last executing test programs: 1.283620801s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40}]) dup3(r4, r2, 0x0) 1.270945633s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240), 0x2000000, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x40000000) 830.475541ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000b0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000041"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r1}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 817.516183ms ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x230081, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) syz_io_uring_setup(0x24f8, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB='P'], 0x50}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000040), 0x7, 0x50d, &(0x7f00000006c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d}) 782.092518ms ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8800, 0x0, 0x0) sendmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000100)="695281dc03d147bc023b63ecf80e1489ea9e3486285599eef3fe286b9707a81c9df069f885692826b90cbe8596ffe6c5bcf7850eddfd8895db60aa43f9e4f174b382f202", 0x44}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 775.89529ms ago: executing program 3: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 765.005192ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000001e18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x12) 727.616517ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r0, 0x0, 0xda00) 709.11971ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'cpuset'}]}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 699.188541ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000002000)) 656.995668ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 634.273111ms ago: executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x8004) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=0x0) syz_open_procfs(r3, &(0x7f00000003c0)='net/ip_mr_cache\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 616.910355ms ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002078020000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) fsopen(0x0, 0x0) setuid(0x0) lseek(0xffffffffffffffff, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) 541.110766ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 526.741428ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1000, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r2}, 0x10) unlink(&(0x7f00000007c0)='./cgroup\x00') 240.702572ms ago: executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 229.266584ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) 212.508317ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='block_bio_remap\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)) 212.115216ms ago: executing program 2: socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000700)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data}}}}}, 0x0) 203.826598ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"}) 163.964664ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 142.490107ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0), 0xf01, 0x0) 97.575334ms ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 81.567617ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c3075f6ad59300"}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 64.57507ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) 46.810492ms ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x5bf, &(0x7f0000000000)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x5, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="8500000019000000950034000000fc01"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x8000, 0x0) r4 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f0000000600)=[{r8}], 0x1, &(0x7f0000000680), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x100000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000740)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffffff) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000002280)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 37.685513ms ago: executing program 4: mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) 21.200796ms ago: executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.845779ms ago: executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x2, 0x0, @multicast1}, 0x10) 0s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): nics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 87.637317][ T580] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 87.646303][ T580] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 87.699601][ T528] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 87.710318][ T528] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 87.720079][ T528] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.732932][ T528] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.741793][ T528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.800193][ T528] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 88.169966][ T332] usb 4-1: USB disconnect, device number 12 [ 88.409450][ T528] usb 1-1: USB disconnect, device number 6 [ 88.536251][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.543177][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.550991][ T3486] device bridge_slave_0 entered promiscuous mode [ 88.557895][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.564801][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.572527][ T3486] device bridge_slave_1 entered promiscuous mode [ 88.623923][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.630787][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.637858][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.644674][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.671041][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.687751][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.695255][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.721055][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.729672][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.736543][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.744518][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.752918][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.759881][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.767126][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.781235][ T3505] loop3: detected capacity change from 0 to 256 [ 88.787914][ T3505] exfat: Bad value for 'uid' [ 88.789429][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.809250][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.817039][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.825092][ T528] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 88.839265][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.851354][ T3486] device veth0_vlan entered promiscuous mode [ 88.858799][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.866865][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.881707][ T3486] device veth1_macvtap entered promiscuous mode [ 88.892915][ T3505] loop3: detected capacity change from 0 to 512 [ 88.900456][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.907738][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.914960][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.922853][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.930991][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.938705][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.946914][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.955165][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.963528][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.984941][ T3509] loop2: detected capacity change from 0 to 256 [ 88.993571][ T3509] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 89.089033][ T528] usb 1-1: Using ep0 maxpacket: 16 [ 89.439448][ T528] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.450230][ T528] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.459876][ T528] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 89.469499][ T528] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 89.519108][ T580] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 89.589041][ T528] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.598044][ T528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.619610][ T528] usb 1-1: SerialNumber: syz [ 89.640678][ T3522] loop1: detected capacity change from 0 to 512 [ 89.650614][ T3522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.659496][ T3522] ext4 filesystem being mounted at /root/syzkaller-testdir1332963332/syzkaller.5zYmT7/76/file0 supports timestamps until 2038 (0x7fffffff) [ 89.677431][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 89.677444][ T28] audit: type=1400 audit(1718613124.747:961): avc: denied { write } for pid=3521 comm="syz-executor.1" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.706077][ T528] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 89.706597][ T2931] EXT4-fs (loop1): unmounting filesystem. [ 89.714129][ T528] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 89.886130][ T528] usb 1-1: USB disconnect, device number 7 [ 89.889079][ T580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.913190][ T580] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.927918][ T580] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.937356][ T580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.945883][ T580] usb 3-1: config 0 descriptor?? [ 89.960038][ T382] device bridge_slave_1 left promiscuous mode [ 89.966165][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.973728][ T382] device bridge_slave_0 left promiscuous mode [ 89.979957][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.988273][ T382] device veth1_macvtap left promiscuous mode [ 89.994262][ T382] device veth0_vlan left promiscuous mode [ 90.034928][ T3534] syz-executor.3[3534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.035006][ T3534] syz-executor.3[3534] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.668003][ T580] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 90.699010][ T580] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 90.709248][ T580] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 90.717772][ T3551] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 91.170573][ T28] audit: type=1400 audit(1718613126.237:962): avc: denied { map } for pid=3566 comm="syz-executor.1" path="socket:[32261]" dev="sockfs" ino=32261 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.271442][ T3571] loop1: detected capacity change from 0 to 256 [ 91.404581][ T528] usb 3-1: USB disconnect, device number 9 [ 91.471878][ T28] audit: type=1400 audit(1718613126.537:963): avc: denied { read write } for pid=3580 comm="syz-executor.2" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 91.496027][ T28] audit: type=1400 audit(1718613126.537:964): avc: denied { open } for pid=3580 comm="syz-executor.2" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 93.347034][ T3615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3615 comm=syz-executor.3 [ 93.360030][ T28] audit: type=1400 audit(1718613128.427:965): avc: denied { read } for pid=3614 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 93.360229][ T3615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3615 comm=syz-executor.3 [ 93.417952][ T28] audit: type=1400 audit(1718613128.477:966): avc: denied { relabelfrom } for pid=3622 comm="syz-executor.3" name="" dev="pipefs" ino=32357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 93.861972][ T3661] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3661 comm=syz-executor.1 [ 93.875243][ T3661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3661 comm=syz-executor.1 [ 94.381072][ T3688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3688 comm=syz-executor.3 [ 94.394428][ T3688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3688 comm=syz-executor.3 [ 94.474417][ T28] audit: type=1326 audit(1718613129.537:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9127cf29 code=0x7ffc0000 [ 94.498208][ T28] audit: type=1326 audit(1718613129.547:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab9127cf29 code=0x7ffc0000 [ 94.522172][ T28] audit: type=1326 audit(1718613129.547:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9127cf29 code=0x7ffc0000 [ 94.546220][ T28] audit: type=1326 audit(1718613129.547:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3698 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab9127cf29 code=0x7ffc0000 [ 94.604069][ T3699] device veth1_macvtap left promiscuous mode [ 94.697667][ T3713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3713 comm=syz-executor.2 [ 94.722666][ T3713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3713 comm=syz-executor.2 [ 94.900585][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 94.900615][ T28] audit: type=1400 audit(1718613129.967:1192): avc: denied { remount } for pid=3734 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 94.944463][ T28] audit: type=1400 audit(1718613130.007:1193): avc: denied { create } for pid=3740 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.965278][ T28] audit: type=1400 audit(1718613130.007:1194): avc: denied { connect } for pid=3740 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.987208][ T28] audit: type=1400 audit(1718613130.037:1195): avc: denied { setopt } for pid=3740 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.018886][ T3746] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3746 comm=syz-executor.1 [ 95.032246][ T3746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3746 comm=syz-executor.1 [ 95.219894][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.226954][ T3758] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.234311][ T3758] device bridge_slave_0 entered promiscuous mode [ 95.241018][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.247863][ T3758] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.255293][ T3758] device bridge_slave_1 entered promiscuous mode [ 95.303823][ T3758] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.310706][ T3758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.317796][ T3758] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.324574][ T3758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.345699][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.354320][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.362785][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.382625][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.390604][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.397430][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.404618][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.412578][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.419415][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.426600][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.440982][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.456512][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.464914][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.472291][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.479582][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.490717][ T3758] device veth0_vlan entered promiscuous mode [ 95.502196][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.511949][ T3758] device veth1_macvtap entered promiscuous mode [ 95.523625][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.537626][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.719772][ T43] device bridge_slave_1 left promiscuous mode [ 95.725777][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.749653][ T43] device bridge_slave_0 left promiscuous mode [ 95.765800][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.780895][ T43] device veth0_vlan left promiscuous mode [ 96.113831][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.120817][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.128054][ T3810] device bridge_slave_0 entered promiscuous mode [ 96.135018][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.141893][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.149266][ T3810] device bridge_slave_1 entered promiscuous mode [ 96.193763][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.200663][ T3810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.207694][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.214514][ T3810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.234246][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.241694][ T2210] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.248836][ T2210] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.259139][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.267127][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.273978][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.283208][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.291644][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.298499][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.315959][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.324031][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.338294][ T3810] device veth0_vlan entered promiscuous mode [ 96.345610][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.354160][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.362555][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.370312][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.385358][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.402496][ T3810] device veth1_macvtap entered promiscuous mode [ 96.413571][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.432868][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.579416][ T3839] loop2: detected capacity change from 0 to 1024 [ 96.612214][ T3839] EXT4-fs: Ignoring removed orlov option [ 96.700092][ T3839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.741296][ T3839] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.815842][ T3839] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 96.889656][ T3839] EXT4-fs (loop2): invalid journal inode [ 96.897361][ T3839] EXT4-fs (loop2): can't get journal size [ 96.915797][ T3839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.324515][ T3758] EXT4-fs (loop2): unmounting filesystem. [ 99.068906][ C1] sched: RT throttling activated [ 99.202204][ T3875] incfs: Can't find or create .index dir in ./file0 [ 99.208679][ T3875] incfs: mount failed -14 [ 99.236778][ T28] audit: type=1326 audit(1718613134.297:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e487cf29 code=0x7ffc0000 [ 99.264273][ T28] audit: type=1326 audit(1718613134.327:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e487cf29 code=0x7ffc0000 [ 99.288468][ T28] audit: type=1326 audit(1718613134.327:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9e487cf29 code=0x7ffc0000 [ 99.288639][ T43] device bridge_slave_1 left promiscuous mode [ 99.315091][ T28] audit: type=1326 audit(1718613134.327:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e487cf29 code=0x7ffc0000 [ 99.343391][ T28] audit: type=1326 audit(1718613134.327:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9e487cf29 code=0x7ffc0000 [ 99.367249][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.372726][ T28] audit: type=1326 audit(1718613134.327:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3876 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9e487cf29 code=0x7ffc0000 [ 99.397957][ T43] device bridge_slave_0 left promiscuous mode [ 99.404066][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.434781][ T43] device veth1_macvtap left promiscuous mode [ 99.440723][ T43] device veth0_vlan left promiscuous mode [ 99.543804][ T3877] device veth1_macvtap left promiscuous mode [ 99.553664][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.613201][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.620508][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.627980][ T3879] device bridge_slave_0 entered promiscuous mode [ 99.635286][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.648511][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.655981][ T3879] device bridge_slave_1 entered promiscuous mode [ 99.784059][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.790943][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.798027][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.804834][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.818604][ T3897] loop0: detected capacity change from 0 to 40427 [ 99.829771][ T3897] F2FS-fs (loop0): invalid crc value [ 99.850879][ T3897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 99.860276][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.868023][ T528] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.889639][ T528] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.920362][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.928455][ T2210] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.935328][ T2210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.945521][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.954075][ T3897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.961930][ T2210] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.964456][ T3924] loop3: detected capacity change from 0 to 512 [ 99.968776][ T2210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.968990][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.987349][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 99.987364][ T28] audit: type=1400 audit(1718613135.047:1336): avc: denied { rename } for pid=3896 comm="syz-executor.0" name="file6" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 99.989782][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.027819][ T3924] EXT4-fs (loop3): 1 truncate cleaned up [ 100.045180][ T3879] device veth0_vlan entered promiscuous mode [ 100.051274][ T3924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.061768][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.070306][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.078345][ T2872] syz-executor.0: attempt to access beyond end of device [ 100.078345][ T2872] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.094472][ T3810] EXT4-fs (loop3): unmounting filesystem. [ 100.100589][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.108597][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.128465][ T3879] device veth1_macvtap entered promiscuous mode [ 100.137709][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.164848][ T3932] bridge0: port 3(vlan2) entered blocking state [ 100.178703][ T3932] bridge0: port 3(vlan2) entered disabled state [ 100.189350][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.197482][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.206063][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.214274][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.223292][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.619753][ T3948] loop3: detected capacity change from 0 to 2048 [ 100.721252][ T3948] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.732780][ T3948] EXT4-fs (loop3): unmounting filesystem. [ 101.060395][ T43] device veth1_macvtap left promiscuous mode [ 101.066273][ T43] device veth0_vlan left promiscuous mode [ 102.037343][ T28] audit: type=1400 audit(1718613137.097:1337): avc: denied { unmount } for pid=3879 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 102.091096][ T3973] loop4: detected capacity change from 0 to 256 [ 102.109960][ T3973] FAT-fs (loop4): Directory bread(block 64) failed [ 102.116311][ T3973] FAT-fs (loop4): Directory bread(block 65) failed [ 102.129359][ T3973] FAT-fs (loop4): Directory bread(block 66) failed [ 102.136703][ T3973] FAT-fs (loop4): Directory bread(block 67) failed [ 102.144822][ T3973] FAT-fs (loop4): Directory bread(block 68) failed [ 102.151423][ T3973] FAT-fs (loop4): Directory bread(block 69) failed [ 102.157778][ T3973] FAT-fs (loop4): Directory bread(block 70) failed [ 102.184596][ T3973] FAT-fs (loop4): Directory bread(block 71) failed [ 102.193590][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.219293][ T3973] FAT-fs (loop4): Directory bread(block 72) failed [ 102.235341][ T3966] loop3: detected capacity change from 0 to 40427 [ 102.241384][ T3973] FAT-fs (loop4): Directory bread(block 73) failed [ 102.254026][ T3966] F2FS-fs (loop3): invalid crc value [ 102.273662][ T3966] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.302126][ T3983] bridge0: port 3(vlan2) entered blocking state [ 102.319042][ T3983] bridge0: port 3(vlan2) entered disabled state [ 102.336761][ T3985] incfs: Can't find or create .index dir in ./file0 [ 102.336886][ T3966] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 102.369056][ T3985] incfs: mount failed -14 [ 102.417459][ T3810] syz-executor.3: attempt to access beyond end of device [ 102.417459][ T3810] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.461343][ T3993] syz-executor.0 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 102.556160][ T28] audit: type=1400 audit(1718613137.617:1338): avc: denied { setopt } for pid=3998 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.580885][ T28] audit: type=1400 audit(1718613137.637:1339): avc: denied { read } for pid=3998 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 102.649129][ T28] audit: type=1400 audit(1718613137.717:1340): avc: denied { nlmsg_read } for pid=4006 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.701897][ T4012] incfs: Can't find or create .index dir in ./file0 [ 102.708378][ T4012] incfs: mount failed -14 [ 102.999003][ T528] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 103.060495][ T2210] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.248992][ T528] usb 2-1: Using ep0 maxpacket: 16 [ 103.379265][ T528] usb 2-1: config 0 has no interfaces? [ 103.384621][ T528] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 103.393771][ T528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.402282][ T528] usb 2-1: config 0 descriptor?? [ 103.428242][ T4038] loop3: detected capacity change from 0 to 512 [ 103.439039][ T2210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.442369][ T4038] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz-executor.3: corrupted inode contents [ 103.450407][ T2210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.463263][ T4038] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #16: comm syz-executor.3: mark_inode_dirty error [ 103.472620][ T2210] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 103.483798][ T4038] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz-executor.3: corrupted inode contents [ 103.492303][ T2210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.504353][ T4038] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz-executor.3: mark_inode_dirty error [ 103.512701][ T2210] usb 1-1: config 0 descriptor?? [ 103.523597][ T4038] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz-executor.3: corrupted inode contents [ 103.540719][ T4038] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 103.549461][ T4038] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #16: comm syz-executor.3: corrupted inode contents [ 103.561837][ T4038] EXT4-fs error (device loop3): ext4_truncate:4302: inode #16: comm syz-executor.3: mark_inode_dirty error [ 103.573427][ T4038] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 103.582667][ T4038] EXT4-fs (loop3): 1 truncate cleaned up [ 103.588265][ T4038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.597079][ T4038] ext4 filesystem being mounted at /root/syzkaller-testdir3301814626/syzkaller.dAKnQQ/20/file1 supports timestamps until 2038 (0x7fffffff) [ 103.611377][ T43] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.623969][ T4038] 8021q: VLANs not supported on lo [ 103.633487][ T3810] EXT4-fs (loop3): unmounting filesystem. [ 103.639645][ T381] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 103.710544][ T65] usb 2-1: USB disconnect, device number 8 [ 103.969000][ T528] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.229003][ T528] usb 5-1: Using ep0 maxpacket: 16 [ 104.359086][ T528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.369832][ T528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.379350][ T528] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.391997][ T528] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 104.400776][ T528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.408994][ T528] usb 5-1: config 0 descriptor?? [ 104.649013][ T2210] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 104.657676][ T2210] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 104.665788][ T2210] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 104.674182][ T2210] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 104.681545][ T2210] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 104.683630][ T28] audit: type=1400 audit(1718613139.747:1341): avc: denied { read } for pid=4068 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.690045][ T2210] usb 1-1: USB disconnect, device number 8 [ 104.879866][ T528] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 104.887605][ T528] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 104.896101][ T528] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 104.907696][ T528] microsoft 0003:045E:07DA.000A: no inputs found [ 104.914092][ T528] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 105.132862][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.142503][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.151547][ T65] usb 5-1: USB disconnect, device number 8 [ 105.152521][ T4081] bridge0: port 3(vlan2) entered blocking state [ 105.163544][ T4081] bridge0: port 3(vlan2) entered disabled state [ 105.189353][ T4087] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 105.238481][ T4094] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.588969][ T19] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 105.662563][ T4115] bridge0: port 3(vlan2) entered blocking state [ 105.668719][ T4115] bridge0: port 3(vlan2) entered disabled state [ 105.742386][ T4123] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.765705][ T4127] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.949011][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.959852][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.969452][ T19] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.978374][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.986556][ T19] usb 2-1: config 0 descriptor?? [ 106.120041][ T4139] loop0: detected capacity change from 0 to 1024 [ 106.130057][ T4139] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 106.138049][ T4139] System zones: 0-1, 3-12 [ 106.142764][ T4139] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.708152][ T4150] bridge0: port 3(vlan2) entered blocking state [ 106.714286][ T4150] bridge0: port 3(vlan2) entered disabled state [ 106.764803][ T28] audit: type=1400 audit(1718613141.827:1342): avc: denied { getopt } for pid=4153 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.953602][ T2872] EXT4-fs (loop0): unmounting filesystem. [ 107.291577][ T19] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 107.300293][ T19] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 107.308191][ T19] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 107.316133][ T19] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 107.323426][ T19] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 107.331465][ T19] usb 2-1: USB disconnect, device number 9 [ 107.763716][ T4193] incfs: Can't find or create .index dir in ./file0 [ 107.770353][ T4193] incfs: mount failed -14 [ 107.918753][ T28] audit: type=1400 audit(1718613142.977:1343): avc: denied { create } for pid=4190 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 108.065991][ T4208] loop3: detected capacity change from 0 to 40427 [ 108.073088][ T4208] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 108.080690][ T4208] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 108.083634][ T4218] loop0: detected capacity change from 0 to 1024 [ 108.105668][ T4218] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.117926][ T4218] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 108.129524][ T4208] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.165619][ T4208] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 108.172575][ T4208] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.246845][ T4225] cannot load conntrack support for proto=3 [ 108.251471][ T4218] loop0: detected capacity change from 0 to 512 [ 108.436748][ T4218] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 248: padding at end of block bitmap is not set [ 108.451716][ T4218] Quota error (device loop0): write_blk: dquota write failed [ 108.459110][ T4218] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 108.469595][ T4218] EXT4-fs (loop0): 1 truncate cleaned up [ 108.475089][ T4218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.483979][ T4218] ext4 filesystem being mounted at /root/syzkaller-testdir2188742212/syzkaller.tHaiSo/134/file0 supports timestamps until 2038 (0x7fffffff) [ 108.660052][ T2872] EXT4-fs (loop0): unmounting filesystem. [ 108.695404][ T4232] incfs: Can't find or create .index dir in ./file0 [ 108.702323][ T4232] incfs: mount failed -14 [ 108.934518][ T4241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.298996][ T19] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 109.538978][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 109.818992][ T19] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 109.827918][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.835971][ T19] usb 4-1: Product: syz [ 109.840214][ T19] usb 4-1: Manufacturer: syz [ 109.847272][ T19] usb 4-1: SerialNumber: syz [ 109.852389][ T19] usb 4-1: config 0 descriptor?? [ 109.861387][ T4263] loop4: detected capacity change from 0 to 512 [ 109.871930][ T4263] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz-executor.4: corrupted inode contents [ 109.884205][ T4263] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz-executor.4: mark_inode_dirty error [ 109.896351][ T19] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 109.903942][ T4263] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz-executor.4: corrupted inode contents [ 109.916272][ T19] usb 4-1: Detected FT232H [ 109.920811][ T4263] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz-executor.4: mark_inode_dirty error [ 109.932422][ T4263] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz-executor.4: corrupted inode contents [ 109.944664][ T4263] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 109.953203][ T4263] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #16: comm syz-executor.4: corrupted inode contents [ 109.965573][ T4263] EXT4-fs error (device loop4): ext4_truncate:4302: inode #16: comm syz-executor.4: mark_inode_dirty error [ 109.977007][ T4263] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 109.986193][ T4263] EXT4-fs (loop4): 1 truncate cleaned up [ 109.991721][ T4263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 110.000546][ T382] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.010219][ T4263] ext4 filesystem being mounted at /root/syzkaller-testdir1934753430/syzkaller.tVWA9S/40/file1 supports timestamps until 2038 (0x7fffffff) [ 110.031350][ T4263] 8021q: VLANs not supported on lo [ 110.040292][ T3879] EXT4-fs (loop4): unmounting filesystem. [ 110.046327][ T382] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.099622][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 110.157915][ T4268] loop4: detected capacity change from 0 to 40427 [ 110.167250][ T4268] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.202277][ T4268] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.226297][ T28] audit: type=1400 audit(1718613145.287:1344): avc: denied { execute } for pid=4267 comm="syz-executor.4" path="/root/syzkaller-testdir1934753430/syzkaller.tVWA9S/41/file2/bus/bus" dev="overlay" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.256469][ T4268] syz-executor.4: attempt to access beyond end of device [ 110.256469][ T4268] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.361608][ T3879] syz-executor.4: attempt to access beyond end of device [ 110.361608][ T3879] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 110.369028][ T19] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 110.375803][ T3879] syz-executor.4: attempt to access beyond end of device [ 110.375803][ T3879] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 110.382735][ T19] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 110.411523][ T382] kworker/u4:4: attempt to access beyond end of device [ 110.411523][ T382] loop4: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 110.425616][ T382] kworker/u4:4: attempt to access beyond end of device [ 110.425616][ T382] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 110.557711][ T28] audit: type=1400 audit(1718613145.617:1345): avc: denied { getopt } for pid=4278 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.598579][ T2210] usb 4-1: USB disconnect, device number 13 [ 110.608512][ T2210] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 110.620646][ T2210] ftdi_sio 4-1:0.0: device disconnected [ 110.627160][ T4284] loop0: detected capacity change from 0 to 128 [ 110.638483][ T4284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.647034][ T4284] ext4 filesystem being mounted at /root/syzkaller-testdir2188742212/syzkaller.tHaiSo/141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 110.682648][ T28] audit: type=1400 audit(1718613145.727:1346): avc: denied { read } for pid=4286 comm="syz-executor.4" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.704096][ T28] audit: type=1400 audit(1718613145.727:1347): avc: denied { open } for pid=4286 comm="syz-executor.4" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.709413][ T4284] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 0 != root limit 124 [ 110.739689][ T4284] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 110.753684][ T4284] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 0 != root limit 124 [ 110.765618][ T4284] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 110.778776][ T4284] EXT4-fs error (device loop0): ext4_add_entry:2425: inode #2: comm syz-executor.0: Directory has corrupted htree index. [ 110.791672][ T4288] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 0 != root limit 124 [ 110.803787][ T4288] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 110.817174][ T4288] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 0 != root limit 124 [ 110.829200][ T4288] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 110.842246][ T4288] EXT4-fs error (device loop0): ext4_add_entry:2425: inode #2: comm syz-executor.0: Directory has corrupted htree index. [ 110.856249][ T4284] EXT4-fs warning (device loop0): dx_probe:892: inode #2: comm syz-executor.0: dx entry: limit 0 != root limit 124 [ 110.868487][ T4284] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 110.881587][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.881796][ T4284] EXT4-fs error (device loop0): ext4_add_entry:2425: inode #2: comm syz-executor.0: Directory has corrupted htree index. [ 110.888577][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.908233][ T4286] device bridge_slave_0 entered promiscuous mode [ 110.909863][ T2872] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 4: comm