last executing test programs: 5.341657802s ago: executing program 1 (id=1250): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x55) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) close(r0) 5.319833344s ago: executing program 1 (id=1251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb8) mount$9p_fd(0x0, 0x0, 0x0, 0x104050, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) 4.463443537s ago: executing program 1 (id=1258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 4.346930557s ago: executing program 1 (id=1259): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="6261636b67726f756e645f67633d73796e632c6163746976655f6c6f67733d322c6e6f71756f74612c6e6f71756f74612c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d272c6a71666d743d76667376302c696e6c696e655f78617474722c00a3d783e0bf6d79bc2fa16e7f"], 0x1, 0x551a, &(0x7f0000005a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) unlink(&(0x7f0000000280)='./file1\x00') 3.684615724s ago: executing program 2 (id=1265): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nombcache}, {@jqfmt_vfsv0}, {@delalloc}, {@usrjquota}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x15) 3.576645503s ago: executing program 1 (id=1266): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) r4 = openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) write(r4, &(0x7f0000000180)="01", 0x1) close(r4) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) 2.632854854s ago: executing program 2 (id=1274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x2) 2.591495868s ago: executing program 2 (id=1276): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 2.321015911s ago: executing program 3 (id=1279): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1010000, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write(r0, &(0x7f0000000200)="99", 0x1) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x11, r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f0000000240)) 2.320344171s ago: executing program 3 (id=1280): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x3}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='9p_protocol_dump\x00', r4}, 0x10) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 2.20832316s ago: executing program 3 (id=1282): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800c36318e2000000fe594e904a1db585e62bfe", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000009c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.079823191s ago: executing program 4 (id=1285): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.074844212s ago: executing program 3 (id=1286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0x0, 0x0, 0xee01, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)='\xc3\xe8&\xc56>\x9dw\xd7I{\x84\xc9\xcc0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.000850678s ago: executing program 3 (id=1288): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000033ba1ce57029048b1"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc018480b, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000080)={0x2, 0x100, 0x0, 0x0, 0x1, 0xa}) close_range(r1, 0xffffffffffffffff, 0x0) 1.582213534s ago: executing program 0 (id=1290): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110a10000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666702c1ffe80000000000000"], 0xffdd) 1.581836554s ago: executing program 2 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@link_local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x240) 1.070849028s ago: executing program 0 (id=1292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r3, 0x6, 0x0, 0x0, 0x2000e881) 1.069753108s ago: executing program 2 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f0000000200)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000e40)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcbe2f83150503b2076b7591149e6f426564f017ebe1f8253e880de2f63aff6ea337c137b607ffb0291b1223f578ec8b5a9568984ae47e157363144ea5ae13358e354cf1c896ddf139d580411f7676b8302974b5c65aec8de25c8f41a1459baeeb26d0ad35d101ec17dcca961fbae721d31bd58956c1d97c26e2926fe3ac0ce3f7ec46265a2df602d66bf5d34cd7f4097d6875640c0cc409408cbf931447c0ec0f15f5f4c359530d99275d78e68cc061f73375ffea29733d768484", @ANYRESOCT], 0xd, 0x2aa, &(0x7f0000001300)="$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") creat(&(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f00000015c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x5037f, 0x1db) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 900.948682ms ago: executing program 2 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}], 0x1) 176.003914ms ago: executing program 0 (id=1296): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x103000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 175.250794ms ago: executing program 4 (id=1297): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000080), 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 127.402909ms ago: executing program 4 (id=1298): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 72.148983ms ago: executing program 4 (id=1299): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f0000000880)=""/120}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 71.345723ms ago: executing program 0 (id=1300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kvm_fpu\x00', r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21.321567ms ago: executing program 4 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='br_fdb_add\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 20.709107ms ago: executing program 4 (id=1302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x4000) 14.016308ms ago: executing program 0 (id=1303): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000200)={0xa000000a}) finit_module(r2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) kernel console output (not intermixed with test programs): : port 2(bridge_slave_1) entered forwarding state [ 101.854071][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.870951][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.921077][ T2757] device veth0_vlan entered promiscuous mode [ 101.941982][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.951145][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.959306][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.966695][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.978148][ T111] device bridge_slave_1 left promiscuous mode [ 101.984094][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.008191][ T111] device bridge_slave_0 left promiscuous mode [ 102.014171][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.037950][ T111] device veth1_macvtap left promiscuous mode [ 102.044366][ T111] device veth0_vlan left promiscuous mode [ 102.107686][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 102.175615][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.184160][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.193640][ T2757] device veth1_macvtap entered promiscuous mode [ 102.204227][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.212072][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.221147][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.245446][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.267123][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.310996][ T2810] netlink: 'syz.1.836': attribute type 15 has an invalid length. [ 102.357711][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 102.373551][ T5] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 102.380993][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.477779][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.481092][ T2812] EXT4-fs (loop1): Ignoring removed orlov option [ 102.493548][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.503713][ T2812] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 102.518154][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.527068][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.535793][ T25] usb 1-1: config 0 descriptor?? [ 102.541657][ T2812] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,noblock_validity,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 102.657803][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 102.787772][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.798778][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.804283][ T417] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.810171][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 102.814692][ T1798] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 102.827577][ T5] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 102.837696][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 102.837706][ T24] audit: type=1400 audit(1729030584.140:663): avc: denied { read } for pid=2835 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.852639][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.890724][ T5] usb 3-1: config 0 descriptor?? [ 103.368853][ T5] ntrig 0003:1B96:000A.0028: unknown main item tag 0x0 [ 103.380505][ T5] ntrig 0003:1B96:000A.0028: unknown main item tag 0x0 [ 103.394884][ T5] ntrig 0003:1B96:000A.0028: unknown main item tag 0x0 [ 103.408189][ T5] ntrig 0003:1B96:000A.0028: unknown main item tag 0x0 [ 103.422613][ T5] ntrig 0003:1B96:000A.0028: unknown main item tag 0x0 [ 103.443743][ T5] ntrig 0003:1B96:000A.0028: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 103.595044][ T5] usb 3-1: USB disconnect, device number 16 [ 103.726664][ T25] microsoft 0003:045E:07DA.0029: No inputs registered, leaving [ 103.735270][ T25] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 103.746695][ T25] microsoft 0003:045E:07DA.0029: no inputs found [ 103.752966][ T25] microsoft 0003:045E:07DA.0029: could not initialize ff, continuing anyway [ 103.762446][ T25] usb 1-1: USB disconnect, device number 16 [ 103.927733][ T1798] usb 4-1: Using ep0 maxpacket: 16 [ 103.967726][ T1409] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 104.028783][ T2857] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.035536][ T2857] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.042253][ T2857] EXT4-fs (loop0): Ignoring removed orlov option [ 104.047838][ T1798] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.050040][ T2857] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 104.058807][ T1798] usb 4-1: config 0 has no interfaces? [ 104.092529][ T1798] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 104.111668][ T1798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.131395][ T1798] usb 4-1: config 0 descriptor?? [ 104.237743][ T1409] usb 5-1: Using ep0 maxpacket: 32 [ 104.333191][ T24] audit: type=1400 audit(1729030585.630:664): avc: denied { rename } for pid=2864 comm="syz.0.856" name="file1" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 104.388165][ T1409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.399345][ T2870] syz.0.857[2870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.399405][ T2870] syz.0.857[2870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.400730][ T1409] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.431453][ T1409] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 104.440545][ T1409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.449432][ T1409] usb 5-1: config 0 descriptor?? [ 104.928513][ T1409] lua 0003:1E7D:2C2E.002A: global environment stack underflow [ 104.935814][ T1409] lua 0003:1E7D:2C2E.002A: item 0 0 1 11 parsing failed [ 104.943766][ T1409] lua 0003:1E7D:2C2E.002A: parse failed [ 104.949317][ T1409] lua: probe of 0003:1E7D:2C2E.002A failed with error -22 [ 105.138112][ T1798] usb 5-1: USB disconnect, device number 14 [ 105.434975][ T2882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 105.727763][ T1409] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 105.740652][ T1798] usb 4-1: USB disconnect, device number 14 [ 105.762913][ T2886] device syzkaller0 entered promiscuous mode [ 105.848563][ T2888] EXT4-fs (loop3): Invalid log block size: 3607101440 [ 105.927899][ T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 106.075398][ T2897] device pim6reg1 entered promiscuous mode [ 106.117880][ T1409] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 106.128163][ T1409] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 106.139158][ T1409] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.147677][ T1798] Bluetooth: hci1: command 0x1003 tx timeout [ 106.158019][ T539] Bluetooth: hci1: sending frame failed (-49) [ 106.163969][ T1409] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.172800][ T1409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.194426][ T2901] binder: 2900:2901 ioctl c0306201 20000140 returned -14 [ 106.222909][ T1409] usb 1-1: invalid MIDI in EP 0 [ 106.229473][ T1409] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 106.238196][ T2905] device pim6reg1 entered promiscuous mode [ 106.297783][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.308497][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.318662][ T5] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 106.327513][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.338725][ T5] usb 5-1: config 0 descriptor?? [ 106.397993][ T2909] exfat: Bad value for 'time_offset' [ 106.424264][ T307] usb 1-1: USB disconnect, device number 17 [ 106.819782][ T5] pyra 0003:1E7D:2CF6.