last executing test programs: 2.564572984s ago: executing program 1: recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x4, 0x21, 0xc1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) 1.627576028s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) tgkill(0x0, 0x0, 0x0) 1.611165371s ago: executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='./bus\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) rename(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x9}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x23}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000300)={0x0, 0x65, "e0993cfd1a0cbe953b91fe6d7af0f8b5cf2b0aaef8cf24e1a5b2482b5df03299504d8c5acb0fa2c019e0c2717021011c2d61324a64f7db115d70e28b660904dafd3851be206a752c0620fd9729f1151f8dedf19eb7bf253a91fa502e038b8c6c5548d1022c"}) 1.03546881s ago: executing program 4: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r1}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 993.732386ms ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) dup3(r2, r3, 0x0) 959.476441ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000800006164640000000000040000000000000095000000080000650278b3f56ce5492ee89e8e8b5d024d13689486d40f18a66c7b18ea97ba130ade4777e4edf71089af4589b2308d7b0ae1f33344ebca97efecb0eb17e769bdf5d833aa477ae6d2c03e3b62acb62f8eb4e5ce90837cdf67a768cc028bc72fb9b6c2bdc93d89740d72a72aae3edc809630b88e3af0b0112c2833bce2d0e321f94d1b8551791228a2ff0273d1e8e9f4c7bd6e78381836cd814d1d5d185a488bb52becb013c8566c5f5829b5b2e7bbed9c8aba65ababfa9740dd46b1515575f0c7f96768e0775aca5495f4e04c"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 950.694033ms ago: executing program 2: openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$packet(r2, &(0x7f0000000100)={0x11, 0x4, r3}, 0x14) syz_emit_ethernet(0x16, &(0x7f00000002c0)={@local, @link_local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'X', "48d287"}}}}}, 0x0) 944.321854ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) 937.101365ms ago: executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$MRT6(r0, 0x29, 0x1, 0x0, &(0x7f0000000280)) 924.562607ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 901.32372ms ago: executing program 2: mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 857.547727ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 848.875818ms ago: executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x10, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 633.855891ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010102}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x240) 609.008905ms ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000700), 0x0, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) 571.687392ms ago: executing program 1: ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000380)={{}, 0x0, 0x0, @unused=[0x3f, 0x7ff], @subvolid}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f000001ba80)=""/102394, 0x19049}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) 514.71093ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2040600) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) 489.803454ms ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000b0000000b006705000d6ffa"], 0x0, 0x0, 0x0, 0x0}, 0x0) 450.83585ms ago: executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1}}}}]}, 0x78}}, 0x0) 393.367819ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='ext4_sync_file_exit\x00', r3}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2009) 300.802643ms ago: executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000200)=0x2) read(r4, 0x0, 0x2006) close_range(r0, 0xffffffffffffffff, 0x0) 255.78707ms ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x6e24, @local}, 0x10) 222.742035ms ago: executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unshare(0x20400) fcntl$lock(r0, 0x6, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$lock(r1, 0x7, &(0x7f0000000140)) 217.951186ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 154.555526ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 126.0224ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 117.300231ms ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)='!', &(0x7f0000000780), 0x6, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x6, 0x0, "849517d9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 59.238651ms ago: executing program 3: r0 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000080)='MS{O', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 0b 45 31 ff eb 98 31 db 8b 7c 24 10 e9 6c fc ff ff 48 89 df 44 [ 127.717366][ T4461] RSP: 0018:ffffc9000116f9e0 EFLAGS: 00010246 [ 127.723429][ T4461] RAX: ffffc9000116fab0 RBX: 0000000000040dc0 RCX: 0000000000000000 [ 127.723901][ T4463] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 127.731740][ T4461] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000116fac8 [ 127.751496][ T4461] RBP: ffffc9000116fb58 R08: dffffc0000000000 R09: ffffc9000116fab0 [ 127.759650][ T4461] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000000000001a [ 127.767750][ T4461] R13: dffffc0000000000 R14: 1ffff9200022df4c R15: 000000000000001a [ 127.776357][ T4461] FS: 00007f1252fb36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 127.785599][ T4461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.792959][ T4461] CR2: 00007f52d98731fe CR3: 00000001262d4000 CR4: 00000000003506b0 [ 127.816578][ T4461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.824616][ T4461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.832956][ T4461] Call Trace: [ 127.836795][ T4461] ? show_regs+0x58/0x60 [ 127.840868][ T4461] ? __warn+0x160/0x2f0 [ 127.845142][ T4461] ? __alloc_pages_nodemask+0x4f6/0xaf0 [ 127.854188][ T4461] ? report_bug+0x3d9/0x5b0 [ 127.858863][ T4461] ? __alloc_pages_nodemask+0x4f6/0xaf0 [ 127.864457][ T4461] ? handle_bug+0x41/0x70 [ 127.868650][ T4461] ? exc_invalid_op+0x1b/0x50 [ 127.873380][ T4461] ? asm_exc_invalid_op+0x12/0x20 [ 127.878340][ T4461] ? __alloc_pages_nodemask+0x4f6/0xaf0 [ 127.884471][ T4461] ? avc_ss_reset+0x280/0x280 [ 127.889254][ T4461] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 127.895997][ T4461] kmalloc_order+0x4c/0x170 [ 127.900407][ T4461] kmalloc_order_trace+0x18/0x90 [ 127.905363][ T4461] __kmalloc+0x1f1/0x330 [ 127.909768][ T4461] ? do_vfs_ioctl+0x798/0x1a30 [ 127.914498][ T4461] input_mt_init_slots+0xcf/0xa50 [ 127.919474][ T4461] ? __x32_compat_sys_ioctl+0x90/0x90 [ 127.925036][ T4461] uinput_create_device+0x522/0x630 [ 127.930147][ T4461] uinput_ioctl_handler+0xa63/0x16a0 [ 127.935412][ T4461] ? selinux_file_ioctl+0x3cc/0x540 [ 127.941209][ T4461] ? uinput_release+0x50/0x50 [ 127.945974][ T4461] ? __fget_files+0x31e/0x380 [ 127.950737][ T4461] uinput_ioctl+0x28/0x30 [ 127.956107][ T4461] ? uinput_poll+0x120/0x120 [ 127.960639][ T4461] __se_sys_ioctl+0x114/0x190 [ 127.965738][ T4461] __x64_sys_ioctl+0x7b/0x90 [ 127.970683][ T4461] do_syscall_64+0x34/0x70 [ 127.975016][ T4461] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 127.980761][ T4461] RIP: 0033:0x7f1253c38ea9 [ 127.985034][ T4461] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 128.004876][ T4461] RSP: 002b:00007f1252fb30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.013765][ T4461] RAX: ffffffffffffffda RBX: 00007f1253d6ff80 RCX: 00007f1253c38ea9 [ 128.022236][ T4461] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 128.030600][ T4461] RBP: 00007f1253ca7ff4 R08: 0000000000000000 R09: 0000000000000000 [ 128.038540][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.046559][ T4461] R13: 000000000000000b R14: 00007f1253d6ff80 R15: 00007ffc1e6b8168 [ 128.054699][ T4461] ---[ end trace 65434103e46b0596 ]--- [ 128.354655][ T4521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.482581][ T4532] syz-executor.1[4532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.482631][ T4532] syz-executor.1[4532] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.498869][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.519056][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.526267][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.533552][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.540727][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.548569][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.555890][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x4 [ 128.563308][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.570630][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x2 [ 128.578562][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.585757][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.593454][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.600950][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.608643][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x4 [ 128.616233][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.623620][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.630967][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.638230][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.645742][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.653164][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.660471][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.667724][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.675197][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.682384][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.689570][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.696784][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.704008][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.711275][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.718683][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.725973][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.733263][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.740497][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.747698][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.755047][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.762298][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.769487][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.776791][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.784360][ T25] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 128.792055][ T25] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz0 [ 128.794293][ T310] usb 1-1: USB disconnect, device number 15 [ 128.801519][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 128.801536][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 128.826170][ T24] audit: type=1400 audit(1718359328.707:9552): avc: denied { append } for pid=4537 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.848182][ T4541] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 128.860293][ T4541] device syzkaller0 entered promiscuous mode [ 