syz-executor.0: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.915386][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.941524][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.948580][ T4286] device bridge_slave_1 entered promiscuous mode [ 111.005009][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.011916][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.018999][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.025770][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.042590][ T4294] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 49 (only 8 groups) [ 111.051451][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 111.061131][ T2872] EXT4-fs (loop0): unmounting filesystem. [ 111.061172][ T2210] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.074843][ T2210] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.091935][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.096840][ T4296] loop1: detected capacity change from 0 to 512 [ 111.100415][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.112737][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.119965][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.128073][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.135033][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.150368][ T4296] EXT4-fs: Ignoring removed bh option [ 111.150454][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.165930][ T4296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #11614: comm syz-executor.1: iget: illegal inode # [ 111.179250][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.182287][ T4296] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 11614 err=-117 [ 111.201017][ T4296] EXT4-fs (loop1): 1 truncate cleaned up [ 111.206522][ T4296] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 111.224018][ T4286] device veth0_vlan entered promiscuous mode [ 111.232599][ T2931] EXT4-fs (loop1): unmounting filesystem. [ 111.243970][ T4300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.256458][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.265039][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.274551][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.312769][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.335676][ T4286] device veth1_macvtap entered promiscuous mode [ 111.344300][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.373623][ T382] device bridge_slave_1 left promiscuous mode [ 111.377461][ T4310] loop3: detected capacity change from 0 to 256 [ 111.380169][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.414809][ T382] device bridge_slave_0 left promiscuous mode [ 111.450305][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.466492][ T382] device veth1_macvtap left promiscuous mode [ 111.501787][ T382] device veth0_vlan left promiscuous mode [ 111.764119][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.778283][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.787432][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 112.040483][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.047428][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.054824][ T4306] device bridge_slave_0 entered promiscuous mode [ 112.061787][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.069211][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.077530][ T4306] device bridge_slave_1 entered promiscuous mode [ 112.133147][ T4306] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.140064][ T4306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.147118][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.153947][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.423702][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.431581][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.438786][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.510705][ T4335] loop1: detected capacity change from 0 to 2048 [ 112.704632][ T4335] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 112.715122][ T4335] EXT4-fs (loop1): unmounting filesystem. [ 112.741403][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.749544][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.756471][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.763675][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.771689][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.778520][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.797137][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 112.805420][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 112.813373][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 112.821262][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 112.835891][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.854440][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.868112][ T4306] device veth0_vlan entered promiscuous mode [ 112.881577][ T4306] device veth1_macvtap entered promiscuous mode [ 112.891216][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.899127][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.907083][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.915114][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.923435][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.937648][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.944964][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.952358][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.960928][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.963348][ T4346] syz-executor.4 (4346): /proc/4345/oom_adj is deprecated, please use /proc/4345/oom_score_adj instead. [ 112.969241][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 112.987966][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.046565][ T4356] loop4: detected capacity change from 0 to 512 [ 113.060957][ T4356] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 113.071104][ T4356] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 113.081755][ T4356] EXT4-fs (loop4): 1 truncate cleaned up [ 113.087222][ T4356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.096312][ T4356] ext4 filesystem being mounted at /root/syzkaller-testdir2041611984/syzkaller.l6waFX/5/file0 supports timestamps until 2038 (0x7fffffff) [ 113.113100][ T28] audit: type=1400 audit(1718613148.177:1348): avc: denied { mounton } for pid=4355 comm="syz-executor.4" path="/root/syzkaller-testdir2041611984/syzkaller.l6waFX/5/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.143819][ T28] audit: type=1400 audit(1718613148.177:1349): avc: denied { mount } for pid=4355 comm="syz-executor.4" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.239170][ T4359] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 113.288968][ T224] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.309481][ T382] device bridge_slave_1 left promiscuous mode [ 113.315448][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.322804][ T382] device bridge_slave_0 left promiscuous mode [ 113.328741][ T382] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.336914][ T382] device veth1_macvtap left promiscuous mode [ 113.342809][ T382] device veth0_vlan left promiscuous mode [ 113.459508][ T332] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.669043][ T224] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.679908][ T224] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.692778][ T224] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.701715][ T224] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.710461][ T224] usb 1-1: config 0 descriptor?? [ 113.789713][ T4366] loop3: detected capacity change from 0 to 131072 [ 113.797201][ T4366] F2FS-fs (loop3): invalid crc value [ 113.804321][ T4366] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.819068][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.829795][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.834801][ T4366] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 113.839351][ T332] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 113.839375][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.840003][ T332] usb 2-1: config 0 descriptor?? [ 113.923435][ T28] audit: type=1400 audit(1718613148.987:1350): avc: denied { unmount } for pid=4286 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 113.943970][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 113.965141][ T28] audit: type=1326 audit(1718613149.027:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 113.989360][ T28] audit: type=1326 audit(1718613149.027:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 114.014373][ T28] audit: type=1326 audit(1718613149.027:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 114.039337][ T28] audit: type=1326 audit(1718613149.027:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 114.073494][ T28] audit: type=1326 audit(1718613149.027:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4373 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 114.209810][ T224] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 114.217386][ T224] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 114.235656][ T224] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 114.392144][ T4390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4390 comm=syz-executor.4 [ 114.779006][ T65] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 114.869020][ T332] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 114.877749][ T332] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 114.885354][ T332] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 114.893659][ T332] usb 2-1: USB disconnect, device number 10 [ 115.139065][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 115.150056][ T65] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 115.160963][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.173662][ T65] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.182731][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.191375][ T65] usb 4-1: config 0 descriptor?? [ 115.209512][ T4392] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 115.268758][ T4400] tipc: Started in network mode [ 115.273472][ T4400] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 115.282254][ T4400] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 115.290281][ T4400] tipc: Enabled bearer , priority 10 [ 115.445949][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.453107][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.461054][ T4417] device bridge_slave_0 entered promiscuous mode [ 115.468801][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.475831][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.483751][ T4417] device bridge_slave_1 entered promiscuous mode [ 115.497483][ T4428] tipc: Enabling of bearer rejected, already enabled [ 115.555418][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.562295][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.569357][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.576152][ T4417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.597359][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.604700][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.611871][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.620999][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.629052][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.635877][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.646035][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.654450][ T65] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 115.661813][ T65] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 115.669511][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.676328][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.684288][ T65] plantronics 0003:047F:FFFF.000E: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 115.697782][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.715147][ T4417] device veth0_vlan entered promiscuous mode [ 115.721710][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.729925][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.737938][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.745486][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.752834][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.767916][ T4417] device veth1_macvtap entered promiscuous mode [ 115.774881][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.785742][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.797502][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.818966][ T2210] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 115.833727][ T224] kernel write not supported for file bpf-prog (pid: 224 comm: kworker/1:2) [ 115.858089][ T224] usb 4-1: USB disconnect, device number 14 [ 116.009422][ T43] device bridge_slave_1 left promiscuous mode [ 116.015713][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.023388][ T43] device bridge_slave_0 left promiscuous mode [ 116.030139][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.037953][ T43] device veth0_vlan left promiscuous mode [ 116.103384][ T4453] tipc: Started in network mode [ 116.108066][ T4453] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 116.117089][ T4453] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 116.125155][ T4453] tipc: Enabled bearer , priority 10 [ 116.219063][ T2210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.229839][ T2210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.239441][ T2210] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 116.248340][ T2210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.256846][ T2210] usb 5-1: config 0 descriptor?? [ 116.262111][ T332] usb 1-1: USB disconnect, device number 9 [ 116.289069][ T848] tipc: Node number set to 1 [ 116.641671][ T4478] loop3: detected capacity change from 0 to 131072 [ 116.649231][ T4478] F2FS-fs (loop3): invalid crc value [ 116.655772][ T4478] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.679165][ T4478] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 116.778967][ T332] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 117.018944][ T332] usb 2-1: Using ep0 maxpacket: 16 [ 117.140102][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.168956][ T332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.178612][ T332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.209113][ T332] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.217982][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.239584][ T332] usb 2-1: config 0 descriptor?? [ 117.244734][ T65] tipc: Node number set to 1 [ 117.279047][ T2210] uclogic 0003:256C:006D.000F: failed retrieving Huion firmware version: -71 [ 117.297918][ T2210] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 117.305535][ T2210] uclogic: probe of 0003:256C:006D.000F failed with error -71 [ 117.319036][ T2210] usb 5-1: USB disconnect, device number 9 [ 117.389580][ T4493] IPv6: addrconf: prefix option has invalid lifetime [ 117.749605][ T332] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 117.756853][ T332] microsoft 0003:045E:07DA.0010: No inputs registered, leaving [ 117.764629][ T332] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 117.776242][ T332] microsoft 0003:045E:07DA.0010: no inputs found [ 117.782748][ T332] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway [ 117.828987][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 117.952493][ T4504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.960762][ T4504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.968936][ T848] usb 2-1: USB disconnect, device number 11 [ 118.068991][ T2210] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 118.189181][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.199985][ T19] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.212607][ T19] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.221464][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.229648][ T19] usb 1-1: config 0 descriptor?? [ 118.459215][ T2210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 118.470418][ T2210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 118.481499][ T2210] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.492693][ T4518] loop1: detected capacity change from 0 to 16 [ 118.500266][ T2210] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.500296][ T2210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.506743][ T2210] usb 5-1: config 0 descriptor?? [ 118.510238][ T4518] erofs: (device loop1): EXPERIMENTAL compressed inline data feature in use. Use at your own risk! [ 118.532944][ T4518] erofs: (device loop1): mounted with root inode @ nid 36. [ 118.539023][ T4503] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 118.548983][ T28] kauditd_printk_skb: 213 callbacks suppressed [ 118.548999][ T28] audit: type=1400 audit(1718613153.607:1569): avc: denied { bind } for pid=4517 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.709842][ T19] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 118.727583][ T19] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 118.747664][ T19] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.808685][ T4528] syz-executor.1[4528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.808760][ T4528] syz-executor.1[4528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.963197][ T4521] loop3: detected capacity change from 0 to 131072 [ 118.979798][ T2210] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 118.982972][ T4521] F2FS-fs (loop3): invalid crc value [ 118.988659][ T2210] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 119.004837][ T2210] plantronics 0003:047F:FFFF.0012: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 119.027045][ T4521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 119.097079][ T4521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 119.269347][ T848] usb 5-1: USB disconnect, device number 10 [ 119.716818][ T4552] loop1: detected capacity change from 0 to 512 [ 119.725803][ T4552] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz-executor.1: casefold flag without casefold feature [ 119.738869][ T4552] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.1: missing EA_INODE flag [ 119.751195][ T4552] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 2 err=-117 [ 119.763868][ T4552] EXT4-fs (loop1): 1 orphan inode deleted [ 119.769499][ T4552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.364040][ T4568] loop4: detected capacity change from 0 to 40427 [ 120.386010][ T4568] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.449149][ T4568] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.481440][ T4286] syz-executor.4: attempt to access beyond end of device [ 120.481440][ T4286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 120.537980][ T4574] syz-executor.4[4574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.538027][ T4574] syz-executor.4[4574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.578222][ T4417] EXT4-fs (loop1): unmounting filesystem. [ 120.658417][ T4582] loop3: detected capacity change from 0 to 128 [ 120.666662][ T4582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.676515][ T4582] ext4 filesystem being mounted at /root/syzkaller-testdir3301814626/syzkaller.dAKnQQ/65/file1 supports timestamps until 2038 (0x7fffffff) [ 120.710635][ T3810] EXT4-fs (loop3): unmounting filesystem. [ 120.725873][ T28] audit: type=1400 audit(1718613155.787:1570): avc: denied { remount } for pid=4586 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 120.764143][ T2210] usb 1-1: USB disconnect, device number 10 [ 120.785272][ T4601] syz-executor.3[4601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.785344][ T4601] syz-executor.3[4601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.814322][ T4603] loop3: detected capacity change from 0 to 512 [ 120.834535][ T4603] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 120.848022][ T4603] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.3: missing EA_INODE flag [ 120.860979][ T4603] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 2 err=-117 [ 120.874389][ T4603] EXT4-fs (loop3): 1 orphan inode deleted [ 120.880047][ T4603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.158952][ T2210] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 121.440382][ T2210] usb 1-1: Using ep0 maxpacket: 16 [ 121.609106][ T2210] usb 1-1: config 0 has no interfaces? [ 121.614815][ T2210] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 121.640982][ T2210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.839537][ T2210] usb 1-1: config 0 descriptor?? [ 121.865713][ T3810] EXT4-fs (loop3): unmounting filesystem. [ 121.900473][ T4617] loop3: detected capacity change from 0 to 128 [ 121.908306][ T4617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 121.917168][ T4617] ext4 filesystem being mounted at /root/syzkaller-testdir3301814626/syzkaller.dAKnQQ/73/file1 supports timestamps until 2038 (0x7fffffff) [ 121.943327][ T3810] EXT4-fs (loop3): unmounting filesystem. [ 121.999711][ T28] audit: type=1326 audit(1718613157.067:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 122.023732][ T28] audit: type=1326 audit(1718613157.067:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 122.047567][ T28] audit: type=1326 audit(1718613157.067:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 122.071389][ T28] audit: type=1326 audit(1718613157.067:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 122.608998][ T4624] 9p: Unknown access argument 18446744073709551615: -34 [ 122.612690][ T28] audit: type=1326 audit(1718613157.067:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 122.670269][ T28] audit: type=1326 audit(1718613157.097:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 122.694881][ T28] audit: type=1326 audit(1718613157.097:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x7ffc0000 [ 122.718961][ T28] audit: type=1326 audit(1718613157.097:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4619 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd50e7a6a7 code=0x7ffc0000 [ 122.791805][ T19] usb 1-1: USB disconnect, device number 11 [ 122.938082][ T4640] loop3: detected capacity change from 0 to 40427 [ 122.947253][ T4640] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.958983][ T726] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 122.977814][ T4640] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.000412][ T3810] syz-executor.3: attempt to access beyond end of device [ 123.000412][ T3810] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.087302][ T4656] loop3: detected capacity change from 0 to 128 [ 123.095477][ T4656] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 123.104042][ T4656] ext4 filesystem being mounted at /root/syzkaller-testdir3301814626/syzkaller.dAKnQQ/80/file1 supports timestamps until 2038 (0x7fffffff) [ 123.128149][ T3810] EXT4-fs (loop3): unmounting filesystem. [ 123.545001][ T4665] loop0: detected capacity change from 0 to 1024 [ 123.551417][ T726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.562853][ T726] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.575738][ T726] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.584831][ T726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.589796][ T4665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.604597][ T726] usb 2-1: config 0 descriptor?? [ 123.619590][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 124.199027][ T848] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.279552][ T726] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 124.286975][ T726] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 124.295147][ T726] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 124.458984][ T848] usb 5-1: Using ep0 maxpacket: 16 [ 124.607226][ T848] usb 5-1: config 0 has no interfaces? [ 124.613769][ T848] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 124.623028][ T848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.623948][ T4716] loop0: detected capacity change from 0 to 1024 [ 124.631510][ T848] usb 5-1: config 0 descriptor?? [ 124.640083][ T4716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.657837][ T28] kauditd_printk_skb: 630 callbacks suppressed [ 124.657853][ T28] audit: type=1400 audit(1718613159.717:2209): avc: denied { rmdir } for pid=4306 comm="syz-executor.0" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.687633][ T28] audit: type=1400 audit(1718613159.747:2210): avc: denied { unlink } for pid=4306 comm="syz-executor.0" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 124.710309][ T28] audit: type=1400 audit(1718613159.747:2211): avc: denied { unlink } for pid=4306 comm="syz-executor.0" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 124.735975][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 124.845934][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.853074][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.860414][ T4721] device bridge_slave_0 entered promiscuous mode [ 124.869300][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.876256][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.883386][ T4721] device bridge_slave_1 entered promiscuous mode [ 125.197160][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.204053][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.211227][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.217984][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.236658][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.244077][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.253053][ T848] usb 5-1: USB disconnect, device number 11 [ 125.270359][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.289946][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.298152][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.305107][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.312304][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.320482][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.327309][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.334473][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.342197][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.355870][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.366793][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.375256][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.382700][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.392702][ T4721] device