last executing test programs: 2.319884298s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.284240543s ago: executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000800850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) unlinkat(r1, &(0x7f0000002780)='./file1\x00', 0x0) 2.24005255s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00'}, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f00000000c0)) 2.23946961s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 2.224944712s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x0, 0x400, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = eventfd(0x800a6) write$eventfd(r3, 0x0, 0x0) r4 = dup(r3) write$binfmt_script(r4, &(0x7f0000000140), 0xb9) read$eventfd(r4, &(0x7f0000000040), 0x8) creat(0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.219340863s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 2.17591961s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.118127259s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x40000000004) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.196628893s ago: executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.172798637s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint_stats\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 1.097967498s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 1.073111262s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1.064198894s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00'}, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt(r0, 0x1, 0x4, 0x0, &(0x7f00000000c0)) 1.044205926s ago: executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000800850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) unlinkat(r1, &(0x7f0000002780)='./file1\x00', 0x0) 1.027807569s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f00000003c0)={0x1}, 0x8) sendto$inet6(r7, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="a4ff9ff98d000000008d00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x141e000000000000, &(0x7f00000000c0)=@base={0x6, 0x4, 0x6c03, 0xee}, 0x48) 983.800296ms ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x5530, &(0x7f0000005980)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x1904008, 0x0, 0xfd, 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x8010661b, 0x0) 977.526037ms ago: executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b45000/0x2000)=nil, 0x2000) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0xe0fb00, 0x0, 0x0, 0x0) 954.634611ms ago: executing program 2: syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x2c, 0x6, 0x0, @dev, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r4], 0x3c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fsmount(r5, 0x0, 0x2) write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[], 0xfd14) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020) 920.638046ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 890.83653ms ago: executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$FS_IOC_FSSETXATTR(r0, 0x6611, 0x0) 863.670344ms ago: executing program 3: syz_read_part_table(0x5fd, &(0x7f0000000d00)="$eJzs2z9olGccB/DvxVzOP9B0cHKpcegkFMXRDFWSU7EQTqUQHLS1iJgpQuCkhwc6tBkUM0jHLlK4ReNkzOBQFIXORRxahAwuBV2kdshbrvc2rfaPR8kNxc9n+T338rvn+/zgWZ/wvzaUarkqar+VDz751/5i9I91O8c6E5MHi6IojiaVHE81Y9++s5hkOK/umh1JRv60z/WvNy9/+fxAtfP4yIv3T9ybH1rbs5Z3k2wZeePRa/1PyaDcGL8/evHSbP1y90e9tbL6cXLz2URj6fD8wuKh6v5T3e8Xkgdlf+9ibMq5NHM+Z3Ny+L+kVl7Jb3fzm+NnHtVbK191nuxa3Vbv3D699+X25St3dydz3Yip1/6XN9+vvqzNX+bPjV2dXmjt23lr67U9zTsPG083/Fz0lJHV9ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAwbozfH714abZ+uTl+5lG9tfLF9999dPPZRGPp8PzC4qGR/afKvgdlHS7ruTRzPmdzMjOZyWeZ7T9yuvKP+b9sTp7sWt1W79w+vffl5PKVu7vLvqn1GPZvvD7/3NjV6YXWvp23tl7b07zzsPF0Q69vppZPU+2tawM6CwAAAAAAAAAAAAAAAAAAAG+vicmD26c+bBxNKjm+MclPnw91vxflI/ff3+rvKOsPtWRTkusbk/bzA9XO4yMvRk7cm/+x7G+nlnaSLd8sHUveW8u58JfkyqBHow+/BgAA//8hVpWc") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c08, 0x0) 807.518703ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000050000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) 795.294625ms ago: executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/156, 0x1000000, 0x800}, 0xeb) 643.166639ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) lseek(0xffffffffffffffff, 0xfffffffffffffffb, 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002205000000b14de71880250947b69f"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) getdents64(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000040)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) 481.961374ms ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 100.331714ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 23.993046ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180), 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x5}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) 12.871127ms ago: executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000800850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) unlinkat(r1, &(0x7f0000002780)='./file1\x00', 0x0) 1.465219ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x8, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d6}, [@map_fd={0x18, 0x8}, @ldst={0x3, 0x1, 0x2, 0x6, 0x5, 0x30, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50e}]}, &(0x7f0000000600)='syzkaller\x00', 0x513, 0xfa, &(0x7f0000000640)=""/250, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x2, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @dev, @local}, &(0x7f0000000900)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r1, r2, 0x25, 0x2, @void}, 0x10) r3 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={0xffffffffffffffff, r4, 0x9, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x400) r5 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) brk(0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x42, 0xa01, 0x0, 0x0, {}, [@nested={0x4}]}, 0x18}}, 0x0) bind$vsock_stream(r5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) io_setup(0x0, 0x0) 0s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0xc0c0}], 0x1, &(0x7f0000000080)={0x77359400}, 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46f3f5"], 0x69) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): =c000003e syscall=202 compat=0 ip=0x7f05a946cea9 code=0x7ffc0000 [ 401.972525][ T24] audit: type=1326 audit(401.599:12220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f05a946cea9 code=0x7ffc0000 [ 401.995871][ T24] audit: type=1326 audit(401.599:12221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9456 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a946cea9 code=0x7ffc0000 [ 402.069933][ T9467] erofs: (device loop1): mounted with root inode @ nid 36. [ 402.077973][ T24] audit: type=1400 audit(402.059:12222): avc: denied { mounton } for pid=9466 comm="syz-executor.1" path="/root/syzkaller-testdir2014594107/syzkaller.jeJ1p7/110/file2/file0" dev="loop1" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 402.118985][ T25] usb 3-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=79.32 [ 402.127859][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.135669][ T25] usb 3-1: Product: syz [ 402.139674][ T25] usb 3-1: Manufacturer: syz [ 402.144065][ T25] usb 3-1: SerialNumber: syz [ 402.149187][ T25] usb 3-1: config 0 descriptor?? [ 402.189581][ T25] aiptek 3-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 402.348904][ T829] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 402.394684][ T517] usb 3-1: USB disconnect, device number 41 [ 402.588885][ T829] usb 2-1: Using ep0 maxpacket: 16 [ 402.708994][ T829] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 402.717808][ T829] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 402.727245][ T829] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 402.736681][ T829] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 402.746230][ T829] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 402.755773][ T829] usb 2-1: config 1 interface 0 has no altsetting 0 [ 402.762203][ T829] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 402.771053][ T829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.819326][ T829] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 402.931234][ T9472] 9pnet: Insufficient options for proto=fd [ 403.029630][ T829] scsi host1: usb-storage 2-1:1.0 [ 403.232100][ T15] usb 2-1: USB disconnect, device number 47 [ 403.318979][ T3668] Bluetooth: hci1: command 0x1009 tx timeout [ 403.736817][ T7688] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 403.745026][ T7688] erofs: (device loop1): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 403.790138][ T421] tipc: Left network mode [ 403.798988][ T3668] Bluetooth: hci0: command 0x1003 tx timeout [ 403.805009][ T40] Bluetooth: hci0: sending frame failed (-49) [ 403.913512][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.920433][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.927583][ T9485] device bridge_slave_0 entered promiscuous mode [ 403.934364][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.941276][ T9485] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.948518][ T9485] device bridge_slave_1 entered promiscuous mode [ 404.002238][ T9485] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.009107][ T9485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.016171][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.022974][ T9485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.045846][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.053979][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.061430][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.077539][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.085815][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.092681][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.100884][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.108959][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.115826][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.139883][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 404.148230][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 404.156199][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 404.163722][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 