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 106.840732][ T24] audit: type=1400 audit(1729030588.140:665): avc: denied { audit_read } for pid=2919 comm="syz.3.875" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.047772][ T5] pyra 0003:1E7D:2CF6.002B: couldn't init struct pyra_device [ 107.054963][ T5] pyra 0003:1E7D:2CF6.002B: couldn't install mouse [ 107.061806][ T5] pyra: probe of 0003:1E7D:2CF6.002B failed with error -71 [ 107.069540][ T5] usb 5-1: USB disconnect, device number 15 [ 107.088281][ T2926] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.096290][ T2926] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.106791][ T2926] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.130337][ T2926] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 107.137282][ T2926] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.163302][ T2265] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 107.163313][ T2265] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 107.170855][ T2265] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 107.178396][ T2265] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 107.185794][ T2265] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 107.193200][ T2265] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 107.200667][ T2265] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 107.441138][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.455608][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.463050][ T2945] device bridge_slave_0 entered promiscuous mode [ 107.472068][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.479143][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.486463][ T2945] device bridge_slave_1 entered promiscuous mode [ 107.529921][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.536772][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.543005][ T2942] F2FS-fs (loop1): invalid crc value [ 107.543923][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.555790][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.576021][ T2942] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.627894][ T2942] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.644338][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.654440][ T2942] overlayfs: failed to resolve './file0': -2 [ 107.668124][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.676362][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.709893][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.717760][ T2757] attempt to access beyond end of device [ 107.717760][ T2757] loop1: rw=2049, want=45104, limit=40427 [ 107.728035][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.737967][ T417] EXT4-fs error (device loop4): __ext4_get_inode_loc:4437: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 107.743282][ T2945] device veth0_vlan entered promiscuous mode [ 107.787296][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.797231][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.818227][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.838054][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.862687][ T2945] device veth1_macvtap entered promiscuous mode [ 107.879549][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.903311][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.912833][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.926295][ T7] device veth1_macvtap left promiscuous mode [ 107.937754][ T7] device veth0_vlan left promiscuous mode [ 107.960167][ T2955] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.996534][ T2955] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.004929][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.013118][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.058788][ T2030] attempt to access beyond end of device [ 108.058788][ T2030] loop3: rw=2049, want=45120, limit=40427 [ 108.174755][ T2978] netlink: 'syz.0.886': attribute type 27 has an invalid length. [ 108.196395][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.203426][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.218027][ T25] Bluetooth: hci1: command 0x1001 tx timeout [ 108.223915][ T539] Bluetooth: hci1: sending frame failed (-49) [ 108.278105][ T2976] attempt to access beyond end of device [ 108.278105][ T2976] loop3: rw=34817, want=129, limit=128 [ 108.296099][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.303089][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.311075][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.317963][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.331962][ T2980] device veth0_vlan left promiscuous mode [ 108.338239][ T2980] device veth0_vlan entered promiscuous mode [ 108.345300][ T2980] device veth1_macvtap left promiscuous mode [ 108.352174][ T2980] device veth1_macvtap entered promiscuous mode [ 108.366080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.381152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.389110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.400251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.409166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.417411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.425967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.435699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.443928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.452392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.464264][ T24] audit: type=1326 audit(1729030589.770:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.465375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.489694][ T24] audit: type=1326 audit(1729030589.790:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.518793][ T24] audit: type=1326 audit(1729030589.790:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.520461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 108.549696][ T24] audit: type=1326 audit(1729030589.790:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.554299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.589900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 108.598589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.606582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.614448][ T24] audit: type=1326 audit(1729030589.790:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.623562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.663415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.671578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.687762][ T24] audit: type=1326 audit(1729030589.790:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.692771][ T2997] device syzkaller0 entered promiscuous mode [ 108.721734][ T24] audit: type=1326 audit(1729030589.790:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.753712][ T24] audit: type=1326 audit(1729030589.790:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.777441][ T24] audit: type=1326 audit(1729030589.790:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.808444][ T24] audit: type=1326 audit(1729030589.790:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2992 comm="syz.4.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 108.831699][ T15] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 108.857023][ T3005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.898'. [ 109.087926][ T15] usb 1-1: Using ep0 maxpacket: 8 [ 109.197799][ T5] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.208039][ T15] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.278005][ T15] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 109.285485][ T15] usb 1-1: can't read configurations, error -71 [ 109.379031][ T3023] netlink: 'syz.4.905': attribute type 27 has an invalid length. [ 109.401264][ T3023] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.408304][ T3023] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.447700][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 109.472807][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.479703][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.498213][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.505073][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.523883][ T3026] device veth0_vlan left promiscuous mode [ 109.529959][ T3026] device veth0_vlan entered promiscuous mode [ 109.537285][ T3026] device veth1_macvtap left promiscuous mode [ 109.545573][ T3026] device veth1_macvtap entered promiscuous mode [ 109.553433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.561264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.568877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.577303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.587060][ T5] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 109.597160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.610455][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.622915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.631720][ T5] usb 2-1: config 0 descriptor?? [ 109.637011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.645415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.661056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.670748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.679195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.687398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 109.695565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.704487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 109.721024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.737983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.748466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.766620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.776720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.831613][ T3037] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 109.887790][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 109.975128][ T3030] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 109.985958][ T3030] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.995965][ T3030] F2FS-fs (loop3): invalid crc value [ 110.006782][ T3030] F2FS-fs (loop3): Found nat_bits in checkpoint [ 110.095081][ T3047] netlink: 'syz.4.914': attribute type 25 has an invalid length. [ 110.104613][ T3047] netlink: 'syz.4.914': attribute type 8 has an invalid length. [ 110.114192][ T3047] netlink: 44 bytes leftover after parsing attributes in process `syz.4.914'. [ 110.117748][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 110.123197][ T3047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.914'. [ 110.141525][ T3030] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 110.144462][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 110.149255][ T3030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 110.197928][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 110.298237][ T25] Bluetooth: hci1: command 0x1009 tx timeout [ 110.336636][ T2030] attempt to access beyond end of device [ 110.336636][ T2030] loop3: rw=2049, want=45120, limit=40427 [ 110.583554][ T3064] overlayfs: failed to get inode (-116) [ 110.589541][ T3064] overlayfs: failed to get inode (-116) [ 111.033911][ T3076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'. [ 111.125242][ T3078] device syzkaller0 entered promiscuous mode [ 111.268761][ T15] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 111.320426][ T3085] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.330599][ T3085] EXT4-fs (loop3): orphan cleanup on readonly fs [ 111.339323][ T3085] EXT4-fs (loop3): 1 truncate cleaned up [ 111.345090][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6242: comm kworker/u4:1: Failed to release dquot type 1 [ 111.359271][ T3085] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue [ 111.647751][ T15] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 111.737941][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 111.748520][ T5] asix: probe of 2-1:0.0 failed with error -71 [ 111.756564][ T5] usb 2-1: USB disconnect, device number 12 [ 111.762603][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.771590][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 111.787211][ T15] usb 5-1: SerialNumber: syz [ 112.480689][ T15] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 112.560264][ T3122] incfs_lookup_dentry err:-14 [ 112.564766][ T3122] incfs: Can't find or create .incomplete dir in ./file0 [ 112.572959][ T3122] incfs: mount failed -14 [ 112.660533][ T3138] serio: Serial port pts2 [ 112.779817][ T7] EXT4-fs error (device loop4): __ext4_get_inode_loc:4437: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 112.888891][ T298] usb 5-1: USB disconnect, device number 16 [ 112.919565][ T298] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 112.986985][ T3155] binder: 3146:3155 ioctl 4018620d 0 returned -22 [ 113.317705][ T1409] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 113.405619][ T3195] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 113.414557][ T3195] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 113.520478][ T3201] device syzkaller0 entered promiscuous mode [ 113.557702][ T1409] usb 1-1: Using ep0 maxpacket: 16 [ 113.677823][ T1409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.693799][ T1409] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.706938][ T1409] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.715829][ T1409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.724101][ T1409] usb 1-1: config 0 descriptor?? [ 113.748674][ T3208] netem: change failed [ 113.784583][ T3214] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 113.798455][ T3215] binder: 3211:3215 ioctl 4018620d 0 returned -22 [ 114.208781][ T1409] microsoft 0003:045E:07DA.002C: No inputs registered, leaving [ 114.231052][ T1409] microsoft 0003:045E:07DA.002C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 114.252086][ T1409] microsoft 0003:045E:07DA.002C: no inputs found [ 114.258581][ T15] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 114.267328][ T1409] microsoft 0003:045E:07DA.002C: could not initialize ff, continuing anyway [ 114.397509][ T3234] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.404944][ T3234] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.412737][ T3234] device bridge_slave_0 entered promiscuous mode [ 114.419940][ T3233] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.427135][ T3233] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.434990][ T3233] device bridge_slave_0 entered promiscuous mode [ 114.444382][ T3234] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.452102][ T3234] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.460016][ T3234] device bridge_slave_1 entered promiscuous mode [ 114.466401][ T3242] udc-core: couldn't find an available UDC or it's busy [ 114.470860][ T3233] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.473516][ T3242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.484227][ T3233] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.502265][ T3233] device bridge_slave_1 entered promiscuous mode [ 114.580259][ T3234] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.587145][ T3234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.594428][ T3234] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.601194][ T3234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.627746][ T15] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.665818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.675300][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.682977][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.705023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.713169][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.720036][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.727576][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.736390][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.743261][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.759011][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.769210][ T5] usb 1-1: USB disconnect, device number 20 [ 114.790788][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.798774][ T15] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 114.798788][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.798797][ T15] usb 5-1: Product: syz [ 114.798806][ T15] usb 5-1: Manufacturer: syz [ 114.798814][ T15] usb 5-1: SerialNumber: syz [ 114.830628][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.843351][ T9] device bridge_slave_1 left promiscuous mode [ 114.849813][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.857227][ T9] device bridge_slave_0 left promiscuous mode [ 114.863510][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.872050][ T9] device veth1_macvtap left promiscuous mode [ 114.878164][ T9] device veth0_vlan left promiscuous mode [ 114.970880][ T3234] device veth0_vlan entered promiscuous mode [ 114.977128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.978177][ T3245] syz.3.966[3245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.984195][ T3245] syz.3.966[3245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.984899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.014694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.022757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.039809][ T3234] device veth1_macvtap entered promiscuous mode [ 115.047264][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.057045][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.066483][ T298] usb 5-1: USB disconnect, device number 17 [ 115.068572][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.079190][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.079718][ T3244] syz.3.966[3244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.086218][ T3244] syz.3.966[3244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.088558][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.117009][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.123889][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.131545][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.146361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.154277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.162935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.171191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.181188][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.189387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.209259][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.217420][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.228251][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.235987][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.244995][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.252707][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.260257][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.268438][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.280382][ T3233] device veth0_vlan entered promiscuous mode [ 115.312151][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.325007][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.335310][ T3233] device veth1_macvtap entered promiscuous mode [ 115.365488][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.373144][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.382293][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.403197][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.414832][ T111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.531942][ T2945] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 115.540103][ T2945] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 115.585063][ T3275] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 115.599003][ T3269] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro, [ 115.703614][ T3260] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.760981][ T3260] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.769975][ T3260] F2FS-fs (loop1): invalid crc value [ 115.797169][ T3260] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.830650][ T3280] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.848057][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.855338][ T3280] device bridge_slave_0 entered promiscuous mode [ 115.866551][ T3260] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.873711][ T3280] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.880649][ T3260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.888092][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.913200][ T3269] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.929423][ T3280] device bridge_slave_1 entered promiscuous mode [ 115.947479][ T9] device bridge_slave_1 left promiscuous mode [ 115.954448][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.965122][ T3269] EXT4-fs (loop2): Remounting filesystem read-only [ 115.979617][ T9] device bridge_slave_0 left promiscuous mode [ 115.993175][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.001210][ T9] device veth1_macvtap left promiscuous mode [ 116.007071][ T9] device veth0_vlan left promiscuous mode [ 116.057740][ T298] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 116.151175][ T3280] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.158043][ T3280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.165155][ T3280] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.171951][ T3280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.196981][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.204701][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.212401][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.228096][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.237565][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.246572][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.253450][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.261427][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.269993][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.278152][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.284980][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.300888][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.309683][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.317481][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.325536][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.341523][ T3280] device veth0_vlan entered promiscuous mode [ 116.347856][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.356246][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.365015][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.373024][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.393251][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.402676][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.410524][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.419472][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.428774][ T298] usb 5-1: config 1 has an invalid descriptor of length 95, skipping remainder of the config [ 116.438963][ T298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.445180][ T3280] device veth1_macvtap entered promiscuous mode [ 116.464788][ T3303] device syzkaller0 entered promiscuous mode [ 116.476661][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.489012][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.497131][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.508283][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.516323][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.567918][ T298] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.576873][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.584628][ T298] usb 5-1: SerialNumber: syz [ 116.676951][ T3318] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 116.714347][ T24] kauditd_printk_skb: 217 callbacks suppressed [ 116.714359][ T24] audit: type=1400 audit(1729030598.010:892): avc: denied { write } for pid=3319 comm="syz.3.989" name="001" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.848576][ T298] usb 5-1: 0:2 : does not exist [ 116.948447][ T3324] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 116.956057][ T3324] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 116.964972][ T3324] F2FS-fs (loop0): invalid crc value [ 116.971013][ T9] device bridge_slave_1 left promiscuous mode [ 116.971826][ T3324] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.977002][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.990637][ T9] device bridge_slave_0 left promiscuous mode [ 116.996572][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.004688][ T9] device veth1_macvtap left promiscuous mode [ 117.010568][ T9] device veth0_vlan left promiscuous mode [ 117.015035][ T3324] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 117.023292][ T3324] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.087718][ T345] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 117.189988][ T3333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 117.269028][ T1798] usb 5-1: USB disconnect, device number 18 [ 117.457793][ T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.468976][ T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.478632][ T345] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 117.487572][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.496264][ T345] usb 4-1: config 0 descriptor?? [ 117.809948][ T3338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.995'. [ 117.831394][ T24] audit: type=1400 audit(1729030599.130:893): avc: denied { create } for pid=3339 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.853402][ T24] audit: type=1400 audit(1729030599.160:894): avc: denied { write } for pid=3339 comm="syz.0.996" path="socket:[34455]" dev="sockfs" ino=34455 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.877872][ T24] audit: type=1400 audit(1729030599.160:895): avc: denied { nlmsg_write } for pid=3339 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.898792][ T24] audit: type=1400 audit(1729030599.160:896): avc: denied { ioctl } for pid=3339 comm="syz.0.996" path="socket:[34455]" dev="sockfs" ino=34455 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.931458][ T24] audit: type=1400 audit(1729030599.160:897): avc: denied { nlmsg_read } for pid=3339 comm="syz.0.996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 117.968000][ T345] hid (null): bogus close delimiter [ 118.153186][ T3344] F2FS-fs (loop0): invalid crc value [ 118.174853][ T3344] F2FS-fs (loop0): Found nat_bits in checkpoint [ 118.218021][ T3344] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.233856][ T24] audit: type=1400 audit(1729030599.530:898): avc: denied { create } for pid=3343 comm="syz.0.998" name="#33" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.247257][ T3280] attempt to access beyond end of device [ 118.247257][ T3280] loop0: rw=524288, want=45072, limit=40427 [ 118.254102][ T24] audit: type=1400 audit(1729030599.530:899): avc: denied { link } for pid=3343 comm="syz.0.998" name="#33" dev="loop0" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.271386][ T3280] attempt to access beyond end of device [ 118.271386][ T3280] loop0: rw=0, want=45072, limit=40427 [ 118.286815][ T24] audit: type=1400 audit(1729030599.530:900): avc: denied { rename } for pid=3343 comm="syz.0.998" name="#34" dev="loop0" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 118.326822][ T7] attempt to access beyond end of device [ 118.326822][ T7] loop0: rw=2049, want=45120, limit=40427 [ 118.467736][ T345] usb 4-1: string descriptor 0 read error: -71 [ 118.487987][ T345] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #200: -71 [ 118.496665][ T345] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 118.504678][ T345] uclogic 0003:256C:006D.002D: failed probing pen v2 parameters: -71 [ 118.512697][ T345] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 118.520100][ T345] uclogic: probe of 0003:256C:006D.002D failed with error -71 [ 118.531653][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.538677][ T3352] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.541419][ T345] usb 4-1: USB disconnect, device number 15 [ 118.545981][ T3352] device bridge_slave_0 entered promiscuous mode [ 118.558278][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.565131][ T3352] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.572567][ T3352] device bridge_slave_1 entered promiscuous mode [ 118.603928][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.610783][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.617899][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.624667][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.650304][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.658183][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.665615][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.689220][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.697532][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.704401][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.707839][ T1798] Bluetooth: hci0: command 0x1003 tx timeout [ 118.711742][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 118.725329][ T539] Bluetooth: hci0: sending frame failed (-49) [ 118.732257][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.739120][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.746335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.755113][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.767071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.778669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.786477][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.793974][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.802512][ T3352] device veth0_vlan entered promiscuous mode [ 118.812607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.821955][ T3352] device veth1_macvtap entered promiscuous mode [ 118.833345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.853636][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.867186][ T24] audit: type=1400 audit(1729030600.170:901): avc: denied { mounton } for pid=3352 comm="syz-executor" path="/root/syzkaller.rSGwKS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 118.933534][ T3363] device batadv_slave_0 entered promiscuous mode [ 118.998177][ T3369] device veth0_to_team entered promiscuous mode [ 119.017763][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.488382][ T7] device bridge_slave_1 left promiscuous mode [ 119.495917][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.502813][ T5] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 119.514983][ T7] device bridge_slave_0 left promiscuous mode [ 119.524644][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.538703][ T7] device veth1_macvtap left promiscuous mode [ 119.547853][ T7] device veth0_vlan left promiscuous mode [ 119.741582][ T3365] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(8963) [ 119.749388][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 119.757918][ T3365] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.770404][ T3365] F2FS-fs (loop0): invalid crc value [ 119.786586][ T3365] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 119.832079][ T3365] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.839190][ T3365] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 119.867786][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 119.887781][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 119.902282][ T5] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.916935][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.926169][ T5] usb 4-1: config 0 descriptor?? [ 119.947931][ T3378] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 119.968414][ T5] hub 4-1:0.0: USB hub found [ 120.057753][ T3400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1017'. [ 120.102672][ T3402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 120.113588][ T3402] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038 (0x7fffffff) [ 120.145655][ T3407] bridge: RTM_NEWNEIGH with invalid ether address [ 120.187764][ T5] hub 4-1:0.0: 2 ports detected [ 120.330333][ T347] kernel write not supported for file /vcs (pid: 347 comm: kworker/1:7) [ 120.337781][ T1409] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 120.379948][ T3418] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 120.388637][ T3418] EXT4-fs (loop2): orphan cleanup on readonly fs [ 120.394800][ T3418] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 120.404255][ T3418] EXT4-fs (loop2): 1 truncate cleaned up [ 120.406522][ T3415] exfat: Deprecated parameter 'codepage' [ 120.411361][ T3418] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=ignore,acl,noload,noinit_itable,usrjquota="acl,nomblk_io_submit,noblock_validity,,errors=continue [ 120.416846][ T3415] exfat: Unknown parameter 'shortname' [ 120.443285][ T3418] EXT4-fs (loop2): re-mounted. Opts: (null) [ 120.697909][ T1409] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 120.709366][ T1409] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 120.720299][ T1409] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.733236][ T1409] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.743907][ T1409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.771133][ T3436] device syzkaller0 entered promiscuous mode [ 120.778263][ T307] Bluetooth: hci0: command 0x1001 tx timeout [ 120.784109][ T539] Bluetooth: hci0: sending frame failed (-49) [ 120.808682][ T1409] usb 5-1: invalid MIDI in EP 0 [ 120.813871][ T1409] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 121.010470][ T307] usb 5-1: USB disconnect, device number 19 [ 121.057784][ T448] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 121.127692][ T1409] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 121.307721][ T448] usb 3-1: Using ep0 maxpacket: 16 [ 121.367768][ T1409] usb 1-1: Using ep0 maxpacket: 16 [ 121.427836][ T448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.438553][ T448] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.451244][ T448] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.460084][ T448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.468889][ T448] usb 3-1: config 0 descriptor?? [ 121.487909][ T1409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.498693][ T1409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.508844][ T1409] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.521498][ T1409] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.530794][ T1409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.543965][ T1409] usb 1-1: config 0 descriptor?? [ 121.965897][ T3459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1036'. [ 121.975326][ T3459] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1036'. [ 122.468507][ T1409] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 122.476888][ T1409] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002E/input/input28 [ 122.489836][ T1409] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 122.577721][ T448] usbhid 3-1:0.0: can't add hid device: -71 [ 122.583595][ T448] usbhid: probe of 3-1:0.0 failed with error -71 [ 122.590889][ T448] usb 3-1: USB disconnect, device number 17 [ 122.670674][ T307] usb 1-1: USB disconnect, device number 21 [ 122.739046][ T1798] usb 4-1: USB disconnect, device number 16 [ 122.757742][ T2327] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 122.857919][ T347] Bluetooth: hci0: command 0x1009 tx timeout [ 123.017844][ T1409] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 123.118647][ T3477] EXT4-fs (loop2): Ignoring removed orlov option [ 123.124999][ T3477] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 123.124999][ T3477] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 123.124999][ T3477] [ 123.142806][ T3477] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.158832][ T3477] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,noacl,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,delalloc,quota,,errors=continue [ 123.238967][ T3484] device pim6reg1 entered promiscuous mode [ 123.271184][ T1409] usb 5-1: Using ep0 maxpacket: 32 [ 123.369106][ T3482] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 123.376806][ T3482] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 123.386463][ T3482] F2FS-fs (loop0): invalid crc value [ 123.414273][ T3482] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.472367][ T3482] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.479298][ T3482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.520504][ T3482] attempt to access beyond end of device [ 123.520504][ T3482] loop0: rw=10241, want=45112, limit=40427 [ 123.546725][ T9] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 123.565787][ T9] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 123.574749][ T1409] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 123.593948][ T1409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.613390][ T1409] usb 5-1: Product: syz [ 123.627606][ T1409] usb 5-1: Manufacturer: syz [ 123.627695][ T307] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.635449][ T1409] usb 5-1: SerialNumber: syz [ 123.652180][ T1409] usb 5-1: config 0 descriptor?? [ 123.810388][ T3500] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 123.817342][ T3500] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.828786][ T3500] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2210: inode #15: comm syz.0.1048: corrupted in-inode xattr [ 123.840886][ T3500] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1048: couldn't read orphan inode 15 (err -117) [ 123.853336][ T3500] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue [ 123.877681][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 123.881629][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 123.881640][ T24] audit: type=1400 audit(1729030605.180:921): avc: denied { setattr } for pid=3499 comm="syz.0.1048" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.997737][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 124.017785][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 124.037686][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 124.046541][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.056880][ T307] usb 3-1: config 0 descriptor?? [ 124.077787][ T3491] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.098277][ T307] hub 3-1:0.0: USB hub found [ 124.109980][ T24] audit: type=1326 audit(1729030605.410:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3511 comm="syz.0.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc04933ff9 code=0x0 [ 124.317790][ T307] hub 3-1:0.0: 2 ports detected [ 124.330668][ T24] audit: type=1400 audit(1729030605.630:923): avc: denied { create } for pid=3514 comm="syz.3.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 124.359081][ T1409] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 124.377975][ T24] audit: type=1400 audit(1729030605.670:924): avc: denied { search } for pid=133 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.409273][ T24] audit: type=1400 audit(1729030605.710:925): avc: denied { read } for pid=3522 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.435439][ T24] audit: type=1400 audit(1729030605.730:926): avc: denied { open } for pid=3522 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.468207][ T24] audit: type=1400 audit(1729030605.730:927): avc: denied { getattr } for pid=3522 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=292 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.521757][ T24] audit: type=1400 audit(1729030605.820:928): avc: denied { write } for pid=3521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=291 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.545834][ T24] audit: type=1400 audit(1729030605.820:929): avc: denied { add_name } for pid=3521 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.577333][ T2327] usb 5-1: USB disconnect, device number 20 [ 124.585722][ T133] net eth1: rx_urb submit failed: -19 [ 124.598089][ T24] audit: type=1400 audit(1729030605.860:930): avc: denied { remove_name } for pid=3533 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=7945 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.672898][ T3560] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1059'. [ 126.384202][ T307] usb 3-1: USB disconnect, device number 18 [ 126.397812][ T1798] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 126.567703][ T2327] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.772336][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.779343][ T3582] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.789427][ T3582] device bridge_slave_0 entered promiscuous mode [ 126.796285][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.803507][ T3582] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.810391][ T2327] usb 4-1: Using ep0 maxpacket: 16 [ 126.811612][ T3582] device bridge_slave_1 entered promiscuous mode [ 