last executing test programs: 8.189189214s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009d000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x6}, 0x48) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000017b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44800}, 0x0) 8.165684197s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbeb2502"], 0x20}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05"], 0x0) 4.519654631s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020852500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) 4.46099032s ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05"], 0x0) 4.445819773s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200040, &(0x7f0000000480)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f74732c646f74732c6e66732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c646f74732c646f74732c636865636b3d72656c617865642c74696d655f6f66667365743d3078303030303030303030303030303437612c646f6e745f6804390cf707ae51c7eba56173682c7365636c6162656c2c667373c322e2a50762a3d3fcae283b43ea02757569643d31643067586564382d353166312d62326634"], 0x1, 0x1d3, &(0x7f0000001a00)="$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") unshare(0x0) rmdir(&(0x7f0000000740)='./file0\x00') syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0xa, "ef3f"}, @global=@item_012={0x1, 0x1, 0x8, '7'}]}}, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001c80)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.463531979s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020852500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) 2.385297231s ago: executing program 0: r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000140)='bpf_lsm_bpf_map\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0xd01f}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1f44}}, {@block_validity}, {@nolazytime}], [{@obj_role}, {@smackfsdef={'smackfsdef', 0x3d, ':\x03+!\xb8&B:'}}]}, 0x0, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") 2.097809376s ago: executing program 4: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x4a7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffe9}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000000085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="0180c200de00ba8d7061966c86dd60bc426000082c00fc000000000000000000000000000000ff0200000000000000000000000000013b000001", @ANYRES16=r1, @ANYRES16=r2, @ANYRESHEX], 0x0) 1.998513051s ago: executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000300)={0x7, &(0x7f0000000280)=[{0x6, 0x1f, 0x80, 0x9}, {0x2, 0x9, 0x9, 0x4}, {0x5, 0x5, 0x8, 0x1}, {0x7, 0x9e, 0x3}, {0x3, 0x9, 0x1, 0x7fff}, {0x400, 0xc1, 0x26, 0x64a}, {0x6, 0x3f, 0x2, 0xaefb}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0xa36, 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000003c0)={r2, 0x0, 0xffffffa6}) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000083000000bf0900000000000055090100000000009500000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) unshare(0x64000600) 1.982052343s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 1.962192996s ago: executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000280)={0xe, {0x6}}, 0xc) 1.298123209s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000fffffffb000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000d000000b7020000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.286745981s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x1001) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@empty}}, {{@in6=@local}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3401000016008502000000000000000020010000000000000000000000000002e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0x134}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 1.277740802s ago: executing program 4: getpid() sched_setaffinity(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6}]}) 1.221963001s ago: executing program 0: mknod$loop(0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000180), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 930.970966ms ago: executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$vcsu(&(0x7f0000000180), 0x1, 0x20100) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)={0x1, [0x7524, 0x9], 0x2}, 0x10) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240), &(0x7f0000000480)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0xfffffffd, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) 714.258239ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) 527.782768ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10}]}, 0x38}}, 0x0) 492.838333ms ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000002}, 0xc, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000600)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 230.474784ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x29}, 0x48) 227.559835ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a647300ed6dd26eea3837229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) 220.240656ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 202.222019ms ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4}, @timestamp_prespec={0x44, 0x4}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private}, {@rand_addr=0x64010101}, {@broadcast}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private]}, @rr={0x7, 0xb, 0x0, [@remote, @multicast1]}]}}}}}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffefffb, 0x0, "da6cd1122d1d837f65d3fe6ba6439cddec04ed"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 180.657092ms ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x4, 0x0, &(0x7f0000000200)="63eced8e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x20000400) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, 0xffffffffffffffff) 177.552933ms ago: executing program 3: set_tid_address(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, &(0x7f0000000080)) setpriority(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) 174.591613ms ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x18) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) dup3(r2, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x4c}}, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) r6 = io_uring_setup(0x1895, &(0x7f00000002c0)) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8, 0x1, r10}, {0x8}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x48}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000100)={0x0, 0x7d, "37ba71535b07526370b81518c8162da55b1cf6e431cf96580ca6bcc558079e588cb7f326d05c5001102959a4e7f74af7b948ebe3bf4cba3dece68522fe5939a9fe227a5d2d0f5de8395ed73525181cabd41d9de39335118be28e9160160e63ea57df04bc8cc0294920482fac25dc1fa7072b781b87af87aafbdb2a524f"}) io_submit(r5, 0x0, &(0x7f0000000000)) 126.93701ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r3}, 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 107.265403ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = io_uring_setup(0x66b, &(0x7f0000000240)) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 86.279606ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 0s ago: executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000280)={0xe, {0x6}}, 0xc) kernel console output (not intermixed with test programs): 26 audit(1718294707.197:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 536.859429][ T30] audit: type=1326 audit(1718294707.197:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 536.883611][ T30] audit: type=1326 audit(1718294707.197:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 536.907553][ T30] audit: type=1326 audit(1718294707.197:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 536.931856][ T30] audit: type=1326 audit(1718294707.197:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 536.948572][T14880] syz-executor.4[14880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.955727][ T30] audit: type=1326 audit(1718294707.197:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 536.955962][T14880] syz-executor.4[14880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.991007][ T30] audit: type=1326 audit(1718294707.197:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 536.991038][ T30] audit: type=1326 audit(1718294707.197:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14875 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 537.356358][T14902] loop2: detected capacity change from 0 to 256 [ 538.705943][T14935] loop0: detected capacity change from 0 to 2048 [ 538.788952][T14935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 538.800705][T14935] ext4 filesystem being mounted at /root/syzkaller-testdir1394620643/syzkaller.sHoygu/44/file0 supports timestamps until 2038 (0x7fffffff) [ 539.981968][ T6] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 540.004400][T14961] loop4: detected capacity change from 0 to 40427 [ 540.058595][T14961] F2FS-fs (loop4): invalid crc value [ 540.065284][T14961] F2FS-fs (loop4): Found nat_bits in checkpoint [ 540.104900][T14961] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 540.244147][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 540.860945][T14983] overlayfs: missing 'lowerdir' [ 541.449137][T13319] attempt to access beyond end of device [ 541.449137][T13319] loop4: rw=2049, want=45112, limit=40427 [ 541.490145][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.522658][ T20] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 541.576901][ T6] usb 3-1: config 0 has no interfaces? [ 541.750284][ T6] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.759160][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.767050][ T6] usb 3-1: Product: syz [ 541.771048][ T6] usb 3-1: Manufacturer: syz [ 541.775484][ T6] usb 3-1: SerialNumber: syz [ 541.780592][ T6] usb 3-1: config 0 descriptor?? [ 541.912794][ T20] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.922821][ T20] usb 4-1: config 0 has no interfaces? [ 541.928190][ T20] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 541.937017][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.945520][ T20] usb 4-1: config 0 descriptor?? [ 542.045224][ T20] usb 3-1: USB disconnect, device number 33 [ 542.303054][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 542.303069][ T30] audit: type=1326 audit(1718294712.310:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e55e61ea9 code=0x7ffc0000 [ 542.333313][ T30] audit: type=1326 audit(1718294712.310:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e55e61ea9 code=0x7ffc0000 [ 542.357233][ T30] audit: type=1326 audit(1718294712.310:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f2e55e61ea9 code=0x7ffc0000 [ 542.381403][ T30] audit: type=1326 audit(1718294712.310:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e55e61ea9 code=0x7ffc0000 [ 542.405637][ T30] audit: type=1326 audit(1718294712.310:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e55e61ea9 code=0x7ffc0000 [ 542.888952][ T30] audit: type=1107 audit(1718294712.845:2476): pid=15029 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 543.719223][ T500] usb 4-1: USB disconnect, device number 56 [ 544.319497][ T30] audit: type=1107 audit(1718294714.174:2477): pid=15077 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 544.352546][T15076] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.359592][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.367312][T15076] device bridge_slave_0 entered promiscuous mode [ 544.375317][T15076] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.382500][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.390538][T15076] device bridge_slave_1 entered promiscuous mode [ 544.486024][T15076] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.492910][T15076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.500078][T15076] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.506943][T15076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.548594][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.556682][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.564371][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.584739][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.592995][T12045] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.599884][T12045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.607777][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 544.616229][T12045] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.623111][T12045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.641095][ T637] device bridge_slave_1 left promiscuous mode [ 544.651118][ T637] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.659256][ T637] device bridge_slave_0 left promiscuous mode [ 544.665689][ T637] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.686528][ T637] device veth1_macvtap left promiscuous mode [ 544.692521][ T637] device veth0_vlan left promiscuous mode [ 544.851400][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 544.859361][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.877983][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 544.897093][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 544.905673][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 544.913342][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 544.922670][T15076] device veth0_vlan entered promiscuous mode [ 544.938401][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 544.948316][T15076] device veth1_macvtap entered promiscuous mode [ 544.960704][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 544.974139][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.983274][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 545.406984][T15127] tipc: Started in network mode [ 545.425210][T15127] tipc: Node identity fe80000000000000000000000000003, cluster identity 4711 [ 545.454613][T15127] tipc: Enabling of bearer rejected, failed to enable media [ 545.958941][T15122] loop1: detected capacity change from 0 to 40427 [ 546.025927][T15122] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 546.033718][T15122] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 546.043190][T15122] F2FS-fs (loop1): invalid crc value [ 546.049965][T15122] F2FS-fs (loop1): Found nat_bits in checkpoint [ 546.092140][T15122] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 546.099084][T15122] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 546.567823][ T30] audit: type=1400 audit(1718294716.242:2478): avc: denied { read } for pid=15162 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 546.661878][T15170] : renamed from pim6reg1 [ 546.929537][T15189] tipc: Enabling of bearer rejected, failed to enable media [ 547.185099][T15203] loop3: detected capacity change from 0 to 2048 [ 547.237133][T15203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 547.329067][T15210] syz-executor.1[15210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.329131][T15210] syz-executor.1[15210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.438094][ T500] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 547.704259][T15217] overlayfs: statfs failed on './file0' [ 547.730685][ T500] usb 5-1: Using ep0 maxpacket: 32 [ 547.915194][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 547.926284][ T500] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 547.941134][ T500] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 547.950081][ T500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.961152][ T500] usb 5-1: config 0 descriptor?? [ 547.980307][T15199] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 548.088801][ T500] hub 5-1:0.0: USB hub found [ 548.271431][T15230] overlayfs: statfs failed on './file0' [ 548.327045][ T500] hub 5-1:0.0: 2 ports detected [ 548.387698][T15235] device wg2 entered promiscuous mode [ 548.619111][ T500] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 548.626043][ T500] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 548.749098][ T500] usbhid 5-1:0.0: can't add hid device: -71 [ 548.755060][ T500] usbhid: probe of 5-1:0.0 failed with error -71 [ 548.794189][ T500] usb 5-1: USB disconnect, device number 38 [ 548.850136][ T30] audit: type=1326 audit(1718294718.346:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 548.874239][ T30] audit: type=1326 audit(1718294718.346:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 548.898927][ T30] audit: type=1326 audit(1718294718.346:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 548.922890][ T30] audit: type=1326 audit(1718294718.346:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 548.946831][ T30] audit: type=1326 audit(1718294718.346:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15242 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c28074ea9 code=0x7ffc0000 [ 549.173111][ T637] tipc: Left network mode [ 549.221173][T15251] loop0: detected capacity change from 0 to 1024 [ 549.282712][T15251] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 549.364778][T15262] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.372245][T15262] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.379496][T15262] device bridge_slave_0 entered promiscuous mode [ 549.386391][T15262] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.393242][T15262] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.400577][T15262] device bridge_slave_1 entered promiscuous mode [ 549.470335][T15262] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.477218][T15262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.484345][T15262] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.491115][T15262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.508316][ T30] audit: type=1326 audit(1718294718.956:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 549.524290][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.540159][ T500] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.547687][ T500] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.556514][ T30] audit: type=1326 audit(1718294718.992:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 549.583667][ T30] audit: type=1326 audit(1718294718.992:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 549.608641][ T30] audit: type=1326 audit(1718294718.992:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15267 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 549.695492][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.710564][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.717473][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.796551][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.805156][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.812037][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.825513][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.835236][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.863990][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.878562][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.887147][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.895274][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.904598][T15262] device veth0_vlan entered promiscuous mode [ 549.920542][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.930647][T15262] device veth1_macvtap entered promiscuous mode [ 549.943198][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.961297][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 550.007017][ T637] device bridge_slave_1 left promiscuous mode [ 550.013510][ T637] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.021781][ T637] device bridge_slave_0 left promiscuous mode [ 550.027832][ T637] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.035893][ T637] device veth1_macvtap left promiscuous mode [ 550.042975][ T637] device veth0_vlan left promiscuous mode [ 550.045963][T15285] serio: Serial port pts0 [ 550.052776][ T30] audit: type=1400 audit(1718294719.454:2488): avc: denied { map } for pid=15283 comm="syz-executor.1" path="socket:[85008]" dev="sockfs" ino=85008 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 550.542459][T15292] device wg2 entered promiscuous mode [ 551.225840][T15327] loop4: detected capacity change from 0 to 40427 [ 552.548195][T15327] F2FS-fs (loop4): invalid crc value [ 552.554958][T15327] F2FS-fs (loop4): Found nat_bits in checkpoint [ 552.585116][T15327] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 552.774289][T15338] attempt to access beyond end of device [ 552.774289][T15338] loop4: rw=10241, want=45104, limit=40427 [ 552.792177][T15338] attempt to access beyond end of device [ 552.792177][T15338] loop4: rw=2049, want=45112, limit=40427 [ 553.092036][T13319] attempt to access beyond end of device [ 553.092036][T13319] loop4: rw=2049, want=45128, limit=40427 [ 553.305629][T15351] loop0: detected capacity change from 0 to 40427 [ 553.349893][T15351] F2FS-fs (loop0): Invalid gid value -1 [ 553.387672][T15358] syz-executor.2[15358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.387734][T15358] syz-executor.2[15358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.701383][T15367] loop0: detected capacity change from 0 to 512 [ 554.525894][T15362] loop4: detected capacity change from 0 to 131072 [ 554.999510][T15362] F2FS-fs (loop4): Found nat_bits in checkpoint [ 555.032310][T15362] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 555.282519][T15391] overlayfs: failed to resolve './file0': -2 [ 555.823195][T15428] tipc: Failed to remove unknown binding: 66,1,1/0:658290348/658290350 [ 556.078978][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 556.078994][ T30] audit: type=1326 audit(1718294725.020:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 556.109072][ T30] audit: type=1326 audit(1718294725.029:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 556.133155][ T30] audit: type=1326 audit(1718294725.029:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 556.158492][ T30] audit: type=1326 audit(1718294725.029:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 556.182650][ T30] audit: type=1326 audit(1718294725.029:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 556.206935][ T30] audit: type=1326 audit(1718294725.029:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15439 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x7ffc0000 [ 556.869386][T15462] loop4: detected capacity change from 0 to 256 [ 556.908273][T15462] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 556.930654][ T30] audit: type=1326 audit(1718294725.813:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x0 [ 557.445505][T15480] loop2: detected capacity change from 0 to 40427 [ 557.627015][T15480] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 557.643897][T15480] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 557.657793][T15480] F2FS-fs (loop2): Found nat_bits in checkpoint [ 557.697459][T15480] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 557.710263][T15480] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 557.717383][T15480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 559.011855][T15488] loop4: detected capacity change from 0 to 256 [ 559.015537][T15489] tipc: Started in network mode [ 559.022818][T15489] tipc: Node identity ac1414aa, cluster identity 4711 [ 559.030270][T15489] tipc: Enabled bearer , priority 10 [ 559.244468][T15493] loop3: detected capacity change from 0 to 1024 [ 559.276427][T15494] loop1: detected capacity change from 0 to 16 [ 559.303471][T15493] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 559.315474][T15493] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 336: padding at end of block bitmap is not set [ 559.375174][T15494] erofs: (device loop1): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 559.701030][T15508] loop2: detected capacity change from 0 to 40427 [ 559.725436][ T30] audit: type=1400 audit(1718294728.389:2506): avc: denied { ioctl } for pid=15511 comm="syz-executor.4" path="socket:[86105]" dev="sockfs" ino=86105 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 559.754218][ T30] audit: type=1400 audit(1718294728.416:2507): avc: denied { read } for pid=15511 comm="syz-executor.4" path="socket:[85396]" dev="sockfs" ino=85396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 559.786400][T15508] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 559.794152][T15508] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 559.808527][T15508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 559.841795][T15508] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 559.848757][T15508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 560.059431][T15524] loop4: detected capacity change from 0 to 8192 [ 560.093138][T15524] loop4: p1 < > p4 < > [ 560.244146][ T6856] tipc: Node number set to 2886997162 [ 560.252887][ T30] audit: type=1400 audit(1718294728.869:2508): avc: denied { setcurrent } for pid=15530 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 560.393741][T15533] loop2: detected capacity change from 0 to 40427 [ 560.506752][T15533] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 560.514495][T15533] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 560.524838][T15536] loop3: detected capacity change from 0 to 16 [ 560.525687][T15533] F2FS-fs (loop2): Found nat_bits in checkpoint [ 560.560696][T15533] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 560.571183][T15536] erofs: (device loop3): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 560.572770][T15533] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 560.587177][T15533] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 560.804729][T15547] loop4: detected capacity change from 0 to 512 [ 560.851587][T15547] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 560.859759][T15547] EXT4-fs (loop4): 1 truncate cleaned up [ 560.865271][T15547] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,journal_dev=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 561.065385][T15564] loop4: detected capacity change from 0 to 256 [ 561.110714][T15564] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 561.139516][T15569] syz-executor.0[15569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.140221][T15569] syz-executor.0[15569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.548988][T15579] loop0: detected capacity change from 0 to 1024 [ 561.614492][T15579] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 561.626261][T15579] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000007,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 561.833241][T15583] loop4: detected capacity change from 0 to 40427 [ 561.912533][T15583] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 561.920453][T15583] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 561.980806][T15583] F2FS-fs (loop4): Found nat_bits in checkpoint [ 562.008883][T15583] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 562.020195][T15583] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 562.027224][T15583] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 562.042889][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 562.098665][T15596] loop3: detected capacity change from 0 to 256 [ 562.143545][T15596] exfat: Deprecated parameter 'utf8' [ 562.148836][T15596] exfat: Deprecated parameter 'utf8' [ 562.157266][T15596] exfat: Deprecated parameter 'namecase' [ 562.172237][T15596] exfat: Deprecated parameter 'namecase' [ 562.177861][T15596] exfat: Deprecated parameter 'utf8' [ 562.183040][T15596] exfat: Deprecated parameter 'utf8' [ 562.190982][T15596] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 562.351443][T15600] input: syz1 as /devices/virtual/input/input83 [ 562.463401][T15605] syz-executor.3[15605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.463569][T15605] syz-executor.3[15605] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.676588][T15611] loop1: detected capacity change from 0 to 256 [ 562.697704][T15612] loop4: detected capacity change from 0 to 256 [ 562.699985][T15608] loop2: detected capacity change from 0 to 40427 [ 562.751500][T15612] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 562.762914][T15608] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 562.766682][T15611] FAT-fs (loop1): Directory bread(block 64) failed [ 562.776881][T15608] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 562.785307][T15611] FAT-fs (loop1): Directory bread(block 65) failed [ 562.792665][T15611] FAT-fs (loop1): Directory bread(block 66) failed [ 562.794678][T15608] F2FS-fs (loop2): invalid crc value [ 562.804674][T15611] FAT-fs (loop1): Directory bread(block 67) failed [ 562.811083][T15611] FAT-fs (loop1): Directory bread(block 68) failed [ 562.817375][T15611] FAT-fs (loop1): Directory bread(block 69) failed [ 562.823765][T15611] FAT-fs (loop1): Directory bread(block 70) failed [ 562.830030][T15611] FAT-fs (loop1): Directory bread(block 71) failed [ 562.843608][T15611] FAT-fs (loop1): Directory bread(block 72) failed [ 562.848840][T15608] F2FS-fs (loop2): Found nat_bits in checkpoint [ 562.850332][T15611] FAT-fs (loop1): Directory bread(block 73) failed [ 562.888382][ T352] attempt to access beyond end of device [ 562.888382][ T352] loop1: rw=1, want=1228, limit=256 [ 562.899010][ T352] Buffer I/O error on dev loop1, logical block 306, lost async page write [ 562.902570][T15608] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 562.914264][T15608] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 562.925799][T15608] input: syz0 as /devices/virtual/input/input84 [ 562.936471][T15608] overlayfs: './file0' not a directory [ 562.937922][T15611] attempt to access beyond end of device [ 562.937922][T15611] loop1: rw=1, want=1228, limit=256 [ 562.952438][T15611] Buffer I/O error on dev loop1, logical block 306, lost async page write [ 562.954735][T15608] overlayfs: './file0' not a directory [ 562.970676][T15608] attempt to access beyond end of device [ 562.970676][T15608] loop2: rw=2049, want=45208, limit=40427 [ 563.023082][T15076] attempt to access beyond end of device [ 563.023082][T15076] loop2: rw=2051, want=45208, limit=40427 [ 563.034895][T15076] F2FS-fs (loop2): Issue discard(5637, 5637, 14) failed, ret: -5 [ 563.341045][T15641] loop4: detected capacity change from 0 to 512 [ 563.402794][T15641] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 563.414863][T15641] EXT4-fs (loop4): 1 truncate cleaned up [ 563.420349][T15641] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 563.472764][ T6856] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 563.640808][T15649] loop2: detected capacity change from 0 to 512 [ 563.707103][T15649] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz-executor.2: bad orphan inode 17 [ 563.717445][T15649] ext4_test_bit(bit=16, block=4) = 1 [ 563.722681][T15649] is_bad_inode(inode)=0 [ 563.726678][T15649] NEXT_ORPHAN(inode)=0 [ 563.730586][T15649] max_ino=32 [ 563.733663][T15649] i_nlink=1 [ 563.736617][T15649] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 563.747089][ T315] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 563.755781][T15649] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 7: invalid block bitmap [ 563.895396][ T6856] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 563.904299][ T6856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.913010][ T6856] usb 2-1: config 0 descriptor?? [ 564.057796][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 564.209572][ T6856] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 564.219167][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 564.230268][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 564.241370][ T315] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 564.250267][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.259022][ T315] usb 5-1: config 0 descriptor?? [ 564.285400][T15641] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 564.307530][ T315] hub 5-1:0.0: USB hub found [ 564.491220][ T6856] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 564.500966][ T6856] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 564.524139][ T6856] asix: probe of 2-1:0.0 failed with error -71 [ 564.534549][ T315] hub 5-1:0.0: 2 ports detected [ 564.545888][ T6856] usb 2-1: USB disconnect, device number 50 [ 564.565635][T15659] loop3: detected capacity change from 0 to 40427 [ 564.618680][T15659] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 564.626471][T15659] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 564.635862][T15659] F2FS-fs (loop3): invalid crc value [ 564.643082][T15659] F2FS-fs (loop3): Found nat_bits in checkpoint [ 564.687138][T15659] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 564.694028][T15659] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 564.715787][T15659] input: syz0 as /devices/virtual/input/input85 [ 564.726224][T15659] overlayfs: './file0' not a directory [ 564.734615][T15659] overlayfs: './file0' not a directory [ 564.745554][T15659] attempt to access beyond end of device [ 564.745554][T15659] loop3: rw=2049, want=45208, limit=40427 [ 564.806365][T15262] attempt to access beyond end of device [ 564.806365][T15262] loop3: rw=2051, want=45208, limit=40427 [ 564.822640][T15262] F2FS-fs (loop3): Issue discard(5637, 5637, 14) failed, ret: -5 [ 564.984613][T15641] overlayfs: './file2' not a directory [ 565.032916][ T315] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 565.039084][ T315] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 565.166583][T15673] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.175681][T15673] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.201014][T15673] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.207913][T15673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.215131][ T315] usbhid 5-1:0.0: can't add hid device: -71 [ 565.215847][T15673] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.221028][ T315] usbhid: probe of 5-1:0.0 failed with error -71 [ 565.227736][T15673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.443635][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 566.123552][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.130646][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.138186][ T30] audit: type=1400 audit(1718294733.650:2537): avc: denied { getopt } for pid=15668 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 566.141373][ T315] usb 5-1: USB disconnect, device number 39 [ 566.360045][ T30] audit: type=1400 audit(1718294734.508:2538): avc: denied { ioctl } for pid=15681 comm="syz-executor.2" path="socket:[86452]" dev="sockfs" ino=86452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 566.385720][ T30] audit: type=1400 audit(1718294734.508:2539): avc: denied { setopt } for pid=15681 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 566.701339][ T6856] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 566.733859][ T6] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 566.796013][T15699] loop4: detected capacity change from 0 to 256 [ 566.840568][T15695] loop2: detected capacity change from 0 to 40427 [ 566.860702][T15699] FAT-fs (loop4): Unrecognized mount option "utf8=" or missing value [ 566.897407][T15695] F2FS-fs (loop2): Unrecognized mount option "in" or missing value [ 566.972217][ T6856] usb 4-1: Using ep0 maxpacket: 8 [ 567.099074][T15704] loop0: detected capacity change from 0 to 16384 [ 567.131048][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 567.145585][ T6856] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 567.372429][ T6856] usb 4-1: config 179 has no interface number 0 [ 567.375640][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.378799][T15707] fuse: Unknown parameter 'rootmod0000000000000000010000' [ 567.396572][ T6856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 567.407859][ T6856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 567.419002][ T6856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 567.419679][T15704] print_req_error: 1 callbacks suppressed [ 567.419696][T15704] blk_update_request: I/O error, dev loop0, sector 2816 op 0x0:(READ) flags 0x0 phys_seg 16 prio class 0 [ 567.430701][ T6856] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 567.436184][ T6] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 567.446864][ T6856] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 567.479862][ T6856] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 567.480872][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.488943][ T6856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.510082][ T6] usb 2-1: config 0 descriptor?? [ 567.524809][T15686] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 567.783878][T15716] loop4: detected capacity change from 0 to 512 [ 567.795690][T12045] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 567.801276][T15717] loop2: detected capacity change from 0 to 512 [ 567.832957][T15716] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 567.844698][T15716] EXT4-fs (loop4): 1 truncate cleaned up [ 567.848656][T15717] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz-executor.2: bad orphan inode 17 [ 567.850181][T15716] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 567.879442][T15717] ext4_test_bit(bit=16, block=4) = 1 [ 567.884574][T15717] is_bad_inode(inode)=0 [ 567.888562][T15717] NEXT_ORPHAN(inode)=0 [ 567.892448][T15717] max_ino=32 [ 567.895533][T15717] i_nlink=1 [ 567.898456][T15717] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 567.912928][T15717] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 7: invalid block bitmap [ 568.034590][ T6] keytouch 0003:0926:3333.007D: fixing up Keytouch IEC report descriptor [ 568.044269][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.007D/input/input86 [ 568.120062][T15726] SELinux: security_context_str_to_sid( ) failed for (dev ?, type ?) errno=-22 [ 568.133532][ T6] keytouch 0003:0926:3333.007D: input,hidraw0: USB HID v73.1e Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 568.141197][T15726] SELinux: security_context_str_to_sid( ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 568.145709][ T20] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 568.185732][T12045] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 568.195695][T12045] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 568.283235][T12045] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 568.292125][T12045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 568.300390][T12045] usb 1-1: SerialNumber: syz [ 568.634456][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 568.652449][T12045] usb 1-1: 0:2 : does not exist [ 568.657240][T12045] usb 1-1: unit 5: unexpected type 0x09 [ 568.664026][T12045] usb 1-1: USB disconnect, device number 43 [ 568.759963][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 568.771279][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 568.782302][ T20] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 568.791105][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.799872][ T20] usb 5-1: config 0 descriptor?? [ 568.824939][T15716] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 568.846937][ T20] hub 5-1:0.0: USB hub found [ 569.084932][ T20] hub 5-1:0.0: 2 ports detected [ 569.308247][T15736] loop2: detected capacity change from 0 to 512 [ 569.448161][T15716] overlayfs: './file2' not a directory [ 569.456502][T15736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 569.468393][T15736] EXT4-fs (loop2): 1 truncate cleaned up [ 569.473933][T15736] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 569.496707][ T20] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 569.504082][ T20] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 569.604786][ T6856] usb 4-1: USB disconnect, device number 57 [ 569.610576][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 569.610607][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 569.615847][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 569.632692][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 569.670479][ T20] usb 5-1: USB disconnect, device number 40 [ 569.743702][T15744] syz-executor.0[15744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 569.743762][T15744] syz-executor.0[15744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 569.766708][T15745] loop3: detected capacity change from 0 to 512 [ 569.810777][ T6] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 569.825864][T15745] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 569.837631][T15745] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz-executor.3: invalid indirect mapped block 83886080 (level 1) [ 569.852028][T15745] EXT4-fs (loop3): Remounting filesystem read-only [ 569.858850][T15745] EXT4-fs (loop3): 1 orphan inode deleted [ 569.864456][T15745] EXT4-fs (loop3): 1 truncate cleaned up [ 569.869957][T15745] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,grpquota,inode_readahead_blks=0x0000000000010000,minixdf,noinit_itable,. Quota mode: writeback. [ 569.904882][T15262] EXT4-fs error (device loop3): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.3: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 569.925760][T15262] EXT4-fs (loop3): Remounting filesystem read-only [ 570.070787][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 570.200927][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 570.217594][T15753] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.224610][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 570.234143][T15753] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.241644][T15753] device bridge_slave_0 entered promiscuous mode [ 570.248859][T15753] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.259333][ T335] usb 2-1: USB disconnect, device number 51 [ 570.269340][T15753] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.278703][T15753] device bridge_slave_1 entered promiscuous mode [ 570.300786][T15752] loop4: detected capacity change from 0 to 40427 [ 570.332420][T15752] F2FS-fs (loop4): invalid crc value [ 570.339152][T15752] F2FS-fs (loop4): Found nat_bits in checkpoint [ 570.365982][T15753] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.372870][T15753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.379973][T15753] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.386767][T15753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.387640][T15759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 570.403101][T15752] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 570.406858][ T6] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01d1, bcdDevice=a8.e3 [ 570.423715][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 570.428316][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.438598][ T6] usb 3-1: Product: syz [ 570.442714][ T500] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.450098][ T6] usb 3-1: Manufacturer: syz [ 570.450259][ T500] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.454503][ T6] usb 3-1: SerialNumber: syz [ 570.466416][ T6] usb 3-1: config 0 descriptor?? [ 570.484026][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.491984][ T3812] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.498839][ T3812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.506465][ T6] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 570.514067][T13319] attempt to access beyond end of device [ 570.514067][T13319] loop4: rw=2049, want=45104, limit=40427 [ 570.514333][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.533239][ T6] usb 3-1: Detected FT-X [ 570.537327][ T6] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 1 [ 570.544420][ T6] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 570.551889][ T3812] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.558745][ T3812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.566047][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.573828][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.590651][T15753] device veth0_vlan entered promiscuous mode [ 570.597053][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 570.605562][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 570.613465][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 570.620751][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 570.636229][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 570.645935][T15753] device veth1_macvtap entered promiscuous mode [ 570.657057][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 570.668469][ T3812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.727826][ T30] audit: type=1326 audit(1718294738.542:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 570.751758][ T6] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 570.759201][ T30] audit: type=1326 audit(1718294738.542:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 570.764239][ T6] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 570.783157][ T30] audit: type=1326 audit(1718294738.542:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 570.813810][ T6] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 570.815298][ T30] audit: type=1326 audit(1718294738.569:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 570.844265][ T335] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 570.844826][ T30] audit: type=1326 audit(1718294738.569:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 570.876176][ T6] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 570.884134][ T30] audit: type=1326 audit(1718294738.569:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15761 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 570.909602][ T6] usb 3-1: USB disconnect, device number 34 [ 570.917389][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 570.930227][ T6] ftdi_sio 3-1:0.0: device disconnected [ 570.949593][T15764] loop4: detected capacity change from 0 to 128 [ 571.251792][ T335] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.261758][ T335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.349274][ T335] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 571.358305][ T335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 571.367678][ T335] usb 2-1: SerialNumber: syz [ 571.389446][T15770] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.396685][T15770] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.404441][T15770] device bridge_slave_0 entered promiscuous mode [ 571.411713][T15770] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.420233][T15770] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.428775][T15770] device bridge_slave_1 entered promiscuous mode [ 571.468480][ T6] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 571.500099][T15770] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.506971][T15770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.514043][T15770] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.520839][T15770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.550259][T15777] loop2: detected capacity change from 0 to 2048 [ 571.554081][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 571.564106][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.571620][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.588774][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 571.596825][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.596946][T15777] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 571.603688][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.604112][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 571.614306][T15777] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 571.620505][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.629413][T15777] EXT4-fs (loop2): failed to initialize system zone (-117) [ 571.638962][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 571.660006][T15777] EXT4-fs (loop2): mount failed [ 571.665380][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 571.673450][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 571.686388][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.696801][ T335] usb 2-1: 0:2 : does not exist [ 571.698834][T15770] device veth0_vlan entered promiscuous mode [ 571.701519][ T335] usb 2-1: unit 5: unexpected type 0x09 [ 571.708358][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 571.721553][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 571.722052][ T335] usb 2-1: USB disconnect, device number 52 [ 571.729219][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 571.734338][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 571.754106][ T637] device bridge_slave_1 left promiscuous mode [ 571.760065][ T637] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.770624][ T637] device bridge_slave_0 left promiscuous mode [ 571.776957][ T637] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.785599][ T637] device veth1_macvtap left promiscuous mode [ 571.791532][ T637] device veth0_vlan left promiscuous mode [ 571.858483][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.869203][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.878742][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 571.891469][ T6] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 571.900363][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.909418][ T6] usb 1-1: config 0 descriptor?? [ 571.959399][T15770] device veth1_macvtap entered promiscuous mode [ 571.967524][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 571.981975][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 571.995153][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 572.125538][T15788] input: syz0 as /devices/virtual/input/input87 [ 572.248689][ T500] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 572.470485][ T30] audit: type=1326 audit(1718294740.138:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 572.494599][ T30] audit: type=1326 audit(1718294740.148:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 572.518599][ T30] audit: type=1326 audit(1718294740.148:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 572.542423][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 572.542490][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 572.543359][ T6] usb 1-1: USB disconnect, device number 44 [ 572.550384][ T30] audit: type=1326 audit(1718294740.148:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 572.584394][ T30] audit: type=1326 audit(1718294740.148:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 572.713288][T15796] loop3: detected capacity change from 0 to 512 [ 572.766045][T15796] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 17 [ 572.776376][ T500] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.776468][T15796] ext4_test_bit(bit=16, block=4) = 1 [ 572.787179][ T500] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 572.792346][T15796] is_bad_inode(inode)=0 [ 572.801381][ T500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.805978][ T500] usb 3-1: config 0 descriptor?? [ 572.818766][T15796] NEXT_ORPHAN(inode)=0 [ 572.822720][T15796] max_ino=32 [ 572.825706][T15796] i_nlink=1 [ 572.828693][T15796] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.847658][T15796] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 7: invalid block bitmap [ 572.996056][ T6] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 573.256069][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 573.333573][ T500] keytouch 0003:0926:3333.007E: fixing up Keytouch IEC report descriptor [ 573.343517][ T500] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.007E/input/input88 [ 573.371381][T15808] loop3: detected capacity change from 0 to 256 [ 573.386111][ T6] usb 2-1: config 0 has no interfaces? [ 573.391438][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 573.400400][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.408949][ T6] usb 2-1: config 0 descriptor?? [ 573.431108][ T500] keytouch 0003:0926:3333.007E: input,hidraw0: USB HID v73.1e Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 573.448283][T15808] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 573.451845][T15810] loop4: detected capacity change from 0 to 256 [ 573.749149][ T500] usb 2-1: USB disconnect, device number 53 [ 574.437543][ T30] audit: type=1326 audit(1718294741.966:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 574.464886][ T30] audit: type=1326 audit(1718294741.966:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 574.488803][ T30] audit: type=1326 audit(1718294741.984:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 574.512872][ T30] audit: type=1326 audit(1718294741.994:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 574.761359][T15836] loop1: detected capacity change from 0 to 512 [ 574.786087][T15832] loop0: detected capacity change from 0 to 40427 [ 574.811198][T15836] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 574.820858][T15836] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 574.835478][T15836] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 574.851195][T15836] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 574.862365][T15832] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 575.065438][T15832] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 575.074005][T15836] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 575.083323][T15832] F2FS-fs (loop0): invalid crc value [ 575.087833][T15836] EXT4-fs (loop1): orphan cleanup on readonly fs [ 575.095382][T15836] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz-executor.1: Invalid block bitmap block 0 in block_group 1 [ 575.100757][T15832] F2FS-fs (loop0): Found nat_bits in checkpoint [ 575.109468][T15836] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 34: padding at end of block bitmap is not set [ 575.130204][T15836] EXT4-fs (loop1): 1 truncate cleaned up [ 575.144849][T15836] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,debug,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 575.150191][T15832] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 575.165933][T15832] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 575.166952][T15836] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 575.181279][T15836] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 575.192156][T15832] input: syz0 as /devices/virtual/input/input90 [ 575.201551][T15832] overlayfs: './file0' not a directory [ 575.208575][T15832] overlayfs: './file0' not a directory [ 575.643403][ T6856] usb 3-1: USB disconnect, device number 35 [ 575.661272][ C1] keytouch 0003:0926:3333.007E: usb_submit_urb(ctrl) failed: -19 [ 575.737117][ T500] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 575.764611][T15852] loop4: detected capacity change from 0 to 512 [ 575.798675][T15852] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 575.806925][T15852] EXT4-fs (loop4): 1 truncate cleaned up [ 575.812405][T15852] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,journal_dev=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 575.909497][T15862] loop1: detected capacity change from 0 to 512 [ 575.923370][T15863] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 575.934915][T15863] loop2: detected capacity change from 0 to 1024 [ 575.942164][T15862] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 2048 [ 575.997135][ T500] usb 1-1: Using ep0 maxpacket: 16 [ 576.010890][T15863] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only [ 576.034589][T15865] kvm: pic: level sensitive irq not supported [ 576.034657][T15865] picdev_read: 11 callbacks suppressed [ 576.034688][T15865] kvm: pic: non byte read [ 576.072722][T15868] input: syz0 as /devices/virtual/input/input91 [ 576.099008][T15863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.127237][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.138331][ T500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.147935][ T500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 576.160906][ T500] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 576.169825][ T500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.192322][ T500] usb 1-1: config 0 descriptor?? [ 576.250697][T15873] loop3: detected capacity change from 0 to 512 [ 576.287943][T15869] loop2: detected capacity change from 0 to 40427 [ 576.322758][T15874] loop1: detected capacity change from 0 to 512 [ 576.334443][T15869] F2FS-fs (loop2): invalid crc value [ 576.341021][T15869] F2FS-fs (loop2): Found nat_bits in checkpoint [ 576.352960][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 576.352973][ T30] audit: type=1400 audit(1718294743.729:2597): avc: denied { write } for pid=15870 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 576.380435][T15869] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 576.387448][T15869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 576.392358][T15873] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.404422][T15874] EXT4-fs (loop1): error: journal path ./file0 is not a block device [ 576.412136][T15869] overlayfs: unrecognized mount option "dont_appraise" or missing value [ 576.413173][ T30] audit: type=1400 audit(1718294743.757:2598): avc: denied { nlmsg_read } for pid=15870 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 576.441813][T15873] device gretap0 entered promiscuous mode [ 576.448992][T15873] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 576.464578][T15880] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.473725][T15880] 0XD: renamed from gretap0 [ 576.479603][T15880] device 30XD left promiscuous mode [ 576.485636][T15880] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 576.560509][ T26] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 576.591907][T15882] loop3: detected capacity change from 0 to 512 [ 576.699485][T15882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 576.711744][T15882] EXT4-fs (loop3): 1 truncate cleaned up [ 576.717269][T15882] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 576.820565][ T500] usbhid 1-1:0.0: can't add hid device: -71 [ 576.826469][ T500] usbhid: probe of 1-1:0.0 failed with error -71 [ 576.834099][ T500] usb 1-1: USB disconnect, device number 45 [ 576.866254][T15076] attempt to access beyond end of device [ 576.866254][T15076] loop2: rw=2049, want=45104, limit=40427 [ 576.962128][ T26] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 576.971001][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.979869][ T26] usb 5-1: config 0 descriptor?? [ 