404.171528][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.180200][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 404.191396][ T9485] device veth0_vlan entered promiscuous mode [ 404.202677][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 404.213905][ T9485] device veth1_macvtap entered promiscuous mode [ 404.224116][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.236298][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 404.330055][ T421] device bridge_slave_1 left promiscuous mode [ 404.336055][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.343578][ T421] device bridge_slave_0 left promiscuous mode [ 404.349685][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.357706][ T421] device veth1_macvtap left promiscuous mode [ 404.363908][ T421] device veth0_vlan left promiscuous mode [ 404.538973][ T15] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 404.728925][ T53] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 404.919066][ T15] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 404.929745][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.940377][ T15] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.950073][ T15] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 405.008919][ T53] usb 4-1: Using ep0 maxpacket: 16 [ 405.058997][ T15] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 405.067838][ T15] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 405.075880][ T15] usb 2-1: Manufacturer: syz [ 405.081331][ T15] usb 2-1: config 0 descriptor?? [ 405.148959][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 405.158437][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 405.168056][ T53] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 405.248940][ T367] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 405.339052][ T53] usb 4-1: New USB device found, idVendor=08ca, idProduct=0022, bcdDevice=79.32 [ 405.347890][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.355718][ T53] usb 4-1: Product: syz [ 405.359728][ T53] usb 4-1: Manufacturer: syz [ 405.364110][ T53] usb 4-1: SerialNumber: syz [ 405.369216][ T53] usb 4-1: config 0 descriptor?? [ 405.409583][ T53] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 405.498943][ T367] usb 3-1: Using ep0 maxpacket: 16 [ 405.559942][ T15] appleir 0003:05AC:8243.0059: unknown main item tag 0x0 [ 405.566965][ T15] appleir 0003:05AC:8243.0059: No inputs registered, leaving [ 405.575403][ T15] appleir 0003:05AC:8243.0059: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 405.611943][ T15] usb 4-1: USB disconnect, device number 52 [ 405.628979][ T367] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 405.639173][ T367] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 405.647998][ T367] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 405.658637][ T367] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 405.669383][ T367] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 405.678742][ T367] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 405.691534][ T367] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 405.859092][ T367] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.867936][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.875762][ T367] usb 3-1: Product: syz [ 405.879137][ T540] Bluetooth: hci0: command 0x1001 tx timeout [ 405.879802][ T367] usb 3-1: Manufacturer: syz [ 405.885677][ T40] Bluetooth: hci0: sending frame failed (-49) [ 405.889993][ T367] usb 3-1: SerialNumber: syz [ 406.240833][ T367] usb 3-1: USB disconnect, device number 42 [ 407.735871][ T3668] usb 2-1: USB disconnect, device number 48 [ 407.995414][ T366] Bluetooth: hci0: command 0x1009 tx timeout [ 408.169085][ T24] audit: type=1400 audit(408.119:12223): avc: denied { mount } for pid=9540 comm="syz-executor.2" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 408.589490][ T9559] syz-executor.1[9559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.589552][ T9559] syz-executor.1[9559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.868141][ T24] audit: type=1400 audit(408.839:12224): avc: denied { unmount } for pid=8172 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 410.379030][ T366] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 410.699183][ T24] audit: type=1400 audit(410.679:12225): avc: denied { bind } for pid=9618 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 410.868969][ T366] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 410.876922][ T366] usb 2-1: config 0 has no interface number 0 [ 410.882850][ T366] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.893889][ T366] usb 2-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.903586][ T366] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 410.941102][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.950325][ T366] usb 2-1: config 0 descriptor?? [ 411.030358][ T9623] device syzkaller0 entered promiscuous mode [ 411.410144][ T366] logitech-djreceiver 0003:046D:C71B.005A: unknown main item tag 0x0 [ 411.423223][ T366] logitech-djreceiver 0003:046D:C71B.005A: unknown main item tag 0x0 [ 411.434931][ T366] logitech-djreceiver 0003:046D:C71B.005A: unknown main item tag 0x0 [ 411.443035][ T366] logitech-djreceiver 0003:046D:C71B.005A: unknown main item tag 0x0 [ 411.451054][ T366] logitech-djreceiver 0003:046D:C71B.005A: unknown main item tag 0x0 [ 411.459851][ T366] logitech-djreceiver 0003:046D:C71B.005A: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.1-1/input32 [ 411.612148][ T25] usb 2-1: USB disconnect, device number 49 [ 412.048892][ T367] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 412.288945][ T367] usb 5-1: Using ep0 maxpacket: 8 [ 412.408973][ T367] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.499109][ T367] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.508789][ T367] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 412.516791][ T367] usb 5-1: SerialNumber: syz [ 412.559490][ T367] cdc_ether 5-1:1.0: invalid descriptor buffer length [ 412.566073][ T367] usb 5-1: bad CDC descriptors [ 412.664931][ T9688] syz-executor.1[9688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.664972][ T9688] syz-executor.1[9688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 412.681356][ T9688] €Â: renamed from pim6reg1 [ 412.761412][ T25] usb 5-1: USB disconnect, device number 50 [ 412.792646][ T9692] Zero length message leads to an empty skb [ 412.849124][ T20] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 412.932715][ T9696] bridge0: port 3(gretap0) entered blocking state [ 412.939007][ T9696] bridge0: port 3(gretap0) entered disabled state [ 412.948016][ T9696] device gretap0 entered promiscuous mode [ 412.954119][ T9696] bridge0: port 3(gretap0) entered blocking state [ 412.960357][ T9696] bridge0: port 3(gretap0) entered forwarding state [ 413.119030][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 413.250100][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.260868][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.270384][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 413.283031][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 413.291861][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.300936][ T20] usb 3-1: config 0 descriptor?? [ 413.398176][ T9709] device pim6reg1 entered promiscuous mode [ 413.883239][ T9726] EXT4-fs (loop1): 1 orphan inode deleted [ 413.894839][ T9726] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 413.897749][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 413.982754][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 413.990143][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 413.997210][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 414.004357][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 414.011377][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 414.018388][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 414.025429][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 414.032459][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 414.039518][ T20] microsoft 0003:045E:07DA.005B: unknown main item tag 0x0 [ 414.063970][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.005B/input/input76 [ 414.080203][ T20] microsoft 0003:045E:07DA.005B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 414.096770][ T20] usb 3-1: USB disconnect, device number 43 [ 414.105754][ T9733] syz-executor.1[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.106174][ T9733] syz-executor.1[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.432606][ T9744] syz-executor.0[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.444609][ T9744] syz-executor.0[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.743059][ T9758] bridge0: port 3(gretap0) entered blocking state [ 414.760793][ T9758] bridge0: port 3(gretap0) entered disabled state [ 414.767482][ T9758] device gretap0 entered promiscuous mode [ 414.773170][ T9758] bridge0: port 3(gretap0) entered blocking state [ 414.779418][ T9758] bridge0: port 3(gretap0) entered forwarding state [ 415.138347][ T24] audit: type=1326 audit(415.119:12226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.208639][ T24] audit: type=1326 audit(415.159:12227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.238935][ T24] audit: type=1326 audit(415.159:12228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.263193][ T24] audit: type=1326 audit(415.159:12229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.288649][ T24] audit: type=1326 audit(415.159:12230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.312085][ T24] audit: type=1326 audit(415.159:12231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.408943][ T24] audit: type=1326 audit(415.159:12232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.432846][ T24] audit: type=1326 audit(415.159:12233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.456401][ T24] audit: type=1326 audit(415.159:12234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.498301][ T24] audit: type=1326 audit(415.159:12235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 415.667624][ T9783] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 415.677552][ T9783] device gretap0 entered promiscuous mode [ 415.728134][ T9794] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 