126.849325][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.856200][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.863425][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.870194][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.890740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 126.898390][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.905603][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.923455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 126.931363][ T2327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.931564][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.941622][ T2327] usb 4-1: config 0 has no interfaces? [ 126.948036][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.960720][ T2327] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 126.969765][ T2327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.978693][ T2327] usb 4-1: config 0 descriptor?? [ 126.981057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 126.991659][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.998531][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.005927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.017061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.032914][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.045541][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 127.053396][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 127.060894][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 127.070733][ T3582] device veth0_vlan entered promiscuous mode [ 127.110569][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.120416][ T3582] device veth1_macvtap entered promiscuous mode [ 127.132431][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 127.142262][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 127.187746][ T347] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 127.233195][ T307] usb 4-1: USB disconnect, device number 17 [ 127.258515][ T7] device bridge_slave_1 left promiscuous mode [ 127.264526][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.271945][ T7] device bridge_slave_0 left promiscuous mode [ 127.278119][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.285662][ T7] device veth1_macvtap left promiscuous mode [ 127.291533][ T7] device veth0_vlan left promiscuous mode [ 127.459296][ T3608] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue [ 127.470598][ T3608] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 127.567783][ T347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.578731][ T347] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.591920][ T347] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.601214][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.609701][ T347] usb 3-1: config 0 descriptor?? [ 127.997710][ T5] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 128.027853][ T2327] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 128.088636][ T347] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 128.095905][ T347] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 128.103132][ T347] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 128.110358][ T347] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 128.117475][ T347] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 128.124691][ T347] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 128.131883][ T347] plantronics 0003:047F:FFFF.002F: unbalanced collection at end of report description [ 128.141482][ T347] plantronics 0003:047F:FFFF.002F: parse failed [ 128.147708][ T347] plantronics: probe of 0003:047F:FFFF.002F failed with error -22 [ 128.241287][ T3628] device pim6reg1 entered promiscuous mode [ 128.292109][ T1409] usb 3-1: USB disconnect, device number 19 [ 128.357744][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.368497][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.378025][ T5] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.386803][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.394721][ T2327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.405780][ T2327] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.414930][ T5] usb 1-1: config 0 descriptor?? [ 128.423371][ T2327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.434914][ T2327] usb 4-1: config 0 descriptor?? [ 128.804741][ T3639] device bridge1 entered promiscuous mode [ 128.898066][ T5] hid (null): bogus close delimiter [ 128.918282][ T2327] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor [ 128.927589][ T2327] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0031/input/input29 [ 129.091325][ T2327] keytouch 0003:0926:3333.0031: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 129.106341][ T5] usb 1-1: language id specifier not provided by device, defaulting to English [ 129.180040][ T3655] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 129.434969][ T3667] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 129.458034][ T3667] kvm: pic: non byte read [ 129.462942][ T3667] kvm: pic: level sensitive irq not supported [ 129.463071][ T3667] kvm: pic: non byte read [ 129.473704][ T3667] kvm: pic: level sensitive irq not supported [ 129.473747][ T3667] kvm: pic: non byte read [ 129.664444][ T1409] usb 4-1: USB disconnect, device number 18 [ 131.670293][ T3688] sched: RT throttling activated [ 131.698104][ T5] uclogic 0003:256C:006D.0030: v1 buttonpad probing failed: -71 [ 131.705591][ T5] uclogic 0003:256C:006D.0030: failed probing parameters: -71 [ 133.227833][ T5] uclogic: probe of 0003:256C:006D.0030 failed with error -71 [ 133.277788][ T5] usb 1-1: USB disconnect, device number 22 [ 134.987677][ T5] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 135.067701][ T2327] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 135.227690][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 135.347816][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.358757][ T5] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.371386][ T5] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 135.380216][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.388805][ T5] usb 2-1: config 0 descriptor?? [ 135.437766][ T2327] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 135.527782][ T2327] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.536644][ T2327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 135.544745][ T2327] usb 1-1: SerialNumber: syz [ 135.878830][ T5] microsoft 0003:045E:07DA.0032: No inputs registered, leaving [ 135.891611][ T5] microsoft 0003:045E:07DA.0032: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 135.903235][ T5] microsoft 0003:045E:07DA.0032: no inputs found [ 135.909614][ T5] microsoft 0003:045E:07DA.0032: could not initialize ff, continuing anyway [ 136.248494][ T2327] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 136.349509][ T5] usb 2-1: USB disconnect, device number 13 [ 136.649511][ T3753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.660021][ T345] usb 1-1: USB disconnect, device number 23 [ 136.661075][ T3753] EXT4-fs (loop2): 1 truncate cleaned up [ 136.671575][ T3753] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 136.730884][ T345] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 136.797759][ T298] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 137.057701][ T298] usb 5-1: Using ep0 maxpacket: 16 [ 137.097725][ T5] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 137.187709][ T298] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.247713][ T298] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 137.255639][ T298] usb 5-1: can't read configurations, error -71 [ 137.289206][ T3799] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 137.303138][ T3799] ext4 filesystem being mounted at /34/bus supports timestamps until 2038 (0x7fffffff) [ 137.321123][ T24] audit: type=1400 audit(1729030618.620:931): avc: denied { rename } for pid=3798 comm="syz.0.1123" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 137.343659][ T24] audit: type=1400 audit(1729030618.620:932): avc: denied { unlink } for pid=3798 comm="syz.0.1123" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 137.415389][ T3804] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 137.424287][ T3804] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 137.461124][ T5] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.461163][ T3804] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 4: comm syz.0.1124: lblock 0 mapped to illegal pblock 4 (length 1) [ 137.472194][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.486220][ T3804] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz.0.1124: error -117 reading directory block [ 137.496329][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.510169][ T3804] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm syz.0.1124: Invalid inode table block 35 in block_group 0 [ 137.520166][ T5] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.532345][ T3804] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5897: Corrupt filesystem [ 137.545266][ T5] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 137.554225][ T3804] EXT4-fs error (device loop0): ext4_dirty_inode:6107: inode #2: comm syz.0.1124: mark_inode_dirty error [ 137.563215][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.585483][ T5] usb 3-1: config 0 descriptor?? [ 137.589312][ T3352] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1) [ 137.604420][ T3352] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 137.620635][ T7] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm kworker/u4:0: Invalid inode table block 35 in block_group 0 [ 137.633888][ T7] EXT4-fs error (device loop0): __ext4_get_inode_loc:4437: comm kworker/u4:0: Invalid inode table block 35 in block_group 0 [ 137.712129][ T3810] device pim6reg1 entered promiscuous mode [ 137.726461][ T24] audit: type=1400 audit(1729030619.020:933): avc: denied { append } for pid=3811 comm="syz.4.1128" name="001" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 137.826405][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.833771][ T3818] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.841394][ T3818] device bridge_slave_0 entered promiscuous mode [ 137.856116][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.863205][ T3818] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.870391][ T3818] device bridge_slave_1 entered promiscuous mode [ 137.904696][ T3818] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.911575][ T3818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.918671][ T3818] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.925427][ T3818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.945053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.952526][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.959680][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.969273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.977215][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.984077][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.994450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.002502][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.009334][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.021777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.032434][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.045452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.057882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.065674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.073127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.083247][ T3818] device veth0_vlan entered promiscuous mode [ 138.088530][ T5] hid-rmi 0003:17EF:6085.0033: unknown main item tag 0x0 [ 138.095407][ T3818] device veth1_macvtap entered promiscuous mode [ 138.098793][ T5] hid-rmi 0003:17EF:6085.0033: unknown main item tag 0x0 [ 138.109419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.109631][ T5] hid-rmi 0003:17EF:6085.0033: unknown main item tag 0x0 [ 138.118459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 138.127746][ T5] hid-rmi 0003:17EF:6085.0033: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 138.132419][ T345] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 138.151268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.188546][ T3828] binder: 3827:3828 ioctl c0306201 20000140 returned -14 [ 138.228489][ T3830] EXT4-fs (loop0): Ignoring removed orlov option [ 138.234765][ T3830] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.247353][ T3830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e01c, mo2=0002] [ 138.255152][ T3830] System zones: 1-12 [ 138.259548][ T3830] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1134: casefold flag without casefold feature [ 138.272581][ T3830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1134: missing EA_INODE flag [ 138.284487][ T3830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1134: error while reading EA inode 12 err=-117 [ 138.284685][ T7] device bridge_slave_1 left promiscuous mode [ 138.296816][ T3830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1134: missing EA_INODE flag [ 138.314212][ T3830] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1134: error while reading EA inode 12 err=-117 [ 138.326678][ T3830] EXT4-fs (loop0): 1 orphan inode deleted [ 138.332455][ T3830] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,abort,debug_want_extra_isize=0x000000000000005c,debug,noinit_itable,errors=continue,usrjquota=,orlov,i_version,resgid=0x0000000000000000,,errors=continue [ 138.354607][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.360182][ T3830] EXT4-fs error (device loop0): ext4_add_entry:2440: inode #2: comm syz.0.1134: Directory hole found for htree leaf block 0 [ 138.375526][ T3830] EXT4-fs error (device loop0): ext4_add_entry:2440: inode #2: comm syz.0.1134: Directory hole found for htree leaf block 0 [ 138.390767][ T7] device bridge_slave_0 left promiscuous mode [ 138.396709][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.404576][ T7] device veth1_macvtap left promiscuous mode [ 138.410631][ T5] usb 3-1: USB disconnect, device number 20 [ 138.411879][ T7] device veth0_vlan left promiscuous mode [ 138.440233][ T24] audit: type=1326 audit(1729030619.730:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51581c9ff9 code=0x7ffc0000 [ 138.466002][ T24] audit: type=1326 audit(1729030619.740:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51581c8990 code=0x7ffc0000 [ 138.491815][ T24] audit: type=1326 audit(1729030619.740:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51581c9ff9 code=0x7ffc0000 [ 138.515413][ T24] audit: type=1326 audit(1729030619.740:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f51581c9ff9 code=0x7ffc0000 [ 138.540358][ T24] audit: type=1326 audit(1729030619.740:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51581c9ff9 code=0x7ffc0000 [ 138.564047][ T24] audit: type=1326 audit(1729030619.740:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f51581c9ff9 code=0x7ffc0000 [ 138.588815][ T345] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26 [ 138.608928][ T24] audit: type=1326 audit(1729030619.740:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.0.