577.069696][ T335] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 577.244133][T15875] UDC core: couldn't find an available UDC or it's busy: -16 [ 577.251396][T15875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 577.329865][ T335] usb 4-1: Using ep0 maxpacket: 16 [ 577.416425][ T6] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 577.459821][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.469557][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 577.492295][ T26] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 577.502391][ T26] asix: probe of 5-1:0.0 failed with error -71 [ 577.509142][ T26] usb 5-1: USB disconnect, device number 41 [ 577.525263][T15895] loop0: detected capacity change from 0 to 512 [ 577.570950][T15898] loop2: detected capacity change from 0 to 256 [ 577.577128][T15895] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 577.585238][T15895] EXT4-fs (loop0): 1 truncate cleaned up [ 577.590812][T15895] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,journal_dev=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 577.626461][T15898] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 577.638562][T15898] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 577.655678][ T335] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01d1, bcdDevice=a8.e3 [ 577.665142][ T335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.667159][ T30] audit: type=1400 audit(1718294744.947:2599): avc: denied { lock } for pid=15897 comm="syz-executor.2" path="/root/syzkaller-testdir2789390113/syzkaller.7Rt9dt/53/bus/blkio.bfq.avg_queue_size" dev="loop2" ino=1049134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 577.673638][ T335] usb 4-1: Product: syz [ 577.706370][ T335] usb 4-1: Manufacturer: syz [ 577.710933][ T335] usb 4-1: SerialNumber: syz [ 577.716312][ T335] usb 4-1: config 0 descriptor?? [ 577.763710][ T335] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 577.771322][ T335] usb 4-1: Detected FT-X [ 577.775504][ T335] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 1 [ 577.782650][ T335] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7 [ 577.838999][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.849761][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.859244][ T6] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 577.868121][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.876639][ T6] usb 2-1: config 0 descriptor?? [ 577.884758][T15902] loop0: detected capacity change from 0 to 512 [ 577.920649][T15902] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 2048 [ 577.984636][T15906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 577.993832][ T335] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 578.023157][ T335] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 578.055913][ T335] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 578.062759][ T335] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 578.071937][ T335] usb 4-1: USB disconnect, device number 58 [ 578.078433][ T335] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 578.087621][ T335] ftdi_sio 4-1:0.0: device disconnected [ 578.120837][T15910] loop2: detected capacity change from 0 to 512 [ 578.122316][T15912] xt_TPROXY: Can be used only with -p tcp or -p udp [ 578.198005][T15910] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 578.207918][T15910] device gretap0 entered promiscuous mode [ 578.215313][T15910] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 578.232730][T15910] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 578.241982][T15910] 0XD: renamed from gretap0 [ 578.247185][T15910] device 30XD left promiscuous mode [ 578.253328][T15910] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 578.257528][T15914] incfs: Options parsing error. -22 [ 578.274002][T15914] incfs: mount failed -22 [ 578.370919][ T30] audit: type=1326 audit(1718294745.603:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15888 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb65c770ea9 code=0x0 [ 578.644347][T15929] loop4: detected capacity change from 0 to 128 [ 578.686012][ T30] audit: type=1326 audit(1718294745.889:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 578.710198][ T30] audit: type=1326 audit(1718294745.889:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 578.735512][T15929] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 578.749002][ T30] audit: type=1326 audit(1718294745.889:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 578.772869][ T30] audit: type=1326 audit(1718294745.889:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 578.784553][T15935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 578.796972][ T30] audit: type=1326 audit(1718294745.889:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 578.830243][ T30] audit: type=1326 audit(1718294745.889:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15931 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 578.965057][T15941] syz-executor.2[15941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.965122][T15941] syz-executor.2[15941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 578.984382][T15941] xt_CT: No such helper "snmp_trap" [ 579.072704][T15947] loop0: detected capacity change from 0 to 512 [ 579.146305][T15947] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.155867][T15947] device gretap0 entered promiscuous mode [ 579.162517][T15947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 579.179415][T15947] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.188521][T15947] 0XD: renamed from gretap0 [ 579.196302][T15947] device 30XD left promiscuous mode [ 579.204353][T15947] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 579.293026][T15954] EXT4-fs (sda1): re-mounted. Opts: . Quota mode: writeback. [ 579.306713][T15954] device veth1_macvtap left promiscuous mode [ 579.319672][T15954] device veth1_macvtap entered promiscuous mode [ 579.369234][T15950] fuse: Bad value for 'fd' [ 579.495157][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 579.509822][T15967] incfs: Can't find or create .index dir in ./file0 [ 579.517915][T15967] incfs: mount failed -5 [ 580.004140][T15975] loop3: detected capacity change from 0 to 40427 [ 580.016623][T12045] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 580.051462][T15975] F2FS-fs (loop3): invalid crc value [ 580.057819][T15975] F2FS-fs (loop3): Found nat_bits in checkpoint [ 580.096394][T15975] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 580.363385][ T6] hid-led: probe of 0003:27B8:01ED.007F failed with error -71 [ 580.371722][ T6] usb 2-1: USB disconnect, device number 54 [ 580.417587][ T20] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 580.459447][T12045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.470350][T12045] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.479937][T12045] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 580.492728][T12045] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 580.502357][T12045] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.511009][T12045] usb 1-1: config 0 descriptor?? [ 580.656660][T16010] loop2: detected capacity change from 0 to 512 [ 580.678423][T16010] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 580.796673][ T6] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 580.872839][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.883585][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.893055][ T20] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 580.905690][ T20] usb 4-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 580.914496][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.923034][ T20] usb 4-1: config 0 descriptor?? [ 581.006298][T16023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 581.079698][T12045] wacom 0003:056A:0317.0080: unknown main item tag 0x0 [ 581.086816][T12045] wacom 0003:056A:0317.0080: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 581.096654][T12045] wacom 0003:056A:0317.0080: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.0-1/input0 [ 581.108235][T12045] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0317.0080/input/input92 [ 581.230110][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.240015][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.430077][T15963] loop0: detected capacity change from 0 to 512 [ 581.494750][ T20] wacom 0003:056A:0059.0081: hidraw1: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.3-1/input0 [ 581.505839][T15963] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 581.517299][T15963] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 581.527230][T15963] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 581.540521][T15963] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 581.544346][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 581.548564][T15963] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 581.557300][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.569665][T15963] EXT4-fs (loop0): Remounting filesystem read-only [ 581.577152][ T6] usb 2-1: SerialNumber: syz [ 581.583446][T15963] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 581.600056][T15963] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x0000000000000001,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 581.627190][T15963] UDC core: couldn't find an available UDC or it's busy: -16 [ 581.634427][T15963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 581.642156][T15963] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 581.653583][T15963] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 581.663458][T15963] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 581.667905][T12045] usb 4-1: USB disconnect, device number 59 [ 581.676675][T15963] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 581.693482][T15963] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 581.703388][T15963] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 581.716416][T15963] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 3: comm syz-executor.0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 581.735522][T15963] EXT4-fs (loop0): Remounting filesystem read-only [ 581.745155][ T20] usb 1-1: USB disconnect, device number 46 [ 581.886168][T16035] loop4: detected capacity change from 0 to 1024 [ 581.902568][ T6] usb 2-1: 0:2 : does not exist [ 581.907689][ T6] usb 2-1: unit 5: unexpected type 0x09 [ 581.914695][ T6] usb 2-1: USB disconnect, device number 55 [ 581.937140][T16035] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 581.950857][T16035] __quota_error: 30 callbacks suppressed [ 581.950873][T16035] Quota error (device loop4): write_blk: dquota write failed [ 581.963517][T16035] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 581.973731][T16035] EXT4-fs error (device loop4): ext4_free_blocks:6193: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 581.987434][T16035] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz-executor.4: Invalid inode bitmap blk 0 in block_group 0 [ 581.988474][ T352] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 582.000383][T16035] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 582.017053][T16035] EXT4-fs (loop4): 1 orphan inode deleted [ 582.022814][T16035] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 582.096650][T16040] loop4: detected capacity change from 0 to 512 [ 582.122779][T16038] loop2: detected capacity change from 0 to 512 [ 582.151808][T16040] EXT4-fs (loop4): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 582.163867][T16038] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 582.397052][T16050] __nla_validate_parse: 1 callbacks suppressed [ 582.397068][T16050] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 582.411053][ T30] audit: type=1326 audit(1718294749.322:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 582.436440][ T30] audit: type=1326 audit(1718294749.322:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 582.476779][ T30] audit: type=1326 audit(1718294749.322:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 582.502316][ T30] audit: type=1326 audit(1718294749.322:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 582.527349][ T30] audit: type=1326 audit(1718294749.322:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 582.560328][ T30] audit: type=1326 audit(1718294749.322:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 582.607744][ T30] audit: type=1326 audit(1718294749.322:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16058 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 582.627710][ T26] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 582.645393][T16066] loop3: detected capacity change from 0 to 1024 [ 582.656199][T16064] syz-executor.2[16064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.656283][T16064] syz-executor.2[16064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.660195][ T656] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 582.693539][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.702098][T16062] loop1: detected capacity change from 0 to 40427 [ 582.702708][T16064] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.712987][T16066] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0 [ 582.732012][T16066] EXT4-fs error (device loop3): ext4_free_blocks:6193: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 582.745856][T16066] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0 [ 582.759674][T16062] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 582.767127][T16062] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 582.775476][T16066] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 582.784743][T16066] EXT4-fs (loop3): 1 orphan inode deleted [ 582.790331][T16066] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 582.791852][T16062] F2FS-fs (loop1): invalid crc value [ 582.808388][T16062] F2FS-fs (loop1): Found nat_bits in checkpoint [ 582.838002][T16062] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 582.844979][T16062] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 582.853181][T16076] input: syz0 as /devices/virtual/input/input98 [ 582.870660][T16078] loop3: detected capacity change from 0 to 512 [ 582.884420][T16062] attempt to access beyond end of device [ 582.884420][T16062] loop1: rw=2049, want=45104, limit=40427 [ 582.888817][T16078] EXT4-fs (loop3): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 582.996063][ T656] usb 1-1: Using ep0 maxpacket: 32 [ 583.067762][T16082] loop3: detected capacity change from 0 to 512 [ 583.071984][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.084679][ T26] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 583.093542][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.102045][ T26] usb 5-1: config 0 descriptor?? [ 583.116079][T16082] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 583.202855][ T6] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 583.202867][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.216057][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.234430][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.321218][ T6856] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 583.430491][ T656] usb 1-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 583.440412][ T656] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.448388][ T656] usb 1-1: Product: syz [ 583.453213][ T656] usb 1-1: Manufacturer: syz [ 583.457730][ T656] usb 1-1: SerialNumber: syz [ 583.485641][ T656] usb 1-1: config 0 descriptor?? [ 583.530543][ T656] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 583.624517][ T6] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 583.625137][ T26] keytouch 0003:0926:3333.0082: fixing up Keytouch IEC report descriptor [ 583.641035][ T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0082/input/input99 [ 583.709644][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 583.733749][ T6856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.745097][ T6856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.754893][ T26] keytouch 0003:0926:3333.0082: input,hidraw0: USB HID v73.1e Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 583.755194][ T6] usb 1-1: USB disconnect, device number 47 [ 583.768188][ T6856] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 583.785229][ T6856] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 583.794064][ T6856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.802644][ T6856] usb 2-1: config 0 descriptor?? [ 583.808647][ T20] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 584.014441][T16088] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 584.356443][ T6856] wacom 0003:056A:0317.0083: unknown main item tag 0x0 [ 584.407113][ T6856] wacom 0003:056A:0317.0083: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 584.418236][ T6856] wacom 0003:056A:0317.0083: hidraw1: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 584.429978][ T6856] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.0083/input/input100 [ 584.447825][ T6] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 584.502385][T16088] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.513853][T16088] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.614884][T16088] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.639031][T16088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 584.676335][T16084] loop1: detected capacity change from 0 to 512 [ 584.682965][T16088] usb 3-1: SerialNumber: syz [ 584.731916][T16084] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 584.743308][T16084] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 584.753258][T16084] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 584.766499][T16084] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 584.774488][T16084] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.1: corrupted in-inode xattr [ 584.786777][T16084] EXT4-fs (loop1): Remounting filesystem read-only [ 584.793115][T16084] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 584.805341][T16084] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x0000000000000001,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 584.828033][T16084] UDC core: couldn't find an available UDC or it's busy: -16 [ 584.835221][T16084] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 584.842826][T16084] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 584.854097][T16084] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 584.863986][T16084] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 584.877215][T16084] EXT4-fs warning (device loop1): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 584.888480][T16084] EXT4-fs warning (device loop1): dx_probe:880: Enable large directory feature to access it [ 584.898387][T16084] EXT4-fs warning (device loop1): dx_probe:965: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended [ 584.902842][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 584.911470][T16084] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz-executor.1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 584.935501][T16084] EXT4-fs (loop1): Remounting filesystem read-only [ 584.944907][ T20] usb 2-1: USB disconnect, device number 56 [ 584.990235][T16088] usb 3-1: 0:2 : does not exist [ 584.995072][T16088] usb 3-1: unit 5: unexpected type 0x09 [ 585.001499][T16088] usb 3-1: USB disconnect, device number 36 [ 585.043785][ T6] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 585.227965][ T6] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 585.236986][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.244765][ T6] usb 4-1: Product: syz [ 585.248745][ T6] usb 4-1: Manufacturer: syz [ 585.253188][ T6] usb 4-1: SerialNumber: syz [ 585.513638][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.522904][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.535770][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.543141][T16105] loop1: detected capacity change from 0 to 256 [ 585.551411][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.560752][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.570059][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 585.584053][T16103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16103 comm=syz-executor.2 [ 585.597145][T16103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=16103 comm=syz-executor.2 [ 585.683616][T16108] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 585.689153][T16108] pim6reg0: linktype set to 776 [ 585.752166][T16088] usb 4-1: USB disconnect, device number 60 [ 585.879860][T16110] loop2: detected capacity change from 0 to 512 [ 585.911740][T16110] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 586.023741][ T6] usb 5-1: USB disconnect, device number 42 [ 586.040438][ C1] keytouch 0003:0926:3333.0082: usb_submit_urb(ctrl) failed: -19 [ 586.046305][T16116] loop4: detected capacity change from 0 to 512 [ 586.096366][T16116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 586.107484][T16116] ext4 filesystem being mounted at /root/syzkaller-testdir908218394/syzkaller.58pfGO/27/file0 supports timestamps until 2038 (0x7fffffff) [ 586.123851][T16116] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz-executor.4: corrupted inode contents [ 586.135836][T16123] input: syz0 as /devices/virtual/input/input103 [ 586.138101][T16116] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz-executor.4: mark_inode_dirty error [ 586.153591][T16116] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz-executor.4: corrupted inode contents [ 586.165739][T16116] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz-executor.4: mark_inode_dirty error [ 586.188612][T16116] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 586.233473][T16112] SELinux: Context is not valid (left unmapped). [ 586.863842][ T6] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 587.123878][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 587.201101][T16144] loop1: detected capacity change from 0 to 256 [ 587.297226][T16088] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 587.427333][ T6] usb 4-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=15.0a [ 587.436224][ T20] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 587.443628][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.451399][ T6] usb 4-1: Product: syz [ 587.455370][ T6] usb 4-1: Manufacturer: syz [ 587.459860][ T6] usb 4-1: SerialNumber: syz [ 587.464867][ T6] usb 4-1: config 0 descriptor?? [ 587.503681][ T6] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 587.686379][T16148] overlayfs: statfs failed on './file0' [ 587.709049][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 587.719813][T16088] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.730085][T16088] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.730266][ T6] usb 4-1: USB disconnect, device number 61 [ 587.790856][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 587.790872][ T30] audit: type=1400 audit(1718294754.288:2654): avc: denied { execmem } for pid=16150 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 587.828219][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.839124][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.850546][T16088] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 587.859403][T16088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 587.867434][T16088] usb 3-1: SerialNumber: syz [ 587.925666][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 587.934617][ T20] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 587.942453][ T20] usb 5-1: Product: syz [ 587.946899][ T20] usb 5-1: config 0 descriptor?? [ 588.034090][ T656] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 588.175503][T16088] usb 3-1: 0:2 : does not exist [ 588.180256][T16088] usb 3-1: unit 5 not found! [ 588.186097][T16088] usb 3-1: USB disconnect, device number 37 [ 588.254784][T16165] input: syz0 as /devices/virtual/input/input104 [ 588.315718][ T20] usbhid 5-1:0.0: can't add hid device: -71 [ 588.321530][ T20] usbhid: probe of 5-1:0.0 failed with error -71 [ 588.328239][ T20] usb 5-1: USB disconnect, device number 43 [ 588.416598][T16170] loop3: detected capacity change from 0 to 512 [ 588.456557][ T656] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.457577][T16170] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 588.467724][ T656] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 588.484100][ T656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.492641][ T656] usb 1-1: config 0 descriptor?? [ 588.805898][T16178] IPv4: Oversized IP packet from 127.202.26.0 [ 588.923197][T16088] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 588.987375][ T20] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 589.020514][ T656] keytouch 0003:0926:3333.0084: fixing up Keytouch IEC report descriptor [ 589.029817][ T656] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0084/input/input105 [ 589.108763][ T656] keytouch 0003:0926:3333.0084: input,hidraw0: USB HID v73.1e Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 589.113036][T16185] loop1: detected capacity change from 0 to 256 [ 589.345203][T16088] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.356106][T16088] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 589.368965][T16088] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 589.377475][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.377829][T16088] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.388692][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.397094][T16088] usb 4-1: config 0 descriptor?? [ 589.406643][ T20] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 589.419782][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.428111][ T20] usb 3-1: config 0 descriptor?? [ 589.667573][T16187] loop1: detected capacity change from 0 to 40427 [ 589.725000][T16187] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 589.732679][T16187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 589.741981][T16187] F2FS-fs (loop1): invalid crc value [ 589.748512][T16187] F2FS-fs (loop1): Found nat_bits in checkpoint [ 589.787607][T16187] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 589.794680][T16187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 589.816535][T16187] input: syz0 as /devices/virtual/input/input106 [ 589.827629][T16187] overlayfs: './file0' not a directory [ 589.867726][T16194] loop4: detected capacity change from 0 to 512 [ 589.909983][T16194] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 589.931103][T16088] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 589.938498][T16088] plantronics 0003:047F:FFFF.0085: No inputs registered, leaving [ 589.947251][T16088] plantronics 0003:047F:FFFF.0085: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 589.952756][ T20] petalynx 0003:18B1:0037.0086: invalid report_size -153529095 [ 589.967206][ T20] petalynx 0003:18B1:0037.0086: item 0 4 1 7 parsing failed [ 589.971760][T16196] __nla_validate_parse: 11 callbacks suppressed [ 589.971777][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 589.974762][ T20] petalynx 0003:18B1:0037.0086: parse failed [ 589.995581][ T20] petalynx: probe of 0003:18B1:0037.0086 failed with error -22 [ 590.040190][ T30] audit: type=1326 audit(1718294756.374:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf741faea9 code=0x7ffc0000 [ 590.064387][ T30] audit: type=1326 audit(1718294756.374:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf741faea9 code=0x7ffc0000 [ 590.088303][ T30] audit: type=1326 audit(1718294756.374:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7faf741faea9 code=0x7ffc0000 [ 590.112375][ T30] audit: type=1326 audit(1718294756.374:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf741faea9 code=0x7ffc0000 [ 590.138415][ T30] audit: type=1326 audit(1718294756.374:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16197 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf741faea9 code=0x7ffc0000 [ 590.190789][T16200] loop4: detected capacity change from 0 to 512 [ 590.265819][ T656] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 590.280328][T16200] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 590.310649][ T26] usb 3-1: USB disconnect, device number 38 [ 590.331279][ T6856] usb 4-1: USB disconnect, device number 62 [ 590.392053][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 590.688351][ T6] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 590.699227][ T656] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.709187][ T656] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.818538][ T656] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 590.827428][ T656] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 590.835789][ T656] usb 2-1: SerialNumber: syz [ 590.872338][ T30] audit: type=1326 audit(1718294757.131:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 590.905129][ T30] audit: type=1326 audit(1718294757.131:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 590.935156][ T30] audit: type=1326 audit(1718294757.140:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 590.959931][ T30] audit: type=1326 audit(1718294757.140:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc75bb9ea9 