416.064054][ T9803] syz-executor.4[9803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.064112][ T9803] syz-executor.4[9803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.141146][ T9807] SELinux: security_context_str_to_sid(staff_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 416.189092][ T5] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 416.428896][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 416.495041][ T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 416.548963][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.638951][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.658026][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 416.668109][ T5] usb 1-1: SerialNumber: syz [ 416.719405][ T5] cdc_ether 1-1:1.0: invalid descriptor buffer length [ 416.726102][ T5] usb 1-1: bad CDC descriptors [ 416.947134][ T20] usb 1-1: USB disconnect, device number 39 [ 417.029070][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.040060][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.049713][ T25] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 417.058716][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.067775][ T25] usb 5-1: config 0 descriptor?? [ 417.698904][ T20] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 417.728871][ T9843] syz-executor.0[9843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.728961][ T9843] syz-executor.0[9843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.789004][ T25] usb 5-1: language id specifier not provided by device, defaulting to English [ 417.948841][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 418.210101][ T25] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.005C/input/input77 [ 418.224480][ T25] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.005C/input/input78 [ 418.238643][ T25] uclogic 0003:256C:006D.005C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 418.319009][ T20] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 418.328003][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.335906][ T20] usb 2-1: Product: syz [ 418.339994][ T20] usb 2-1: Manufacturer: syz [ 418.344536][ T20] usb 2-1: SerialNumber: syz [ 418.350259][ T20] usb 2-1: config 0 descriptor?? [ 418.429269][ T5] usb 5-1: USB disconnect, device number 51 [ 418.728845][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 419.220195][ T20] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 419.289031][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 419.422774][ T20] usb 2-1: USB disconnect, device number 50 [ 419.438929][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.528947][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 419.538335][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 419.546245][ T25] usb 3-1: SerialNumber: syz [ 419.599338][ T25] cdc_ether 3-1:1.0: invalid descriptor buffer length [ 419.606079][ T25] usb 3-1: bad CDC descriptors [ 419.801875][ T5] usb 3-1: USB disconnect, device number 44 [ 420.689408][ T9921] syz-executor.2[9921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.689462][ T9921] syz-executor.2[9921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.788187][ T9937] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 420.943024][ T9947] syz-executor.4[9947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 420.943240][ T9947] syz-executor.4[9947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 421.307854][ T5] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 422.351347][ T9960] syz-executor.1[9960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.351404][ T9960] syz-executor.1[9960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.387887][ T9963] syz-executor.1[9963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.409318][ T9963] syz-executor.1[9963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.432156][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.452736][ T9967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.574579][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 423.108935][ T5] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.158998][ T53] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 423.199091][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.208138][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 423.215984][ T5] usb 1-1: SerialNumber: syz [ 423.259288][ T5] cdc_ether 1-1:1.0: invalid descriptor buffer length [ 423.265929][ T5] usb 1-1: bad CDC descriptors [ 423.399160][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 423.461761][ T3668] usb 1-1: USB disconnect, device number 40 [ 423.568963][ T53] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 423.577806][ T53] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 423.587221][ T53] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 423.596748][ T53] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 423.606378][ T53] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 423.616063][ T53] usb 3-1: config 1 interface 0 has no altsetting 0 [ 423.622508][ T53] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 423.631380][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.664172][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.673530][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.679465][ T53] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 423.768901][ T366] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 424.012349][ T53] scsi host1: usb-storage 3-1:1.0 [ 424.029843][ T366] usb 2-1: Using ep0 maxpacket: 16 [ 424.150744][ T350] usb 3-1: USB disconnect, device number 45 [ 424.178943][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.189820][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.199623][ T366] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 424.212480][ T366] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 424.221401][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.233140][ T366] usb 2-1: config 0 descriptor?? [ 425.014015][T10033] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 425.028884][T10033] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 425.028925][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.047362][T10033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 425.048521][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.062594][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.069666][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.070749][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 425.070766][ T24] audit: type=1326 audit(425.059:12253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 425.076642][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.082727][ T24] audit: type=1326 audit(425.059:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 425.105958][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.112937][ T24] audit: type=1326 audit(425.059:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 425.136305][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.166390][ T24] audit: type=1326 audit(425.059:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 425.173493][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.196890][ T24] audit: type=1326 audit(425.059:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 425.203870][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.227179][ T24] audit: type=1326 audit(425.059:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10032 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 425.234249][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.264362][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.271380][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.278401][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.285458][ T366] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 425.292650][ T366] microsoft 0003:045E:07DA.005D: unbalanced collection at end of report description [ 425.302039][ T366] microsoft 0003:045E:07DA.005D: parse failed [ 425.307999][ T366] microsoft: probe of 0003:045E:07DA.005D failed with error -22 [ 425.316699][ T366] usb 2-1: USB disconnect, device number 51 [ 425.438883][T10054] binder_alloc: 10053: binder_alloc_buf, no vma [ 425.580469][T10061] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 425.589112][T10061] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 425.600767][T10061] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 425.610058][ T24] audit: type=1326 audit(425.599:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e56eea9 code=0x7ffc0000 [ 425.666435][ T24] audit: type=1326 audit(425.599:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e56eea9 code=0x7ffc0000 [ 425.755074][ T24] audit: type=1326 audit(425.599:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45e56eea9 code=0x7ffc0000 [ 425.896805][ T24] audit: type=1326 audit(425.599:12262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10059 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45e56eea9 code=0x7ffc0000 [ 426.040969][T10082] binder_alloc: 10081: binder_alloc_buf, no vma [ 426.989289][T10097] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 427.248845][ T540] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 427.538878][ T540] usb 1-1: Using ep0 maxpacket: 16 [ 427.689042][ T540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.705423][ T540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.719668][ T540] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.737367][ T540] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 427.746476][ T540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.755659][ T540] usb 1-1: config 0 descriptor?? [ 428.171498][T10123] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 428.180271][T10123] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 428.192003][T10123] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 428.329881][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.342282][T10131] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 