last executing test programs: 25.710822193s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 25.610331888s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bd080000000000007b8af8ff00000f00000000000000800007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 25.583736063s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000840)=""/193, 0xc1}], 0x1, 0x0, 0x0, 0x0) 24.803807173s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000000840)=""/193, 0xc1}], 0x1, 0x0, 0x0, 0x0) 24.790860565s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) 24.648137827s ago: executing program 3: ptrace(0x10, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r0}, 0x10) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r2, 0x2, &(0x7f0000000000)) 4.551094658s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 2.806569878s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2.716572201s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000d00850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 2.674665057s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b1fac57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75465c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a652e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd1e7f155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741001b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3cbc3256e81d272a9c1271b93a1f97feebe77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf954844eb7edefea72690c518075cdce72c222961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3aed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1be2be77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) 2.581543882s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) setpriority(0x0, 0x0, 0x0) 2.404800449s ago: executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x8c84, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_begin_ordered_truncate\x00', r2}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.382427953s ago: executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) setreuid(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000980)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x85, 0x3, "d069e4"}}) 1.991946313s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f0ff00850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='hrtimer_init\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.965263347s ago: executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0xfffffffd, 0x3}) 1.856119434s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 1.842046596s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) ustat(0x0, 0x0) 1.827230678s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 1.318093357s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8000}]}, 0x10) shutdown(r2, 0x0) dup2(r1, r0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.309183188s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1}, 0x20}}, 0x0) 1.291483721s ago: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.269475034s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) dup3(r1, r2, 0x0) 1.259132046s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_cancel(0x0, 0x0, 0x0) 1.250469958s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 55.919892ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) brk(0x0) 45.841844ms ago: executing program 1: r0 = userfaultfd(0x1) read(r0, 0x0, 0x0) 36.825275ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1}, 0x20}}, 0x0) 19.940417ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 9.722519ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f00000004c0)='/usr/sbin/ntpd\x00', 0xf) 0s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xffff8000, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x100, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) kernel console output (not intermixed with test programs): 63.469659][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.655089][ T6975] 8021q: VLANs not supported on lo [ 163.714585][ T6980] SELinux: Context $ is not valid (left unmapped). [ 163.727450][ T28] audit: type=1400 audit(1717554407.342:24225): avc: denied { relabelto } for pid=6979 comm="syz-executor.3" name="/" dev="ramfs" ino=48729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="$" [ 163.762126][ T28] audit: type=1400 audit(1717554407.342:24226): avc: denied { associate } for pid=6979 comm="syz-executor.3" name="/" dev="ramfs" ino=48729 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 srawcon="$" [ 163.812312][ T6984] loop3: detected capacity change from 0 to 128 [ 163.819284][ T6984] FAT-fs (loop3): bread failed, FSINFO block (sector = 65281) [ 163.922403][ T318] hid-generic 0003:1B96:9F0A.0019: unknown main item tag 0x0 [ 163.929644][ T318] hid-generic 0003:1B96:9F0A.0019: unknown main item tag 0x0 [ 163.950783][ T318] hid-generic 0003:1B96:9F0A.0019: unknown main item tag 0x0 [ 163.958023][ T318] hid-generic 0003:1B96:9F0A.0019: unknown main item tag 0x0 [ 163.965245][ T318] hid-generic 0003:1B96:9F0A.0019: unknown main item tag 0x0 [ 163.973609][ T318] hid-generic 0003:1B96:9F0A.0019: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.4-1/input0 [ 163.991258][ T335] usb 2-1: USB disconnect, device number 20 [ 164.374216][ T6989] loop2: detected capacity change from 0 to 131072 [ 164.381583][ T6989] F2FS-fs (loop2): Unrecognized mount option "Y@ [ 164.381583][ T6989] " 6WoBn~4J!nKP" or missing value [ 164.451872][ T318] usb 5-1: USB disconnect, device number 19 [ 164.515003][ T1528] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 164.522566][ T1528] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 164.541267][ T1528] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 164.617642][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.624708][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.642186][ T7019] device bridge_slave_1 left promiscuous mode [ 164.648732][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.658804][ T7021] loop1: detected capacity change from 0 to 512 [ 164.660201][ T7019] device bridge_slave_0 left promiscuous mode [ 164.671474][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.675471][ T7021] EXT4-fs: Ignoring removed oldalloc option [ 164.685444][ T7021] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (56219!=33349) [ 164.694187][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.695751][ T7021] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 164.710383][ T7021] EXT4-fs (loop1): mount failed [ 164.745534][ T7024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7024 comm=syz-executor.3 [ 164.773386][ T7022] loop3: detected capacity change from 0 to 256 [ 164.906106][ T7029] loop2: detected capacity change from 0 to 256 [ 165.236280][ T7042] loop3: detected capacity change from 0 to 512 [ 165.243282][ T7042] EXT4-fs: Ignoring removed bh option [ 165.248973][ T7042] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 165.273457][ T7042] EXT4-fs (loop3): 1 truncate cleaned up [ 165.282197][ T7042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.329124][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.336295][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.351199][ T7042] loop3: detected capacity change from 512 to 0 [ 165.358621][ T7057] device bridge_slave_1 left promiscuous mode [ 165.361172][ T7060] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.3: error -5 reading directory block [ 165.365446][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.379786][ T7060] EXT4-fs error (device loop3): ext4_get_inode_loc:4635: inode #2: block 5: comm syz-executor.3: unable to read itable block [ 165.398292][ T10] loop: Write error at byte offset 9223372036854776831, length 1024. [ 165.404141][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.406387][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 165.415587][ T7057] device bridge_slave_0 left promiscuous mode [ 165.424638][ T7060] EXT4-fs (loop3): I/O error while writing superblock [ 165.429349][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.436196][ T7060] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: IO failure [ 165.451714][ T10] loop: Write error at byte offset 9223372036854776831, length 1024. [ 165.455397][ T7062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=7062 comm=syz-executor.2 [ 165.459648][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 165.480289][ T7060] EXT4-fs (loop3): I/O error while writing superblock [ 165.486945][ T7060] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor.3: mark_inode_dirty error [ 165.498411][ T10] loop: Write error at byte offset 9223372036854776831, length 1024. [ 165.506347][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 165.514404][ T7060] EXT4-fs (loop3): I/O error while writing superblock [ 165.528633][ T7063] loop2: detected capacity change from 0 to 256 [ 165.536321][ T6929] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.3: error -5 reading directory block [ 165.553143][ T10] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4620: inode #2: block 5: comm kworker/u4:1: unable to read itable block [ 165.566724][ T345] loop: Write error at byte offset 9223372036854776831, length 1024. [ 165.575096][ C1] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 165.583197][ T10] EXT4-fs (loop3): I/O error while writing superblock [ 165.590416][ T6929] EXT4-fs (loop3): unmounting filesystem. [ 165.596957][ T10] loop: Write error at byte offset 9223372036854776831, length 1024. [ 165.605278][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 165.613378][ T6929] EXT4-fs (loop3): I/O error while writing superblock [ 165.630880][ T39] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 165.823221][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.830071][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.837448][ T7071] device bridge_slave_0 entered promiscuous mode [ 165.844587][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.851904][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.859209][ T7071] device bridge_slave_1 entered promiscuous mode [ 165.869311][ T7078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7078 comm=syz-executor.2 [ 165.881895][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 165.943198][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.950089][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.957213][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.964084][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.013631][ T1528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.022448][ T1528] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.030874][ T39] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.041435][ T1528] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.048575][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.064005][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.074010][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.084163][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.085823][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.103887][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.110813][ T39] usb 2-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 166.112435][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.119886][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.128508][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.142268][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.174893][ T7071] device veth0_vlan entered promiscuous mode [ 166.189107][ T7071] device veth1_macvtap entered promiscuous mode [ 166.216768][ T39] usb 2-1: config 0 descriptor?? [ 166.234222][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 166.243089][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.251719][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.261238][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.269157][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.276616][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 166.632642][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 166.641113][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.649022][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.712862][ T39] hid-generic 0003:1B96:9F0A.001B: unknown main item tag 0x0 [ 166.720190][ T39] hid-generic 0003:1B96:9F0A.001B: unknown main item tag 0x0 [ 166.727629][ T39] hid-generic 0003:1B96:9F0A.001B: unknown main item tag 0x0 [ 166.734925][ T39] hid-generic 0003:1B96:9F0A.001B: unknown main item tag 0x0 [ 166.742389][ T39] hid-generic 0003:1B96:9F0A.001B: unknown main item tag 0x0 [ 166.753829][ T39] hid-generic 0003:1B96:9F0A.001B: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.1-1/input0 [ 166.980880][ T3626] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 167.082312][ T43] device veth1_macvtap left promiscuous mode [ 167.088189][ T43] device veth0_vlan left promiscuous mode [ 167.131853][ T7098] loop3: detected capacity change from 0 to 131072 [ 167.140061][ T7098] F2FS-fs (loop3): Unrecognized mount option "Y@ [ 167.140061][ T7098] " 6WoBn~4J!nKP" or missing value [ 167.220964][ T3626] usb 5-1: Using ep0 maxpacket: 8 [ 167.243358][ T333] usb 2-1: USB disconnect, device number 21 [ 167.340921][ T3626] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 167.353557][ T3626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.371153][ T3626] usb 5-1: config 0 descriptor?? [ 167.635306][ T7121] loop3: detected capacity