 [ 128.593241][ T3986] kvm: emulating exchange as write [ 128.768658][ T10] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 128.783663][ T10] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 128.796712][ T10] EXT4-fs (loop4): This should not happen!! Data will be lost [ 128.796712][ T10] [ 128.806244][ T10] EXT4-fs (loop4): Total free blocks count 0 [ 128.815650][ T10] EXT4-fs (loop4): Free/Dirty block details [ 128.821600][ T10] EXT4-fs (loop4): free_blocks=2415919104 [ 128.827532][ T10] EXT4-fs (loop4): dirty_blocks=32 [ 128.833217][ T10] EXT4-fs (loop4): Block reservation details [ 128.839592][ T10] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 128.846926][ T3923] EXT4-fs (loop4): unmounting filesystem. [ 128.910791][ T4002] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 129.063076][ T4013] loop3: detected capacity change from 0 to 512 [ 129.099379][ T4013] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.110072][ T4010] loop2: detected capacity change from 0 to 8192 [ 129.112245][ T4013] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 129.126136][ T4013] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1) [ 129.214443][ T4023] loop4: detected capacity change from 0 to 8192 [ 129.222857][ T4013] EXT4-fs (loop3): Remounting filesystem read-only [ 129.243125][ T4013] EXT4-fs (loop3): 1 truncate cleaned up [ 129.248856][ T4013] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 129.250102][ T4023] loop4: p1 < > p2 p3 < p5 > p4 [ 129.262508][ T4023] loop4: partition table partially beyond EOD, truncated [ 129.269589][ T4023] loop4: p1 start 277760 is beyond EOD, truncated [ 129.275866][ T4023] loop4: p2 start 6684676 is beyond EOD, truncated [ 129.284420][ T4023] loop4: p4 start 33554432 is beyond EOD, truncated [ 129.291348][ T4023] loop4: p5 start 6684676 is beyond EOD, truncated [ 129.662728][ T4028] loop1: detected capacity change from 0 to 256 [ 129.668539][ T39] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 129.679098][ T39] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 129.688290][ T39] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.348661][ T4042] loop0: detected capacity change from 0 to 1024 [ 130.361602][ T4042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.404240][ T4042] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.425678][ T313] EXT4-fs (loop0): unmounting filesystem. [ 130.447485][ T3011] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 130.455204][ T3011] hid-generic 0000:0000:0000.004D: unknown main item tag 0x0 [ 130.462978][ T3011] hid-generic 0000:0000:0000.004D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 130.523373][ T314] EXT4-fs (loop3): unmounting filesystem. [ 130.549853][ T4066] loop1: detected capacity change from 0 to 256 [ 130.560935][ T4066] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 130.643762][ T4069] loop3: detected capacity change from 0 to 256 [ 131.675746][ T4103] loop2: detected capacity change from 0 to 1024 [ 131.694094][ T4103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.730073][ T4103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.768351][ T3854] EXT4-fs (loop2): unmounting filesystem. [ 131.869330][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 131.869346][ T28] audit: type=1326 audit(1717697346.638:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc498c7cf69 code=0x0 [ 132.049558][ T3011] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 132.075629][ T28] audit: type=1326 audit(1717697346.848:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc498c7cf69 code=0x0 [ 132.179519][ T28] audit: type=1326 audit(1717697346.948:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498c7cf69 code=0x7ffc0000 [ 132.220873][ T28] audit: type=1326 audit(1717697346.958:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc498c7cf69 code=0x7ffc0000 [ 132.266394][ T28] audit: type=1326 audit(1717697346.958:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498c7cf69 code=0x7ffc0000 [ 132.289566][ T3011] usb 5-1: Using ep0 maxpacket: 32 [ 132.311137][ T28] audit: type=1326 audit(1717697346.958:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc498c7cf69 code=0x7ffc0000 [ 132.334929][ T28] audit: type=1326 audit(1717697346.958:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498c7cf69 code=0x7ffc0000 [ 132.359007][ T28] audit: type=1326 audit(1717697346.958:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4121 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc498c7cf69 code=0x7ffc0000 [ 132.409597][ T3011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.425477][ T3011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.447106][ T3011] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.472958][ T3011] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 132.491795][ T3011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.509062][ T3011] usb 5-1: config 0 descriptor?? [ 132.542258][ T4132] loop1: detected capacity change from 0 to 512 [ 132.562048][ T4132] EXT4-fs: Ignoring removed oldalloc option [ 132.579233][ T4132] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 132.613266][ T4132] EXT4-fs (loop1): 1 truncate cleaned up [ 132.622115][ T4132] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.647914][ T28] audit: type=1400 audit(1717697347.418:447): avc: denied { mounton } for pid=4131 comm="syz-executor.1" path="/root/syzkaller-testdir1365212055/syzkaller.zqEyUF/289/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 132.691741][ T315] EXT4-fs error (device loop1): mb_free_blocks:1813: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 132.712618][ T315] EXT4-fs (loop1): unmounting filesystem. [ 132.737406][ T28] audit: type=1400 audit(1717697347.508:448): avc: denied { setopt } for pid=4138 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 132.760251][ T4141] syz-executor.1[4141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.760345][ T4141] syz-executor.1[4141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.961766][ T4154] loop0: detected capacity change from 0 to 512 [ 132.981554][ T4154] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 132.991726][ T4154] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 133.001369][ T4154] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 133.011530][ T4154] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 133.019799][ T4154] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 133.028276][ T4154] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.035341][ T4154] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz-executor.0: Invalid block bitmap block 0 in block_group 1 [ 133.049354][ T2593] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 133.049774][ T4154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 34: padding at end of block bitmap is not set [ 133.069852][ T3011] usbhid 5-1:0.0: can't add hid device: -71 [ 133.076874][ T3011] usbhid: probe of 5-1:0.0 failed with error -71 [ 133.084621][ T3011] usb 5-1: USB disconnect, device number 16 [ 133.094805][ T4154] EXT4-fs (loop0): 1 truncate cleaned up [ 133.096303][ T4158] loop2: detected capacity change from 0 to 16 [ 133.107703][ T4154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.107967][ T4158] erofs: (device loop2): mounted with root inode @ nid 36. [ 133.130066][ T4154] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 133.138073][ T4154] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 133.182194][ T4162] loop2: detected capacity change from 0 to 256 [ 133.188772][ T4162] exfat: Deprecated parameter 'namecase' [ 133.194378][ T4162] exfat: Deprecated parameter 'utf8' [ 133.200399][ T4162] exfat: Bad value for 'uid' [ 133.289588][ T2593] usb 4-1: Using ep0 maxpacket: 32 [ 133.409598][ T2593] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.420758][ T2593] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.430653][ T2593] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 133.439668][ T2593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.480038][ T2593] hub 4-1:4.0: USB hub found [ 133.691547][ T4154] syz-executor.0 (4154) used greatest stack depth: 19976 bytes left [ 133.699606][ T2593] hub 4-1:4.0: 2 ports detected [ 133.737408][ T313] EXT4-fs (loop0): unmounting filesystem. [ 134.039607][ T39] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 134.156922][ T4190] EXT4-fs warning (device sda1): __ext4_ioctl:1246: Setting inode version is not supported with metadata_csum enabled. [ 134.459617][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.475911][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.493208][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.508921][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.518521][ T39] usb 1-1: config 0 descriptor?? [ 134.879655][ T2593] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 134.885959][ T2593] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 135.185823][ T4237] 9pnet_fd: Insufficient options for proto=fd [ 135.276837][ T4241] loop2: detected capacity change from 0 to 128 [ 135.291252][ T4241] FAT-fs (loop2): Unrecognized mount option "vfat" or missing value [ 135.366400][ T4232] loop4: detected capacity change from 0 to 40427 [ 135.366443][ T4241] loop2: detected capacity change from 0 to 256 [ 135.376624][ T4232] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.415618][ T4232] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 135.427912][ T4241] loop2: detected capacity change from 0 to 512 [ 135.434923][ T3923] syz-executor.4: attempt to access beyond end of device [ 135.434923][ T3923] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.499570][ T39] uclogic 0003:256C:006D.004E: failed retrieving Huion firmware version: -71 [ 135.508298][ T39] uclogic 0003:256C:006D.004E: failed probing parameters: -71 [ 135.516807][ T39] uclogic: probe of 0003:256C:006D.004E failed with error -71 [ 135.525246][ T39] usb 1-1: USB disconnect, device number 14 [ 135.939616][ T2593] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 136.299598][ T2593] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.309831][ T3011] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.317252][ T2593] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.479609][ T2593] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.488662][ T2593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.496597][ T2593] usb 2-1: Product: syz [ 136.500546][ T2593] usb 2-1: Manufacturer: syz [ 136.504940][ T2593] usb 2-1: SerialNumber: syz [ 136.521258][ T4279] loop4: detected capacity change from 0 to 128 [ 136.527898][ T4279] FAT-fs (loop4): Unrecognized mount option "vfat" or missing value [ 136.550037][ T2593] usb 2-1: selecting invalid altsetting 1 [ 136.577765][ T4279] loop4: detected capacity change from 0 to 256 [ 136.630304][ T4279] loop4: detected capacity change from 0 to 512 [ 136.689651][ T3011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.700699][ T3011] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.710847][ T3011] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 136.720008][ T3011] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.729926][ T3011] usb 1-1: config 0 descriptor?? [ 137.049585][ T2593] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 137.059575][ T2593] cdc_ncm 2-1:1.0: bind() failure [ 137.122820][ T338] usb 4-1: USB disconnect, device number 23 [ 137.336510][ T3011] hid (null): nested delimiters [ 137.526574][ T3011] hid-led 0003:27B8:01ED.004F: nested delimiters [ 137.532797][ T3011] hid-led 0003:27B8:01ED.004F: item 0 1 2 10 parsing failed [ 137.540158][ T3011] hid-led: probe of 0003:27B8:01ED.004F failed with error -22 [ 137.548382][ T3011] usb 1-1: USB disconnect, device number 15 [ 137.770587][ T4310] loop4: detected capacity change from 0 to 256 [ 137.780226][ T4310] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 137.795833][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 137.795851][ T4310] request_module fs-ubifs succeeded, but still no fs? [ 137.795850][ T28] audit: type=1400 audit(1717697352.578:456): avc: denied { mounton } for pid=4309 comm="syz-executor.4" path="/root/syzkaller-testdir802769938/syzkaller.guZ7gE/35/file0/file0" dev="loop4" ino=1048646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 137.856477][ T4314] loop4: detected capacity change from 0 to 128 [ 137.863150][ T4314] FAT-fs (loop4): Unrecognized mount option "vfat" or missing value [ 137.912571][ T4314] loop4: detected capacity change from 0 to 256 [ 137.955929][ T4314] loop4: detected capacity change from 0 to 512 [ 138.024109][ T4324] loop4: detected capacity change from 0 to 512 [ 138.031880][ T4324] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 138.040105][ T4324] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.046695][ T4324] EXT4-fs warning (device loop4): ext4_enable_quotas:6987: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 138.049558][ C0] softirq: huh, entered softirq 9 RCU ffffffff8160d1a0 with preempt_count 00000103, exited with 00000102? [ 138.072615][ T313] BUG: scheduling while atomic: syz-executor.0/313/0x00000002 [ 138.080165][ T313] Modules linked in: [ 138.083887][ T313] Preemption disabled at: [ 138.083898][ T313] [] schedule+0xbc/0x180 [ 138.093904][ T313] CPU: 0 PID: 313 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00147-gbfacfd198eca #0 [ 138.103959][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 138.114039][ T313] Call Trace: [ 138.117162][ T313] [ 138.119926][ T313] dump_stack_lvl+0x151/0x1b7 [ 138.124525][ T313] ? schedule+0xbc/0x180 [ 138.128605][ T313] ? schedule+0xbc/0x180 [ 138.132771][ T313] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 138.138075][ T313] ? schedule+0xbc/0x180 [ 138.142313][ T313] dump_stack+0x15/0x1b [ 138.146404][ T313] __schedule_bug+0x195/0x260 [ 138.151286][ T313] ? __ia32_sys_waitid+0xd0/0xd0 [ 138.156411][ T313] ? cpu_util_update_eff+0x10e0/0x10e0 [ 138.162305][ T313] ? kernel_waitid+0x520/0x520 [ 138.167208][ T313] __schedule+0xcf7/0x1550 [ 138.171653][ T313] ? __x64_sys_wait4+0x181/0x1e0 [ 138.176415][ T313] ? __sched_text_start+0x8/0x8 [ 138.181177][ T313] schedule+0xc3/0x180 [ 138.185086][ T313] exit_to_user_mode_loop+0x4e/0xa0 [ 138.190198][ T313] exit_to_user_mode_prepare+0x5a/0xa0 [ 138.195612][ T313] syscall_exit_to_user_mode+0x26/0x140 [ 138.200999][ T313] do_syscall_64+0x49/0xb0 [ 138.205244][ T313] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 138.210979][ T313] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 138.216787][ T313] RIP: 0033:0x7fc498c79953 [ 138.221051][ T313] Code: 00 00 0f 1f 44 00 00 31 c9 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 80 3d b1 e5 10 00 00 49 89 ca 74 14 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5d c3 0f 1f 40 00 48 83 ec 28 89 54 24 14 48 [ 138.240833][ T313] RSP: 002b:00007ffd0044eb48 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 138.249077][ T313] RAX: 0000000000000000 RBX: 00000000000002c8 RCX: 00007fc498c79953 [ 138.256900][ T313] RDX: 0000000040000001 RSI: 00007ffd0044eb9c RDI: 00000000ffffffff [ 138.259644][ T3011] usb 1-1: new high-speed USB device number 16 using dummy_hcd 2024/06/06 18:09:13 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 138.264796][ T313] RBP: 00007ffd0044eb9c R08: 00007ffd00527080 R09: 00007ffd005270b0 [ 138.279984][ T313] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 138.287784][ T313] R13: 0000000000021af1 R14: 0000000000021af1 R15: 0000000000000000 [ 138.295688][ T313] [ 138.313299][ T4324] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 138.328059][ T4324] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 138.346548][ T4324] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 138.358913][ T4324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.367997][ T28] audit: type=1400 audit(1717697353.148:457): avc: denied { mount } for pid=4323 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.405827][ T4324] EXT4-fs (loop4): unmounting filesystem.