428.344116][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.361666][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.369103][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.376658][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.384035][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.391396][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.400534][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.407636][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.414690][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.427359][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.434918][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.442015][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.449019][ T540] microsoft 0003:045E:07DA.005E: unknown main item tag 0x0 [ 428.456040][ T540] microsoft 0003:045E:07DA.005E: unbalanced collection at end of report description [ 428.465384][ T540] microsoft 0003:045E:07DA.005E: parse failed [ 428.471555][ T540] microsoft: probe of 0003:045E:07DA.005E failed with error -22 [ 428.539875][ T367] usb 1-1: USB disconnect, device number 41 [ 428.546784][T10147] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 428.555406][T10147] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 428.566922][T10147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 429.682005][ T829] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 429.818921][ T5] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 429.900681][T10197] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 429.925590][T10202] syz-executor.1[10202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.925669][T10202] syz-executor.1[10202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.959205][ T829] usb 1-1: Using ep0 maxpacket: 8 [ 430.058876][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 430.088870][ T829] usb 1-1: config 0 has no interfaces? [ 430.094208][ T829] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 430.103269][ T829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.114884][ T829] usb 1-1: config 0 descriptor?? [ 430.178955][ T5] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.189673][ T5] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.199396][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 430.208260][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.292402][ T5] hub 5-1:4.0: USB hub found [ 430.369409][ T799] usb 1-1: USB disconnect, device number 42 [ 430.648338][ T5] hub 5-1:4.0: 2 ports detected [ 430.940460][T10221] SELinux: security_context_str_to_sid(r) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 431.312553][ T6736] bridge0: port 3(syz_tun) entered disabled state [ 431.326361][ T6736] device syz_tun left promiscuous mode [ 431.927306][ T6736] bridge0: port 3(syz_tun) entered disabled state [ 432.061629][T10232] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 432.088945][ T5] hub 5-1:4.0: hub_hub_status failed (err = -32) [ 432.095596][ T5] hub 5-1:4.0: config failed, can't get hub status (err -32) [ 432.131866][T10240] syz-executor.2[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.131946][T10240] syz-executor.2[10240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.234538][T10238] device pim6reg1 entered promiscuous mode [ 432.330383][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.337259][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.345468][T10243] device bridge_slave_0 entered promiscuous mode [ 432.354501][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.361397][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.368705][T10243] device bridge_slave_1 entered promiscuous mode [ 432.512224][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.519114][T10243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.526284][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.533086][T10243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.575536][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 432.583836][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.599706][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.621149][ T421] tipc: Disabling bearer [ 432.629031][ T421] tipc: Left network mode [ 432.643193][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 432.652583][ T799] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.659452][ T799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.667537][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 432.675835][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.682711][ T799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.722287][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 432.722301][ T24] audit: type=1326 audit(432.709:12279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 432.778257][ T24] audit: type=1326 audit(432.749:12280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 432.789340][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.810008][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.818615][ T24] audit: type=1326 audit(432.749:12281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 432.827263][T10270] syz-executor.1[10270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.843598][T10270] syz-executor.1[10270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.848755][ T24] audit: type=1326 audit(432.749:12282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 432.893547][ T24] audit: type=1326 audit(432.749:12283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 433.006526][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.080551][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.098405][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.149033][T10243] device veth0_vlan entered promiscuous mode [ 433.166600][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.185219][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.202393][ T24] audit: type=1326 audit(432.749:12284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 433.437214][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.458564][ T24] audit: type=1326 audit(432.749:12285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 433.477245][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.488960][ T24] audit: type=1326 audit(432.749:12286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10260 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff46a5eea9 code=0x7ffc0000 [ 433.516809][T10243] device veth1_macvtap entered promiscuous mode [ 433.533972][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 433.596518][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 433.604924][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.625546][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.641438][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.688636][T10285] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 433.789648][ T24] audit: type=1326 audit(433.779:12287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10295 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc5d3ea9 code=0x7ffc0000 [ 433.838879][ T24] audit: type=1326 audit(433.779:12288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10295 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc5d3ea9 code=0x7ffc0000 [ 433.889028][ T5] usb 5-1: USB disconnect, device number 52 [ 433.969291][T10283] tipc: Started in network mode [ 433.973992][T10283] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 433.983219][T10283] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 433.991368][T10283] tipc: Enabled bearer , priority 10 [ 433.998244][ T421] device bridge_slave_1 left promiscuous mode [ 434.005887][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.013776][ T421] device bridge_slave_0 left promiscuous mode [ 434.021395][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.033583][ T421] device veth1_macvtap left promiscuous mode [ 434.045118][ T421] device veth0_vlan left promiscuous mode [ 434.451817][ T15] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 434.819067][ T15] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.829348][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.840468][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.854658][ T15] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 434.863710][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.872526][ T15] usb 1-1: config 0 descriptor?? [ 435.116428][ T25] tipc: 32-bit node address hash set to 1000000 [ 435.390731][ T15] wacom 0003:056A:4001.005F: hidraw0: USB HID v0.00 Device [HID 056a:4001] on usb-dummy_hcd.0-1/input0 [ 435.592131][T10325] usb 1-1: USB disconnect, device number 43 [ 435.807176][T10338] syz-executor.1[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.807221][T10338] syz-executor.1[10338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.636576][T10353] syz-executor.3[10353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.648359][T10353] syz-executor.3[10353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.218906][ T15] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 437.588935][ T15] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.599529][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.610264][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.620194][ T15] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 437.637640][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.646732][ T15] usb 4-1: config 0 descriptor?? [ 437.655342][T10397] 9p: Unknown uid 18446744073709551615 [ 438.204630][ T15] wacom 0003:056A:4001.0060: hidraw0: USB HID v0.00 Device [HID 056a:4001] on usb-dummy_hcd.3-1/input0 [ 438.373109][ T20] usb 4-1: USB disconnect, device number 53 [ 439.298152][T10432] 9p: Unknown uid 18446744073709551615 [ 439.413883][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 439.553080][T10434] device pim6reg1 entered promiscuous mode [ 440.147813][T10464] syz-executor.3[10464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.147876][T10464] syz-executor.3[10464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.162638][T10464] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.3'. [ 440.886333][T10493] syz-executor.0[10493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.886392][T10493] syz-executor.0[10493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.988207][T10502] device syzkaller0 entered promiscuous mode [ 441.857089][T10526] syz-executor.2[10526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.857149][T10526] syz-executor.2[10526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.286757][T10562] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.995877][T10582] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 