code=0x7ffc0000 [ 591.051185][T16213] input: syz0 as /devices/virtual/input/input107 [ 591.180081][ T656] usb 2-1: 0:2 : does not exist [ 591.185135][ T656] usb 2-1: unit 5: unexpected type 0x09 [ 591.199666][ T656] usb 2-1: USB disconnect, device number 57 [ 591.281717][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.291687][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 591.344590][T12045] usb 1-1: USB disconnect, device number 48 [ 591.358192][T16217] xt_TPROXY: Can be used only with -p tcp or -p udp [ 591.364780][ C1] keytouch 0003:0926:3333.0084: usb_submit_urb(ctrl) failed: -19 [ 591.381802][ T6] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 591.390689][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 591.398634][ T6] usb 5-1: SerialNumber: syz [ 591.707474][ T6] usb 5-1: 0:2 : does not exist [ 591.712241][ T6] usb 5-1: unit 5 not found! [ 591.718167][ T6] usb 5-1: USB disconnect, device number 44 [ 591.959995][T16230] loop2: detected capacity change from 0 to 2048 [ 592.010424][T16230] loop2: p3 < > p4 < > [ 592.014459][T16230] loop2: partition table partially beyond EOD, truncated [ 592.021364][T16230] loop2: p3 start 4284289 is beyond EOD, truncated [ 592.356900][ T656] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 592.530169][ T26] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 592.660214][ T656] usb 3-1: device descriptor read/64, error -71 [ 592.770187][T16256] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 592.974436][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.985202][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.994697][ T26] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 593.003570][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.011983][ T26] usb 5-1: config 0 descriptor?? [ 593.071872][T12045] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 593.126041][ T656] usb 3-1: device descriptor read/64, error -71 [ 593.429426][ T656] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 593.461993][T12045] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.471917][T12045] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.529215][ T26] petalynx 0003:18B1:0037.0087: invalid report_size -153529095 [ 593.537143][ T26] petalynx 0003:18B1:0037.0087: item 0 4 1 7 parsing failed [ 593.544471][ T26] petalynx 0003:18B1:0037.0087: parse failed [ 593.550488][ T26] petalynx: probe of 0003:18B1:0037.0087 failed with error -22 [ 593.559484][T12045] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 593.568343][T12045] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 593.568626][T16260] loop0: detected capacity change from 0 to 512 [ 593.576280][T12045] usb 2-1: SerialNumber: syz [ 593.625265][T16260] EXT4-fs (loop0): error: could not find journal device path: error -2 [ 593.759701][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 593.759718][ T30] audit: type=1326 audit(1718294759.798:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 593.789865][ T656] usb 3-1: device descriptor read/64, error -71 [ 593.796871][ T30] audit: type=1326 audit(1718294759.798:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 593.821093][ T30] audit: type=1326 audit(1718294759.808:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 593.844890][ T30] audit: type=1326 audit(1718294759.808:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 593.869544][ T30] audit: type=1326 audit(1718294759.808:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16263 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09349f4ea9 code=0x7ffc0000 [ 593.894648][T12045] usb 2-1: 0:2 : does not exist [ 593.899445][T12045] usb 2-1: unit 5 not found! [ 593.905438][T12045] usb 2-1: USB disconnect, device number 58 [ 593.913234][ T6] usb 5-1: USB disconnect, device number 45 [ 594.303024][ T30] audit: type=1326 audit(1718294760.297:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 594.317329][ T656] usb 3-1: device descriptor read/64, error -71 [ 594.334956][ T30] audit: type=1326 audit(1718294760.324:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 594.359212][ T30] audit: type=1326 audit(1718294760.324:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16279 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 594.385355][T16282] loop3: detected capacity change from 0 to 512 [ 594.428880][T16282] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz-executor.3: bad orphan inode 17 [ 594.439178][T16282] ext4_test_bit(bit=16, block=4) = 1 [ 594.444280][T16282] is_bad_inode(inode)=0 [ 594.448299][T16282] NEXT_ORPHAN(inode)=0 [ 594.452186][T16282] max_ino=32 [ 594.455221][T16282] i_nlink=1 [ 594.458200][T16282] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 594.471340][ T656] usb usb3-port1: attempt power cycle [ 594.571233][T16296] loop4: detected capacity change from 0 to 512 [ 594.586886][T16290] loop3: detected capacity change from 0 to 512 [ 594.626580][T16290] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 594.635999][T16296] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz-executor.4: bad orphan inode 17 [ 594.647765][T16296] ext4_test_bit(bit=16, block=4) = 1 [ 594.652933][T16296] is_bad_inode(inode)=0 [ 594.657030][T16296] NEXT_ORPHAN(inode)=0 [ 594.660997][T16296] max_ino=32 [ 594.664009][T16296] i_nlink=1 [ 594.667490][T16296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 594.668686][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.727368][ T30] audit: type=1326 audit(1718294760.694:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf741faea9 code=0x7ffc0000 [ 594.751386][ T30] audit: type=1326 audit(1718294760.694:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16306 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf741faea9 code=0x7ffc0000 [ 595.126246][T16311] device veth0_vlan left promiscuous mode [ 595.136629][T16311] device veth0_vlan entered promiscuous mode [ 595.279518][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 595.288238][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 595.296132][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 595.357873][ T656] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 595.374998][T16314] loop0: detected capacity change from 0 to 512 [ 595.386394][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 595.423940][T16314] EXT4-fs (loop0): error: could not find journal device path: error -2 [ 595.455391][ T6] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 595.658749][ T26] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 595.720048][T16329] loop3: detected capacity change from 0 to 512 [ 595.993462][T16329] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 596.011599][ T656] usb 3-1: device not accepting address 41, error -71 [ 596.094680][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.104649][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.130600][T16333] syz-executor.3[16333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.130660][T16333] syz-executor.3[16333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.145668][T16333] loop3: detected capacity change from 0 to 512 [ 596.192224][ T6] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 596.201130][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 596.209650][ T6] usb 2-1: SerialNumber: syz [ 596.209884][T16333] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 596.221180][T16333] EXT4-fs (loop3): bad geometry: block count 2164261120 exceeds size of device (256 blocks) [ 596.300504][ T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.310481][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.452223][ T26] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 596.461148][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 596.469123][ T26] usb 5-1: SerialNumber: syz [ 596.473821][ T656] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 597.005244][ T6] usb 2-1: 0:2 : does not exist [ 597.009982][ T6] usb 2-1: unit 5: unexpected type 0x09 [ 597.016533][ T6] usb 2-1: USB disconnect, device number 59 [ 597.069721][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 597.254796][ T656] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.350006][ T26] usb 5-1: 0:2 : does not exist [ 597.355523][ T26] usb 5-1: unit 5: unexpected type 0x09 [ 597.361750][ T656] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.371415][ T26] usb 5-1: USB disconnect, device number 46 [ 597.459809][ T656] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 597.468682][ T656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 597.476767][ T656] usb 3-1: SerialNumber: syz [ 597.557548][T16348] xt_TPROXY: Can be used only with -p tcp or -p udp [ 598.023699][ T656] usb 3-1: 0:2 : does not exist [ 598.028412][ T656] usb 3-1: unit 5 not found! [ 598.046709][ T656] usb 3-1: USB disconnect, device number 42 [ 598.981967][T16375] device veth0_vlan left promiscuous mode [ 598.994330][T16375] device veth0_vlan entered promiscuous mode [ 599.042610][T16380] xt_TPROXY: Can be used only with -p tcp or -p udp [ 599.106270][T16377] loop1: detected capacity change from 0 to 512 [ 599.139905][T16377] EXT4-fs (loop1): error: journal path ./file0 is not a block device [ 599.286015][T16400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.399316][ T315] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 599.420887][ T656] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 599.789096][ T6] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 600.049233][ T656] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.059253][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.069876][ T656] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.078551][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.088151][ T315] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 600.096929][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.105743][ T315] usb 3-1: config 0 descriptor?? [ 600.186251][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.196591][ T6] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.241444][ T656] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 600.251183][ T656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.259388][ T656] usb 1-1: SerialNumber: syz [ 600.287598][ T6] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 600.296870][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 600.305112][ T6] usb 4-1: SerialNumber: syz [ 600.384254][T16387] loop2: detected capacity change from 0 to 256 [ 600.558973][ T656] usb 1-1: 0:2 : does not exist [ 600.563803][ T656] usb 1-1: unit 5: unexpected type 0x09 [ 600.570535][ T656] usb 1-1: USB disconnect, device number 49 [ 600.678516][ T6] usb 4-1: 0:2 : does not exist [ 600.683258][ T6] usb 4-1: unit 5 not found! [ 600.688918][ T6] usb 4-1: USB disconnect, device number 63 [ 600.711222][ T315] hid-multitouch 0003:0EEF:72D0.0088: unbalanced delimiter at end of report description [ 600.721273][ T315] hid-multitouch: probe of 0003:0EEF:72D0.0088 failed with error -22 [ 600.931177][ T315] usb 3-1: USB disconnect, device number 43 [ 601.103779][T16417] xt_TPROXY: Can be used only with -p tcp or -p udp [ 601.388777][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 601.388803][ T30] audit: type=1326 audit(1718294766.841:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 601.462776][ T30] audit: type=1326 audit(1718294766.868:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 601.486552][ T30] audit: type=1326 audit(1718294766.905:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 601.512567][ T30] audit: type=1326 audit(1718294766.933:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771b2daea9 code=0x7ffc0000 [ 601.563350][T16421] loop0: detected capacity change from 0 to 512 [ 601.588727][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.596088][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.603419][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.610779][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.618061][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.625439][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.633192][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.640520][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.642883][T16421] EXT4-fs (loop0): error: journal path ./file0 is not a block device [ 601.663840][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.671092][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.678292][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.685534][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.692777][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.700225][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.707411][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 601.714570][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.001791][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.018033][T16446] syz-executor.3[16446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 602.018116][T16446] syz-executor.3[16446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 602.029945][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.049007][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.056337][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.063633][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.070859][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.078085][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.085228][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.092537][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.099715][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.106852][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.114076][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.121264][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.128456][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.135683][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.142890][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.150065][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.157276][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.164481][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.171678][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.178895][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.186124][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.193285][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.200506][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.207713][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.214904][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.222119][ T20] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 602.229766][ T20] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz0] on syz0 [ 602.273461][T16452] loop3: detected capacity change from 0 to 1024 [ 602.280652][ T30] audit: type=1326 audit(1718294767.662:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf741faea9 code=0x0 [ 602.285117][T16458] loop1: detected capacity change from 0 to 512 [ 602.325388][T16452] EXT4-fs (loop3): Test dummy encryption mode enabled [ 602.332262][T16452] EXT4-fs (loop3): Ignoring removed orlov option [ 602.338503][ T30] audit: type=1326 audit(1718294767.708:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16453 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7faf741faea9 code=0x0 [ 602.366538][T16458] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 602.380013][T16452] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 602.408359][T16458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.1: missing EA_INODE flag [ 602.413125][T16452] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.420320][T16458] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 2 err=-117 [ 602.441725][ T30] audit: type=1400 audit(1718294767.791:2761): avc: denied { create } for pid=16451 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 602.442032][T16458] EXT4-fs (loop1): 1 orphan inode deleted [ 602.467926][T16458] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 602.577383][ T30] audit: type=1400 audit(1718294767.791:2762): avc: denied { write } for pid=16451 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 602.609941][T16452] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 602.629174][ T30] audit: type=1400 audit(1718294767.791:2763): avc: denied { nlmsg_write } for pid=16451 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 602.872328][ T30] audit: type=1400 audit(1718294768.207:2764): avc: denied { bind } for pid=16466 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 603.000053][T16478] syz-executor.1[16478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.000358][T16478] syz-executor.1[16478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.548328][T16500] BUG: unable to handle page fault for address: ffffffffff600000 [ 603.567429][T16500] #PF: supervisor read access in kernel mode [ 603.573238][T16500] #PF: error_code(0x0001) - permissions violation [ 603.579491][T16500] PGD 6812067 P4D 6812067 PUD 6814067 PMD 6816067 PTE 8000000006809165 [ 603.587563][T16500] Oops: 0001 [#1] PREEMPT SMP KASAN [ 603.592596][T16500] CPU: 0 PID: 16500 Comm: syz-executor.3 Tainted: G W 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 603.604137][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 603.614056][T16500] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 603.620107][T16500] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 603.639558][T16500] RSP: 0018:ffffc90000ef7030 EFLAGS: 00010292 [ 603.645451][T16500] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff888110c8e2c0 [ 603.653264][T16500] RDX: ffff888110c8ee50 RSI: 0000000000000008 RDI: 0000000000000007 [ 603.661072][T16500] RBP: ffffc90000ef7068 R08: ffffffff8199a795 R09: ffffed1022191c59 [ 603.668886][T16500] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 603.676695][T16500] R13: 0000000000000000 R14: ffffc90000ef70c8 R15: ffffc90000ef70d0 [ 603.684509][T16500] FS: 00007f771a6556c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 603.693274][T16500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 603.699697][T16500] CR2: ffffffffff600000 CR3: 000000011a149000 CR4: 00000000003506b0 [ 603.707509][T16500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 603.715327][T16500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 603.723128][T16500] Call Trace: [ 603.726254][T16500] [ 603.729035][T16500] ? __die_body+0x62/0xb0 [ 603.733198][T16500] ? __die+0x7e/0x90 [ 603.736931][T16500] ? page_fault_oops+0x7f9/0xa90 [ 603.741708][T16500] ? kernelmode_fixup_or_oops+0x270/0x270 [ 603.747260][T16500] ? 0xffffffffa002a000 [ 603.751252][T16500] ? is_bpf_text_address+0x172/0x190 [ 603.756374][T16500] ? __kernel_text_address+0x9b/0x110 [ 603.761581][T16500] ? exc_page_fault+0x521/0x830 [ 603.766274][T16500] ? asm_exc_page_fault+0x27/0x30 [ 603.771128][T16500] ? copy_from_kernel_nofault+0x75/0x2e0 [ 603.776605][T16500] ? copy_from_kernel_nofault+0x86/0x2e0 [ 603.782066][T16500] bpf_probe_read_compat+0x112/0x180 [ 603.787186][T16500] bpf_prog_baa065642a502c00+0x64/0xd2c [ 603.792576][T16500] bpf_trace_run6+0x18d/0x2c0 [ 603.797079][T16500] ? bpf_trace_run5+0x290/0x290 [ 603.801768][T16500] ? ext4_ext_check_inode+0x80/0x80 [ 603.806800][T16500] __bpf_trace_ext4_ext_remove_space_done+0x4a/0x60 [ 603.813223][T16500] ext4_ext_remove_space+0x48b4/0x4a60 [ 603.818518][T16500] ? __kasan_check_write+0x14/0x20 [ 603.823464][T16500] ? ext4_es_insert_extent+0x2ff0/0x2ff0 [ 603.828939][T16500] ? _raw_write_lock+0xa4/0x170 [ 603.833615][T16500] ? __ext4_mark_inode_dirty+0x53c/0x7a0 [ 603.839092][T16500] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 603.844905][T16500] ? ext4_es_remove_extent+0x297/0x460 [ 603.850194][T16500] ? ext4_es_lookup_extent+0x940/0x940 [ 603.855491][T16500] ext4_ext_truncate+0x19a/0x240 [ 603.860264][T16500] ext4_truncate+0x96c/0xfa0 [ 603.864691][T16500] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 603.870168][T16500] ext4_setattr+0xf84/0x1940 [ 603.874581][T16500] ? current_time+0x1af/0x2f0 [ 603.879099][T16500] ? ext4_write_inode+0x730/0x730 [ 603.883958][T16500] notify_change+0xc7a/0xf30 [ 603.888385][T16500] ? cap_inode_need_killpriv+0x51/0x60 [ 603.893679][T16500] do_truncate+0x21c/0x300 [ 603.897930][T16500] ? put_page_bootmem+0x190/0x190 [ 603.902799][T16500] path_openat+0x28ed/0x2f40 [ 603.907220][T16500] ? kmem_cache_free+0x116/0x2e0 [ 603.911993][T16500] ? __kasan_slab_alloc+0xb1/0xe0 [ 603.916851][T16500] ? kmem_cache_alloc+0xf5/0x200 [ 603.921627][T16500] ? getname_flags+0xba/0x520 [ 603.926138][T16500] ? __x64_sys_openat+0x243/0x290 [ 603.931000][T16500] ? do_filp_open+0x460/0x460 [ 603.935516][T16500] do_filp_open+0x21c/0x460 [ 603.939851][T16500] ? vfs_tmpfile+0x2c0/0x2c0 [ 603.944283][T16500] do_sys_openat2+0x13f/0x830 [ 603.948792][T16500] ? do_sys_open+0x220/0x220 [ 603.953217][T16500] ? security_bpf+0x82/0xb0 [ 603.957559][T16500] __x64_sys_openat+0x243/0x290 [ 603.962245][T16500] ? __ia32_sys_open+0x270/0x270 [ 603.967017][T16500] ? __kasan_check_read+0x11/0x20 [ 603.971879][T16500] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 603.977347][T16500] do_syscall_64+0x3d/0xb0 [ 603.981600][T16500] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 603.987330][T16500] RIP: 0033:0x7f771b2daea9 [ 603.991583][T16500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 604.011020][T16500] RSP: 002b:00007f771a6550c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.019265][T16500] RAX: ffffffffffffffda RBX: 00007f771b411f80 RCX: 00007f771b2daea9 [ 604.027079][T16500] RDX: 0000000000007a05 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 604.034895][T16500] RBP: 00007f771b349ff4 R08: 0000000000000000 R09: 0000000000000000 [ 604.042703][T16500] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000 [ 604.050511][T16500] R13: 000000000000000b R14: 00007f771b411f80 R15: 00007ffc5db00e88 [ 604.058327][T16500] [ 604.061193][T16500] Modules linked in: [ 604.064921][T16500] CR2: ffffffffff600000 [ 604.068927][T16500] ---[ end trace d956892242d3c1ae ]--- [ 604.068974][T15770] BUG: unable to handle page fault for address: ffffffffff600000 [ 604.074207][T16500] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 604.081759][T15770] #PF: supervisor read access in kernel mode [ 604.087833][T16500] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 604.093650][T15770] #PF: error_code(0x0001) - permissions violation [ 604.113090][T16500] RSP: 0018:ffffc90000ef7030 EFLAGS: 00010292 [ 604.119342][T15770] PGD 6812067 P4D 6812067 PUD 6814067 [ 604.125239][T16500] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff888110c8e2c0 [ 604.125257][T16500] RDX: ffff888110c8ee50 RSI: 0000000000000008 RDI: 0000000000000007 [ 604.130535][T15770] PMD 6816067 [ 604.138344][T16500] RBP: ffffc90000ef7068 R08: ffffffff8199a795 R09: ffffed1022191c59 [ 604.146161][T15770] PTE 8000000006809165 [ 604.149369][T16500] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 604.157178][T15770] [ 604.157184][T15770] Oops: 0001 [#2] PREEMPT SMP KASAN [ 604.161085][T16500] R13: 0000000000000000 R14: ffffc90000ef70c8 R15: ffffc90000ef70d0 [ 604.168900][T15770] CPU: 1 PID: 15770 Comm: syz-executor.4 Tainted: G D W 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 604.171069][T16500] FS: 00007f771a6556c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 604.176100][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 604.183912][T16500] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.195456][T15770] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 604.204222][T16500] CR2: ffffffffff600000 CR3: 000000011a149000 CR4: 00000000003506b0 [ 604.214116][T15770] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 604.220541][T16500] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 604.226616][T15770] RSP: 0018:ffffc90000ff7510 EFLAGS: 00010292 [ 604.234426][T16500] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 604.253868][T15770] [ 604.253874][T15770] RAX: 0000000000000000 RBX: 00007ffffffff000 RCX: ffff88810fa013c0 [ 604.261692][T16500] Kernel panic - not syncing: Fatal exception [ 604.267580][T15770] RDX: ffff88810fa01f50 RSI: 0000000000000008 RDI: 0000000000000007 [ 604.299093][T15770] RBP: ffffc90000ff7548 R08: ffffffff8199a795 R09: ffffed1021f40279 [ 604.306902][T15770] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 604.314712][T15770] R13: 0000000000000000 R14: ffffc90000ff75a8 R15: ffffc90000ff75b0 [ 604.322525][T15770] FS: 000055555694b480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 604.331285][T15770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.337710][T15770] CR2: ffffffffff600000 CR3: 000000011c30f000 CR4: 00000000003506a0 [ 604.345524][T15770] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 604.353332][T15770] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 604.361143][T15770] Call Trace: [ 604.364270][T15770] [ 604.367051][T15770] ? __die_body+0x62/0xb0 [ 604.371212][T15770] ? __die+0x7e/0x90 [ 604.374945][T15770] ? page_fault_oops+0x7f9/0xa90 [ 604.379720][T15770] ? kernelmode_fixup_or_oops+0x270/0x270 [ 604.385275][T15770] ? __kasan_check_write+0x14/0x20 [ 604.390221][T15770] ? __jbd2_journal_temp_unlink_buffer+0x392/0x440 [ 604.396669][T15770] ? __kasan_check_write+0x14/0x20 [ 604.401632][T15770] ? exc_page_fault+0x521/0x830 [ 604.406311][T15770] ? asm_exc_page_fault+0x27/0x30 [ 604.411163][T15770] ? copy_from_kernel_nofault+0x75/0x2e0 [ 604.416630][T15770] ? copy_from_kernel_nofault+0x86/0x2e0 [ 604.422100][T15770] bpf_probe_read_compat+0x112/0x180 [ 604.427224][T15770] bpf_prog_baa065642a502c00+0x64/0xd2c [ 604.432600][T15770] bpf_trace_run6+0x18d/0x2c0 [ 604.437115][T15770] ? bpf_trace_run5+0x290/0x290 [ 604.441802][T15770] ? __ext4_ext_dirty+0x133/0x1f0 [ 604.446667][T15770] __bpf_trace_ext4_ext_remove_space_done+0x4a/0x60 [ 604.453088][T15770] ext4_ext_remove_space+0x48b4/0x4a60 [ 604.458391][T15770] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 604.464196][T15770] ? ext4_es_remove_extent+0x297/0x460 [ 604.469488][T15770] ? ext4_es_lookup_extent+0x940/0x940 [ 604.474784][T15770] ext4_ext_truncate+0x19a/0x240 [ 604.479555][T15770] ext4_truncate+0x96c/0xfa0 [ 604.483984][T15770] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 604.489451][T15770] ? __kasan_check_read+0x11/0x20 [ 604.494310][T15770] ? ext4_inode_is_fast_symlink+0x322/0x3d0 [ 604.500039][T15770] ? ext4_evict_inode+0xb8d/0x14e0 [ 604.504987][T15770] ext4_evict_inode+0xcee/0x14e0 [ 604.509760][T15770] ? _raw_spin_unlock+0x4d/0x70 [ 604.514450][T15770] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 604.520176][T15770] ? _raw_spin_unlock+0x4d/0x70 [ 604.524863][T15770] ? inode_io_list_del+0x18b/0x1a0 [ 604.529809][T15770] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 604.535539][T15770] evict+0x2a3/0x630 [ 604.539272][T15770] iput+0x63b/0x7e0 [ 604.542914][T15770] do_unlinkat+0x4e1/0x920 [ 604.547170][T15770] ? fsnotify_link_count+0x100/0x100 [ 604.552290][T15770] ? getname_flags+0x1fd/0x520 [ 604.556891][T15770] __x64_sys_unlink+0x49/0x50 [ 604.561400][T15770] do_syscall_64+0x3d/0xb0 [ 604.565653][T15770] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 604.571381][T15770] RIP: 0033:0x7faf741fa657 [ 604.575639][T15770] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 604.595077][T15770] RSP: 002b:00007ffc934495e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 604.603321][T15770] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007faf741fa657 [ 604.611132][T15770] RDX: 00007ffc93449610 RSI: 00007ffc934496a0 RDI: 00007ffc934496a0 [ 604.618942][T15770] RBP: 00007ffc934496a0 R08: 0000000000000000 R09: 0000000000000000 [ 604.626758][T15770] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc9344a750 [ 604.634564][T15770] R13: 00007faf74257636 R14: 000000000008e933 R15: 0000000000000003 [ 604.642382][T15770] [ 604.645242][T15770] Modules linked in: [ 604.648979][T15770] CR2: ffffffffff600000 [ 604.652971][T15770] ---[ end trace d956892242d3c1af ]--- [ 604.658262][T15770] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 604.664336][T15770] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 604.683777][T15770] RSP: 0018:ffffc90000ef7030 EFLAGS: 00010292 [ 604.689689][T15770] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff888110c8e2c0 [ 604.697491][T15770] RDX: ffff888110c8ee50 RSI: 0000000000000008 RDI: 0000000000000007 [ 604.705304][T15770] RBP: ffffc90000ef7068 R08: ffffffff8199a795 R09: ffffed1022191c59 [ 604.713115][T15770] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 604.720924][T15770] R13: 0000000000000000 R14: ffffc90000ef70c8 R15: ffffc90000ef70d0 [ 604.728740][T15770] FS: 000055555694b480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 604.737503][T15770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.743925][T15770] CR2: ffffffffff600000 CR3: 000000011c30f000 CR4: 00000000003506a0 [ 604.751745][T15770] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 604.759545][T15770] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 605.475415][T16500] Shutting down cpus with NMI [ 605.480179][T16500] Kernel Offset: disabled [ 605.484304][T16500] Rebooting in 86400 seconds..