veth0_vlan entered promiscuous mode [ 125.403186][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.412496][ T4721] device veth1_macvtap entered promiscuous mode [ 125.421998][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.436224][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.545386][ T4745] loop2: detected capacity change from 0 to 1024 [ 125.552678][ T8] device bridge_slave_1 left promiscuous mode [ 125.552755][ T4745] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 125.559468][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.567898][ T4745] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 125.585699][ T4745] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 125.585791][ T8] device bridge_slave_0 left promiscuous mode [ 125.596324][ T4745] journal_init_common: Cannot get buffer for journal superblock [ 125.601552][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.608851][ T4745] EXT4-fs (loop2): Could not load journal inode [ 125.623532][ T8] device veth1_macvtap left promiscuous mode [ 125.630048][ T8] device veth0_vlan left promiscuous mode [ 125.771460][ T4766] device pim6reg1 entered promiscuous mode [ 125.837115][ T4769] loop2: detected capacity change from 0 to 1024 [ 125.846720][ T4769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.885871][ T4721] EXT4-fs (loop2): unmounting filesystem. [ 125.929438][ T28] audit: type=1400 audit(1718613160.997:2212): avc: denied { read } for pid=4782 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.261136][ T4793] loop4: detected capacity change from 0 to 512 [ 126.269698][ T4793] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 126.280295][ T28] audit: type=1400 audit(1718613161.337:2213): avc: denied { ioctl } for pid=4799 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 126.283020][ T4793] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.4: missing EA_INODE flag [ 126.319822][ T4800] binder: BC_ATTEMPT_ACQUIRE not supported [ 126.320127][ T4793] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 2 err=-117 [ 126.325756][ T4800] binder: 4799:4800 ioctl c0306201 20000480 returned -22 [ 126.338351][ T4793] EXT4-fs (loop4): 1 orphan inode deleted [ 126.351056][ T4793] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.359474][ T24] usb 2-1: USB disconnect, device number 12 [ 126.426235][ T4806] device pim6reg1 entered promiscuous mode [ 126.442753][ T4810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.528958][ T65] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 126.768951][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 126.794839][ T4831] binder: BC_ATTEMPT_ACQUIRE not supported [ 126.800533][ T4831] binder: 4830:4831 ioctl c0306201 20000480 returned -22 [ 126.820951][ T4835] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 126.849038][ T726] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.866326][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.889072][ T65] usb 4-1: config 0 has no interfaces? [ 126.894716][ T65] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 126.902368][ T4845] device pim6reg1 entered promiscuous mode [ 126.903781][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.917892][ T65] usb 4-1: config 0 descriptor?? [ 126.977801][ T4849] syz-executor.0[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.977851][ T4849] syz-executor.0[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.990442][ T4849] syz-executor.0[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.002171][ T4849] syz-executor.0[4849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.106380][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 127.214790][ T726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.312188][ T726] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.328224][ T726] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.339201][ T726] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.476664][ T2210] usb 4-1: USB disconnect, device number 15 [ 127.516629][ T726] usb 3-1: config 0 descriptor?? [ 127.643285][ T4879] syz-executor.4[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.643334][ T4879] syz-executor.4[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.655871][ T4879] syz-executor.4[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.667447][ T4879] syz-executor.4[4879] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.730477][ T4885] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.776116][ T4889] IPv6: NLM_F_REPLACE set, but no existing node found! [ 127.790653][ T4891] ------------[ cut here ]------------ [ 127.795920][ T4891] Please remove unsupported %[ 127.800410][ T4891] WARNING: CPU: 0 PID: 4891 at lib/vsprintf.c:2661 format_decode+0x12d2/0x1f10 [ 127.809161][ T4891] Modules linked in: [ 127.812899][ T4891] CPU: 0 PID: 4891 Comm: syz-executor.4 Not tainted 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 127.822789][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 127.832690][ T4891] RIP: 0010:format_decode+0x12d2/0x1f10 [ 127.838062][ T4891] Code: 77 02 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 20 b7 08 86 e8 5e 44 4f fc <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 127.857682][ T4891] RSP: 0018:ffffc900009a7600 EFLAGS: 00010046 [ 127.863583][ T4891] RAX: 2b1a1a5a04dddf00 RBX: 00000000ffffffdb RCX: 0000000000040000 [ 127.871390][ T4891] RDX: ffffc900011a9000 RSI: 00000000000004d9 RDI: 00000000000004da [ 127.879214][ T4891] RBP: ffffc900009a76f0 R08: ffffffff814477ce R09: fffff52000134e19 [ 127.887021][ T4891] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 127.894827][ T4891] R13: ffff0000ffffff00 R14: ffffc900009a790c R15: 1ffff92000134f21 [ 127.902638][ T4891] FS: 00007fbd501f76c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 127.911402][ T4891] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.917831][ T4891] CR2: 00007fff246e7d28 CR3: 0000000115c33000 CR4: 00000000003506b0 [ 127.925638][ T4891] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 127.933448][ T4891] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 127.941259][ T4891] Call Trace: [ 127.944385][ T4891] [ 127.947165][ T4891] ? show_regs+0x58/0x60 [ 127.951241][ T4891] ? __warn+0x160/0x3d0 [ 127.955234][ T4891] ? format_decode+0x12d2/0x1f10 [ 127.960016][ T4891] ? report_bug+0x4d5/0x7d0 [ 127.964357][ T4891] ? format_decode+0x12d2/0x1f10 [ 127.969136][ T4891] ? handle_bug+0x41/0x70 [ 127.973288][ T4891] ? exc_invalid_op+0x1b/0x50 [ 127.977799][ T4891] ? asm_exc_invalid_op+0x1b/0x20 [ 127.982662][ T4891] ? __warn_printk+0x28e/0x350 [ 127.987259][ T4891] ? format_decode+0x12d2/0x1f10 [ 127.992033][ T4891] ? unwind_get_return_address+0x4d/0x90 [ 127.997509][ T4891] ? vsnprintf+0x1c70/0x1c70 [ 128.001929][ T4891] ? bstr_printf+0x1b6/0x10c0 [ 128.007315][ T4891] ? memcpy+0x56/0x70 [ 128.011224][ T4891] bstr_printf+0x130/0x10c0 [ 128.015557][ T4891] ? __kasan_check_write+0x14/0x20 [ 128.020504][ T4891] ? _raw_spin_lock+0x1b0/0x1b0 [ 128.025190][ T4891] ? vbin_printf+0x1bc0/0x1bc0 [ 128.029877][ T4891] ? kasan_set_track+0x60/0x70 [ 128.034486][ T4891] ? kasan_set_track+0x4b/0x70 [ 128.039076][ T4891] bpf_trace_printk+0x1a0/0x300 [ 128.043771][ T4891] ? __sys_bpf+0x59f/0x7f0 [ 128.048016][ T4891] ? ktime_get+0xf1/0x160 [ 128.052183][ T4891] ? bpf_probe_write_user+0xf0/0xf0 [ 128.057214][ T4891] ? ktime_get+0xf1/0x160 [ 128.061388][ T4891] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 128.066678][ T4891] bpf_test_run+0x4ab/0xa40 [ 128.071021][ T4891] ? convert___skb_to_skb+0x670/0x670 [ 128.076230][ T4891] ? build_skb+0x2c/0x220 [ 128.080400][ T4891] ? eth_type_trans+0x2ca/0x650 [ 128.085098][ T4891] ? eth_get_headlen+0x240/0x240 [ 128.089852][ T4891] ? convert___skb_to_skb+0x44/0x670 [ 128.095318][ T4891] ? build_skb+0xde/0x220 [ 128.099649][ T4891] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 128.104790][ T4891] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 128.110515][ T4891] ? __kasan_check_write+0x14/0x20 [ 128.115455][ T4891] ? fput+0x15b/0x1b0 [ 128.119274][ T4891] ? __bpf_prog_test_run_raw_tp+0x1d0/0x1d0 [ 128.125001][ T4891] bpf_prog_test_run+0x3b0/0x630 [ 128.129963][ T4891] ? bpf_prog_query+0x260/0x260 [ 128.135155][ T4891] ? selinux_bpf+0xd2/0x100 [ 128.139502][ T4891] ? security_bpf+0x82/0xb0 [ 128.143846][ T4891] __sys_bpf+0x59f/0x7f0 [ 128.147913][ T4891] ? __this_cpu_preempt_check+0x13/0x20 [ 128.153298][ T4891] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 128.158505][ T4891] ? __kasan_check_write+0x14/0x20 [ 128.163887][ T4891] ? fpregs_restore_userregs+0x130/0x290 [ 128.169355][ T4891] __x64_sys_bpf+0x7c/0x90 [ 128.173606][ T4891] do_syscall_64+0x3d/0xb0 [ 128.177860][ T4891] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.183595][ T4891] RIP: 0033:0x7fbd50e7cf29 [ 128.188014][ T4891] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 128.207455][ T4891] RSP: 002b:00007fbd501f70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.215699][ T4891] RAX: ffffffffffffffda RBX: 00007fbd50fb3f80 RCX: 00007fbd50e7cf29 [ 128.223514][ T4891] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 128.231321][ T4891] RBP: 00007fbd50eec074 R08: 0000000000000000 R09: 0000000000000000 [ 128.239143][ T4891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.247029][ T4891] R13: 000000000000000b R14: 00007fbd50fb3f80 R15: 00007fff246e7b68 [ 128.254848][ T4891] [ 128.257713][ T4891] ---[ end trace 0000000000000000 ]--- [ 128.267352][ T4892] loop4: detected capacity change from 0 to 256 [ 128.277015][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 128.279838][ T726] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 128.292763][ T28] audit: type=1400 audit(1718613163.357:2214): avc: denied { mount } for pid=4890 comm="syz-executor.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 128.309811][ T726] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 128.333133][ T726] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 128.359033][ T28] audit: type=1400 audit(1718613163.427:2215): avc: denied { mounton } for pid=4890 comm="syz-executor.4" path="/root/syzkaller-testdir2041611984/syzkaller.l6waFX/63/file0/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 128.396018][ T28] audit: type=1326 audit(1718613163.427:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4890 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd50e7cf29 code=0x0 [ 128.453794][ T4906] syz-executor.0[4906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.453844][ T4906] syz-executor.0[4906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.566404][ T4918] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.670712][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.716804][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.787414][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 128.825168][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.845809][ T24] usb 2-1: config 0 descriptor?? [ 129.141638][ T4950] loop3: detected capacity change from 0 to 256 [ 129.169011][ T2210] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 129.172692][ T28] audit: type=1326 audit(1718613164.237:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1cf47cf29 code=0x0 [ 129.288997][ T65] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 129.329623][ T24] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 129.336229][ T24] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 129.343354][ T24] arvo 0003:1E7D:30D4.0015: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 129.529047][ T65] usb 5-1: Using ep0 maxpacket: 8 [ 129.549128][ T2210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 129.560217][ T24] arvo 0003:1E7D:30D4.0015: couldn't init struct arvo_device [ 129.567446][ T2210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 129.578408][ T24] arvo 0003:1E7D:30D4.0015: couldn't install keyboard [ 129.585101][ T2210] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.598091][ T24] arvo: probe of 0003:1E7D:30D4.0015 failed with error -5 [ 129.605662][ T2210] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.614568][ T2210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.623367][ T2210] usb 1-1: config 0 descriptor?? [ 129.639039][ T4934] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 129.649079][ T65] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 129.658055][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.666306][ T65] usb 5-1: config 0 descriptor?? [ 129.752434][ T848] usb 2-1: USB disconnect, device number 13 [ 129.929035][ T65] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 130.182736][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.190611][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.198029][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.205872][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.213311][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.225103][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.232416][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.233563][ T4957] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.239688][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.255988][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.270774][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.279193][ T2210] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 130.286633][ T2210] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 130.305422][ T2210] plantronics 0003:047F:FFFF.0016: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 130.312331][ T4959] loop3: detected capacity change from 0 to 8192 [ 130.344253][ T19] usb 3-1: USB disconnect, device number 10 [ 130.861280][ T28] audit: type=1400 audit(1718613165.927:2218): avc: denied { getopt } for pid=4974 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.910996][ T4980] loop2: detected capacity change from 0 to 512 [ 130.918063][ T4980] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.949913][ T4980] EXT4-fs (loop2): 1 truncate cleaned up [ 130.957724][ T4980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.981562][ T4980] EXT4-fs (loop2): unmounting filesystem. [ 131.037137][ T4962] loop1: detected capacity change from 0 to 131072 [ 131.050660][ T4962] F2FS-fs (loop1): Test dummy encryption mode enabled [ 131.058221][ T4962] F2FS-fs (loop1): invalid crc value [ 131.064861][ T4962] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.088190][ T4962] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.103591][ T4962] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 131.113009][ T4962] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 131.569009][ T65] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 131.579037][ T65] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 131.589248][ T65] asix: probe of 5-1:0.0 failed with error -71 [ 131.595907][ T65] usb 5-1: USB disconnect, device number 12 [ 131.638425][ T5040] loop1: detected capacity change from 0 to 128 [ 131.643897][ T28] audit: type=1326 audit(1718613166.707:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.646397][ T5040] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.668366][ T28] audit: type=1326 audit(1718613166.707:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.679538][ T5040] ext4 filesystem being mounted at /root/syzkaller-testdir995547868/syzkaller.WvJEd6/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 131.700374][ T28] audit: type=1326 audit(1718613166.707:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.759433][ T28] audit: type=1326 audit(1718613166.707:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.760384][ T4417] EXT4-fs (loop1): unmounting filesystem. [ 131.783669][ T28] audit: type=1326 audit(1718613166.707:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.812855][ T28] audit: type=1326 audit(1718613166.707:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.836581][ T28] audit: type=1326 audit(1718613166.707:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.860905][ T28] audit: type=1326 audit(1718613166.707:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 131.899908][ T65] usb 1-1: USB disconnect, device number 12 [ 131.908398][ T28] audit: type=1326 audit(1718613166.707:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5720e7cf29 code=0x7fc00000 [ 132.132116][ T5092] loop3: detected capacity change from 0 to 512 [ 132.143128][ T5092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.161220][ T5097] loop0: detected capacity change from 0 to 128 [ 132.169842][ T5092] EXT4-fs (loop3): 1 truncate cleaned up [ 132.175425][ T5092] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.188580][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.197602][ T5092] EXT4-fs (loop3): unmounting filesystem. [ 132.206796][ T5097] ext4 filesystem being mounted at /root/syzkaller-testdir1779335962/syzkaller.zinwq9/57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 132.254873][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 132.349608][ T5123] loop4: detected capacity change from 0 to 128 [ 132.357799][ T5123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.366429][ T5123] ext4 filesystem being mounted at /root/syzkaller-testdir2041611984/syzkaller.l6waFX/74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 132.414620][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 132.520705][ T8] tipc: Disabling bearer [ 132.526209][ T8] tipc: Left network mode [ 132.608301][ T5146] loop0: detected capacity change from 0 to 128 [ 132.616595][ T5146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 132.625101][ T5146] ext4 filesystem being mounted at /root/syzkaller-testdir1779335962/syzkaller.zinwq9/71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 132.674341][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 132.684391][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.691663][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.699271][ T5148] device bridge_slave_0 entered promiscuous mode [ 132.706290][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.713256][ T5148] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.720904][ T5148] device bridge_slave_1 entered promiscuous mode [ 132.762112][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.768999][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.776046][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.782867][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.807499][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.815537][ T2210] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.824464][ T2210] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.852972][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.859993][ T5164] bpf_get_probe_write_proto: 2 callbacks suppressed [ 132.860014][ T5164] syz-executor.2[5164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.862567][ T848] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.886075][ T848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.886692][ T5164] syz-executor.2[5164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.896015][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.916376][ T848] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.923259][ T848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.932224][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.942246][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.965971][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.974484][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.987133][ T5148] device veth0_vlan entered promiscuous mode [ 132.997697][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.008278][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.244383][ T5148] device veth1_macvtap entered promiscuous mode [ 133.251104][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.258637][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.266119][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.274295][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.282413][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.297562][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.305737][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.314329][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.323827][ T2210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.388984][ T19] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.451842][ T8] device bridge_slave_1 left promiscuous mode [ 133.457863][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.465269][ T8] device bridge_slave_0 left promiscuous mode [ 133.471421][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.479213][ T8] device veth1_macvtap left promiscuous mode [ 133.485200][ T8] device veth0_vlan left promiscuous mode [ 133.639059][ T19] usb 1-1: Using ep0 maxpacket: 8 [ 133.644917][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.651867][ T5205] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.659726][ T5205] device bridge_slave_0 entered promiscuous mode [ 133.666599][ T5205] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.673523][ T5205] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.680746][ T5205] device bridge_slave_1 entered promiscuous mode [ 133.721708][ T5205] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.728554][ T5205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.735671][ T5205] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.742454][ T5205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.761928][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.769426][ T848] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.787034][ T848] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.799580][ T19] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 133.818928][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.825104][ T5205] device veth0_vlan entered promiscuous mode [ 133.827372][ T19] usb 1-1: config 0 descriptor?? [ 133.838812][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.847005][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.855992][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.889019][ T2210] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 134.064089][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.071520][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.079529][ T726] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.086365][ T726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.093660][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.101526][ T19] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 134.111196][ T726] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.118124][ T726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.125369][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.133110][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.147944][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.156159][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.165597][ T5205] device veth1_macvtap entered promiscuous mode [ 134.177235][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.185282][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.193695][ T848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.203078][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.211766][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.249028][ T2210] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.419357][ T2210] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.430358][ T2210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.438177][ T2210] usb 5-1: Product: syz [ 134.442390][ T2210] usb 5-1: Manufacturer: syz [ 134.448673][ T2210] usb 5-1: SerialNumber: syz [ 134.487444][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.495285][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.503891][ T5247] device bridge_slave_0 entered promiscuous mode [ 134.515261][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.522363][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.529731][ T5247] device bridge_slave_1 entered promiscuous mode [ 134.569751][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.576591][ T5247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.583732][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.590610][ T5247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.620785][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.630097][ T224] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.637700][ T224] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.654765][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.662967][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.669829][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.677217][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.686094][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.693068][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.712879][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 134.720829][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 134.736045][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.750636][ T8] device bridge_slave_1 left promiscuous mode [ 134.756558][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.764496][ T8] device bridge_slave_0 left promiscuous mode [ 134.770530][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.778169][ T8] device veth1_macvtap left promiscuous mode [ 134.784064][ T8] device veth0_vlan left promiscuous mode [ 134.917707][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.925541][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.932883][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 134.941266][ T5247] device veth0_vlan entered promiscuous mode [ 134.970812][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.978854][ T5257] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.986017][ T5257] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.993499][ T5257] device bridge_slave_0 entered promiscuous mode [ 135.000622][ T5257] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.007579][ T5257] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.014886][ T5257] device bridge_slave_1 entered promiscuous mode [ 135.024538][ T5247] device veth1_macvtap entered promiscuous mode [ 135.048702][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.059016][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.094934][ T5262] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.099089][ T5257] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.111035][ T5257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.133730][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.143629][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.157054][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.165587][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.179450][ T19] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 135.189478][ T19] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 135.200002][ T19] asix: probe of 1-1:0.0 failed with error -71 [ 135.206989][ T19] usb 1-1: USB disconnect, device number 13 [ 135.218700][ T224] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.225593][ T224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.249770][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.258006][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.266291][ T224] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.273168][ T224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.281094][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.289230][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.297787][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.306501][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.315057][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.324522][ T224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.497383][ T5257] device veth0_vlan entered promiscuous mode [ 135.508769][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.516681][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.525245][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.534770][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.544197][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.552598][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.562362][ T5257] device veth1_macvtap entered promiscuous mode [ 135.575786][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 135.583629][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 135.592228][ T726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.616507][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 135.624907][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.632396][ T5277] loop1: detected capacity change from 0 to 8192 [ 135.758330][ T5285] syz-executor.1[5285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.758377][ T5285] syz-executor.1[5285] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.769985][ T2210] cdc_ncm 5-1:1.0: failed to get mac address [ 135.800663][ T2210] cdc_ncm 5-1:1.0: bind() failure [ 135.829022][ T2210] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 135.849005][ T2210] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 135.856364][ T2210] usb 5-1: USB disconnect, device number 13 [ 135.888709][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 135.888724][ T28] audit: type=1326 audit(1718613170.947:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2c7cf29 code=0x7ffc0000 [ 135.915561][ T5290] loop0: detected capacity change from 0 to 40427 [ 135.925761][ T5290] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 135.936970][ T5290] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 135.946737][ T5290] F2FS-fs (loop0): invalid crc value [ 135.952532][ T28] audit: type=1326 audit(1718613170.977:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02b2c7cf29 code=0x7ffc0000 [ 135.977527][ T5290] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.978150][ T28] audit: type=1326 audit(1718613170.977:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2c7cf29 code=0x7ffc0000 [ 136.015188][ T5290] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 136.023123][ T28] audit: type=1326 audit(1718613170.977:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02b2c7cf29 code=0x7ffc0000 [ 136.029255][ T5290] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 136.048171][ T28] audit: type=1326 audit(1718613170.997:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b2c7cf29 code=0x7ffc0000 [ 136.078163][ T28] audit: type=1326 audit(1718613170.997:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f02b2c7cf29 code=0x7ffc0000 [ 136.086887][ T5301] loop1: detected capacity change from 0 to 2048 [ 136.118645][ T28] audit: type=1326 audit(1718613170.997:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f02b2c7a6a7 code=0x7ffc0000 [ 136.142936][ T28] audit: type=1326 audit(1718613170.997:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02b2c40379 code=0x7ffc0000 [ 136.167319][ T28] audit: type=1326 audit(1718613170.997:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f02b2c7a6a7 code=0x7ffc0000 [ 136.191548][ T28] audit: type=1326 audit(1718613170.997:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02b2c40379 code=0x7ffc0000 [ 136.207104][ T5301] loop1: p3 < > p4 < > [ 136.222354][ T5301] loop1: partition table partially beyond EOD, truncated [ 136.235021][ T5301] loop1: p3 start 4284289 is beyond EOD, truncated [ 136.266277][ T5298] binder: 5297:5298 ioctl 50009402 0 returned -22 [ 136.394738][ T8] device bridge_slave_1 left promiscuous mode [ 136.408090][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.420456][ T8] device bridge_slave_0 left promiscuous mode [ 136.429367][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.439127][ T8] device bridge_slave_1 left promiscuous mode [ 136.445104][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.456359][ T8] device bridge_slave_0 left promiscuous mode [ 136.469216][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.475881][ T5341] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.494451][ T8] device veth1_macvtap left promiscuous mode [ 136.511139][ T8] device veth0_vlan left promiscuous mode [ 136.521792][ T8] device veth1_macvtap left promiscuous mode [ 136.527746][ T8] device veth0_vlan left promiscuous mode [ 136.879324][ T848] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.958957][ T332] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 137.044490][ T5363] loop3: detected capacity change from 0 to 256 [ 137.058523][ T5363] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 137.078494][ T5363] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 137.085947][ T5363] exFAT-fs (loop3): Filesystem has been set read-only [ 137.093033][ T5363] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 137.227229][ T5367] bridge0: port 3(gretap0) entered blocking state [ 137.233545][ T5367] bridge0: port 3(gretap0) entered disabled state [ 137.242145][ T5367] device gretap0 entered promiscuous mode [ 137.248127][ T5367] bridge0: port 3(gretap0) entered blocking state [ 137.254379][ T5367] bridge0: port 3(gretap0) entered forwarding state [ 137.282106][ T5367] device gretap0 left promiscuous mode [ 137.287851][ T5367] bridge0: port 3(gretap0) entered disabled state [ 137.466359][ T848] usb 1-1: config 45 has too many interfaces: 194, using maximum allowed: 32 [ 137.475158][ T2210] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 137.482767][ T848] usb 1-1: config 45 has 1 interface, different from the descriptor's value: 194 [ 137.484083][ T5369] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.491817][ T848] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.491850][ T848] usb 1-1: config 45 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.491878][ T848] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 137.491900][ T848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.649057][ T332] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.839059][ T2210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 137.839068][ T332] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.839091][ T2210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 137.855551][ T332] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.860516][ T2210] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.874935][ T332] usb 5-1: Product: syz [ 137.879096][ T2210] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.896749][ T332] usb 5-1: Manufacturer: syz [ 137.903718][ T2210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.915049][ T332] usb 5-1: SerialNumber: syz [ 137.916943][ T2210] usb 2-1: config 0 descriptor?? [ 137.939278][ T5361] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 137.990277][ T848] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 137.997674][ T848] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 138.004720][ T848] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 138.011905][ T848] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 138.019773][ T848] uclogic 0003:5543:0042.0017: unknown main item tag 0x0 [ 138.027496][ T848] uclogic 0003:5543:0042.0017: No inputs registered, leaving [ 138.035350][ T848] uclogic 0003:5543:0042.0017: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 138.120568][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.193272][ T726] usb 1-1: USB disconnect, device number 14 [ 138.389691][ T2210] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd [ 138.397364][ T2210] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 138.404974][ T2210] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 138.412564][ T2210] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 138.421488][ T2210] plantronics 0003:047F:FFFF.0018: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 138.532792][ T5428] device vlan2 entered promiscuous mode [ 138.538285][ T5428] bridge0: port 3(vlan2) entered blocking state [ 138.544268][ T5428] bridge0: port 3(vlan2) entered disabled state [ 138.660153][ T5361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.668473][ T5361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.677124][ T726] usb 2-1: USB disconnect, device number 14 [ 139.129028][ T332] cdc_ncm 5-1:1.0: failed to get mac address [ 139.149214][ T332] cdc_ncm 5-1:1.0: bind() failure [ 139.181313][ T332] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 139.201255][ T332] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 139.209248][ T332] usb 5-1: USB disconnect, device number 14 [ 139.218155][ T5455] loop0: detected capacity change from 0 to 512 [ 139.225431][ T5455] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.250931][ T5455] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #17: comm syz-executor.0: iget: bad i_size value: -6917529027641081756 [ 139.264572][ T5455] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 139.276900][ T5455] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.288227][ T5455] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 65: padding at end of block bitmap is not set [ 139.310520][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 139.335895][ T5470] loop0: detected capacity change from 0 to 1024 [ 139.345403][ T5470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 139.367186][ T4306] EXT4-fs (loop0): unmounting filesystem. [ 139.448171][ T5479] random: crng reseeded on system resumption [ 139.791521][ T5493] syz-executor.4[5493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.791589][ T5493] syz-executor.4[5493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.820992][ T5498] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 139.889744][ T5507] random: crng reseeded on system resumption [ 139.938225][ T5513] device syzkaller0 entered promiscuous mode [ 139.997609][ T5521] loop2: detected capacity change from 0 to 2048 [ 140.019773][ C0] softirq: huh, entered softirq 3 NET_RX ffffffff840ba070 with preempt_count 00000102, exited with 00000101? [ 140.031245][ T5148] BUG: scheduling while atomic: syz-executor.4/5148/0x00000002 [ 140.038538][ T5148] Modules linked in: [ 140.042527][ T5148] Preemption disabled at: 2024/06/17 08:32:54 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 140.042535][ T5148] [] fast_dput+0xef/0x2a0 [ 140.052623][ T5148] CPU: 0 PID: 5148 Comm: syz-executor.4 Tainted: G W 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 140.063981][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 140.073876][ T5148] Call Trace: [ 140.076999][ T5148] [ 140.079791][ T5148] dump_stack_lvl+0x151/0x1b7 [ 140.084292][ T5148] ? fast_dput+0xef/0x2a0 [ 140.088454][ T5148] ? fast_dput+0xef/0x2a0 [ 140.092622][ T5148] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 140.097924][ T5148] ? fast_dput+0xef/0x2a0 [ 140.102169][ T5148] dump_stack+0x15/0x1b [ 140.106161][ T5148] __schedule_bug+0x195/0x260 [ 140.110679][ T5148] ? cpu_util_update_eff+0x10e0/0x10e0 [ 140.115967][ T5148] ? bpf_trace_printk+0x1c5/0x300 [ 140.120831][ T5148] __schedule+0xcf7/0x1550 [ 140.125086][ T5148] ? __sched_text_start+0x8/0x8 [ 140.129772][ T5148] schedule+0xc3/0x180 [ 140.133686][ T5148] exit_to_user_mode_loop+0x4e/0xa0 [ 140.138707][ T5148] exit_to_user_mode_prepare+0x5a/0xa0 [ 140.144006][ T5148] syscall_exit_to_user_mode+0x26/0x140 [ 140.149384][ T5148] do_syscall_64+0x49/0xb0 [ 140.153635][ T5148] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 140.159280][ T5148] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 140.165094][ T5148] RIP: 0033:0x7fa6d0c7b9ca [ 140.169349][ T5148] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 [ 140.188878][ T5148] RSP: 002b:00007ffc82c94bb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 140.197120][ T5