443.124515][T10583] overlayfs: failed to resolve './file0': -2 [ 443.146767][T10585] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 443.173715][T10592] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 443.189388][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 443.189403][ T24] audit: type=1400 audit(443.179:12304): avc: denied { mount } for pid=10591 comm="syz-executor.1" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 443.217823][ T24] audit: type=1400 audit(443.179:12305): avc: denied { watch watch_reads } for pid=10591 comm="syz-executor.1" path="/root/syzkaller-testdir2113661068/syzkaller.GPeChu/108/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 444.264064][T10617] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 444.748985][ T20] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 444.954186][T10647] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 444.989054][ T20] usb 3-1: Using ep0 maxpacket: 32 [ 445.089096][T10658] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.132200][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.143294][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.154547][ T20] usb 3-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 445.164119][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.175254][T10668] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=61261 [ 445.185368][T10668] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=61261 [ 445.194800][ T24] audit: type=1400 audit(445.179:12306): avc: denied { setattr } for pid=10667 comm="syz-executor.0" name="file0" dev="overlay" ino=61261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 445.236391][ T20] usb 3-1: config 0 descriptor?? [ 445.538877][ T350] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 445.682115][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.701106][T10686] binder: 10685:10686 ioctl c0306201 20000380 returned -14 [ 445.710084][ T20] wacom 0003:056A:0314.0061: Unknown device_type for 'HID 056a:0314'. Assuming pen. [ 445.720316][ T20] wacom 0003:056A:0314.0061: hidraw0: USB HID v0.00 Device [HID 056a:0314] on usb-dummy_hcd.2-1/input0 [ 445.732210][ T20] input: Wacom Intuos Pro S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0314.0061/input/input85 [ 445.778978][ T350] usb 1-1: Using ep0 maxpacket: 16 [ 446.105155][ T20] usb 3-1: USB disconnect, device number 46 [ 446.306224][ T24] audit: type=1400 audit(446.289:12307): avc: denied { accept } for pid=10701 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 446.518946][ T350] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 446.527807][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.535661][ T350] usb 1-1: Product: syz [ 446.539640][ T350] usb 1-1: Manufacturer: syz [ 446.544030][ T350] usb 1-1: SerialNumber: syz [ 446.549085][ T350] usb 1-1: config 0 descriptor?? [ 446.597163][ T350] usb-storage 1-1:0.0: USB Mass Storage device detected [ 446.664500][T10713] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.791615][ T20] usb 1-1: USB disconnect, device number 44 [ 447.491473][ T24] audit: type=1400 audit(447.479:12308): avc: denied { write } for pid=10729 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 447.884562][ T20] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 447.905355][ T24] audit: type=1326 audit(447.889:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0cc5d3ea9 code=0x0 [ 448.030082][ T24] audit: type=1400 audit(447.989:12310): avc: denied { listen } for pid=10737 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 448.148921][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 448.240004][T10749] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=62436 [ 448.249229][T10749] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=62436 [ 448.278956][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 448.290193][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 448.301385][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 448.310754][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.319513][ T20] usb 1-1: config 0 descriptor?? [ 448.339002][T10724] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 448.359563][ T20] hub 1-1:0.0: USB hub found [ 448.389294][T10751] fuse: Invalid user_id [ 448.392450][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.400969][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.408254][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.415559][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.423295][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.430628][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.437943][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.445396][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.454590][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.462127][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.469384][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.477479][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.484807][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.492416][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.499685][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.506948][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.514299][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.535892][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.543242][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.550523][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.557741][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.564963][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.572149][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.589127][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.603127][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.610574][ T20] hub 1-1:0.0: 2 ports detected [ 448.627033][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.648856][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.659950][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.667200][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.679892][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.689575][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.698579][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.705869][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.713042][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.720254][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.727431][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.734806][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.742015][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.749220][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.756534][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.763762][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.770925][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.778113][ T350] hid-generic 0000:0000:0000.0062: unknown main item tag 0x0 [ 448.785879][ T350] hid-generic 0000:0000:0000.0062: hidraw0: HID v0.00 Device [syz0] on syz0 [ 448.886459][T10771] device pim6reg1 entered promiscuous mode [ 449.368869][T10626] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 449.608853][T10626] usb 3-1: Using ep0 maxpacket: 8 [ 449.729970][T10626] usb 3-1: config 0 has no interfaces? [ 449.735286][T10626] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 449.744378][T10626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.753795][T10626] usb 3-1: config 0 descriptor?? [ 449.960887][ T24] audit: type=1326 audit(449.949:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 449.984304][ T24] audit: type=1326 audit(449.949:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.008007][ T3668] usb 1-1: USB disconnect, device number 45 [ 450.010606][ T24] audit: type=1326 audit(449.949:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f40a284f9a7 code=0x7ffc0000 [ 450.013966][ T20] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 450.051999][ T24] audit: type=1326 audit(449.949:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.088715][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.174761][ T24] audit: type=1326 audit(449.949:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.198689][ T24] audit: type=1326 audit(449.949:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.231247][T10626] usb 3-1: USB disconnect, device number 47 [ 450.237355][ T24] audit: type=1326 audit(449.949:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.261752][ T24] audit: type=1326 audit(449.949:12318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.285330][ T24] audit: type=1326 audit(449.949:12319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.308703][ T24] audit: type=1326 audit(449.949:12320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10723 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40a2850ea9 code=0x7ffc0000 [ 450.620315][T10798] syz-executor.1[10798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.620379][T10798] syz-executor.1[10798] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.697942][T10802] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 450.717734][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 450.717748][ T110] Bluetooth: hci0: Frame reassembly failed (-84) [ 451.008899][ T540] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 451.298863][ T540] usb 4-1: Using ep0 maxpacket: 16 [ 451.428924][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.439632][ T540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.449229][ T540] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 451.458969][ T540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.468452][ T540] usb 4-1: config 0 descriptor?? [ 451.487435][T10823] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 451.884484][T10852] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 451.963569][ T540] logitech 0003:046D:C29C.0063: unknown main item tag 0x0 [ 451.985220][ T540] logitech 0003:046D:C29C.0063: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 452.374123][ T540] logitech 0003:046D:C29C.0063: no inputs found [ 452.382002][ T540] usb 4-1: USB disconnect, device