128.890602][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.937765][ T24] audit: type=1326 audit(1718359328.808:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc385ab2ea9 code=0x7ffc0000 [ 128.968112][ T24] audit: type=1326 audit(1718359328.836:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fc385ab2ea9 code=0x7ffc0000 [ 128.998707][ T24] audit: type=1326 audit(1718359328.836:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc385ab2ea9 code=0x7ffc0000 [ 129.037393][ T4568] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 129.045759][ T4568] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 129.054084][ T4568] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 129.072698][ T4571] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.083543][ T4571] FAT-fs (loop3): unable to read boot sector [ 129.224534][ T4581] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.231579][ T4581] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.239210][ T4581] device bridge_slave_0 entered promiscuous mode [ 129.246179][ T4581] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.254648][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.262521][ T4581] device bridge_slave_1 entered promiscuous mode [ 129.272398][ T24] audit: type=1326 audit(1718359329.113:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253c38ea9 code=0x7ffc0000 [ 129.302051][ T24] audit: type=1326 audit(1718359329.113:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253c38ea9 code=0x7ffc0000 [ 129.314797][ T4589] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 129.334984][ T4589] device syzkaller0 entered promiscuous mode [ 129.351897][ T24] audit: type=1326 audit(1718359329.113:9558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f1253c38ea9 code=0x7ffc0000 [ 129.375892][ T24] audit: type=1326 audit(1718359329.113:9559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4586 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1253c38ea9 code=0x7ffc0000 [ 129.429329][ T4599] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 129.440450][ T4599] FAT-fs (loop3): unable to read boot sector [ 129.518011][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 129.538288][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 129.623198][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.663010][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.674481][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.681351][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.704126][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.712090][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.720341][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.728407][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.735278][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.755459][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 129.763506][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 129.775075][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.787749][ T4581] device veth0_vlan entered promiscuous mode [ 129.797631][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 129.805462][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.813636][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.823776][ T4581] device veth1_macvtap entered promiscuous mode [ 129.829913][ T633] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 129.830021][ T559] Bluetooth: hci0: command 0x1009 tx timeout [ 129.838380][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 129.859570][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.871316][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.991388][ T4617] syz-executor.2[4617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.991446][ T4617] syz-executor.2[4617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.230842][ T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.271825][ T633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.290513][ T633] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.306541][ T633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.324460][ T633] usb 2-1: config 0 descriptor?? [ 130.523698][ T502] device bridge_slave_1 left promiscuous mode [ 130.530112][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.545519][ T502] device bridge_slave_0 left promiscuous mode [ 130.566807][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.589077][ T502] device veth1_macvtap left promiscuous mode [ 130.594913][ T502] device veth0_vlan left promiscuous mode [ 130.837730][ T633] hid (null): bogus close delimiter [ 131.143254][ T4654] tipc: Started in network mode [ 131.148220][ T4654] tipc: Own node identity ac1414aa, cluster identity 4711 [ 131.155931][ T4654] tipc: Enabled bearer , priority 10 [ 131.161979][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.168924][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.176486][ T4635] device bridge_slave_0 entered promiscuous mode [ 131.183593][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.190843][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.198248][ T4635] device bridge_slave_1 entered promiscuous mode [ 131.269258][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.276172][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.283337][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.290102][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.322125][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.331041][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.346756][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.369414][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.377457][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.384311][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.391594][ T633] usb 2-1: string descriptor 0 read error: -71 [ 131.397805][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.406221][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.413088][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.422284][ T633] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #200: -71 [ 131.431246][ T633] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 131.439942][ T633] uclogic 0003:256C:006D.0027: failed probing pen v2 parameters: -71 [ 131.448051][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.455774][ T633] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 131.463314][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.471120][ T633] uclogic: probe of 0003:256C:006D.0027 failed with error -71 [ 131.479550][ T633] usb 2-1: USB disconnect, device number 16 [ 131.489309][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.505715][ T4635] device veth0_vlan entered promiscuous mode [ 131.513258][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.525531][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.534840][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.543352][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.557633][ T4635] device veth1_macvtap entered promiscuous mode [ 131.564893][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.573350][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.581324][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.592038][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.600649][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.619649][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.631327][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.668670][ T4676] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.837925][ T4683] user requested TSC rate below hardware speed [ 132.115758][ T502] device bridge_slave_1 left promiscuous mode [ 132.122119][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.142550][ T502] device bridge_slave_0 left promiscuous mode [ 132.150750][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.397391][ T310] tipc: 32-bit node address hash set to aa1414ac [ 132.414514][ T502] device veth1_macvtap left promiscuous mode [ 132.429763][ T502] device veth0_vlan left promiscuous mode [ 132.556209][ T4705] bridge0: port 3(vlan2) entered blocking state [ 132.562432][ T4705] bridge0: port 3(vlan2) entered disabled state [ 132.569178][ T4705] device vlan2 entered promiscuous mode [ 132.608038][ T4711] tipc: Started in network mode [ 132.617253][ T4711] tipc: Own node identity ac1414aa, cluster identity 4711 [ 132.627158][ T4711] tipc: Enabled bearer , priority 10 [ 132.672872][ T4724] user requested TSC rate below hardware speed [ 132.755351][ T323] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 132.886364][ T4744] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.941825][ T4748] syz-executor.2[4748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.941862][ T4748] syz-executor.2[4748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.961257][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 133.025978][ T323] usb 1-1: Using ep0 maxpacket: 16 [ 133.167092][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.178879][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.188865][ T323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.201735][ T323] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.211212][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.220891][ T323] usb 1-1: config 0 descriptor?? [ 133.231918][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 133.362147][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 133.373397][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 133.384691][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 133.393779][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.402402][ T25] usb 5-1: config 0 descriptor?? [ 133.426925][ T4729] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 133.449191][ T25] hub 5-1:0.0: USB hub found [ 133.687082][ T25] hub 5-1:0.0: 2 ports detected [ 133.774456][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.781765][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.789208][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.796766][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.804016][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.811367][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.818754][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.825895][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.833020][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.838615][ T308] tipc: 32-bit node address hash set to aa1414ac [ 133.840007][ T323] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 133.855777][ T323] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0028/input/input28 [ 133.873982][ T323] microsoft 0003:045E:07DA.0028: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 133.890775][ T4759] user requested TSC rate below hardware speed [ 133.993235][ T310] usb 1-1: USB disconnect, device number 16 [ 134.064129][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 