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51581c9ff9 code=0x7ffc0000 [ 138.633478][ T3841] 9p: Unknown uid 18446744073709551615 [ 138.697744][ T345] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.717792][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.732293][ T345] usb 2-1: SerialNumber: syz [ 138.786393][ T3845] attempt to access beyond end of device [ 138.786393][ T3845] loop0: rw=0, want=248, limit=128 [ 138.883225][ T7] attempt to access beyond end of device [ 138.883225][ T7] loop0: rw=1, want=1041, limit=128 [ 138.957810][ T3851] capability: warning: `syz.2.1141' uses 32-bit capabilities (legacy support in use) [ 139.036819][ T3861] netlink: 'syz.0.1145': attribute type 4 has an invalid length. [ 139.044893][ T3861] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1145'. [ 139.100421][ T3864] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 139.140589][ T3818] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 139.150511][ T3818] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 139.308365][ T3872] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.315221][ T3872] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.322633][ T3872] device bridge_slave_0 entered promiscuous mode [ 139.330915][ T3872] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.337969][ T3872] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.345731][ T3872] device bridge_slave_1 entered promiscuous mode [ 139.400805][ T3872] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.407691][ T3872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.414751][ T3872] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.421560][ T3872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.449342][ T345] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 139.449431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.468902][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.477966][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.492844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.501369][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.508231][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.518967][ T3885] device syzkaller0 entered promiscuous mode [ 139.526650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.535046][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.541936][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.547810][ T1409] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 139.559982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.567758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.583862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.595593][ T3872] device veth0_vlan entered promiscuous mode [ 139.602389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.610940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.618411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.635819][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.646915][ T3872] device veth1_macvtap entered promiscuous mode [ 139.663428][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.745995][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.755321][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.960934][ T1798] usb 2-1: USB disconnect, device number 14 [ 140.014514][ T1409] usb 4-1: Using ep0 maxpacket: 16 [ 140.019784][ T1798] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 140.138395][ T1409] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 140.147458][ T1409] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 140.162183][ T1409] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 140.176343][ T1409] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 140.186012][ T1409] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 140.196574][ T1409] usb 4-1: config 1 interface 0 has no altsetting 0 [ 140.203169][ T1409] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 140.218227][ T1409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.268443][ T1409] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 140.484791][ T7] device bridge_slave_1 left promiscuous mode [ 140.493557][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.500646][ T1409] scsi host1: usb-storage 4-1:1.0 [ 140.508332][ T7] device bridge_slave_0 left promiscuous mode [ 140.514400][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.549465][ T7] device veth1_macvtap left promiscuous mode [ 140.555295][ T7] device veth0_vlan left promiscuous mode [ 140.577031][ T417] Bluetooth: hci0: Frame reassembly failed (-84) [ 140.643379][ T3954] syz.4.1161[3954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.643436][ T3954] syz.4.1161[3954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.697617][ T1409] usb 4-1: USB disconnect, device number 19 [ 140.723591][ T3948] device pim6reg1 entered promiscuous mode [ 140.951677][ T3961] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.1164: iget: bad extended attribute block 128 [ 140.957697][ T1798] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 140.964342][ T3961] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1164: couldn't read orphan inode 16 (err -117) [ 140.983377][ T3961] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 140.992386][ T3961] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 141.221176][ T1798] usb 5-1: Using ep0 maxpacket: 8 [ 141.297745][ T1409] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 141.308310][ T3968] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.327890][ T3968] kvm: pic: non byte read [ 141.332241][ T3968] kvm: pic: level sensitive irq not supported [ 141.332282][ T3968] kvm: pic: non byte read [ 141.343109][ T3968] kvm: pic: level sensitive irq not supported [ 141.343153][ T3968] kvm: pic: non byte read [ 141.347797][ T1798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.365877][ T1798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.375823][ T1798] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 141.384968][ T1798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.405520][ T1798] usb 5-1: config 0 descriptor?? [ 141.907809][ T1409] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.918729][ T1409] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 141.928572][ T1798] kye 0003:0458:4018.0034: item fetching failed at offset 5/8 [ 141.929847][ T1409] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 141.945559][ T1798] kye 0003:0458:4018.0034: parse failed [ 141.953367][ T1798] kye: probe of 0003:0458:4018.0034 failed with error -22 [ 142.135948][ T1798] usb 5-1: USB disconnect, device number 23 [ 142.167754][ T1409] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.176659][ T1409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.184917][ T1409] usb 2-1: Product: syz [ 142.188944][ T1409] usb 2-1: Manufacturer: syz [ 142.193315][ T1409] usb 2-1: SerialNumber: syz [ 142.209210][ T3979] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.220884][ T3979] EXT4-fs (loop0): 1 truncate cleaned up [ 142.226478][ T3979] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,minixdf,journal_dev=0x0000000000000004,quota,,errors=continue [ 142.473388][ T3961] EXT4-fs error (device loop1): ext4_lookup:1828: inode #16: comm syz.1.1164: iget: bad extended attribute block 128 [ 142.547727][ T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 142.597761][ T1409] cdc_ncm 2-1:1.0: bind() failure [ 142.603247][ T1409] cdc_ncm 2-1:1.1: bind() failure [ 142.613289][ T1409] usb 2-1: USB disconnect, device number 15 [ 142.621754][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 142.627574][ T539] Bluetooth: hci0: sending frame failed (-49) [ 142.707138][ T3990] binder: 3989:3990 ioctl c0306201 20000380 returned -14 [ 142.787692][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 142.907724][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.917237][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.077930][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 143.093306][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.101194][ T25] usb 1-1: Product: syz [ 143.105140][ T25] usb 1-1: Manufacturer: syz [ 143.109600][ T25] usb 1-1: SerialNumber: syz [ 143.379191][ T25] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 143.581479][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 143.581493][ T24] audit: type=1400 audit(1729030624.880:971): avc: denied { read write } for pid=3983 comm="syz.0.1171" name="lp0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 143.614405][ T5] usb 1-1: USB disconnect, device number 24 [ 143.628238][ T5] usblp0: removed [ 143.644863][ T24] audit: type=1400 audit(1729030624.910:972): avc: denied { open } for pid=3983 comm="syz.0.1171" path="/dev/usb/lp0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 143.711917][ T4013] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 143.727733][ T4013] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.737679][ T4013] F2FS-fs (loop1): invalid crc value [ 143.756458][ T4013] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.803606][ T4013] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.813477][ T4013] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.843815][ T24] audit: type=1400 audit(1729030625.140:973): avc: denied { create } for pid=4015 comm="syz.4.1183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 144.059311][ T4028] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue [ 144.256343][ T4043] binder: 4037:4043 ioctl 4018620d 0 returned -22 [ 144.550973][ T4035] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 144.562302][ T4035] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 144.608594][ T4035] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.657906][ T4035] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 144.664761][ T4035] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 144.697692][ T1409] Bluetooth: hci0: command 0x1001 tx timeout [ 144.703701][ T539] Bluetooth: hci0: sending frame failed (-49) [ 144.717891][ T4035] F2FS-fs (loop0): Inconsistent error blkaddr:5663, sit bitmap:0 [ 144.750366][ T4035] CPU: 0 PID: 4035 Comm: syz.0.1188 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 144.753252][ T4047] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 144.760074][ T4035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.760092][ T4035] Call Trace: [ 144.760125][ T4035] dump_stack_lvl+0x1e2/0x24b [ 144.760139][ T4035] ? __bpf_trace_f2fs_fiemap+0x60/0x60 [ 144.760158][ T4035] ? bfq_pos_tree_add_move+0x43b/0x43b [ 144.773450][ T4047] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 144.777531][ T4035] ? set_page_dirty+0x196/0x300 [ 144.808605][ T4035] ? f2fs_write_node_pages+0x900/0x900 [ 144.813894][ T4035] dump_stack+0x15/0x17 [ 144.817884][ T4035] f2fs_is_valid_blkaddr+0xc44/0x1370 [ 144.823098][ T4035] f2fs_truncate_data_blocks_range+0x659/0xeb0 [ 144.829089][ T4035] f2fs_do_truncate_blocks+0x5cf/0xb80 [ 144.834378][ T4035] ? addrs_per_block+0x120/0x120 [ 144.839154][ T4035] ? f2fs_mark_inode_dirty_sync+0x10d/0x140 [ 144.844878][ T4035] f2fs_truncate_blocks+0x114/0x310 [ 144.849966][ T4035] do_convert_inline_dir+0xb0c/0x1de0 [ 144.855126][ T4035] ? page_cache_prev_miss+0x410/0x410 [ 144.860329][ T4035] ? f2fs_try_convert_inline_dir+0x420/0x420 [ 144.866148][ T4035] ? find_next_bit+0xc7/0x100 [ 144.870653][ T4035] ? f2fs_room_for_filename+0xa8/0xc0 [ 144.875861][ T4035] f2fs_add_inline_entry+0x3ef/0x770 [ 144.880982][ T4035] ? do_convert_inline_dir+0x1de0/0x1de0 [ 144.886453][ T4035] ? down_read_trylock+0x179/0x1d0 [ 144.891400][ T4035] ? __init_rwsem+0x1c0/0x1c0 [ 144.895915][ T4035] ? f2fs_setup_filename+0x141/0x360 [ 144.901035][ T4035] ? f2fs_init_casefolded_name+0x7d/0x460 [ 144.906588][ T4035] f2fs_add_dentry+0x1c8/0x340 [ 144.911188][ T4035] ? f2fs_add_regular_entry+0xb10/0xb10 [ 144.916578][ T4035] ? __kasan_check_write+0x14/0x20 [ 144.921529][ T4035] ? trace_f2fs_new_inode+0x20/0x140 [ 144.926640][ T4035] f2fs_do_add_link+0x29b/0x400 [ 144.931325][ T4035] ? f2fs_add_dentry+0x340/0x340 [ 144.936100][ T4035] ? __init_rwsem+0x1c0/0x1c0 [ 144.940613][ T4035] f2fs_mkdir+0x40e/0x6a0 [ 144.944783][ T4035] ? f2fs_symlink+0x9a0/0x9a0 [ 144.949298][ T4035] ? selinux_inode_mkdir+0x22/0x30 [ 144.954240][ T4035] ? security_inode_mkdir+0xbc/0x100 [ 144.959364][ T4035] vfs_mkdir+0x4cf/0x6c0 [ 144.963437][ T4035] do_mkdirat+0x1a6/0x2c0 [ 144.967621][ T4035] ? do_mknodat+0x450/0x450 [ 144.971949][ T4035] ? fpu__clear_all+0x20/0x20 [ 144.976458][ T4035] ? __kasan_check_read+0x11/0x20 [ 144.981326][ T4035] __x64_sys_mkdirat+0x7b/0x90 [ 144.985939][ T4035] do_syscall_64+0x34/0x70 [ 144.990177][ T4035] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 144.995900][ T4035] RIP: 0033:0x7f639642aff9 [ 144.997727][ T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 145.000237][ T4035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.027756][ T4035] RSP: 002b:00007f63950a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 145.036012][ T4035] RAX: ffffffffffffffda RBX: 00007f63965e2f80 RCX: 00007f639642aff9 [ 145.043803][ T4035] RDX: 0000000000000041 RSI: 00000000200005c0 RDI: ffffffffffffff9c [ 145.051627][ T4035] RBP: 00007f639649d296 R08: 0000000000000000 R09: 0000000000000000 [ 145.059428][ T4035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.067242][ T4035] R13: 0000000000000000 R14: 00007f63965e2f80 R15: 00007ffdaad3a748 [ 145.088834][ T4047] F2FS-fs (loop1): Found nat_bits in checkpoint [ 145.168539][ T4047] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 145.175533][ T4047] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 145.285323][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1196'. [ 145.342697][ T24] audit: type=1400 audit(1729030626.640:974): avc: denied { read write } for pid=4073 comm="syz.0.1198" name="uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.369471][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.376715][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.376777][ T24] audit: type=1400 audit(1729030626.670:975): avc: denied { open } for pid=4073 comm="syz.0.1198" path="/dev/uhid" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 145.384272][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.414488][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.421870][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.427816][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.429321][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.440006][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.447132][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.456668][ T25] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 145.464078][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.472714][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.480380][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.495632][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.496727][ T25] usb 4-1: config 0 descriptor?? [ 145.503702][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.515356][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.523843][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.531134][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.538355][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.545460][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.552701][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.559914][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.567068][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.574308][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.581802][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.589055][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.596198][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.603433][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.610656][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.617839][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.625015][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.632277][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.639521][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.646639][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.653889][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.661078][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.668472][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.675656][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.682915][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.690079][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.697286][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.704502][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.711693][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.718922][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.726088][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.733325][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.740507][ T1409] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 145.748570][ T1409] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.857736][ T298] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 145.998480][ T25] petalynx 0003:18B1:0037.0036: collection stack underflow [ 146.005520][ T25] petalynx 0003:18B1:0037.0036: item 0 1 0 12 parsing failed [ 146.012898][ T25] petalynx 0003:18B1:0037.0036: parse failed [ 146.018734][ T25] petalynx: probe of 0003:18B1:0037.0036 failed with error -22 [ 146.097812][ T298] usb 5-1: Using ep0 maxpacket: 8 [ 146.220536][ T307] usb 4-1: USB disconnect, device number 20 [ 146.227811][ T298] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 146.236296][ T298] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 146.246276][ T298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.427762][ T298] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.436630][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.444449][ T298] usb 5-1: Product: syz [ 146.448592][ T298] usb 5-1: Manufacturer: syz [ 146.452980][ T298] usb 5-1: SerialNumber: syz [ 146.777786][ T1409] Bluetooth: hci0: command 0x1009 tx timeout [ 146.797866][ T298] usb 5-1: 0:2 : does not exist [ 146.808961][ T298] usb 5-1: USB disconnect, device number 24 [ 146.860209][ T4094] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 147.127702][ T307] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.407682][ T307] usb 4-1: Using ep0 maxpacket: 32 [ 147.707734][ T307] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 147.716632][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.724419][ T307] usb 4-1: Product: syz [ 147.728487][ T307] usb 4-1: Manufacturer: syz [ 147.732790][ T307] usb 4-1: SerialNumber: syz [ 147.738210][ T307] usb 4-1: config 0 descriptor?? [ 147.977076][ T4114] cgroup: none used incorrectly [ 148.437724][ T307] (unnamed net_device) (uninitialized): Assigned a random MAC address: ca:6e:23:75:cf:da [ 148.449947][ T307] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 148.478332][ T307] usb 4-1: USB disconnect, device number 21 [ 148.821496][ T4139] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 148.883916][ T4139] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 149.584888][ T4179] ------------[ cut here ]------------ [ 149.590221][ T4179] Too BIG xdp->frame_sz = 8192 [ 149.595051][ T4179] WARNING: CPU: 1 PID: 4179 at net/core/filter.c:3894 bpf_xdp_adjust_tail+0x1ae/0x1c0 [ 149.604451][ T4179] Modules linked in: [ 149.608169][ T4179] CPU: 1 PID: 4179 Comm: syz.1.1222 Not tainted 5.10.226-syzkaller-00709-ge5e5644ea27f #0 [ 149.617920][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.627804][ T4179] RIP: 0010:bpf_xdp_adjust_tail+0x1ae/0x1c0 [ 149.633494][ T4179] Code: 89 d6 e8 45 8f da fd 4c 89 f2 e9 ca fe ff ff e8 78 f5 9c fd c6 05 48 19 13 03 01 48 c7 c7 e0 02 8f 85 44 89 f6 e8 62 7b 70 fd <0f> 0b 48 c7 c0 ea ff ff ff e9 67 ff ff ff 0f 1f 40 00 55 48 89 e5 [ 149.652999][ T4179] RSP: 0018:ffffc90000edf1f8 EFLAGS: 00010246 [ 149.658851][ T4179] RAX: a8fab84c78bd8100 RBX: ffffc90000edf3a0 RCX: 0000000000040000 [ 149.666651][ T4179] RDX: ffffc900044d5000 RSI: 000000000000035c RDI: 000000000000035d [ 149.674472][ T4179] RBP: ffffc90000edf238 R08: ffffffff81522098 R09: ffffed103ee24e8b [ 149.682293][ T4179] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000edf3a8 [ 149.690088][ T4179] R13: ffff888111a08e61 R14: 0000000000002000 R15: 1ffff920001dbe75 [ 149.697910][ T4179] FS: 00007f81a74056c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 149.706663][ T4179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.713120][ T4179] CR2: 0000000020003000 CR3: 000000010a70a000 CR4: 00000000003506a0 [ 149.721021][ T4179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.729308][ T4179] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.737070][ T4179] Call Trace: [ 149.740252][ T4179] ? show_regs+0x58/0x60 [ 149.744281][ T4179] ? __warn+0x160/0x2f0 [ 149.748297][ T4179] ? bpf_xdp_adjust_tail+0x1ae/0x1c0 [ 149.753398][ T4179] ? report_bug+0x3d9/0x5b0 [ 149.757754][ T4179] ? bpf_xdp_adjust_tail+0x1ae/0x1c0 [ 149.762855][ T4179] ? handle_bug+0x41/0x70 [ 149.767017][ T4179] ? exc_invalid_op+0x1b/0x50 [ 149.771557][ T4179] ? asm_exc_invalid_op+0x12/0x20 [ 149.776398][ T4179] ? wake_up_klogd+0xb8/0xf0 [ 149.780836][ T4179] ? bpf_xdp_adjust_tail+0x1ae/0x1c0 [ 149.785932][ T4179] ? bpf_xdp_adjust_tail+0x1ae/0x1c0 [ 149.791072][ T4179] ? 0xffffffffa0038720 [ 149.795045][ T4179] bpf_prog_5f065984e7f319a0+0x15/0x8e0 [ 149.800439][ T4179] bpf_dispatcher_xdp_func+0x20/0x30 [ 149.805548][ T4179] do_xdp_generic+0x807/0x1560 [ 149.810167][ T4179] ? mutex_unlock+0x1c/0x40 [ 149.814506][ T4179] ? generic_xdp_tx+0x490/0x490 [ 149.819204][ T4179] ? __kasan_slab_alloc+0xc3/0xe0 [ 149.824042][ T4179] ? __kasan_slab_alloc+0xb1/0xe0 [ 149.828927][ T4179] ? slab_post_alloc_hook+0x61/0x2f0 [ 149.834021][ T4179] ? kmem_cache_alloc+0x168/0x2e0 [ 149.838884][ T4179] ? __alloc_skb+0x80/0x510 [ 149.843204][ T4179] __netif_receive_skb_core+0x1705/0x3760 [ 149.848783][ T4179] ? __skb_flow_get_ports+0x2e8/0x370 [ 149.853982][ T4179] ? set_rps_cpu+0x5e0/0x5e0 [ 149.858418][ T4179] ? slab_post_alloc_hook+0x80/0x2f0 [ 149.863526][ T4179] __netif_receive_skb+0x11c/0x530 [ 149.868492][ T4179] ? alloc_skb_with_frags+0xa1/0x570 [ 149.873590][ T4179] ? __kmalloc_track_caller+0x184/0x320 [ 149.879006][ T4179] ? deliver_ptype_list_skb+0x3c0/0x3c0 [ 149.884352][ T4179] ? __alloc_skb+0x37c/0x510 [ 149.888814][ T4179] ? alloc_skb_with_frags+0x4e5/0x570 [ 149.893992][ T4179] netif_receive_skb+0xb0/0x480 [ 149.898706][ T4179] ? __kasan_check_write+0x14/0x20 [ 149.903623][ T4179] ? _copy_from_iter+0x3e6/0xd10 [ 149.908410][ T4179] ? netif_receive_skb_core+0x210/0x210 [ 149.913773][ T4179] ? sock_alloc_send_pskb+0x936/0xa50 [ 149.919008][ T4179] tun_rx_batched+0x6d9/0x870 [ 149.923487][ T4179] ? eth_type_trans+0x2e4/0x620 [ 149.928202][ T4179] ? local_bh_enable+0x30/0x30 [ 149.932794][ T4179] ? get_futex_key+0x8b7/0xe70 [ 149.937373][ T4179] tun_get_user+0x2bf3/0x38f0 [ 149.941940][ T4179] ? tun_do_read+0x1f60/0x1f60 [ 149.946590][ T4179] ? avc_policy_seqno+0x1b/0x70 [ 149.951306][ T4179] ? selinux_file_permission+0x2bb/0x560 [ 149.956757][ T4179] ? fsnotify_perm+0x67/0x4e0 [ 149.961265][ T4179] tun_chr_write_iter+0x1a8/0x250 [ 149.966100][ T4179] vfs_write+0xb4c/0xe70 [ 149.970205][ T4179] ? futex_exit_release+0x1e0/0x1e0 [ 149.975214][ T4179] ? kernel_write+0x3d0/0x3d0 [ 149.979754][ T4179] ? alloc_file_pseudo+0x280/0x2f0 [ 149.984679][ T4179] ? __fdget_pos+0x209/0x3a0 [ 149.989129][ T4179] ? ksys_write+0x77/0x2c0 [ 149.993351][ T4179] ksys_write+0x199/0x2c0 [ 149.997533][ T4179] ? __ia32_sys_read+0x90/0x90 [ 150.002153][ T4179] ? fpu__clear_all+0x20/0x20 [ 150.006633][ T4179] ? __kasan_check_read+0x11/0x20 [ 150.011523][ T4179] __x64_sys_write+0x7b/0x90 [ 150.015919][ T4179] do_syscall_64+0x34/0x70 [ 150.020203][ T4179] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 150.025907][ T4179] RIP: 0033:0x7f81a878aadf [ 150.030182][ T4179] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 150.049669][ T4179] RSP: 002b:00007f81a7405000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 150.057872][ T4179] RAX: ffffffffffffffda RBX: 00007f81a8943f80 RCX: 00007f81a878aadf [ 150.065650][ T4179] RDX: 0000000000000d41 RSI: 0000000020002540 RDI: 00000000000000c8 [ 150.073497][ T4179] RBP: 00007f81a87fe296 R08: 0000000000000000 R09: 0000000000000000 [ 150.081291][ T4179] R10: 0000000000000d41 R11: 0000000000000293 R12: 0000000000000000 [ 150.089121][ T4179] R13: 0000000000000000 R14: 00007f81a8943f80 R15: 00007ffca90d6a38 [ 150.096902][ T4179] ---[ end trace c91fdfd941cb48f0 ]--- [ 150.102221][ T4179] Illegal XDP return value 4294967274, expect packet loss! [ 150.114026][ T24] audit: type=1326 audit(1729030631.420:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.137161][ T24] audit: type=1326 audit(1729030631.420:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.160734][ T24] audit: type=1326 audit(1729030631.420:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.184522][ T24] audit: type=1326 audit(1729030631.420:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.208913][ T24] audit: type=1326 audit(1729030631.420:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.233446][ T24] audit: type=1326 audit(1729030631.420:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.375272][ T24] audit: type=1326 audit(1729030631.420:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.400155][ T24] audit: type=1326 audit(1729030631.420:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.423704][ T24] audit: type=1326 audit(1729030631.420:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.446796][ T24] audit: type=1326 audit(1729030631.420:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4185 