number 54 [ 452.758940][ T540] Bluetooth: hci0: command 0x1003 tx timeout [ 452.764834][ T2132] Bluetooth: hci0: sending frame failed (-49) [ 452.966663][T10882] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 452.997653][T10884] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 453.390085][T10894] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 453.398135][T10894] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 453.418128][T10894] F2FS-fs (loop0): invalid crc value [ 453.425457][T10894] F2FS-fs (loop0): Found nat_bits in checkpoint [ 454.117543][T10894] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 454.124687][T10894] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 454.323486][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 454.594661][ T110] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 454.608708][ T110] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 454.681391][ T110] tipc: Left network mode [ 454.847797][ T799] Bluetooth: hci0: command 0x1001 tx timeout [ 454.853888][ T2132] Bluetooth: hci0: sending frame failed (-49) [ 455.094067][T10936] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 455.122343][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.137514][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.154811][T10928] device bridge_slave_0 entered promiscuous mode [ 455.189916][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.197002][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.207473][T10928] device bridge_slave_1 entered promiscuous mode [ 455.222530][ T8878] bridge0: port 3(syz_tun) entered disabled state [ 455.233275][ T8878] device syz_tun left promiscuous mode [ 455.244858][ T8878] bridge0: port 3(syz_tun) entered disabled state [ 455.253913][ T24] kauditd_printk_skb: 4472 callbacks suppressed [ 455.253929][ T24] audit: type=1400 audit(455.239:16793): avc: denied { mounton } for pid=10945 comm="syz-executor.3" path="/root/syzkaller-testdir2067984520/syzkaller.rLW4hO/72/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 455.369925][T10946] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.376912][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.384216][T10946] device bridge_slave_0 entered promiscuous mode [ 455.391284][T10946] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.398119][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.405659][T10946] device bridge_slave_1 entered promiscuous mode [ 455.475729][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.483032][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.495384][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.503570][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.512249][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.519119][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.538965][ T110] device bridge_slave_1 left promiscuous mode [ 455.545004][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.553685][ T110] device bridge_slave_0 left promiscuous mode [ 455.559887][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.568005][ T110] device veth1_macvtap left promiscuous mode [ 455.574635][ T110] device veth0_vlan left promiscuous mode [ 455.580244][T10626] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 455.818895][T10626] usb 4-1: Using ep0 maxpacket: 32 [ 455.823983][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 455.835102][T10957] bridge0: port 4(erspan0) entered blocking state [ 455.841423][T10957] bridge0: port 4(erspan0) entered disabled state [ 455.847935][T10957] device erspan0 entered promiscuous mode [ 455.853617][T10957] bridge0: port 4(erspan0) entered blocking state [ 455.859845][T10957] bridge0: port 4(erspan0) entered forwarding state [ 455.871619][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 455.881182][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.889327][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.896151][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.910075][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.918019][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.925933][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.934504][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.942289][T10626] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.953447][T10626] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.960404][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.963211][T10626] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 455.970854][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.985937][T10626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.003126][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.011561][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.019637][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.026511][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.033804][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.034088][T10626] hub 4-1:4.0: USB hub found [ 456.042159][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.055247][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.062126][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.069550][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.077374][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 456.085573][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.098661][T10928] device veth0_vlan entered promiscuous mode [ 456.104970][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.112644][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.121441][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 456.129407][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.150135][T10928] device veth1_macvtap entered promiscuous mode [ 456.156913][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.165221][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.172962][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.180538][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.188555][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.196820][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.212033][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.220294][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.227623][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.237073][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.238908][T10626] hub 4-1:4.0: 2 ports detected [ 456.246641][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.258602][T10946] device veth0_vlan entered promiscuous mode [ 456.271764][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.280167][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.295697][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.310294][T10946] device veth1_macvtap entered promiscuous mode [ 456.324770][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.336366][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.363346][T10971] device veth1_macvtap left promiscuous mode [ 456.372503][T10971] device veth1_macvtap entered promiscuous mode [ 456.919134][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 457.329750][ T110] device bridge_slave_1 left promiscuous mode [ 457.336898][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.344529][ T110] device bridge_slave_0 left promiscuous mode [ 457.351468][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.359655][ T110] device veth1_macvtap left promiscuous mode [ 457.365578][ T110] device veth0_vlan left promiscuous mode [ 457.429534][T10626] hub 4-1:4.0: hub_hub_status failed (err = -32) [ 457.435709][T10626] hub 4-1:4.0: config failed, can't get hub status (err -32) [ 457.499262][ T3668] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 457.746440][ T24] audit: type=1400 audit(457.729:16794): avc: denied { write } for pid=11028 comm="syz-executor.4" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 457.774844][ T24] audit: type=1400 audit(457.729:16795): avc: denied { open } for pid=11028 comm="syz-executor.4" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 457.801157][T11033] syz-executor.4[11033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.801262][T11033] syz-executor.4[11033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.908980][ T3668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 457.930147][ T3668] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 458.098871][ T517] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 458.138957][ T3668] usb 3-1: New USB device found, idVendor=0403, idProduct=f44c, bcdDevice=a7.d9 [ 458.147896][ T3668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.155640][ T3668] usb 3-1: Product: syz [ 458.159698][ T3668] usb 3-1: Manufacturer: syz [ 458.164063][ T3668] usb 3-1: SerialNumber: syz [ 458.169101][ T3668] usb 3-1: config 0 descriptor?? [ 458.209601][ T3668] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 458.217438][ T3668] usb 3-1: Detected FT-X [ 458.221647][ T3668] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 10 [ 458.338873][ T517] usb 5-1: Using ep0 maxpacket: 8 [ 458.428924][ T3668] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 458.448967][ T3668] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 458.458950][ T517] usb 5-1: config 0 has no interfaces? [ 458.464326][ T517] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 458.473166][ T517] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.478962][ T3668] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 458.483785][ T517] usb 5-1: config 0 descriptor?? [ 458.488152][ T3668] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 458.500880][ T3668] usb 3-1: USB disconnect, device number 48 [ 458.507439][ T3668] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 458.516901][ T3668] ftdi_sio 3-1:0.0: device disconnected [ 458.731727][ T517] usb 5-1: USB disconnect, device number 53 [ 458.936701][T11054] device veth1_macvtap left promiscuous mode [ 458.945125][T11054] device veth1_macvtap entered promiscuous mode [ 458.952158][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 459.260899][T11076] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 459.629256][ T25] usb 4-1: USB disconnect, device number 55 [ 460.126038][T11083] device veth1_macvtap left promiscuous mode [ 460.135050][T11083] device