134.064140][ T24] audit: type=1400 audit(1718359333.534:9562): avc: denied { bind } for pid=4767 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 134.487398][ T4788] user requested TSC rate below hardware speed [ 134.566512][ T502] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.658762][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.665647][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.672989][ T4801] device bridge_slave_0 entered promiscuous mode [ 134.683264][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.690534][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.697825][ T4801] device bridge_slave_1 entered promiscuous mode [ 134.731923][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.738915][ T4801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.746017][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.752799][ T4801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.770528][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.778288][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.785412][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.803806][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.811768][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.818704][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.825886][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.833836][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.840704][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.848376][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.856110][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.871898][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.883820][ T4801] device veth0_vlan entered promiscuous mode [ 134.890292][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.898020][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.905868][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.918583][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.928173][ T4801] device veth1_macvtap entered promiscuous mode [ 134.937490][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.948902][ T633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.079652][ T4821] fuse: root generation should be zero [ 135.215139][ T399] device bridge_slave_1 left promiscuous mode [ 135.221143][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.228551][ T399] device bridge_slave_0 left promiscuous mode [ 135.234520][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.242517][ T399] device veth1_macvtap left promiscuous mode [ 135.248575][ T399] device veth0_vlan left promiscuous mode [ 135.355413][ T633] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 135.811215][ T633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 135.822411][ T633] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 135.833439][ T633] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.846051][ T633] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.855257][ T633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.863623][ T633] usb 3-1: config 0 descriptor?? [ 135.897207][ T4820] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.992516][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.000822][ T4829] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.008221][ T4829] device bridge_slave_0 entered promiscuous mode [ 136.015664][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.022564][ T4829] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.029726][ T4829] device bridge_slave_1 entered promiscuous mode [ 136.063131][ T4829] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.070326][ T4829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.077603][ T4829] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.084507][ T4829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.092168][ T336] usb 5-1: USB disconnect, device number 16 [ 136.106905][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.114568][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.121601][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.131579][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.140085][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.146936][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.155644][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.164188][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.172301][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.179154][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.192420][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.200531][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.208240][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.216096][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.231142][ T4829] device veth0_vlan entered promiscuous mode [ 136.237709][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 136.246031][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.254086][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.262282][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.270186][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.277733][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.290871][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.298901][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.307922][ T4829] device veth1_macvtap entered promiscuous mode [ 136.317123][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.324788][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.333547][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.346174][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.354231][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.385243][ T633] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 136.392646][ T633] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 136.401290][ T633] plantronics 0003:047F:FFFF.0029: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 136.462593][ T399] device bridge_slave_1 left promiscuous mode [ 136.473647][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.483604][ T399] device bridge_slave_0 left promiscuous mode [ 136.489592][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.497940][ T399] device veth1_macvtap left promiscuous mode [ 136.502435][ T4842] fscrypt: AES-128-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 136.504290][ T399] device veth0_vlan left promiscuous mode [ 136.573434][ T4847] geneve1: tun_chr_ioctl cmd 1074025678 [ 136.578802][ T4847] geneve1: group set to 0 [ 136.630089][ T4849] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 136.690031][ T4820] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=40 sclass=netlink_xfrm_socket pid=4820 comm=syz-executor.2 [ 136.703622][ T633] usb 3-1: USB disconnect, device number 14 [ 136.763959][ T308] Bluetooth: hci0: command 0x1003 tx timeout [ 136.770577][ T4308] Bluetooth: hci0: sending frame failed (-49) [ 137.197560][ T308] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 137.265340][ T24] audit: type=1326 audit(1718359336.497:9563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 137.294142][ T24] audit: type=1326 audit(1718359336.497:9564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 137.320547][ T24] audit: type=1326 audit(1718359336.497:9565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 137.345348][ T24] audit: type=1326 audit(1718359336.497:9566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 137.369316][ T24] audit: type=1326 audit(1718359336.497:9567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4907 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 137.400865][ T4913] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 137.416533][ T4913] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.423733][ T4913] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.468047][ T308] usb 4-1: Using ep0 maxpacket: 32 [ 137.479194][ T323] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.573043][ T4924] overlayfs: statfs failed on './file0' [ 137.598113][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 137.609209][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 137.620157][ T308] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 137.628987][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.637666][ T308] usb 4-1: config 0 descriptor?? [ 137.663173][ T4879] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.678682][ T24] audit: type=1400 audit(1718359336.875:9568): avc: denied { bind } for pid=4937 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.698896][ T308] hub 4-1:0.0: USB hub found [ 137.703451][ T24] audit: type=1400 audit(1718359336.875:9569): avc: denied { listen } for pid=4937 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.724876][ T24] audit: type=1400 audit(1718359336.921:9570): avc: denied { append } for pid=4933 comm="syz-executor.1" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.826251][ T4945] EXT4-fs (loop2): Ignoring removed orlov option [ 137.837833][ T4945] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,errors=remount-ro, [ 137.933985][ T308] hub 4-1:0.0: 2 ports detected [ 137.936408][ T4949] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.953381][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.953528][ T4949] EXT4-fs (loop2): Remounting filesystem read-only [ 137.964084][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.964113][ T323] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 137.964123][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.991606][ T323] usb 5-1: config 0 descriptor?? [ 138.511855][ T323] arvo 0003:1E7D:30D4.002A: item fetching failed at offset 5/7 [ 138.520422][ T323] arvo 0003:1E7D:30D4.002A: parse failed [ 138.526148][ T323] arvo: probe of 0003:1E7D:30D4.002A failed with error -22 [ 138.789157][ T323] usb 5-1: USB disconnect, device number 17 [ 138.918803][ T4970] overlayfs: statfs failed on './file0' [ 139.051530][ T308] Bluetooth: hci0: command 0x1001 tx timeout [ 139.058273][ T4308] Bluetooth: hci0: sending frame failed (-49) [ 139.076050][ T4974] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.085411][ T4974] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.331602][ T323] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 139.418235][ T633] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 139.602381][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 139.764970][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.775887][ T323] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 139.789194][ T323] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 139.798147][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.806391][ T323] usb 2-1: config 0 descriptor?? [ 139.862506][ T633] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.872640][ T633] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.981655][ T633] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 139.990714][ T633] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 139.998517][ T633] usb 3-1: Product: syz [ 140.002935][ T633] usb 3-1: config 0 descriptor?? [ 140.275777][ T633] usb 3-1: USB disconnect, device number 15 [ 140.339837][ T336] usb 4-1: USB disconnect, device number 19 [ 140.347070][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.909664][ T24] audit: type=1400 audit(1718359339.856:9571): avc: denied { bind } for pid=4999 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 141.249225][ T633] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 141.270936][ T20] Bluetooth: hci0: command 0x1009 tx timeout [ 141.390065][ T310] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 141.682612][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.693769][ T633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.703208][ T633] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 141.712253][ T633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.720618][ T633] usb 4-1: config 0 descriptor?? [ 141.834357][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.844294][ T310] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.953551][ T310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 141.962674][ T310] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 141.970608][ T310] usb 3-1: Product: syz [ 141.975069][ T310] usb 3-1: config 0 descriptor?? [ 142.214081][ T633] arvo 0003:1E7D:30D4.002B: item fetching failed at offset 5/7 [ 142.221618][ T633] arvo 0003:1E7D:30D4.002B: parse failed [ 142.227297][ T633] arvo: probe of 0003:1E7D:30D4.002B failed with error -22 [ 142.236958][ T20] usb 3-1: USB disconnect, device number 16 [ 142.354356][ T323] usbhid 2-1:0.0: can't add hid device: -71 [ 142.360185][ T323] usbhid: probe of 2-1:0.0 failed with error -71 [ 142.367349][ T323] usb 2-1: USB disconnect, device number 17 [ 142.433866][ T308] usb 4-1: USB disconnect, device number 20 [ 142.995400][ T24] audit: type=1400 audit(1718359341.786:9572): avc: denied { remount } for pid=5060 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 143.333747][ T5097] device pim6reg1 entered promiscuous mode [ 143.423064][ T5104] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.439620][ T5106] syz-executor.1[5106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.439658][ T5106] syz-executor.1[5106] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.535220][ T323] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.600248][ T310] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 143.784489][ T336] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 144.001105][ T308] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 144.012037][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.022917][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.032442][ T323] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 144.041319][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.049567][ T323] usb 3-1: config 0 descriptor?? [ 144.066248][ T310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.077099][ T310] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.090246][ T310] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.099085][ T310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.107279][ T310] usb 4-1: config 0 descriptor?? [ 144.217913][ T336] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 144.228103][ T336] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.315434][ T336] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.324558][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.332478][ T336] usb 2-1: SerialNumber: syz [ 144.391367][ T308] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 144.543510][ T323] arvo 0003:1E7D:30D4.002C: item fetching failed at offset 5/7 [ 144.551320][ T323] arvo 0003:1E7D:30D4.002C: parse failed [ 144.556922][ T323] arvo: probe of 0003:1E7D:30D4.002C failed with error -22 [ 144.564551][ T308] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 144.573482][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.581211][ T308] usb 5-1: Product: syz [ 144.585322][ T308] usb 5-1: Manufacturer: syz [ 144.589789][ T308] usb 5-1: SerialNumber: syz [ 144.594832][ T308] usb 5-1: config 0 descriptor?? [ 144.618706][ T5128] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 144.641118][ T310] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 144.648348][ T310] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 144.656099][ T310] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 144.664330][ T310] plantronics 0003:047F:FFFF.002D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 144.762444][ T310] usb 3-1: USB disconnect, device number 17 [ 144.895529][ T336] usb 2-1: 0:2 : does not exist [ 144.896091][ T308] usb 5-1: USB disconnect, device number 18 [ 144.993089][ T336] usb 2-1: USB disconnect, device number 18 [ 145.008069][ T633] usb 4-1: USB disconnect, device number 21 [ 146.389275][ T5175] syz-executor.4[5175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.389333][ T5175] syz-executor.4[5175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.482225][ T5192] tipc: Failed to remove local publication {66,1,1}/3747126992 [ 146.501664][ T5192] tipc: Failed to remove local publication {66,1,1}/3747126992 [ 146.823786][ T24] audit: type=1400 audit(1718359345.311:9573): avc: denied { write } for pid=5222 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 146.886795][ T5228] 9pnet: Insufficient options for proto=fd [ 146.932695][ T5237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.957359][ T24] audit: type=1400 audit(1718359345.431:9574): avc: denied { unmount } for pid=4635 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 147.173597][ T5259] device veth0_vlan left promiscuous mode [ 147.179481][ T5259] device veth0_vlan entered promiscuous mode [ 147.371916][ T5269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.446389][ T742] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 147.933994][ T742] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.962634][ T742] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.999829][ T742] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.012499][ T5285] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 148.031140][ T742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.036788][ T5285] kvm: pic: non byte read [ 148.051626][ T5285] kvm: pic: level sensitive irq not supported [ 148.051673][ T5285] kvm: pic: non byte read [ 148.057989][ T742] usb 1-1: config 0 descriptor?? [ 148.069187][ T5285] kvm: pic: level sensitive irq not supported [ 148.069238][ T5285] kvm: pic: non byte read [ 148.085894][ T5285] kvm: pic: level sensitive irq not supported [ 148.085938][ T5285] kvm: pic: non byte read [ 148.145580][ T24] audit: type=1400 audit(1718359346.530:9575): avc: denied { ioctl } for pid=5289 comm="syz-executor.4" path="socket:[38825]" dev="sockfs" ino=38825 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.270805][ T24] audit: type=1400 audit(1718359346.650:9576): avc: denied { listen } for pid=5295 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.306914][ T24] audit: type=1400 audit(1718359346.650:9577): avc: denied { accept } for pid=5295 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 148.609148][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 148.645427][ T742] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 148.676351][ T742] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 148.683956][ T742] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 148.692909][ T742] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 148.778995][ T20] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 149.448357][ T559] usb 1-1: USB disconnect, device number 17 [ 149.454506][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.475240][ T25] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.487425][ T25] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.498092][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 149.505310][ T25] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 149.514361][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.525186][ T25] usb 5-1: config 0 descriptor?? [ 149.570072][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.583394][ T20] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 149.593027][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.603882][ T20] usb 2-1: config 0 descriptor?? [ 150.029405][ T5341] EXT4-fs (loop3): test_dummy_encryption requires encrypt feature [ 150.036758][ T25] zeroplus 0003:0C12:0005.002F: item fetching failed at offset 1/5 [ 150.052888][ T25] zeroplus 0003:0C12:0005.002F: parse failed [ 150.059117][ T25] zeroplus: probe of 0003:0C12:0005.002F failed with error -22 [ 150.124577][ T20] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor [ 150.138534][ T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0030/input/input33 [ 150.251088][ T20] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 150.315153][ T20] usb 5-1: USB disconnect, device number 19 [ 150.725927][ T20] usb 2-1: USB disconnect, device number 19 [ 151.452029][ T24] audit: type=1326 audit(1718359349.197:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5a8c55627 code=0x7ffc0000 [ 151.480777][ T24] audit: type=1326 audit(1718359349.197:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5a8c1b309 code=0x7ffc0000 [ 151.505073][ T24] audit: type=1326 audit(1718359349.585:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5a8c55627 code=0x7ffc0000 [ 151.530420][ T24] audit: type=1326 audit(1718359349.585:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb5a8c1b309 code=0x7ffc0000 [ 151.567467][ T24] audit: type=1326 audit(1718359349.585:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5365 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb5a8c55627 code=0x7ffc0000 [ 152.026694][ T5375] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 152.065092][ T5375] kvm: pic: non byte read [ 152.097599][ T5404] syz-executor.2[5404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.097656][ T5404] syz-executor.2[5404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.452139][ T24] kauditd_printk_skb: 331 callbacks suppressed [ 152.452151][ T24] audit: type=1326 audit(1718359350.508:9914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d385627 code=0x7ffc0000 [ 152.523351][ T24] audit: type=1326 audit(1718359350.508:9915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d34b309 code=0x7ffc0000 [ 152.547257][ T24] audit: type=1326 audit(1718359350.508:9916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d385627 code=0x7ffc0000 [ 152.585607][ T24] audit: type=1326 audit(1718359350.508:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d34b309 code=0x7ffc0000 [ 152.635355][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.645168][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.674988][ T24] audit: type=1326 audit(1718359350.508:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d385627 code=0x7ffc0000 [ 152.734863][ T5441] erofs: (device loop3): mounted with root inode @ nid 36. [ 152.747966][ T24] audit: type=1326 audit(1718359350.508:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d34b309 code=0x7ffc0000 [ 152.787694][ T24] audit: type=1326 audit(1718359350.508:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d385627 code=0x7ffc0000 [ 152.813267][ T24] audit: type=1326 audit(1718359350.508:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d34b309 code=0x7ffc0000 [ 152.846045][ T24] audit: type=1326 audit(1718359350.508:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d385627 code=0x7ffc0000 [ 152.877825][ T24] audit: type=1326 audit(1718359350.508:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d34b309 code=0x7ffc0000 [ 152.984590][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x1 [ 152.992178][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.371045][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.378311][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.390260][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.398064][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.405311][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x4 [ 153.412590][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.486446][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x2 [ 153.486631][ T5471] syz-executor.0[5471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.493891][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.540910][ T5471] syz-executor.0[5471] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.560075][ T5473] request_module fs-autofs succeeded, but still no fs? [ 153.725259][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.732740][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.739951][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.768154][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x4 [ 153.777896][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.790107][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.804376][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.816290][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.836121][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.848030][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.860095][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.871896][ T5475] erofs: (device loop1): mounted with root inode @ nid 36. [ 153.880138][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.887570][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.895207][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.902411][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.909957][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.917201][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.924357][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.931609][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.938791][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.946144][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.953362][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.960698][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.967985][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.975227][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.982401][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.989610][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 153.996804][ T323] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 154.006207][ T323] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 154.130871][ T5484] device syzkaller0 entered promiscuous mode [ 154.443904][ T5497] syz-executor.2[5497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.443955][ T5497] syz-executor.2[5497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.461493][ T5497] incfs: Options parsing error. -22 [ 154.478990][ T5497] incfs: mount failed -22 [ 154.535546][ T5509] device vlan3 entered promiscuous mode [ 154.542650][ T5509] device veth0_macvtap entered promiscuous mode [ 154.575710][ T5513] syz-executor.2[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.575750][ T5513] syz-executor.2[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.601621][ T5515] syz-executor.2[5515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.615503][ T5515] syz-executor.2[5515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.684783][ T5526] incfs: Options parsing error. -22 [ 154.702964][ T5526] incfs: mount failed -22 [ 154.828017][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x1 [ 154.838786][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 154.854646][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 154.870441][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 154.885896][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 154.901271][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 154.916753][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x4 [ 154.933068][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 154.946677][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x2 [ 154.992741][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.007112][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.020169][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.027387][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.048415][ T5547] FAT-fs (loop3): Directory bread(block 64) failed [ 155.057326][ T5547] FAT-fs (loop3): Directory bread(block 65) failed [ 155.067426][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x4 [ 155.080039][ T5547] FAT-fs (loop3): Directory bread(block 66) failed [ 155.087111][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.095358][ T5547] FAT-fs (loop3): Directory bread(block 67) failed [ 155.097272][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.108940][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.110080][ T5547] FAT-fs (loop3): Directory bread(block 68) failed [ 155.116105][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.116125][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.136867][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.139176][ T5547] FAT-fs (loop3): Directory bread(block 69) failed [ 155.149793][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.150890][ T5547] FAT-fs (loop3): Directory bread(block 70) failed [ 155.164492][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.164499][ T5547] FAT-fs (loop3): Directory bread(block 71) failed [ 155.164534][ T5547] FAT-fs (loop3): Directory bread(block 72) failed [ 155.177786][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.178467][ T5547] FAT-fs (loop3): Directory bread(block 73) failed [ 155.190010][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.207888][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.215132][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.227758][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.235025][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.242228][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.249413][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.256593][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.263811][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.271024][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.278204][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.285433][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.292723][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.300512][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.307772][ T336] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 155.334120][ T336] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 155.539795][ T5590] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 156.095088][ T5602] ªªªªªª: renamed from vlan0 [ 156.778584][ T5625] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 156.858981][ T5637] Zero length message leads to an empty skb [ 156.955413][ T5650] overlayfs: failed to get inode (-116) [ 156.962150][ T5650] overlayfs: failed to get inode (-116) [ 157.053585][ T5653] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program [ 157.365468][ T5668] FAT-fs (loop1): Directory bread(block 64) failed [ 157.372323][ T5668] FAT-fs (loop1): Directory bread(block 65) failed [ 157.378965][ T5668] FAT-fs (loop1): Directory bread(block 66) failed [ 157.385650][ T5668] FAT-fs (loop1): Directory bread(block 67) failed [ 157.392540][ T5668] FAT-fs (loop1): Directory bread(block 68) failed [ 157.399238][ T5668] FAT-fs (loop1): Directory bread(block 69) failed [ 157.406168][ T5668] FAT-fs (loop1): Directory bread(block 70) failed [ 157.412831][ T5668] FAT-fs (loop1): Directory bread(block 71) failed [ 157.419654][ T5668] FAT-fs (loop1): Directory bread(block 72) failed [ 157.426406][ T5668] FAT-fs (loop1): Directory bread(block 73) failed [ 157.478874][ T323] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 157.556399][ T5671] SELinux: Context $ is not valid (left unmapped). [ 157.967667][ T323] usb 3-1: Using ep0 maxpacket: 16 [ 157.978017][ T5679] IPv4: Oversized IP packet from 127.202.26.0 [ 158.005976][ T5683] bpf_get_probe_write_proto: 10 callbacks suppressed [ 158.005982][ T5683] syz-executor.0[5683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.012850][ T5683] syz-executor.0[5683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.107341][ T323] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 158.129183][ T323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 158.138654][ T323] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 158.148321][ T323] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 158.259012][ T323] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 158.267863][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 158.275725][ T323] usb 3-1: SerialNumber: syz [ 158.335187][ T323] usb-storage 3-1:1.0: USB Mass Storage device detected [ 158.367683][ T323] usb-storage 3-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 158.387662][ T323] scsi host1: usb-storage 3-1:1.0 [ 158.564172][ T559] usb 3-1: USB disconnect, device number 18 [ 158.790181][ T24] kauditd_printk_skb: 3558 callbacks suppressed [ 158.790192][ T24] audit: type=1400 audit(1718359356.360:13482): avc: denied { connect } for pid=5711 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.991797][ T5720] device pim6reg1 entered promiscuous mode [ 159.371833][ T5729] device pim6reg1 entered promiscuous mode [ 159.486395][ T5740] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 159.535623][ T5740] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue [ 159.569924][ T5740] ext4 filesystem being mounted at /root/syzkaller-testdir4290299827/syzkaller.fqNvHz/92/file0 supports timestamps until 2038 (0x7fffffff) [ 