comm="syz.4.1225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804b885ff9 code=0x7ffc0000 [ 150.519146][ T4198] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 150.596349][ T3582] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 150.633365][ T3582] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 150.737366][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.744385][ T4204] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.751632][ T4204] device bridge_slave_0 entered promiscuous mode [ 150.758844][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.779620][ T4204] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.797726][ T4204] device bridge_slave_1 entered promiscuous mode [ 150.807453][ T4208] netlink: 41378 bytes leftover after parsing attributes in process `syz.0.1231'. [ 151.054315][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.061211][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.068315][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.075054][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.129363][ T4216] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 151.136920][ T4216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.155069][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.162955][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.170316][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.181468][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.193075][ T4216] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.198231][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.206034][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.226402][ T4216] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.233513][ T4216] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.273812][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.291905][ T4228] attempt to access beyond end of device [ 151.291905][ T4228] loop0: rw=2049, want=45104, limit=40427 [ 151.318016][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.324925][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.399648][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.408737][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.424524][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.448522][ T4204] device veth0_vlan entered promiscuous mode [ 151.471502][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.491414][ T4204] device veth1_macvtap entered promiscuous mode [ 151.505191][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.517980][ T4220] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.525263][ T4220] device bridge_slave_0 entered promiscuous mode [ 151.544985][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.553518][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.566763][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.584944][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.597806][ T4220] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.605085][ T4220] device bridge_slave_1 entered promiscuous mode [ 151.625145][ T417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.657407][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.816669][ T4245] Zero length message leads to an empty skb [ 151.854328][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.871057][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.887500][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.904483][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.925069][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.931954][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.950581][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.972615][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.994297][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.004185][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.011056][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.019599][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.027438][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.058261][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.073726][ T4220] device veth0_vlan entered promiscuous mode [ 152.088690][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.096764][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.114610][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.145998][ T4220] device veth1_macvtap entered promiscuous mode [ 152.159221][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.177466][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.198841][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.346932][ T4263] syz.1.1247[4263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.346989][ T4263] syz.1.1247[4263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.398888][ T9] device bridge_slave_1 left promiscuous mode [ 152.433953][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.460723][ T4271] syz.1.1251[4271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.460787][ T4271] syz.1.1251[4271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.472388][ T9] device bridge_slave_0 left promiscuous mode [ 152.506411][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.544849][ T9] device veth1_macvtap left promiscuous mode [ 152.563186][ T9] device veth0_vlan left promiscuous mode [ 153.091197][ T4279] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.108482][ T4279] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038 (0x7fffffff) [ 153.349099][ T4293] bridge: RTM_NEWNEIGH with invalid ether address [ 153.577837][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 153.618371][ T9] device bridge_slave_1 left promiscuous mode [ 153.624310][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.681102][ T9] device bridge_slave_0 left promiscuous mode [ 153.687059][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.739414][ T9] device veth1_macvtap left promiscuous mode [ 153.759953][ T9] device veth0_vlan left promiscuous mode [ 153.919265][ T4297] F2FS-fs (loop1): invalid crc value [ 153.979819][ T4297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.039952][ T4297] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 154.058847][ T4297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.148021][ T4317] EXT4-fs (loop2): Test dummy encryption mode enabled [ 154.184174][ T4317] EXT4-fs error (device loop2): __ext4_iget:4986: inode #11: block 1: comm syz.2.1265: invalid block [ 154.188868][ T4220] attempt to access beyond end of device [ 154.188868][ T4220] loop1: rw=524288, want=45072, limit=40427 [ 154.206692][ T4220] attempt to access beyond end of device [ 154.206692][ T4220] loop1: rw=0, want=45072, limit=40427 [ 154.250250][ T4317] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1265: couldn't read orphan inode 11 (err -117) [ 154.262639][ T9] attempt to access beyond end of device [ 154.262639][ T9] loop1: rw=2049, want=45120, limit=40427 [ 154.307753][ T4317] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,nombcache,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 154.944821][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.961891][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.982496][ T4332] device bridge_slave_0 entered promiscuous mode [ 154.998715][ T9] device bridge_slave_1 left promiscuous mode [ 155.005035][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.038167][ T9] device bridge_slave_0 left promiscuous mode [ 155.044124][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.070946][ T9] device veth1_macvtap left promiscuous mode [ 155.086921][ T9] device veth0_vlan left promiscuous mode [ 155.200240][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.207090][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.214435][ T4332] device bridge_slave_1 entered promiscuous mode [ 155.292183][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.300108][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.321838][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.331229][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.340386][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.347229][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.355367][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.363822][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.371883][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.378724][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.385949][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.394213][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.418712][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.437217][ T418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.457609][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.470140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.484048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.487004][ T4359] incfs_lookup_dentry err:-14 [ 155.495899][ T4359] incfs: Can't find or create .incomplete dir in ./file0 [ 155.507854][ T4332] device veth0_vlan entered promiscuous mode [ 155.526319][ T4359] incfs: mount failed -14 [ 155.532165][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.542267][ T4332] device veth1_macvtap entered promiscuous mode [ 155.565565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.584989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.664869][ T4368] incfs_lookup_dentry err:-5 [ 155.670009][ T4368] incfs: Can't find or create .index dir in ./file0 [ 155.676545][ T4368] incfs: mount failed -5 [ 155.987712][ T347] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 156.037713][ T25] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 156.168251][ T417] device bridge_slave_1 left promiscuous mode [ 156.174199][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.181730][ T417] device bridge_slave_0 left promiscuous mode [ 156.191961][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.200414][ T417] device veth1_macvtap left promiscuous mode [ 156.206298][ T417] device veth0_vlan left promiscuous mode [ 156.227697][ T347] usb 5-1: Using ep0 maxpacket: 8 [ 156.269559][ T4389] device syzkaller0 entered promiscuous mode [ 156.285161][ T4387] device syzkaller0 entered promiscuous mode [ 156.347910][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.362325][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.372118][ T347] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 156.381303][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.389970][ T347] usb 5-1: config 0 descriptor?? [ 156.397813][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.408535][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.421230][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.430763][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.439226][ T25] usb 4-1: config 0 descriptor?? [ 156.706358][ T4396] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 156.731981][ T4204] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 156.741996][ T4204] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 156.869018][ T347] playstation 0003:054C:0CE6.0037: unknown main item tag 0x0 [ 156.876252][ T347] playstation 0003:054C:0CE6.0037: unknown main item tag 0x0 [ 156.885633][ T347] playstation 0003:054C:0CE6.0037: item fetching failed at offset 3/7 [ 156.894121][ T347] playstation 0003:054C:0CE6.0037: Parse failed [ 156.900343][ T347] playstation: probe of 0003:054C:0CE6.0037 failed with error -22 [ 156.918608][ T25] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 156.925887][ T25] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 156.933073][ T25] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 156.940476][ T25] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 156.947687][ T25] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 156.954864][ T25] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 156.962192][ T25] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0 [ 156.969521][ T25] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 156.980936][ T25] plantronics 0003:047F:FFFF.0038: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 157.071042][ T491] usb 5-1: USB disconnect, device number 25 [ 157.291563][ T25] usb 4-1: USB disconnect, device number 22 [ 157.358146][ T417] device bridge_slave_1 left promiscuous mode [ 157.364149][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.371361][ T417] device bridge_slave_0 left promiscuous mode [ 157.377351][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.384886][ T417] device veth1_macvtap left promiscuous mode [ 157.390809][ T417] device veth0_vlan left promiscuous mode [ 157.724538][ T4432] bridge: RTM_NEWNEIGH with invalid ether address SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=1 req=1278 state=1 status=67 (errno 9: Bad file descriptor) [ 158.017822][ T347] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 158.698447][ T9] device bridge_slave_1 left promiscuous mode [ 158.704385][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.711696][ T9] device bridge_slave_0 left promiscuous mode [ 158.717604][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.725072][ T9] device veth1_macvtap left promiscuous mode [ 158.730935][ T9] device veth0_vlan left promiscuous mode [ 160.218372][ T9] device bridge_slave_1 left promiscuous mode [ 160.224284][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.231544][ T9] device bridge_slave_0 left promiscuous mode [ 160.237443][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.245032][ T9] device veth1_macvtap left promiscuous mode [ 160.250854][ T9] device veth0_vlan left promiscuous mode