change from 0 to 256 [ 167.949768][ T7123] loop3: detected capacity change from 0 to 128 [ 167.972391][ T7123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 167.988582][ T7123] ext4 filesystem being mounted at /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/1/mnt supports timestamps until 2038 (0x7fffffff) [ 168.115501][ T7123] EXT4-fs (loop3): unmounting filesystem. [ 168.770877][ T966] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.924352][ T7149] loop3: detected capacity change from 0 to 131072 [ 168.931896][ T7149] F2FS-fs (loop3): Unrecognized mount option "Y@ [ 168.931896][ T7149] " 6WoBn~4J!nKP" or missing value [ 168.951277][ T7153] loop1: detected capacity change from 0 to 512 [ 168.958098][ T7153] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 168.967389][ T7153] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 169.020773][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 169.061509][ T7155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.083704][ T7157] device batadv_slave_1 entered promiscuous mode [ 169.090385][ T7157] syz-executor.1[7157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.090465][ T7157] syz-executor.1[7157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.104614][ T7157] incfs: Error accessing: ./bus. [ 169.120931][ T7157] incfs: mount failed -20 [ 169.140808][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.152580][ T7156] device batadv_slave_1 left promiscuous mode [ 169.158585][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.168264][ T966] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.181190][ T966] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.189959][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.202253][ T966] usb 3-1: config 0 descriptor?? [ 169.259718][ T28] audit: type=1326 audit(1717554412.872:24227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270a7cee9 code=0x7ffc0000 [ 169.284291][ T28] audit: type=1326 audit(1717554412.872:24228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270a7cee9 code=0x7ffc0000 [ 169.387696][ T7171] loop3: detected capacity change from 0 to 256 [ 169.488495][ T28] audit: type=1326 audit(1717554412.882:24229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f2270a7cee9 code=0x7ffc0000 [ 169.604663][ T28] audit: type=1326 audit(1717554412.882:24230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270a7cee9 code=0x7ffc0000 [ 169.628730][ T28] audit: type=1326 audit(1717554412.882:24231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2270a7cee9 code=0x7ffc0000 [ 169.706886][ T7177] loop3: detected capacity change from 0 to 512 [ 169.714559][ T28] audit: type=1400 audit(1717554413.332:24232): avc: denied { mounton } for pid=7176 comm="syz-executor.3" path="/root/syzkaller-testdir3084024007/syzkaller.OqlHf5/8/file1/bus/file0" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.746407][ T7177] EXT4-fs (loop3): 1 truncate cleaned up [ 169.752415][ T7177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 169.761742][ T7177] EXT4-fs (loop3): unmounting filesystem. [ 169.766317][ T966] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001C/input/input37 [ 169.779454][ T966] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 169.997458][ T39] usb 3-1: USB disconnect, device number 12 [ 170.128374][ T7187] device batadv_slave_1 entered promiscuous mode [ 170.135425][ T7187] syz-executor.3[7187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.135479][ T7187] syz-executor.3[7187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.151032][ T7187] incfs: Error accessing: ./bus. [ 170.167308][ T7187] incfs: mount failed -20 [ 170.222846][ T7186] device batadv_slave_1 left promiscuous mode [ 170.359296][ T7205] loop3: detected capacity change from 0 to 512 [ 170.368040][ T7205] EXT4-fs (loop3): 1 truncate cleaned up [ 170.373778][ T7205] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.382926][ T7205] EXT4-fs (loop3): unmounting filesystem. [ 170.451976][ T7209] loop3: detected capacity change from 0 to 128 [ 170.460041][ T7209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 170.468547][ T7209] ext4 filesystem being mounted at /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/21/mnt supports timestamps until 2038 (0x7fffffff) [ 170.491090][ T7209] EXT4-fs (loop3): unmounting filesystem. [ 170.541749][ T7215] device batadv_slave_1 entered promiscuous mode [ 170.548585][ T7215] syz-executor.2[7215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.548668][ T7215] syz-executor.2[7215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.565271][ T7215] incfs: Error accessing: ./bus. [ 170.581646][ T7215] incfs: mount failed -20 [ 170.597483][ T7219] tipc: Failed to remove unknown binding: 66,1,1/0:3461287816/3461287818 [ 170.606444][ T7219] tipc: Failed to remove unknown binding: 66,1,1/0:3461287816/3461287818 [ 170.615295][ T7219] tipc: Failed to remove unknown binding: 66,1,1/0:3461287816/3461287818 [ 170.626326][ T7213] device batadv_slave_1 left promiscuous mode [ 170.741278][ T7242] loop2: detected capacity change from 0 to 512 [ 170.748382][ T7242] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 170.756729][ T7242] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 170.758607][ T7243] loop3: detected capacity change from 0 to 2048 [ 170.781029][ T3626] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 170.795154][ T3626] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 170.797947][ T7243] Alternate GPT is invalid, using primary GPT. [ 170.815775][ T3626] asix: probe of 5-1:0.0 failed with error -71 [ 170.825036][ T3626] usb 5-1: USB disconnect, device number 20 [ 170.825554][ T7243] loop3: p1 p2 p3 [ 170.858184][ T28] audit: type=1400 audit(1717554414.472:24233): avc: denied { read write } for pid=7236 comm="syz-executor.3" name="loop3p2" dev="devtmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.886662][ T28] audit: type=1400 audit(1717554414.472:24234): avc: denied { open } for pid=7236 comm="syz-executor.3" path="/dev/loop3p2" dev="devtmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.952340][ T7252] tipc: Failed to remove unknown binding: 66,1,1/0:3210900516/3210900518 [ 170.961374][ T7252] tipc: Failed to remove unknown binding: 66,1,1/0:3210900516/3210900518 [ 170.962693][ T7254] syz-executor.2[7254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.969670][ T7252] tipc: Failed to remove unknown binding: 66,1,1/0:3210900516/3210900518 [ 170.969777][ T7254] syz-executor.2[7254] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.021326][ T7258] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 171.106715][ T7263] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 171.164454][ T7258] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 171.432176][ T7291] tipc: Failed to remove unknown binding: 66,1,1/0:457658519/457658521 [ 171.458375][ T7293] syz-executor.4[7293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.458455][ T7293] syz-executor.4[7293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.460368][ T7291] tipc: Failed to remove unknown binding: 66,1,1/0:457658519/457658521 [ 171.489667][ T7291] tipc: Failed to remove unknown binding: 66,1,1/0:457658519/457658521 [ 171.517682][ T7296] loop2: detected capacity change from 0 to 512 [ 171.525893][ T7296] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.547460][ T7296] EXT4-fs (loop2): 1 truncate cleaned up [ 171.553681][ T7296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 171.571653][ T7300] loop1: detected capacity change from 0 to 128 [ 171.647332][ T7306] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 171.669688][ T6407] EXT4-fs (loop2): unmounting filesystem. [ 171.691394][ T7313] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 171.701459][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.890179][ T7316] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 171.959114][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.963585][ T7323] tipc: Failed to remove unknown binding: 66,1,1/0:3972326071/3972326073 [ 171.966235][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.017552][ T7323] tipc: Failed to remove unknown binding: 66,1,1/0:3972326071/3972326073 [ 172.030917][ T7306] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 172.052433][ T7323] tipc: Failed to remove unknown binding: 66,1,1/0:3972326071/3972326073 [ 172.267830][ T7331] loop2: detected capacity change from 0 to 2048 [ 172.279154][ T7315] loop3: detected capacity change from 0 to 40427 [ 172.286382][ T7315] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 172.294200][ T7315] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 172.303439][ T7315] F2FS-fs (loop3): invalid crc value [ 172.310157][ T7315] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.311713][ T7331] Alternate GPT is invalid, using primary GPT. [ 172.322633][ T7331] loop2: p1 p2 p3 [ 172.351905][ T7315] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 172.358811][ T7315] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.620852][ T7273] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 172.880809][ T6] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 172.890187][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 172.899866][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 172.971729][ T7357] loop3: detected capacity change from 0 to 256 [ 173.010914][ T7273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.025270][ T7273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.035463][ T7273] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 173.044417][ T7273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.053201][ T7273] usb 5-1: config 0 descriptor?? [ 173.120864][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 173.149382][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.240886][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.251850][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.263076][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.272747][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 173.285509][ T6] usb 3-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 173.294402][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.303037][ T6] usb 3-1: config 0 descriptor?? [ 173.562173][ T7273] hid (null): bogus close delimiter [ 173.771867][ T6] hid-generic 0003:1B96:9F0A.001E: unknown main item tag 0x0 [ 173.779108][ T6] hid-generic 0003:1B96:9F0A.001E: unknown main item tag 0x0 [ 173.780879][ T7273] usb 5-1: language id specifier not provided by device, defaulting to English [ 173.786328][ T6] hid-generic 0003:1B96:9F0A.001E: unknown main item tag 0x0 [ 173.802279][ T6] hid-generic 0003:1B96:9F0A.001E: unknown main item tag 0x0 [ 173.809461][ T6] hid-generic 0003:1B96:9F0A.001E: unknown main item tag 0x0 [ 173.817247][ T6] hid-generic 0003:1B96:9F0A.001E: hidraw0: USB HID v0.00 Device [HID 1b96:9f0a] on usb-dummy_hcd.2-1/input0 [ 174.147276][ T7395] syz-executor.3[7395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.147354][ T7395] syz-executor.3[7395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.178320][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.248828][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.256049][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.263673][ T7398] device bridge_slave_0 entered promiscuous mode [ 174.272453][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.273026][ T7407] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 174.279298][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.279798][ T7398] device bridge_slave_1 entered promiscuous mode [ 174.301698][ T6] usb 3-1: USB disconnect, device number 13 [ 174.347767][ T7408] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 174.371947][ T7408] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.378917][ T7408] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.414569][ T7407] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 174.440885][ T7273] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #100: -71 [ 174.459111][ T7273] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 174.467470][ T7273] uclogic 0003:256C:006D.001D: failed probing pen v1 parameters: -71 [ 174.475614][ T7273] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 174.490876][ T7273] uclogic: probe of 0003:256C:006D.001D failed with error -71 [ 174.501461][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 174.501676][ T7273] usb 5-1: USB disconnect, device number 21 [ 174.512432][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.529569][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.536452][ T7326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.556562][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.564553][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.573107][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.579959][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.601900][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.609826][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.622244][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.639075][ T7398] device veth0_vlan entered promiscuous mode [ 174.646363][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.654802][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.662816][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.669676][ T7416] loop3: detected capacity change from 0 to 512 [ 174.678592][ T7416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.688704][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.690667][ T7416] EXT4-fs (loop3): 1 truncate cleaned up [ 174.698430][ T7398] device veth1_macvtap entered promiscuous mode [ 174.702447][ T7416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 174.713356][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.726800][ T43] device bridge_slave_1 left promiscuous mode [ 174.737382][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.745148][ T43] device bridge_slave_0 left promiscuous mode [ 174.751555][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.759791][ T43] device veth1_macvtap left promiscuous mode [ 174.765840][ T43] device veth0_vlan left promiscuous mode [ 174.773859][ T7071] EXT4-fs (loop3): unmounting filesystem. [ 174.789259][ T7419] loop3: detected capacity change from 0 to 256 [ 174.912002][ T28] audit: type=1400 audit(1717554418.532:24235): avc: denied { ioctl } for pid=7434 comm="syz-executor.3" path="socket:[51816]" dev="sockfs" ino=51816 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.946152][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.988965][ T7446] loop4: detected capacity change from 0 to 256 [ 175.052416][ T7454] overlayfs: failed to create directory ./file1/work (errno: 1); mounting read-only [ 175.207317][ T7466] loop4: detected capacity change from 0 to 2048 [ 175.325250][ T7466] Alternate GPT is invalid, using primary GPT. [ 175.371904][ T7466] loop4: p1 p2 p3 [ 175.395567][ T7475] loop3: detected capacity change from 0 to 16 [ 175.462463][ T7475] erofs: (device loop3): mounted with root inode @ nid 36. [ 175.635180][ T7450] loop0: detected capacity change from 0 to 40427 [ 175.645097][ T7450] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 175.652156][ T7450] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 175.669295][ T7450] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.732015][ T7450] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 175.739043][ T7450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.769176][ T7505] loop4: detected capacity change from 0 to 2048 [ 175.776616][ T7398] syz-executor.0: attempt to access beyond end of device [ 175.776616][ T7398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.801687][ T7507] EXT4-fs warning (device sda1): ext4_group_extend:1869: can't shrink FS - resize aborted [ 175.821946][ T7505] Alternate GPT is invalid, using primary GPT. [ 175.828171][ T7505] loop4: p1 p2 p3 [ 175.922031][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.019321][ T7527] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.040453][ T7527] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 176.050080][ T7527] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 176.070101][ T28] audit: type=1400 audit(1717554419.682:24236): avc: denied { write } for pid=7529 comm="syz-executor.4" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 176.248399][ T7532] loop0: detected capacity change from 0 to 40427 [ 176.280105][ T7532] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 176.286891][ T7532] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.321822][ T7532] F2FS-fs (loop0): Found nat_bits in checkpoint [ 176.377931][ T7532] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.385062][ T7532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.421012][ T7398] syz-executor.0: attempt to access beyond end of device [ 176.421012][ T7398] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.892179][ T7572] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.913337][ T7572] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 176.922850][ T7572] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 177.227233][ T7617] overlayfs: failed to create directory ./file1/work (errno: 1); mounting read-only [ 177.409409][ T7649] overlayfs: failed to create directory ./file1/work (errno: 1); mounting read-only [ 177.946411][ T7656] loop3: detected capacity change from 0 to 65536 [ 177.953464][ T7656] FAT-fs (loop3): Unrecognized mount option "ɼ@Ҷ+@36" or missing value [ 178.040782][ T7326] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 178.065698][ T7655] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 178.309715][ T7684] loop2: detected capacity change from 0 to 512 [ 178.332157][ T7684] EXT4-fs (loop2): too many log groups per flexible block group [ 178.339859][ T7684] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 178.346675][ T7684] EXT4-fs (loop2): mount failed [ 178.450820][ T7326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.461735][ T7326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.471428][ T7326] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 178.480334][ T7326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.500999][ T7326] usb 1-1: config 0 descriptor?? [ 178.533056][ T7683] loop4: detected capacity change from 0 to 65536 [ 178.539777][ T7683] FAT-fs (loop4): Unrecognized mount option "ɼ@Ҷ+@36" or missing value [ 178.656705][ T7683] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.250114][ T7326] hid-multitouch 0003:1FD2:6007.001F: unknown main item tag 0x0 [ 179.260356][ T7326] hid-multitouch 0003:1FD2:6007.001F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 179.273134][ T7326] usb 1-1: USB disconnect, device number 10 [ 179.596434][ T7714] loop3: detected capacity change from 0 to 65536 [ 179.603971][ T7714] FAT-fs (loop3): Unrecognized mount option "ɼ@Ҷ+@36" or missing value [ 179.730531][ T7714] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 179.850594][ T7731] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.859878][ T7731] tipc: Invalid UDP bearer configuration [ 179.859926][ T7731] tipc: Enabling of bearer rejected, failed to enable media [ 180.272365][ T7788] tipc: Failed to remove unknown binding: 66,1,1/0:1705948541/1705948543 [ 180.281341][ T7788] tipc: Failed to remove unknown binding: 66,1,1/0:1705948541/1705948543 [ 180.387115][ T7804] serio: Serial port pts1 [ 180.637288][ T7826] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 180.656187][ T7830] netem: incorrect gi model size [ 180.661077][ T7830] netem: change failed [ 180.703433][ T7835] tipc: Failed to remove unknown binding: 66,1,1/0:1812176193/1812176195 [ 180.711794][ T7835] tipc: Failed to remove unknown binding: 66,1,1/0:1812176193/1812176195 [ 180.789737][ T7843] serio: Serial port pts0 [ 181.233557][ T7871] loop3: detected capacity change from 0 to 512 [ 181.252738][ T7871] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz-executor.3: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 0, max 32768(4), depth 0(0) [ 181.271375][ T7871] EXT4-fs error (device loop3): ext4_quota_enable:6946: comm syz-executor.3: Bad quota inode: 3, type: 0 [ 181.280814][ T7270] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 181.289955][ T7871] EXT4-fs warning (device loop3): ext4_enable_quotas:6987: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 181.304869][ T7871] EXT4-fs (loop3): mount failed [ 181.397791][ T7878] loop3: detected capacity change from 0 to 512 [ 181.412836][ T7878] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 181.421622][ T7878] ext4 filesystem being mounted at /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/130/file1 supports timestamps until 2038 (0x7fffffff) [ 181.442298][ T7071] EXT4-fs (loop3): unmounting filesystem. [ 181.457251][ T7882] loop3: detected capacity change from 0 to 512 [ 181.464126][ T7882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 181.476117][ T7882] EXT4-fs (loop3): 1 truncate cleaned up [ 181.481721][ T7882] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.503567][ T7071] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/131/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 181.529397][ T7270] usb 5-1: Using ep0 maxpacket: 32 [ 181.535464][ T7071] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 181.555596][ T7071] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/131/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 181.581892][ T7071] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 181.601943][ T7071] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/131/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 181.627988][ T7071] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 181.648003][ T7071] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/131/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 181.673764][ T7270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.674125][ T7071] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 181.684464][ T7270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.684517][ T7270] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.704642][ T7071] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor.3: path /root/syzkaller-testdir3084024007/syzkaller.OqlHf5/131/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 181.728951][ T7270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.752216][ T7071] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 181.777259][ T7270] usb 5-1: config 0 descriptor?? [ 181.821269][ T7270] hub 5-1:0.0: USB hub found [ 181.832850][ T7901] loop0: detected capacity change from 0 to 1024 [ 181.839679][ T7901] EXT4-fs: Ignoring removed orlov option [ 181.845442][ T7901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.862195][ T7901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.878122][ T7398] EXT4-fs (loop0): unmounting filesystem. [ 181.892918][ T7071] EXT4-fs (loop3): unmounting filesystem. [ 182.301115][ T7270] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 182.378921][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.417470][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.424837][ T7270] usbhid 5-1:0.0: can't add hid device: -71 [ 182.431052][ T7270] usbhid: probe of 5-1:0.0 failed with error -71 [ 182.489324][ T7910] device bridge_slave_0 entered promiscuous mode [ 182.497781][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.504738][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.508243][ T7270] usb 5-1: USB disconnect, device number 22 [ 182.519963][ T7910] device bridge_slave_1 entered promiscuous mode [ 182.545236][ T7920] loop2: detected capacity change from 0 to 512 [ 182.552449][ T7920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 182.564193][ T7920] EXT4-fs (loop2): 1 truncate cleaned up [ 182.569722][ T7920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 182.594519][ T6407] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2437067948/syzkaller.yGDt90/128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 182.620777][ T6407] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 182.642105][ T6407] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2437067948/syzkaller.yGDt90/128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 182.668688][ T6407] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 182.688766][ T6407] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2437067948/syzkaller.yGDt90/128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 182.714803][ T6407] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 182.734788][ T6407] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2437067948/syzkaller.yGDt90/128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 182.743922][ T7910] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.767395][ T7910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.774504][ T7910] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.781377][ T7910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.789399][ T6407] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 182.809374][ T6407] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2437067948/syzkaller.yGDt90/128/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 182.841996][ T6407] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 182.865249][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.878424][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.889524][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.918513][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.928164][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.936165][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.943009][ T7273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.950196][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.958379][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.966333][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.973174][ T7273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.992580][ T43] device bridge_slave_1 left promiscuous mode [ 182.998540][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.007643][ T43] device bridge_slave_0 left promiscuous mode [ 183.013723][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.022504][ T6407] EXT4-fs (loop2): unmounting filesystem. [ 183.143291][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.150762][ T6] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 183.161117][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.168938][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.191157][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.220946][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.229202][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.250304][ T7910] device veth0_vlan entered promiscuous mode [ 183.256918][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.266914][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.282902][ T7910] device veth1_macvtap entered promiscuous mode [ 183.300870][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.308237][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.315964][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.324089][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.332221][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.341136][ T7932] loop0: detected capacity change from 0 to 65536 [ 183.349008][ T7932] FAT-fs (loop0): Unrecognized mount option "ɼ@Ҷ+@36" or missing value [ 183.367744][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.375836][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.397455][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.405958][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.414009][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 183.437127][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.444424][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.458115][ T7934] device bridge_slave_0 entered promiscuous mode [ 183.490999][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.505532][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.521549][ T7934] device bridge_slave_1 entered promiscuous mode [ 183.552939][ T6] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.562945][ T6] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 183.571844][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.575167][ T7931] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 183.580370][ T6] usb 5-1: config 0 descriptor?? [ 183.948651][ T6] usb 5-1: USB disconnect, device number 23 [ 184.017879][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.025498][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.034153][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.042380][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.050377][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.057242][ T7270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.064614][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.081122][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.089310][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.097320][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.104165][ T7326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.111463][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.119334][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.127533][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.135875][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.150482][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.158676][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.171787][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.179628][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.186921][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.196186][ T7934] device veth0_vlan entered promiscuous mode [ 184.206950][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.216088][ T7934] device veth1_macvtap entered promiscuous mode [ 184.228639][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.236895][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.245840][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.253937][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.290819][ T7326] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 184.730802][ T7326] usb 1-1: Using ep0 maxpacket: 32 [ 184.830817][ T966] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 184.838252][ T6] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 184.871155][ T7326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.881940][ T7326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.891864][ T7326] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.900776][ T7326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.909306][ T7326] usb 1-1: config 0 descriptor?? [ 184.951375][ T7326] hub 1-1:0.0: USB hub found [ 185.231166][ T6] usb 4-1: No LPM exit latency info found, disabling LPM. [ 185.238212][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.249152][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.258808][ T966] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 185.269592][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.278388][ T966] usb 5-1: config 0 descriptor?? [ 185.321108][ T6] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 185.330464][ T6] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 185.340872][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.441140][ T7326] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 185.791639][ T966] hid-multitouch 0003:1FD2:6007.0020: unknown main item tag 0x0 [ 185.799796][ T966] hid-multitouch 0003:1FD2:6007.0020: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 185.811562][ T7326] usbhid 1-1:0.0: can't add hid device: -71 [ 185.817311][ T7326] usbhid: probe of 1-1:0.0 failed with error -71 [ 185.823636][ T6] usb 4-1: string descriptor 0 read error: -22 [ 185.829638][ T6] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.839675][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.861068][ T7326] usb 1-1: USB disconnect, device number 11 [ 185.891743][ T6] usb 4-1: 0:2 : does not exist [ 185.994098][ T6] usb 5-1: USB disconnect, device number 24 [ 186.012167][ T7989] syz-executor.0[7989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.012221][ T7989] syz-executor.0[7989] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.071003][ T7993] syz-executor.0[7993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.082730][ T7993] syz-executor.0[7993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.099845][ T7326] usb 4-1: USB disconnect, device number 11 [ 186.371471][ T8003] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 186.590000][ T8012] loop4: detected capacity change from 0 to 512 [ 186.603345][ T8012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.612202][ T8012] ext4 filesystem being mounted at /root/syzkaller-testdir4161143738/syzkaller.tUWT33/92/bus supports timestamps until 2038 (0x7fffffff) [ 186.980637][ T39] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.116609][ T8029] syz-executor.0[8029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.116747][ T8029] syz-executor.0[8029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.140787][ T7326] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.171314][ T28] audit: type=1400 audit(1717554942.790:24237): avc: denied { remount } for pid=8030 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 187.310804][ T39] usb 3-1: Using ep0 maxpacket: 8 [ 187.420774][ T7326] usb 4-1: Using ep0 maxpacket: 32 [ 187.432391][ T39] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 187.464251][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.472829][ T39] usb 3-1: config 0 descriptor?? [ 187.473350][ T6839] EXT4-fs (loop4): unmounting filesystem. [ 187.570827][ T7326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.581571][ T7326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.591296][ T7326] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 187.600129][ T7326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.608575][ T7326] usb 4-1: config 0 descriptor?? [ 187.671361][ T7326] hub 4-1:0.0: USB hub found [ 187.831696][ T6] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 188.350804][ T7326] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 188.490844][ T7326] usbhid 4-1:0.0: can't add hid device: -71 [ 188.496679][ T7326] usbhid: probe of 4-1:0.0 failed with error -71 [ 188.531059][ T7326] usb 4-1: USB disconnect, device number 12 [ 188.600818][ T6] usb 5-1: No LPM exit latency info found, disabling LPM. [ 188.658927][ T8054] syz-executor.0[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.658988][ T8054] syz-executor.0[8054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.720924][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 188.741880][ T6] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 188.752108][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.774803][ T8066] loop3: detected capacity change from 0 to 512 [ 188.793319][ T8066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 188.803034][ T8066] ext4 filesystem being mounted at /root/syzkaller-testdir3486067171/syzkaller.WVWP76/9/file0 supports timestamps until 2038 (0x7fffffff) [ 188.823128][ T7910] EXT4-fs (loop3): unmounting filesystem. [ 188.847883][ T8078] loop3: detected capacity change from 0 to 512 [ 188.856658][ T8078] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.870676][ T7910] EXT4-fs (loop3): unmounting filesystem. [ 188.896443][ T8085] loop3: detected capacity change from 0 to 2048 [ 188.905478][ T8085] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 188.921592][ T7910] EXT4-fs (loop3): unmounting filesystem. [ 189.002496][ T28] audit: type=1326 audit(1717554944.620:24238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.030953][ T28] audit: type=1326 audit(1717554944.620:24239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.055108][ T28] audit: type=1326 audit(1717554944.620:24240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.079874][ T6] usb 5-1: string descriptor 0 read error: -22 [ 189.086342][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.087373][ T28] audit: type=1326 audit(1717554944.620:24241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.095307][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.122850][ T28] audit: type=1326 audit(1717554944.620:24242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.151256][ T28] audit: type=1326 audit(1717554944.620:24243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.175234][ T28] audit: type=1326 audit(1717554944.620:24244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.199324][ T28] audit: type=1326 audit(1717554944.620:24245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.223282][ T28] audit: type=1326 audit(1717554944.650:24246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 189.232253][ T6] usb 5-1: 0:2 : does not exist [ 189.453025][ T7326] usb 5-1: USB disconnect, device number 25 [ 189.998772][ T8131] loop4: detected capacity change from 0 to 2048 [ 190.045994][ T8131] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 190.062068][ T8131] ext4 filesystem being mounted at /root/syzkaller-testdir4161143738/syzkaller.tUWT33/96/file0 supports timestamps until 2038 (0x7fffffff) [ 190.101175][ T6839] EXT4-fs (loop4): unmounting filesystem. [ 190.400829][ T39] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 190.419497][ T39] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 190.441578][ T39] asix: probe of 3-1:0.0 failed with error -71 [ 190.454608][ T39] usb 3-1: USB disconnect, device number 14 [ 190.634319][ T8129] loop3: detected capacity change from 0 to 131072 [ 190.654353][ T8129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.744754][ T8129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.903682][ T8146] loop2: detected capacity change from 0 to 512 [ 190.915524][ T8146] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.971230][ T7934] EXT4-fs (loop2): unmounting filesystem. [ 191.370750][ T7269] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 191.610772][ T7269] usb 4-1: Using ep0 maxpacket: 8 [ 191.970809][ T7269] usb 4-1: string descriptor 0 read error: -22 [ 191.977979][ T7269] usb 4-1: New USB device found, idVendor=13d3, idProduct=3205, bcdDevice=da.e2 [ 192.003242][ T7269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.019405][ T7269] usb 4-1: config 0 descriptor?? [ 192.046585][ T8136] loop4: detected capacity change from 0 to 262144 [ 192.066510][ T8136] F2FS-fs (loop4): Found nat_bits in checkpoint [ 192.135153][ T8149] loop2: detected capacity change from 0 to 131072 [ 192.149392][ T8136] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.161714][ T8149] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.229608][ T8149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 192.263764][ T7269] usb 4-1: USB disconnect, device number 13 [ 192.721378][ T8165] loop4: detected capacity change from 0 to 2048 [ 192.758091][ T8165] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 192.766822][ T8165] ext4 filesystem being mounted at /root/syzkaller-testdir4161143738/syzkaller.tUWT33/99/file0 supports timestamps until 2038 (0x7fffffff) [ 192.792198][ T6839] EXT4-fs (loop4): unmounting filesystem. [ 192.803651][ T8170] loop3: detected capacity change from 0 to 512 [ 192.815532][ T8170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 192.840228][ T7910] EXT4-fs (loop3): unmounting filesystem. [ 192.851733][ T8175] loop4: detected capacity change from 0 to 1024 [ 192.871187][ T8175] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.871809][ T8182] loop3: detected capacity change from 0 to 128 [ 192.901284][ T6839] EXT4-fs (loop4): unmounting filesystem. [ 192.940919][ T8190] loop4: detected capacity change from 0 to 128 [ 192.973524][ T28] kauditd_printk_skb: 3428 callbacks suppressed [ 192.973541][ T28] audit: type=1326 audit(1717554948.590:27675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 192.983838][ T8195] loop4: detected capacity change from 0 to 512 [ 193.025288][ T28] audit: type=1326 audit(1717554948.590:27676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.054621][ T28] audit: type=1326 audit(1717554948.590:27677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.086540][ T8195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 193.089163][ T28] audit: type=1326 audit(1717554948.620:27678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.124882][ T6839] EXT4-fs (loop4): unmounting filesystem. [ 193.130782][ T28] audit: type=1326 audit(1717554948.620:27679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.156750][ T28] audit: type=1326 audit(1717554948.620:27680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.181007][ T28] audit: type=1326 audit(1717554948.620:27681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.204901][ T28] audit: type=1326 audit(1717554948.620:27682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.234140][ T28] audit: type=1326 audit(1717554948.620:27683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.261940][ T8209] loop4: detected capacity change from 0 to 256 [ 193.269570][ T28] audit: type=1326 audit(1717554948.630:27684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8185 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40d147cee9 code=0x7ffc0000 [ 193.340831][ T8212] loop4: detected capacity change from 0 to 2048 [ 193.393869][ T8217] loop4: detected capacity change from 0 to 256 [ 193.436249][ T8219] loop4: detected capacity change from 0 to 128 [ 193.668082][ T8230] loop4: detected capacity change from 0 to 2048 [ 193.708095][ T8230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 193.724002][ T8230] ext4 filesystem being mounted at /root/syzkaller-testdir4161143738/syzkaller.tUWT33/116/file0 supports timestamps until 2038 (0x7fffffff) [ 193.788828][ T6839] EXT4-fs (loop4): unmounting filesystem. [ 194.019040][ T8253] loop3: detected capacity change from 0 to 512 [ 194.071186][ T8253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.111374][ T7910] EXT4-fs (loop3): unmounting filesystem. [ 194.749867][ T8161] loop2: detected capacity change from 0 to 262144 [ 194.777872][ T8161] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.837453][ T8161] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 195.515005][ T8307] loop2: detected capacity change from 0 to 128 [ 195.556896][ T8309] loop2: detected capacity change from 0 to 128 [ 195.602945][ T8311] loop2: detected capacity change from 0 to 512 [ 195.651711][ T8313] loop2: detected capacity change from 0 to 128 [ 195.998263][ T8315] loop2: detected capacity change from 0 to 32768 [ 196.131621][ T8317] loop2: detected capacity change from 0 to 512 [ 196.188191][ T8319] loop2: detected capacity change from 0 to 512 [ 196.297834][ T8321] loop2: detected capacity change from 0 to 2048 [ 196.372876][ T8323] loop2: detected capacity change from 0 to 128 [ 196.376758][ T8243] loop4: detected capacity change from 0 to 262144 [ 196.404341][ T8243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.509273][ T8243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 196.532951][ T8339] syz-executor.2[8339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.533030][ T8339] syz-executor.2[8339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.890814][ T6] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 197.001351][ T8363] overlayfs: failed to resolve './file1': -2 [ 197.322167][ T8304] loop3: detected capacity change from 0 to 262144 [ 197.570897][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.590739][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.600314][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 197.630900][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.640969][ T6] usb 3-1: config 0 descriptor?? [ 197.689031][ T8369] syz-executor.0[8369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.689114][ T8369] syz-executor.0[8369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.919633][ T8395] syz-executor.0[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.973278][ T8395] syz-executor.0[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.176806][ T8408] overlayfs: failed to resolve './file1': -2 [ 198.467595][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.477745][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.485990][ T8404] device bridge_slave_0 entered promiscuous mode [ 198.495816][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.500868][ T6] usb 3-1: language id specifier not provided by device, defaulting to English [ 198.502807][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.518920][ T8404] device bridge_slave_1 entered promiscuous mode [ 198.618551][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.625474][ T8404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.632574][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.639328][ T8404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.682532][ T43] device bridge_slave_1 left promiscuous mode [ 198.691645][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.702261][ T43] device bridge_slave_0 left promiscuous mode [ 198.711195][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.725085][ T43] device veth1_macvtap left promiscuous mode [ 198.731036][ T43] device veth0_vlan left promiscuous mode [ 198.900864][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.908635][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.917975][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.951870][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.959814][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.980940][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 198.994594][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 199.002631][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 199.010314][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 199.018807][ T8404] device veth0_vlan entered promiscuous mode [ 199.055683][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 199.066102][ T8404] device veth1_macvtap entered promiscuous mode [ 199.084697][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 199.112137][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 199.200823][ T6] uclogic 0003:256C:006D.0021: v1 frame probing failed: -71 [ 199.209164][ T6] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 199.223025][ T6] uclogic: probe of 0003:256C:006D.0021 failed with error -71 [ 199.238821][ T6] usb 3-1: USB disconnect, device number 15 [ 199.266890][ T8367] loop4: detected capacity change from 0 to 262144 [ 199.278094][ T8367] F2FS-fs (loop4): Found nat_bits in checkpoint [ 199.299685][ T8437] loop3: detected capacity change from 0 to 32768 [ 199.321727][ T8367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 199.340770][ T8437] loop3: p1 p3 < p5 p6 > [ 199.346291][ T8437] loop3: p5 start 4278458424 is beyond EOD, truncated [ 199.410904][ T966] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 199.457764][ T8455] loop3: detected capacity change from 0 to 2048 [ 199.511204][ T8455] loop3: p1 < > p3 p4 < > [ 199.516125][ T8455] loop3: p3 start 4284289 is beyond EOD, truncated [ 199.612518][ T8461] syz-executor.3[8461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.612598][ T8461] syz-executor.3[8461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.703351][ T8472] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 199.723512][ T8472] netem: change failed [ 199.741924][ T8479] binder: 8477:8479 ioctl c0306201 20000580 returned -14 [ 199.800635][ T28] kauditd_printk_skb: 1252 callbacks suppressed [ 199.800653][ T28] audit: type=1400 audit(1717554955.410:28937): avc: denied { call } for pid=8490 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 199.810859][ T966] usb 2-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 199.835930][ T966] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.930827][ T966] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.939976][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.948024][ T966] usb 2-1: SerialNumber: syz [ 199.962747][ T8504] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 199.971305][ T8504] netem: change failed [ 200.043496][ T8516] input: syz0 as /devices/virtual/input/input38 [ 200.228580][ T8531] loop3: detected capacity change from 0 to 512 [ 200.237500][ T8526] loop2: detected capacity change from 0 to 32768 [ 200.252277][ T966] usb 2-1: 0:2 : does not exist [ 200.257705][ T8531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 200.266564][ T8531] ext4 filesystem being mounted at /root/syzkaller-testdir3486067171/syzkaller.WVWP76/106/bus supports timestamps until 2038 (0x7fffffff) [ 200.291268][ T8526] loop2: p1 p3 < p5 p6 > [ 200.296465][ T8526] loop2: p5 start 4278458424 is beyond EOD, truncated [ 200.392869][ T966] usb 2-1: USB disconnect, device number 22 [ 200.761766][ T8541] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 200.770177][ T8541] netem: change failed [ 200.784696][ T8543] binder: 8542:8543 ioctl 400c620e 200002c0 returned -22 [ 200.802045][ T8545] overlayfs: bad mount option "redirect_dir=./file1" [ 200.831236][ T8550] input: syz0 as /devices/virtual/input/input39 [ 200.911975][ T8556] overlayfs: missing 'lowerdir' [ 201.427336][ T7910] EXT4-fs (loop3): unmounting filesystem. [ 201.446011][ T8570] loop3: detected capacity change from 0 to 1024 [ 201.462829][ T8570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.486571][ T8570] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 201.496425][ T8570] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #15: comm syz-executor.3: mark_inode_dirty error [ 201.512201][ T7910] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 16: comm syz-executor.3: lblock 0 mapped to illegal pblock 16 (length 1) [ 201.526896][ T7910] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 201.536470][ T7910] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor.3: mark_inode_dirty error [ 201.552177][ T7910] EXT4-fs (loop3): unmounting filesystem. [ 201.569411][ T8575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8575 comm=syz-executor.1 [ 201.776724][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.787138][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.794523][ T8586] device bridge_slave_0 entered promiscuous mode [ 201.801385][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.808379][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.816292][ T8586] device bridge_slave_1 entered promiscuous mode [ 201.833008][ T8597] loop4: detected capacity change from 0 to 1024 [ 201.842884][ T8597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 201.878935][ T8597] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 201.888808][ T8597] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #15: comm syz-executor.4: mark_inode_dirty error [ 201.905419][ T6839] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 16: comm syz-executor.4: lblock 0 mapped to illegal pblock 16 (length 1) [ 201.920029][ T6839] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 201.929765][ T6839] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz-executor.4: mark_inode_dirty error [ 201.945052][ T6839] EXT4-fs (loop4): unmounting filesystem. [ 201.960134][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.966997][ T8586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.974083][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.980880][ T8586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.004545][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.012945][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.020643][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.031828][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.040204][ T7269] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.047083][ T7269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.061109][ T7326] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 202.068992][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.077205][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.084075][ T7270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.091270][ T966] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 202.104216][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.112085][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.128906][ T8586] device veth0_vlan entered promiscuous mode [ 202.135854][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.145001][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.152979][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.160409][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.178829][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.189783][ T8586] device veth1_macvtap entered promiscuous mode [ 202.210387][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.219702][ T345] device bridge_slave_1 left promiscuous mode [ 202.226196][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.233747][ T345] device bridge_slave_0 left promiscuous mode [ 202.239724][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.247698][ T345] device veth1_macvtap left promiscuous mode [ 202.254102][ T345] device veth0_vlan left promiscuous mode [ 202.356289][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.363224][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.370393][ T8601] device bridge_slave_0 entered promiscuous mode [ 202.377194][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.389390][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.396357][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.403985][ T8601] device bridge_slave_1 entered promiscuous mode [ 202.440853][ T7326] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 202.451266][ T7326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.480809][ T966] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 202.491611][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.502413][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.515095][ T966] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 202.531453][ T7326] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 202.538911][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.540321][ T7326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 202.540347][ T7326] usb 3-1: SerialNumber: syz [ 202.548761][ T7269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.571642][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.579879][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.588033][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.594908][ T7273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.602711][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.610998][ T966] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 202.611021][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.611251][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.619855][ T966] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 202.627702][ T7273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.628294][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.657211][ T966] usb 2-1: Manufacturer: syz [ 202.663193][ T966] usb 2-1: config 0 descriptor?? [ 202.670925][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.678793][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.686988][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.695084][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.706871][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.722834][ T8601] device veth0_vlan entered promiscuous mode [ 202.731013][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.738837][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.746100][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.757924][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.767000][ T8601] device veth1_macvtap entered promiscuous mode [ 202.779556][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.787767][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.795875][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.803921][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.859448][ T8617] overlayfs: bad mount option "redirect_dir=./file1" [ 202.866565][ T7326] usb 3-1: 0:2 : does not exist [ 202.952605][ T7326] usb 3-1: USB disconnect, device number 16 [ 203.144459][ T966] appleir 0003:05AC:8243.0022: unknown main item tag 0x0 [ 203.176567][ T966] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 203.227820][ T966] appleir 0003:05AC:8243.0022: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 203.371818][ T345] device bridge_slave_1 left promiscuous mode [ 203.377776][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.385142][ T345] device bridge_slave_0 left promiscuous mode [ 203.391162][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.411590][ T7270] usb 2-1: USB disconnect, device number 23 [ 203.638697][ T8638] loop2: detected capacity change from 0 to 1024 [ 203.662625][ T8638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 203.695923][ T8638] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 203.705453][ T8638] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #15: comm syz-executor.2: mark_inode_dirty error [ 203.721334][ T7934] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 16: comm syz-executor.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 203.736018][ T7934] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 203.745648][ T7934] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor.2: mark_inode_dirty error [ 203.760240][ T7934] EXT4-fs (loop2): unmounting filesystem. [ 203.842945][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.881623][ T8649] fuse: Unknown parameter '/dev/vhost-vsock' [ 203.969809][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.977067][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.978555][ T8662] loop1: detected capacity change from 0 to 512 [ 203.984540][ T8652] device bridge_slave_0 entered promiscuous mode [ 203.996406][ T8662] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.997423][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.012116][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.019653][ T8652] device bridge_slave_1 entered promiscuous mode [ 204.027600][ T28] audit: type=1400 audit(1717554959.640:28938): avc: denied { getopt } for pid=8664 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.032405][ T8662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 204.057077][ T8662] ext4 filesystem being mounted at /root/syzkaller-testdir2725480818/syzkaller.vx7R4B/11/file0 supports timestamps until 2038 (0x7fffffff) [ 204.095859][ T8404] EXT4-fs (loop1): unmounting filesystem. [ 204.115780][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x1 [ 204.123328][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.238553][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.246377][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.491586][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.498817][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.506226][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 204.513417][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.520610][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x2 [ 204.527835][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.535036][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.542260][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.549428][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.556678][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 204.559885][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.564052][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.570655][ T8652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.577898][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.584975][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.592121][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.598961][ T8652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.606183][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.620464][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.627682][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.634853][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.642081][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.642138][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.649212][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.663327][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.670493][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.677743][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.684951][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.685019][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.692113][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.706227][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.713413][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.720588][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.727986][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.736407][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.743687][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.750882][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.758046][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.765292][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.772469][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.772489][ T7270] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 204.780137][ T966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.793969][ T7270] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 204.809378][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.818302][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.826720][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.833607][ T7326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.841526][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.849944][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.858000][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.864858][ T7326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.883680][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.908366][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.916721][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.925417][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.940606][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.952237][ T7270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.960483][ T8681] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.975431][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.988018][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.998312][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.005886][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.006771][ T8688] overlayfs: missing 'lowerdir' [ 205.014363][ T8652] device veth0_vlan entered promiscuous mode [ 205.024934][ T345] device bridge_slave_1 left promiscuous mode [ 205.030991][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.038300][ T345] device bridge_slave_0 left promiscuous mode [ 205.044346][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.052490][ T345] device veth1_macvtap left promiscuous mode [ 205.058317][ T345] device veth0_vlan left promiscuous mode [ 205.132674][ T8688] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.146814][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.154813][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.164852][ T8652] device veth1_macvtap entered promiscuous mode [ 205.174384][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.182197][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.190490][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.201188][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.209429][ T7324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 205.288439][ T7270] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.360790][ T7273] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 205.670835][ T7270] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 205.681637][ T7270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.692375][ T7270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.702006][ T7270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.720837][ T7273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.731730][ T7273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.741358][ T7273] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 205.750148][ T7273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.758685][ T7273] usb 5-1: config 0 descriptor?? [ 205.790937][ T7270] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 205.799853][ T7270] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 205.808354][ T7270] usb 2-1: Manufacturer: syz [ 205.813350][ T7270] usb 2-1: config 0 descriptor?? [ 206.243290][ T7273] wacom 0003:056A:0331.0024: unknown main item tag 0x0 [ 206.250989][ T7273] wacom 0003:056A:0331.0024: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 206.291600][ T7270] appleir 0003:05AC:8243.0025: unknown main item tag 0x0 [ 206.298799][ T7270] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 206.307415][ T7270] appleir 0003:05AC:8243.0025: hiddev96,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 206.336764][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x1 [ 206.344028][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.351302][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.358505][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.365726][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.372990][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.380114][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x4 [ 206.387332][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.394530][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x2 [ 206.401766][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.408930][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.416149][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.423369][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.430684][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x4 [ 206.437910][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.445300][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.452532][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.459697][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.466931][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.474121][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.481343][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.488513][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.495792][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.502967][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.510135][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.517392][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.524567][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.531755][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.538950][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.546849][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.547520][ T7273] usb 5-1: USB disconnect, device number 26 [ 206.554270][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.567199][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.574412][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.581607][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.588771][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.596011][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.603196][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.610378][ T7326] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 206.618504][ T7326] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz0 [ 206.638385][ T8707] serio: Serial port pts0 [ 206.643389][ T7270] usb 2-1: USB disconnect, device number 24 [ 207.235971][ T8722] loop4: detected capacity change from 0 to 128 [ 207.550788][ T966] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 207.570803][ T7326] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 207.761520][ T8734] serio: Serial port pts0 [ 207.820763][ T7326] usb 2-1: Using ep0 maxpacket: 16 [ 207.921703][ T966] usb 5-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 207.932125][ T966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.031093][ T966] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.040140][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.049451][ T966] usb 5-1: SerialNumber: syz [ 208.054100][ T7326] usb 2-1: unable to get BOS descriptor or descriptor too short [ 208.211080][ T7326] usb 2-1: config 0 has no interfaces? [ 208.330979][ T7326] usb 2-1: New USB device found, idVendor=0401, idProduct=0000, bcdDevice= 0.00 [ 208.339870][ T7326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.347810][ T7326] usb 2-1: SerialNumber: syz [ 208.352747][ T966] usb 5-1: 0:2 : does not exist [ 208.357962][ T7326] usb 2-1: config 0 descriptor?? [ 208.451915][ T966] usb 5-1: USB disconnect, device number 27 [ 208.623209][ T7270] usb 2-1: USB disconnect, device number 25 [ 209.210772][ T966] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 209.470810][ T966] usb 3-1: Using ep0 maxpacket: 8 [ 209.670800][ T966] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 209.679744][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.688320][ T966] usb 3-1: config 0 descriptor?? [ 210.094232][ T7270] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 210.390769][ T39] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 210.460842][ T7270] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 210.471634][ T7270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.482421][ T7270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.492076][ T7270] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 210.580896][ T7270] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 210.589772][ T7270] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 210.597709][ T7270] usb 5-1: Manufacturer: syz [ 210.602725][ T7270] usb 5-1: config 0 descriptor?? [ 210.750810][ T39] usb 2-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 210.761066][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.840820][ T39] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.849801][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.857616][ T39] usb 2-1: SerialNumber: syz [ 211.081640][ T7270] appleir 0003:05AC:8243.0027: No inputs registered, leaving [ 211.089726][ T7270] appleir 0003:05AC:8243.0027: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 211.141483][ T39] usb 2-1: 0:2 : does not exist [ 211.222054][ T39] usb 2-1: USB disconnect, device number 26 [ 211.361423][ T7270] usb 5-1: USB disconnect, device number 28 [ 211.659575][ T8785] syz-executor.1[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.659629][ T8785] syz-executor.1[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.672192][ T8785] syz-executor.1[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.684028][ T8785] syz-executor.1[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.891287][ T8796] loop4: detected capacity change from 0 to 4096 [ 211.911787][ T8796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 211.921805][ T28] audit: type=1400 audit(1717554967.540:28939): avc: denied { setattr } for pid=8795 comm="syz-executor.4" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.922717][ T8796] fs-verity: sha256 using implementation "sha256-avx2" [ 211.944619][ T28] audit: type=1400 audit(1717554967.540:28940): avc: denied { ioctl } for pid=8795 comm="syz-executor.4" path="/root/syzkaller-testdir2906858045/syzkaller.Xn80OE/21/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 211.981211][ T966] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 211.989014][ T8796] fs-verity (loop4, inode 13): Error -27 writing Merkle tree block 2160165643 [ 211.991292][ T966] asix: probe of 3-1:0.0 failed with error -71 [ 211.999853][ T8796] fs-verity (loop4, inode 13): Error -27 building Merkle tree [ 212.006981][ T966] usb 3-1: USB disconnect, device number 17 [ 212.026346][ T8601] EXT4-fs (loop4): unmounting filesystem. [ 212.140814][ T7326] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 212.570829][ T7326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.582377][ T7326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.592028][ T7326] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 212.600879][ T7326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.609343][ T7326] usb 2-1: config 0 descriptor?? [ 212.681267][ T8815] syz-executor.2[8815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.681325][ T8815] syz-executor.2[8815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.693660][ T8815] syz-executor.2[8815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.705234][ T8815] syz-executor.2[8815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 212.968418][ T8826] loop4: detected capacity change from 0 to 512 [ 212.986796][ T8826] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 213.330804][ T7326] usb 2-1: language id specifier not provided by device, defaulting to English [ 213.339618][ T7324] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 213.502155][ T8836] loop2: detected capacity change from 0 to 1024 [ 213.508683][ T8836] EXT4-fs: Ignoring removed orlov option [ 213.514418][ T8836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.532575][ T8836] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 213.549667][ T8652] EXT4-fs (loop2): unmounting filesystem. [ 213.600834][ T7324] usb 5-1: Using ep0 maxpacket: 16 [ 213.740838][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.751665][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.761631][ T7324] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 213.770608][ T7324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.779415][ T7324] usb 5-1: config 0 descriptor?? [ 214.060822][ T7326] uclogic 0003:256C:006D.0028: v1 frame probing failed: -71 [ 214.068316][ T7326] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 214.075747][ T7326] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 214.084425][ T7326] usb 2-1: USB disconnect, device number 27 [ 214.272671][ T7324] kovaplus 0003:1E7D:2D50.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 214.473586][ T7326] usb 5-1: USB disconnect, device number 29 [ 214.910819][ T7324] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 215.300807][ T7324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.311567][ T7324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.321085][ T7324] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 215.329929][ T7324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.338304][ T7324] usb 2-1: config 0 descriptor?? [ 215.402605][ T8861] loop2: detected capacity change from 0 to 512 [ 215.409371][ T8861] EXT4-fs (loop2): bad geometry: first data block is 0 with a 1k block and cluster size [ 215.684143][ T8867] overlayfs: failed to resolve './file1': -2 [ 215.809962][ T8869] loop4: detected capacity change from 0 to 1024 [ 215.819454][ T8869] EXT4-fs: Ignoring removed orlov option [ 215.825416][ T8869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.851743][ T8869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 215.873689][ T8601] EXT4-fs (loop4): unmounting filesystem. [ 215.992115][ T7324] uclogic 0003:5543:0522.002A: No inputs registered, leaving [ 215.999781][ T7324] uclogic 0003:5543:0522.002A: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0 [ 216.160936][ T7324] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 216.194039][ T966] usb 2-1: USB disconnect, device number 28 [ 216.560991][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.571877][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.581403][ T7324] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 216.590289][ T7324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.598675][ T7324] usb 5-1: config 0 descriptor?? [ 216.630777][ T7326] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 216.715204][ T8882] support for cryptoloop has been removed. Use dm-crypt instead. [ 216.732648][ T8884] syz-executor.1[8884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.732702][ T8884] syz-executor.1[8884] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.071044][ T7326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.100386][ T7326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.115121][ T7324] hid-thrustmaster 0003:044F:B65D.002B: unbalanced collection at end of report description [ 217.125318][ T7326] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 217.135381][ T7324] hid-thrustmaster 0003:044F:B65D.002B: parse failed with error -22 [ 217.143469][ T7326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.151602][ T7324] hid-thrustmaster: probe of 0003:044F:B65D.002B failed with error -22 [ 217.163296][ T7326] usb 3-1: config 0 descriptor?? [ 217.313611][ T7270] usb 5-1: USB disconnect, device number 30 [ 217.678124][ T8894] loop1: detected capacity change from 0 to 512 [ 217.684975][ T8894] EXT4-fs (loop1): bad geometry: first data block is 0 with a 1k block and cluster size [ 217.850630][ T8901] syz-executor.4[8901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.850836][ T8901] syz-executor.4[8901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.862575][ T7326] usb 3-1: language id specifier not provided by device, defaulting to English [ 217.884129][ T8901] syz-executor.4[8901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.884217][ T8901] syz-executor.4[8901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.012992][ T8905] syz-executor.4[8905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.024788][ T8905] syz-executor.4[8905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.037579][ T8905] 9pnet_fd: Insufficient options for proto=fd [ 218.390769][ T7324] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 218.570807][ T7326] uclogic 0003:256C:006D.002C: v1 frame probing failed: -71 [ 218.578076][ T7326] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 218.585428][ T7326] uclogic: probe of 0003:256C:006D.002C failed with error -71 [ 218.593676][ T7326] usb 3-1: USB disconnect, device number 18 [ 218.750909][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.761832][ T7324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.771563][ T7324] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 218.780414][ T7324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.788782][ T7324] usb 5-1: config 0 descriptor?? [ 218.829674][ T8920] syz-executor.1[8920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.829734][ T8920] syz-executor.1[8920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.120780][ T7326] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 219.134473][ T39] kernel read not supported for file /rfkill (pid: 39 comm: kworker/1:1) [ 219.140248][ T345] Bluetooth: hci0: Frame reassembly failed (-84) [ 219.282128][ T7324] uclogic 0003:5543:0522.002D: No inputs registered, leaving [ 219.289690][ T7324] uclogic 0003:5543:0522.002D: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 219.484047][ T7324] usb 5-1: USB disconnect, device number 31 [ 219.490818][ T7326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.502067][ T7326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.511653][ T7326] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 219.520451][ T7326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.529199][ T7326] usb 2-1: config 0 descriptor?? [ 220.011538][ T7326] hid-thrustmaster 0003:044F:B65D.002E: unbalanced collection at end of report description [ 220.021537][ T7326] hid-thrustmaster 0003:044F:B65D.002E: parse failed with error -22 [ 220.029350][ T7326] hid-thrustmaster: probe of 0003:044F:B65D.002E failed with error -22 [ 220.214498][ T7326] usb 2-1: USB disconnect, device number 29 [ 220.456828][ T8933] loop4: detected capacity change from 0 to 131072 [ 220.463850][ T8933] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 220.470353][ T8933] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 220.478977][ T8933] F2FS-fs (loop4): invalid crc value [ 220.485740][ T8933] F2FS-fs (loop4): Found nat_bits in checkpoint [ 220.519701][ T8933] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 220.526623][ T8933] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 220.536676][ T8933] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 220.543962][ T8933] F2FS-fs (loop4): list inode (7) has corrupted xattr [ 220.803468][ T8949] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 220.930761][ T7326] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 221.090767][ T7324] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 221.170784][ T7326] usb 5-1: Using ep0 maxpacket: 16 [ 221.200798][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 221.200794][ T2989] Bluetooth: hci0: command 0x1003 tx timeout [ 221.290816][ T7326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 221.299613][ T7326] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 221.309113][ T7326] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 221.318520][ T7326] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 221.328070][ T7326] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 221.337770][ T7326] usb 5-1: config 1 interface 0 has no altsetting 0 [ 221.344146][ T7326] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 221.353026][ T7326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.401152][ T7326] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 221.450821][ T7324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.461599][ T7324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.471113][ T7324] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.479943][ T7324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.488298][ T7324] usb 2-1: config 0 descriptor?? [ 221.500778][ T7270] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 221.621493][ T7326] scsi host1: usb-storage 5-1:1.0 [ 221.740746][ T7270] usb 3-1: Using ep0 maxpacket: 8 [ 221.870826][ T7270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.880308][ T7270] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 221.889149][ T7270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.897688][ T7270] usb 3-1: config 0 descriptor?? [ 221.941219][ T7270] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 221.948776][ T7270] usb 3-1: Detected SIO [ 221.952773][ T7270] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 221.960320][ T7270] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 222.143444][ T7326] usb 3-1: USB disconnect, device number 19 [ 222.149825][ T7326] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 222.159031][ T7326] ftdi_sio 3-1:0.0: device disconnected [ 222.190833][ T7324] usb 2-1: language id specifier not provided by device, defaulting to English [ 222.641111][ T7326] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 222.780786][ T8957] sddr09: could not read card info [ 222.785884][ T345] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 222.792821][ T345] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 222.798551][ T345] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 222.805573][ T345] sd 1:0:0:0: [sdb] Asking for cache data failed [ 222.811754][ T345] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 222.820887][ T345] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 222.910847][ T7324] uclogic 0003:256C:006D.002F: v1 frame probing failed: -71 [ 222.918141][ T7324] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 222.925410][ T7324] uclogic: probe of 0003:256C:006D.002F failed with error -71 [ 222.933450][ T7324] usb 2-1: USB disconnect, device number 30 [ 222.940765][ T3626] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 222.981989][ T39] usb 5-1: USB disconnect, device number 32 [ 223.300849][ T3626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.311727][ T3626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.321232][ T3626] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.330034][ T3626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.338441][ T3626] usb 3-1: config 0 descriptor?? [ 223.394660][ T28] audit: type=1400 audit(1717554979.010:28941): avc: denied { transfer } for pid=8968 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 223.394685][ T8969] binder: transaction release 16 bad object at offset 2314885888464021861, size 72 [ 223.423354][ T8969] binder: transaction release 16 bad object at offset 2314885530818453536, size 72 [ 223.840771][ T7270] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 224.060797][ T3626] usb 3-1: language id specifier not provided by device, defaulting to English [ 224.110755][ T7270] usb 2-1: Using ep0 maxpacket: 8 [ 224.280785][ T7270] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 224.289727][ T7270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.298927][ T7270] usb 2-1: config 0 descriptor?? [ 224.347092][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.354109][ T8985] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.362002][ T8985] device bridge_slave_0 entered promiscuous mode [ 224.368947][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.375957][ T8985] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.383360][ T8985] device bridge_slave_1 entered promiscuous mode [ 224.425071][ T8994] tun0: tun_chr_ioctl cmd 1074812118 [ 224.460254][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.467305][ T8985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.474350][ T8985] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.481138][ T8985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.506779][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.514670][ T7326] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.522247][ T7326] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.547118][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.555535][ T7326] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.562400][ T7326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.569689][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.577693][ T7326] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.584560][ T7326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.591726][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.599476][ T7326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.610889][ T28] audit: type=1400 audit(1717554980.230:28942): avc: denied { read } for pid=8997 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.612494][ T7273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.647713][ T28] audit: type=1400 audit(1717554980.230:28943): avc: denied { open } for pid=8997 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.651850][ T8985] device veth0_vlan entered promiscuous mode [ 224.678712][ T28] audit: type=1400 audit(1717554980.230:28944): avc: denied { ioctl } for pid=8997 comm="syz-executor.4" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 224.690241][ T8985] device veth1_macvtap entered promiscuous mode [ 224.713116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.721308][ T3626] uclogic 0003:256C:006D.0030: failed retrieving string descriptor #100: -71 [ 224.721889][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.730012][ T3626] uclogic 0003:256C:006D.0030: failed retrieving pen parameters: -71 [ 224.737318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.745118][ T3626] uclogic 0003:256C:006D.0030: failed probing pen v1 parameters: -71 [ 224.752384][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.759842][ T3626] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 224.774918][ T3626] uclogic: probe of 0003:256C:006D.0030 failed with error -71 [ 224.783871][ T3626] usb 3-1: USB disconnect, device number 20 [ 224.791557][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.799836][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.971492][ T345] device bridge_slave_1 left promiscuous mode [ 224.977471][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.984973][ T345] device bridge_slave_0 left promiscuous mode [ 224.992801][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.001828][ T345] device veth1_macvtap left promiscuous mode [ 225.007715][ T345] device veth0_vlan left promiscuous mode [ 225.114233][ T9020] binder: transaction release 24 bad object at offset 2314885888464021861, size 72 [ 225.123565][ T9020] binder: transaction release 24 bad object at offset 2314885530818453536, size 72 [ 225.200801][ T3626] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 225.441198][ T3626] usb 5-1: Using ep0 maxpacket: 16 [ 225.560798][ T3626] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 225.569627][ T3626] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 225.579131][ T3626] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 225.588598][ T3626] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 225.598347][ T3626] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 225.608198][ T3626] usb 5-1: config 1 interface 0 has no altsetting 0 [ 225.614655][ T3626] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 225.623686][ T3626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.660811][ T7326] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 225.671273][ T3626] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 225.891524][ T3626] scsi host1: usb-storage 5-1:1.0 [ 225.916839][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.937765][ T9094] hub 6-0:1.0: USB hub found [ 225.942493][ T9094] hub 6-0:1.0: 1 port detected [ 226.021106][ T7326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.031877][ T7326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.041387][ T7326] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 226.050200][ T7326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.058614][ T7326] usb 3-1: config 0 descriptor?? [ 226.240800][ T3626] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 226.571008][ T7270] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 226.581069][ T7270] asix: probe of 2-1:0.0 failed with error -71 [ 226.587679][ T7270] usb 2-1: USB disconnect, device number 31 [ 226.600867][ T3626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.611725][ T3626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.621235][ T3626] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 226.630063][ T3626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.638398][ T3626] usb 1-1: config 0 descriptor?? [ 226.760815][ T7326] usb 3-1: language id specifier not provided by device, defaulting to English [ 226.961127][ T6] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 227.090792][ T9086] sddr09: could not read card info [ 227.096073][ T345] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 227.103203][ T345] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 227.109210][ T345] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 227.116238][ T345] sd 1:0:0:0: [sdb] Asking for cache data failed [ 227.122480][ T345] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 227.131815][ T345] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 227.189105][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.227864][ T9124] overlayfs: missing 'lowerdir' [ 227.235277][ T9124] loop1: detected capacity change from 0 to 512 [ 227.253365][ T9124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.262198][ T9124] ext4 filesystem being mounted at /root/syzkaller-testdir2725480818/syzkaller.vx7R4B/71/bus supports timestamps until 2038 (0x7fffffff) [ 227.293055][ T966] usb 5-1: USB disconnect, device number 33 [ 227.340732][ C1] softirq: huh, entered softirq 9 RCU ffffffff8160d190 with preempt_count 00000102, exited with 00000101? [ 227.352092][ T9124] BUG: scheduling while atomic: syz-executor.1/9124/0x00000002 [ 227.359461][ T9124] Modules linked in: [ 227.363231][ T9124] Preemption disabled at: [ 227.363244][ T9124] [] alloc_fd+0x61/0x5a0 [ 227.373046][ T9124] CPU: 1 PID: 9124 Comm: syz-executor.1 Tainted: G W 6.1.78-syzkaller-00140-g9fcc2459efcd #0 2024/06/05 02:36:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 227.384375][ T9124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 227.394270][ T9124] Call Trace: [ 227.397391][ T9124] [ 227.400175][ T9124] dump_stack_lvl+0x151/0x1b7 [ 227.404684][ T9124] ? alloc_fd+0x61/0x5a0 [ 227.408768][ T9124] ? alloc_fd+0x61/0x5a0 [ 227.412846][ T9124] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 227.418140][ T9124] ? alloc_fd+0x61/0x5a0 [ 227.422215][ T9124] dump_stack+0x15/0x1b [ 227.426222][ T9124] __schedule_bug+0x195/0x260 [ 227.430719][ T9124] ? alloc_file_pseudo+0x280/0x2f0 [ 227.435669][ T9124] ? cpu_util_update_eff+0x10e0/0x10e0 [ 227.440964][ T9124] ? do_futex+0x501/0x9a0 [ 227.445133][ T9124] __schedule+0xcf7/0x1550 [ 227.449385][ T9124] ? __sched_text_start+0x8/0x8 [ 227.454071][ T9124] ? __x64_sys_futex+0x100/0x100 [ 227.458842][ T9124] ? __ia32_sys_socket+0x90/0x90 [ 227.463617][ T9124] schedule+0xc3/0x180 [ 227.467524][ T9124] exit_to_user_mode_loop+0x4e/0xa0 [ 227.472555][ T9124] exit_to_user_mode_prepare+0x5a/0xa0 [ 227.477854][ T9124] syscall_exit_to_user_mode+0x26/0x140 [ 227.483231][ T9124] do_syscall_64+0x49/0xb0 [ 227.487483][ T9124] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 227.493209][ T9124] RIP: 0033:0x7f9f8b67cee9 [ 227.497464][ T9124] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 227.516907][ T9124] RSP: 002b:00007f9f8c390178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.525150][ T9124] RAX: 0000000000000001 RBX: 00007f9f8b7b3f88 RCX: 00007f9f8b67cee9 [ 227.532963][ T9124] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9f8b7b3f8c [ 227.541013][ T9124] RBP: 00007f9f8b7b3f80 R08: 00007ffd911820b0 R09: 00007f9f8c3906c0 [ 227.548825][ T9124] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f8b7b3f8c [ 227.556635][ T9124] R13: 000000000000000b R14: 00007ffd9115e380 R15: 00007ffd9115e468 [ 227.564455][ T9124] [ 227.590501][ T