159.607157][ T5740] EXT4-fs error (device loop3): __ext4_new_inode:1276: comm syz-executor.3: failed to insert inode 16: doubly allocated? [ 159.633971][ T24] audit: type=1400 audit(1718359357.135:13483): avc: denied { create } for pid=5756 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 159.639759][ T5755] device pim6reg1 entered promiscuous mode [ 159.653798][ T24] audit: type=1400 audit(1718359357.144:13484): avc: denied { read } for pid=5756 comm="syz-executor.2" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.682636][ T24] audit: type=1400 audit(1718359357.144:13485): avc: denied { open } for pid=5756 comm="syz-executor.2" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 159.707226][ T24] audit: type=1400 audit(1718359357.144:13486): avc: denied { map } for pid=5739 comm="syz-executor.3" path="socket:[41015]" dev="sockfs" ino=41015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.731842][ T24] audit: type=1400 audit(1718359357.144:13487): avc: denied { read } for pid=5739 comm="syz-executor.3" path="socket:[41015]" dev="sockfs" ino=41015 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.761295][ T24] audit: type=1400 audit(1718359357.144:13488): avc: denied { ioctl } for pid=5739 comm="syz-executor.3" path="socket:[41013]" dev="sockfs" ino=41013 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.916573][ T742] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 160.198417][ T742] usb 2-1: Using ep0 maxpacket: 16 [ 160.680807][ T24] audit: type=1326 audit(1718359357.670:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe85d385627 code=0x7ffc0000 [ 160.705024][ T24] audit: type=1326 audit(1718359357.670:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe85d34b309 code=0x7ffc0000 [ 160.729001][ T24] audit: type=1326 audit(1718359357.670:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5796 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85d387ea9 code=0x7ffc0000 [ 160.764265][ T742] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 160.775681][ T742] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 160.787538][ T742] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 160.815816][ T742] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 160.856500][ T5804] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 160.948039][ T742] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 160.957273][ T742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 160.965437][ T742] usb 2-1: SerialNumber: syz [ 161.455486][ T742] usb-storage 2-1:1.0: USB Mass Storage device detected [ 161.561672][ T742] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 161.576999][ T742] scsi host1: usb-storage 2-1:1.0 [ 161.799192][ T559] usb 2-1: USB disconnect, device number 20 [ 161.866745][ T323] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.224342][ T310] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 162.235140][ T336] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 162.300228][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.311188][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.320785][ T323] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 162.329619][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.338052][ T323] usb 5-1: config 0 descriptor?? [ 162.407340][ T5854] syz-executor.2[5854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.407386][ T5854] syz-executor.2[5854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.675781][ T5867] devtmpfs: Unknown parameter 'nr_ino ' [ 162.842229][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.853273][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.864318][ T310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.865089][ T5867] erofs: (device loop2): mounted with root inode @ nid 36. [ 162.874580][ T336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.911065][ T323] hid (null): bogus close delimiter [ 162.920620][ T310] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 162.932970][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.943114][ T336] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 162.953556][ T336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.961904][ T310] usb 1-1: config 0 descriptor?? [ 162.968853][ T336] usb 4-1: config 0 descriptor?? [ 163.470848][ T323] usb 5-1: string descriptor 0 read error: -71 [ 163.477730][ T310] arvo 0003:1E7D:30D4.0034: unknown main item tag 0x0 [ 163.487680][ T310] arvo 0003:1E7D:30D4.0034: unknown main item tag 0x0 [ 163.496934][ T336] sony 0003:054C:024B.0035: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 163.508689][ T323] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #200: -71 [ 163.517701][ T323] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 163.525980][ T310] arvo 0003:1E7D:30D4.0034: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 163.537051][ T336] sony 0003:054C:024B.0035: failed to claim input [ 163.543349][ T323] uclogic 0003:256C:006D.0033: failed probing pen v2 parameters: -71 [ 163.552105][ T323] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 163.559992][ T323] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 163.569577][ T323] usb 5-1: USB disconnect, device number 20 [ 163.707987][ T5891] EXT4-fs (sda1): re-mounted. Opts: (null) [ 163.716285][ T336] usb 4-1: USB disconnect, device number 22 [ 163.722180][ T310] arvo 0003:1E7D:30D4.0034: couldn't init struct arvo_device [ 163.730672][ T310] arvo 0003:1E7D:30D4.0034: couldn't install keyboard [ 163.738464][ T310] arvo: probe of 0003:1E7D:30D4.0034 failed with error -5 [ 163.942067][ T742] usb 1-1: USB disconnect, device number 18 [ 163.988372][ T5897] syz-executor.4[5897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.988441][ T5897] syz-executor.4[5897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.017756][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.056766][ T5903] sock: sock_set_timeout: `syz-executor.4' (pid 5903) tries to set negative timeout [ 164.066272][ T310] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 164.164610][ T5917] EXT4-fs (sda1): re-mounted. Opts: (null) [ 164.352067][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.359261][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 164.364570][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.371860][ T5935] device bridge_slave_0 entered promiscuous mode [ 164.378765][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.386200][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.393559][ T5935] device bridge_slave_1 entered promiscuous mode [ 164.428367][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.435384][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.442616][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.449432][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.469141][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.476454][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.483852][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.496593][ T742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.505070][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.511952][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.521237][ T310] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 164.529432][ T310] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 164.538365][ T310] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 164.547558][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.557164][ T310] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.566690][ T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 164.576289][ T310] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 164.586119][ T310] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 164.599514][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.607545][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.607795][ T310] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 164.614498][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.631625][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.639652][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.647555][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.657657][ T310] usb 3-1: config 0 descriptor?? [ 164.668975][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.679722][ T5935] device veth0_vlan entered promiscuous mode [ 164.686243][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.694384][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.706722][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.719878][ T5935] device veth1_macvtap entered promiscuous mode [ 164.727181][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.747730][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.756729][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.776556][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.934010][ T310] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 164.946783][ T310] usb 3-1: USB disconnect, device number 19 [ 164.955443][ T502] device bridge_slave_1 left promiscuous mode [ 164.955543][ T310] usblp0: removed [ 164.964897][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.972636][ T502] device bridge_slave_0 left promiscuous mode [ 164.978934][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.987817][ T502] device veth1_macvtap left promiscuous mode [ 165.084562][ T20] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 165.149573][ T323] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.195709][ T5976] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 165.473572][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.483030][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 165.495677][ T20] usb 5-1: New USB device found, idVendor=0eef, idProduct=725e, bcdDevice= 0.00 [ 165.505133][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.513695][ T20] usb 5-1: config 0 descriptor?? [ 165.550503][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.561407][ T323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.571104][ T323] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 165.591899][ T323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.600554][ T323] usb 1-1: config 0 descriptor?? [ 165.753095][ T6004] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 166.063048][ T6008] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 166.092262][ T20] usb 5-1: string descriptor 0 read error: -71 [ 166.098901][ T20] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 166.106693][ T20] usb 5-1: USB disconnect, device number 21 [ 166.475324][ T6029] EXT4-fs warning (device sda1): ext4_group_extend:1812: need to use ext2online to resize further [ 166.655469][ T634] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 166.795869][ T6035] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 166.926347][ T634] usb 4-1: Using ep0 maxpacket: 32 [ 166.950056][ T6049] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 166.973828][ T6045] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 166.989412][ T6045] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 167.000276][ T6045] overlayfs: './file1' not a directory [ 167.056485][ T634] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.073941][ T634] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.084387][ T6059] syz-executor.1[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.084445][ T6059] syz-executor.1[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.095964][ T634] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.116391][ T323] uclogic 0003:256C:006D.0036: v1 buttonpad probing failed: -71 [ 167.125167][ T323] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 167.135399][ T6059] syz-executor.1[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.135446][ T6059] syz-executor.1[6059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.137846][ T323] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 167.165829][ T634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.176986][ T634] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.186965][ T634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 167.198120][ T323] usb 1-1: USB disconnect, device number 19 [ 167.204539][ T634] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 167.214478][ T634] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.227396][ T634] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.236165][ T634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.245138][ T634] usb 4-1: config 0 descriptor?? [ 167.250337][ T6063] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 167.362892][ T6073] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 167.471105][ T6078] devtmpfs: Unknown parameter 'nr_ino ' [ 167.663709][ T634] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.685576][ T634] usb 4-1: USB disconnect, device number 23 [ 167.698537][ T634] usblp0: removed [ 167.730369][ T6077] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.746658][ T24] kauditd_printk_skb: 1271 callbacks suppressed [ 167.746670][ T24] audit: type=1326 audit(1718359364.621:14763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe85d387ea9 code=0x0 [ 167.784256][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.791394][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.798828][ T6085] device bridge_slave_0 entered promiscuous mode [ 167.809518][ T24] audit: type=1400 audit(1718359364.685:14764): avc: denied { wake_alarm } for pid=6083 comm="syz-executor.1" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 167.832558][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.839548][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.846918][ T6085] device bridge_slave_1 entered promiscuous mode [ 167.886304][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.893164][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.900260][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.907064][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.932648][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.940790][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.948337][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.958701][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.966789][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.973610][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.988825][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.996878][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.003723][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.011233][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.018949][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.033714][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.042259][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.054183][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.062117][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.070485][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.077983][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.086225][ T6085] device veth0_vlan entered promiscuous mode [ 168.096630][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.104527][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.114845][ T6085] device veth1_macvtap entered promiscuous mode [ 168.124310][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.132213][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.140652][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.152316][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.160512][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.238435][ T742] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 168.247163][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.286999][ T24] audit: type=1326 audit(1718359365.128:14765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 168.314073][ T24] audit: type=1326 audit(1718359365.147:14766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 168.338316][ T24] audit: type=1326 audit(1718359365.147:14767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 168.362560][ T24] audit: type=1326 audit(1718359365.147:14768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb5a8c57ea9 code=0x7ffc0000 [ 168.392310][ T24] audit: type=1326 audit(1718359365.147:14769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb5a8c57ee3 code=0x7ffc0000 [ 168.417484][ T24] audit: type=1326 audit(1718359365.147:14770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb5a8c56bef code=0x7ffc0000 [ 168.441672][ T24] audit: type=1326 audit(1718359365.147:14771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb5a8c57f37 code=0x7ffc0000 [ 168.465675][ T24] audit: type=1326 audit(1718359365.147:14772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5a8c56aa0 code=0x7ffc0000 [ 168.495422][ T502] device bridge_slave_1 left promiscuous mode [ 168.501524][ T742] usb 2-1: Using ep0 maxpacket: 8 [ 168.508234][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.529501][ T502] device bridge_slave_0 left promiscuous mode [ 168.538575][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.547950][ T502] device veth1_macvtap left promiscuous mode [ 168.553962][ T502] device veth0_vlan left promiscuous mode [ 168.627428][ T742] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 168.636503][ T742] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 168.646973][ T742] usb 2-1: config 135 has no interface number 0 [ 168.653534][ T742] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.697086][ T6120] overlayfs: statfs failed on './file0' [ 168.822376][ T20] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 168.833316][ T742] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 168.842186][ T742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.850141][ T470] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 168.865784][ T742] usb 2-1: Product: syz [ 168.869760][ T742] usb 2-1: Manufacturer: syz [ 168.874187][ T742] usb 2-1: SerialNumber: syz [ 168.920708][ T742] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 168.927289][ T742] uvcvideo: No valid video chain found. [ 168.984858][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 169.140862][ T742] usb 2-1: USB disconnect, device number 21 [ 169.212497][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.223672][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.233221][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 169.242181][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.250687][ T20] usb 3-1: config 0 descriptor?? [ 169.266690][ T470] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 169.274872][ T470] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 169.282797][ T470] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 169.292419][ T470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 169.302311][ T470] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 169.375222][ T25] usb 1-1: config index 0 descriptor too short (expected 44, got 36) [ 169.383187][ T25] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 169.391034][ T25] usb 1-1: config 0 has no interface number 0 [ 169.397103][ T25] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.408135][ T25] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.417764][ T25] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 169.426654][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.434954][ T25] usb 1-1: config 0 descriptor?? [ 169.949826][ T470] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 169.965421][ T25] uclogic 0003:5543:0781.0038: unknown main item tag 0x0 [ 170.084581][ T25] uclogic 0003:5543:0781.0038: unknown main item tag 0x0 [ 170.091650][ T470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.099839][ T25] uclogic 0003:5543:0781.0038: item fetching failed at offset 2/5 [ 170.131239][ T470] usb 5-1: Manufacturer: ц [ 170.142198][ T470] usb 5-1: config 0 descriptor?? [ 170.148076][ T25] uclogic 0003:5543:0781.0038: parse failed [ 170.161062][ T25] uclogic: probe of 0003:5543:0781.0038 failed with error -22 [ 170.198646][ T470] hub 5-1:0.0: bad descriptor, ignoring hub [ 170.204573][ T470] hub: probe of 5-1:0.0 failed with error -5 [ 170.211367][ T470] input: ц as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 170.418450][ T323] usb 5-1: USB disconnect, device number 22 [ 170.913585][ T20] uclogic 0003:256C:006D.0037: v1 buttonpad probing failed: -71 [ 170.921157][ T20] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 170.928419][ T20] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 170.936392][ T20] usb 3-1: USB disconnect, device number 20 [ 171.282455][ T6185] erofs: (device loop3): mounted with root inode @ nid 36. [ 171.290274][ T6185] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 171.299654][ T6185] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 171.308586][ T6185] erofs: (device loop3): erofs_read_inode: unsupported i_format 36 of nid 37 [ 171.812615][ T323] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 171.830088][ T470] usb 1-1: USB disconnect, device number 20 [ 171.853096][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.224375][ T323] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 172.234836][ T323] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 172.252172][ T323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 172.270823][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 172.291073][ T323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 172.594219][ T6262] serio: Serial port pts0 [ 172.693564][ T6245] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 172.701277][ T6245] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 172.712193][ T6245] F2FS-fs (loop1): invalid crc value [ 172.733198][ T6245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.769724][ T6245] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 172.776654][ T6245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.814021][ T6245] attempt to access beyond end of device [ 172.814021][ T6245] loop1: rw=10241, want=45208, limit=40427 [ 172.886173][ T6278] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 172.961342][ T323] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 172.972207][ T323] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.980002][ T323] usb 3-1: Manufacturer: ц [ 172.985187][ T323] usb 3-1: config 0 descriptor?? [ 173.026478][ T323] hub 3-1:0.0: bad descriptor, ignoring hub [ 173.036523][ T323] hub: probe of 3-1:0.0 failed with error -5 [ 173.766581][ T323] input: ц as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 173.776661][ T323] usb 3-1: USB disconnect, device number 21 [ 173.920077][ T6302] loop3: p2 < > [ 174.428108][ T24] kauditd_printk_skb: 35 callbacks suppressed [ 174.428119][ T24] audit: type=1400 audit(1718359370.795:14808): avc: denied { read } for pid=6325 comm="syz-executor.3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=43511 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 174.545451][ T6351] device pim6reg1 entered promiscuous mode [ 174.861213][ T6372] device syzkaller0 entered promiscuous mode [ 175.019718][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.039271][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.091852][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.098794][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.106891][ T6400] device bridge_slave_0 entered promiscuous mode [ 175.115824][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.123558][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.131187][ T6400] device bridge_slave_1 entered promiscuous mode [ 175.169272][ T6417] serio: Serial port pts0 [ 175.177625][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.184499][ T6400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.191597][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.198379][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.212384][ T24] audit: type=1400 audit(1718359371.515:14809): avc: denied { bind } for pid=6418 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.224922][ T634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.240981][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.248805][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.255978][ T24] audit: type=1400 audit(1718359371.515:14810): avc: denied { name_bind } for pid=6418 comm="syz-executor.3" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 175.279629][ T633] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 175.296911][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.298712][ T24] audit: type=1400 audit(1718359371.515:14811): avc: denied { node_bind } for pid=6418 comm="syz-executor.3" saddr=172.20.20.170 src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 175.312847][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.334368][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.345172][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.353116][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.359960][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.367489][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.375318][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.391736][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.406441][ T6400] device veth0_vlan entered promiscuous mode [ 175.413833][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.422609][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.429965][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.436492][ T24] audit: type=1400 audit(1718359371.718:14812): avc: denied { getopt } for pid=6433 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.443938][ T6400] device veth1_macvtap entered promiscuous mode [ 175.466332][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.493023][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.520563][ T471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.593901][ T633] usb 5-1: Using ep0 maxpacket: 8 [ 175.642417][ T634] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 175.724027][ T633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.745404][ T633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.755163][ T633] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 175.764130][ T633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.768260][ T6450] EXT4-fs (loop1): Ignoring removed orlov option [ 175.779012][ T633] usb 5-1: config 0 descriptor?? [ 175.780928][ T6450] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 175.805157][ T6450] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 175.838265][ T24] audit: type=1400 audit(1718359372.097:14813): avc: denied { map } for pid=6449 comm="syz-executor.1" path="/root/syzkaller-testdir1127757773/syzkaller.K4Rcw4/2/file1/file0/bus" dev="devtmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 175.873054][ T6450] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 175.886902][ T6450] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2204: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 175.905872][ T6400] ================================================================== [ 175.913772][ T6400] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc67/0xc80 [ 175.921579][ T6400] Read of size 4 at addr ffff88812ca6e000 by task syz-executor.1/6400 [ 175.929805][ T6400] [ 175.932159][ T6400] CPU: 0 PID: 6400 Comm: syz-executor.1 Tainted: G W 5.10.214-syzkaller-00129-gbdc88890797a #0 [ 175.943610][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 175.953512][ T6400] Call Trace: [ 175.956640][ T6400] dump_stack_lvl+0x1e2/0x24b [ 175.961146][ T6400] ? bfq_pos_tree_add_move+0x43b/0x43b [ 175.966442][ T6400] ? panic+0x80b/0x80b [ 175.970348][ T6400] ? ext4_mark_iloc_dirty+0x2c23/0x3e60 [ 175.975730][ T6400] print_address_description+0x81/0x3b0 [ 175.981107][ T6400] kasan_report+0x179/0x1c0 [ 175.985447][ T6400] ? __ext4_journal_ensure_credits+0x470/0x470 [ 175.991444][ T6400] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 175.996902][ T6400] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 176.002374][ T6400] __asan_report_load4_noabort+0x14/0x20 [ 176.007841][ T6400] ext4_xattr_delete_inode+0xc67/0xc80 [ 176.013135][ T6400] ? sb_end_intwrite+0x110/0x110 [ 176.017912][ T6400] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 176.023812][ T6400] ? __kasan_check_read+0x11/0x20 [ 176.028672][ T6400] ext4_evict_inode+0x1095/0x1730 [ 176.033534][ T6400] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 176.039260][ T6400] ? inode_io_list_del_locked+0x1ad/0x210 [ 176.044814][ T6400] ? _raw_spin_unlock+0x4d/0x70 [ 176.049595][ T6400] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 176.055314][ T6400] evict+0x2a3/0x6c0 [ 176.059048][ T6400] iput+0x632/0x7e0 [ 176.062697][ T6400] vfs_rmdir+0x271/0x3f0 [ 176.066776][ T6400] do_rmdir+0x2cf/0x5c0 [ 176.070768][ T6400] ? d_delete_notify+0xd0/0xd0 [ 176.075367][ T6400] ? strncpy_from_user+0x18e/0x2d0 [ 176.080313][ T6400] ? getname_flags+0x1fd/0x520 [ 176.084917][ T6400] __x64_sys_unlinkat+0xdf/0xf0 [ 176.089599][ T6400] do_syscall_64+0x34/0x70 [ 176.093852][ T6400] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 176.099579][ T6400] RIP: 0033:0x7f078a7d7687 [ 176.103831][ T6400] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 176.123278][ T6400] RSP: 002b:00007fff4e509ee8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 176.131526][ T6400] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f078a7d7687 [ 176.139329][ T6400] RDX: 0000000000000200 RSI: 00007fff4e50b090 RDI: 00000000ffffff9c [ 176.147139][ T6400] RBP: 00007f078a834636 R08: 0000000000000000 R09: 0000000000000000 [ 176.154950][ T6400] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff4e50b090 [ 176.162762][ T6400] R13: 00007f078a834636 R14: 00000000000283f5 R15: 0000000000000007 [ 176.170576][ T6400] [ 176.172740][ T6400] The buggy address belongs to the page: [ 176.178234][ T6400] page:ffffea0004b29b80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12ca6e [ 176.188293][ T6400] flags: 0x4000000000000000() [ 176.192797][ T6400] raw: 4000000000000000 ffffea0004a79108 ffffea0004a79148 0000000000000000 [ 176.201217][ T6400] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 176.209627][ T6400] page dumped because: kasan: bad access detected [ 176.215891][ T6400] page_owner tracks the page as freed [ 176.221095][ T6400] page last allocated via order 0, migratetype Movable, gfp_mask 0x8100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x8000000), pid 6449, ts 175827239269, free_ts 175902664250 [ 176.237515][ T6400] prep_new_page+0x166/0x180 [ 176.242008][ T6400] get_page_from_freelist+0x2d8c/0x2f30 [ 176.247389][ T6400] __alloc_pages_nodemask+0x435/0xaf0 [ 176.252596][ T6400] wp_page_copy+0x201/0x1940 [ 176.257022][ T6400] do_wp_page+0x71b/0xca0 [ 176.261189][ T6400] handle_pte_fault+0x1685/0x3e30 [ 176.266048][ T6400] __handle_speculative_fault+0x13a6/0x1ec0 [ 176.271775][ T6400] exc_page_fault+0x234/0x5b0 [ 176.276301][ T6400] asm_exc_page_fault+0x1e/0x30 [ 176.280975][ T6400] page last free stack trace: [ 176.285492][ T6400] free_unref_page_prepare+0x2ae/0x2d0 [ 176.290787][ T6400] free_unref_page_list+0x122/0xb20 [ 176.295818][ T6400] release_pages+0xea0/0xef0 [ 176.300251][ T6400] free_pages_and_swap_cache+0x8a/0xa0 [ 176.305541][ T6400] tlb_finish_mmu+0x177/0x320 [ 176.310052][ T6400] exit_mmap+0x312/0x5c0 [ 176.314130][ T6400] __mmput+0x95/0x2d0 [ 176.317948][ T6400] mmput+0x59/0x170 [ 176.321597][ T6400] do_exit+0xbda/0x2a50 [ 176.325589][ T6400] do_group_exit+0x141/0x310 [ 176.330016][ T6400] get_signal+0x10a0/0x1410 [ 176.334357][ T6400] arch_do_signal_or_restart+0xbd/0x17c0 [ 176.339824][ T6400] exit_to_user_mode_loop+0x9b/0xd0 [ 176.344858][ T6400] syscall_exit_to_user_mode+0xc5/0x1d0 [ 176.350237][ T6400] do_syscall_64+0x40/0x70 [ 176.354496][ T6400] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 176.360659][ T6400] [ 176.362826][ T6400] Memory state around the buggy address: [ 176.368292][ T6400] ffff88812ca6df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 176.376540][ T6400] ffff88812ca6df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 176.384438][ T6400] >ffff88812ca6e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 176.393907][ T6400] ^ [ 176.397978][ T6400] ffff88812ca6e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 176.405875][ T6400] ffff88812ca6e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 176.413855][ T6400] ================================================================== 2024/06/14 10:02:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: read tcp 10.128.0.228:41924->10.128.0.163:30004: read: connection reset by peer [ 176.421842][ T6400] Disabling lock debugging due to kernel taint