veth1_macvtap entered promiscuous mode [ 460.292267][ T24] audit: type=1400 audit(460.279:16796): avc: denied { write } for pid=11103 comm="syz-executor.2" name="fd" dev="proc" ino=64330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 460.313468][ T24] audit: type=1400 audit(460.279:16797): avc: denied { add_name } for pid=11103 comm="syz-executor.2" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 460.332999][ T24] audit: type=1400 audit(460.279:16798): avc: denied { create } for pid=11103 comm="syz-executor.2" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 460.359182][ T24] audit: type=1400 audit(460.279:16799): avc: denied { associate } for pid=11103 comm="syz-executor.2" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 460.550604][ T540] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 460.828836][ T540] usb 5-1: Using ep0 maxpacket: 8 [ 460.988911][ T540] usb 5-1: config 0 has no interfaces? [ 460.994261][ T540] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 461.003402][ T540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.011810][ T540] usb 5-1: config 0 descriptor?? [ 461.226327][T11124] device veth1_macvtap left promiscuous mode [ 461.235111][T11124] device veth1_macvtap entered promiscuous mode [ 461.242625][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.259763][T10626] usb 5-1: USB disconnect, device number 54 [ 461.612343][ T350] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 461.999148][ T350] usb 1-1: config index 0 descriptor too short (expected 64575, got 68) [ 462.010600][ T350] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.036688][ T350] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 462.048146][ T350] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 462.101827][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.109306][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.116532][T11147] device bridge_slave_0 entered promiscuous mode [ 462.123445][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.130492][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.137765][T11147] device bridge_slave_1 entered promiscuous mode [ 462.158898][ T350] usb 1-1: config index 1 descriptor too short (expected 64575, got 68) [ 462.167083][ T350] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.177143][ T350] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 462.187992][ T350] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 462.196792][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.207535][T11147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.214679][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.221438][T11147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.238991][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.246180][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.263941][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 462.271704][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 462.278879][ T350] usb 1-1: string descriptor 0 read error: -71 [ 462.284937][ T350] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 462.294316][ T350] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.306122][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 462.314431][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 462.322460][ T350] usb 1-1: can't set config #1, error -71 [ 462.367650][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.374619][ T540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.439302][ T350] usb 1-1: USB disconnect, device number 46 [ 462.458814][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 462.467032][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.475475][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.482321][ T540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.489959][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.498882][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.507645][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 462.517495][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 462.543407][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 462.577590][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 462.620864][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 462.631252][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 462.644381][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 462.653875][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 462.665739][T11147] device veth0_vlan entered promiscuous mode [ 462.722147][T11147] device veth1_macvtap entered promiscuous mode [ 462.735145][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 462.743390][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 462.751494][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 462.759133][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 462.767216][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 462.775560][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 462.783809][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 462.909528][ T110] device bridge_slave_1 left promiscuous mode [ 462.915491][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.922859][ T110] device bridge_slave_0 left promiscuous mode [ 462.928959][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.936665][ T110] device veth1_macvtap left promiscuous mode [ 462.942574][ T110] device veth0_vlan left promiscuous mode [ 463.128910][T10626] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 463.828930][T10626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.839668][T10626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.849219][T10626] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 463.858009][T10626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.866402][T10626] usb 1-1: config 0 descriptor?? [ 463.918878][ T3668] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 464.259265][ T24] audit: type=1326 audit(464.249:16800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11195 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x0 [ 464.331542][T11158] udc-core: couldn't find an available UDC or it's busy [ 464.338428][T11158] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 464.348932][ T3668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.359901][ T3668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.369677][ T3668] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 464.378551][ T3668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.388203][ T3668] usb 2-1: config 0 descriptor?? [ 464.428856][ T350] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 464.818934][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.829695][ T350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.839531][ T350] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 464.848400][ T350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.856749][ T350] usb 5-1: config 0 descriptor?? [ 464.999008][ T3668] usbhid 2-1:0.0: can't add hid device: -71 [ 465.004943][ T3668] usbhid: probe of 2-1:0.0 failed with error -71 [ 465.011776][ T3668] usb 2-1: USB disconnect, device number 52 [ 465.068915][T10626] uclogic 0003:256C:006D.0064: failed retrieving Huion firmware version: -71 [ 465.077670][T10626] uclogic 0003:256C:006D.0064: failed probing parameters: -71 [ 465.085291][T10626] uclogic: probe of 0003:256C:006D.0064 failed with error -71 [ 465.094194][T10626] usb 1-1: USB disconnect, device number 47 [ 465.155318][T11210] input: syz0 as /devices/virtual/input/input88 [ 465.223182][ T24] audit: type=1326 audit(465.209:16801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af9656627 code=0x7ffc0000 [ 465.246983][ T24] audit: type=1326 audit(465.209:16802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af961c309 code=0x7ffc0000 [ 465.270229][ T24] audit: type=1326 audit(465.209:16803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 465.293598][ T24] audit: type=1326 audit(465.209:16804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af9656627 code=0x7ffc0000 [ 465.317096][ T24] audit: type=1326 audit(465.209:16805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af961c309 code=0x7ffc0000 [ 465.319097][ T350] gt683r_led 0003:1770:FF00.0065: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 465.341984][ T24] audit: type=1326 audit(465.209:16806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 465.374891][ T24] audit: type=1326 audit(465.209:16807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af9656627 code=0x7ffc0000 [ 465.398219][ T24] audit: type=1326 audit(465.209:16808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af961c309 code=0x7ffc0000 [ 465.421623][ T24] audit: type=1326 audit(465.209:16809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 465.445050][ T24] audit: type=1326 audit(465.209:16810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af9656627 code=0x7ffc0000 [ 465.468334][ T24] audit: type=1326 audit(465.209:16811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af961c309 code=0x7ffc0000 [ 465.491956][ T24] audit: type=1326 audit(465.209:16812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5af9658ea9 code=0x7ffc0000 [ 465.505504][T11217] fuse: Unknown parameter 'f' [ 465.515327][ T24] audit: type=1326 audit(465.209:16813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5af9656627 code=0x7ffc0000 [ 465.531641][T10626] usb 5-1: USB disconnect, device number 55 [ 465.543331][ T24] audit: type=1326 audit(465.209:16814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5af961c309 code=0x7ffc0000 [ 465.579035][ T368] gt683r_led 0003:1770:FF00.0065: failed to send set report request: -19 [ 466.130614][T11232] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 466.198796][T11232] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 466.211659][T11232] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 466.224257][T11232] attempt to access beyond end of device [ 466.224257][T11232] loop4: rw=2049, want=3606377192, limit=1024 [ 466.235770][T11232] EXT4-fs warning (device loop4): ext4_end_bio:351: I/O error 10 writing to inode 15 starting block 1803188595) [ 466.247888][T11232] Buffer I/O error on device loop4, logical block 1803188595 [ 466.255361][T11232] attempt to access beyond end of device [ 466.255361][T11232] loop4: rw=2049, want=3403208900, limit=1024 [ 466.266814][T11232] EXT4-fs warning (device loop4): ext4_end_bio:351: I/O error 10 writing to inode 15 starting block 1701604449) [ 466.278517][T11232] Buffer I/O error on device loop4, logical block 1701604449 [ 466.286483][T11232] attempt to access beyond end of device [ 466.286483][T11232] loop4: rw=2049, want=59110, limit=1024 [ 466.297675][T11232] EXT4-fs warning (device loop4): ext4_end_bio:351: I/O error 10 writing to inode 15 starting block 29554) [ 466.309028][T11232] Buffer I/O error on device loop4, logical block 29554 [ 466.322511][T11147] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir1727680238/syzkaller.f2oeqF/13/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 466.352666][T11147] EXT4-fs (loop4): Inode 15 (ffff888131b4d2b0): i_reserved_data_blocks (1) not cleared! [ 466.587369][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.594703][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.602333][T11238] device bridge_slave_0 entered promiscuous mode [ 466.612082][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.619055][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.626467][T11238] device bridge_slave_1 entered promiscuous mode [ 466.693513][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.700417][T11238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.707546][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.714414][T11238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.742495][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.751453][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.758684][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.777660][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.785940][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.792814][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.801114][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.809328][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.816194][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.818866][ T368] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 466.831318][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.839348][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.864185][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.876701][T11238] device veth0_vlan entered promiscuous mode [ 466.883162][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.910142][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.917513][ T540] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.935352][T11238] device veth1_macvtap entered promiscuous mode [ 466.942517][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.955142][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 466.969840][ T350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 467.029475][ T110] device bridge_slave_1 left promiscuous mode [ 467.035554][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.043107][ T110] device bridge_slave_0 left promiscuous mode [ 467.049655][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.057608][ T110] device veth1_macvtap left promiscuous mode [ 467.063682][ T110] device veth0_vlan left promiscuous mode [ 467.091888][T11255] binder: 11254:11255 ioctl c018620b 20000380 returned -14 [ 467.142698][T11259] bridge0: port 3(erspan0) entered blocking state [ 467.149062][T11259] bridge0: port 3(erspan0) entered disabled state [ 467.155534][T11259] device erspan0 entered promiscuous mode [ 467.161843][T11259] bridge0: port 3(erspan0) entered blocking state [ 467.168112][T11259] bridge0: port 3(erspan0) entered forwarding state [ 467.218961][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.229912][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.239501][ T368] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 467.248389][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.258760][ T368] usb 1-1: config 0 descriptor?? [ 467.309649][ T5552] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 467.507432][T11272] syz-executor.4[11272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.507466][T11272] syz-executor.4[11272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 467.568807][T11274] tap0: tun_chr_ioctl cmd 1074812118 [ 467.688740][ T5552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.699517][ T5552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.709048][ T5552] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 467.717801][ T5552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.726370][ T5552] usb 3-1: config 0 descriptor?? [ 467.908539][ T368] usbhid 1-1:0.0: can't add hid device: -71 [ 467.914532][ T368] usbhid: probe of 1-1:0.0 failed with error -71 [ 467.921744][ T368] usb 1-1: USB disconnect, device number 48 [ 468.100127][T11289] F2FS-fs (loop4): invalid crc value [ 468.106945][T11289] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 468.130037][T11289] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 468.200730][T11249] udc-core: couldn't find an available UDC or it's busy [ 468.207586][T11249] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 468.592169][T11305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 469.157796][ T5552] uclogic 0003:256C:006D.0066: failed retrieving Huion firmware version: -71 [ 469.166446][ T5552] uclogic 0003:256C:006D.0066: failed probing parameters: -71 [ 469.245761][ T5552] uclogic: probe of 0003:256C:006D.0066 failed with error -71 [ 469.494993][ T5552] usb 3-1: USB disconnect, device number 49 [ 469.718831][ T25] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 469.959325][T11345] binder: 11344:11345 ioctl c018620b 20000380 returned -14 [ 469.987436][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 470.107634][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.142797][ T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.307422][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 470.316330][ T25] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 470.324464][ T25] usb 5-1: Product: syz [ 470.328437][ T25] usb 5-1: Manufacturer: syz [ 470.367687][ T25] hub 5-1:4.0: USB hub found [ 470.507215][ T721] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 470.587211][ T25] hub 5-1:4.0: 2 ports detected [ 470.772182][T11360] incfs: Can't find or create .index dir in ./file0 [ 470.778946][T11360] incfs: mount failed -14 [ 470.867118][ T721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.877904][ T721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.887402][ T721] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 470.896595][ T721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.906849][ T721] usb 1-1: config 0 descriptor?? [ 471.383648][T11356] udc-core: couldn't find an available UDC or it's busy [ 471.390846][T11356] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 472.036678][ T25] hub 5-1:4.0: activate --> -90 [ 472.316860][ T20] usb 5-1: USB disconnect, device number 56 [ 472.336329][ T350] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 472.376361][ T721] uclogic 0003:256C:006D.0067: failed retrieving Huion firmware version: -71 [ 472.385019][ T721] uclogic 0003:256C:006D.0067: failed probing parameters: -71 [ 472.392513][ T721] uclogic: probe of 0003:256C:006D.0067 failed with error -71 [ 472.400647][ T721] usb 1-1: USB disconnect, device number 49 [ 472.847146][T11378] incfs: Options parsing error. -22 [ 472.852246][T11378] incfs: mount failed -22 [ 473.375846][ T20] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 473.625628][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 473.655575][ T721] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 473.745656][ T20] usb 5-1: config 0 has an invalid interface number: 224 but max is 0 [ 473.753750][ T20] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.763814][ T20] usb 5-1: config 0 has no interface number 0 [ 473.783832][ T20] usb 5-1: config 0 interface 224 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.832019][ T20] usb 5-1: Dual-Role OTG device on HNP port [ 473.893566][ T20] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4c.b4 [ 473.902855][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.911867][ T20] usb 5-1: config 0 descriptor?? [ 474.024101][T11422] syz-executor.0[11422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.024452][T11422] syz-executor.0[11422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.136223][ T721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.290999][ T721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.300877][ T721] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 474.375388][ T721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.384339][ T721] usb 2-1: config 0 descriptor?? [ 474.415224][ T20] usb 5-1: string descriptor 0 read error: -71 [ 474.423030][ T20] usb_ehset_test: probe of 5-1:0.224 failed with error -32 [ 474.432138][ T20] usb 5-1: USB disconnect, device number 57 [ 474.745589][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.754866][T11437] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.763984][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.777953][ T24] kauditd_printk_skb: 4687 callbacks suppressed [ 474.777967][ T24] audit: type=1326 audit(474.763:21502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.780028][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.784066][ T24] audit: type=1326 audit(474.763:21503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.809841][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.814844][ T24] audit: type=1326 audit(474.763:21504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.871150][ T24] audit: type=1326 audit(474.763:21505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.896487][ T24] audit: type=1326 audit(474.763:21506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.919977][ T24] audit: type=1326 audit(474.763:21507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.943652][ T24] audit: type=1326 audit(474.793:21508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.944398][T11406] udc-core: couldn't find an available UDC or it's busy [ 474.967406][ T24] audit: type=1326 audit(474.793:21509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11436 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 474.991366][T11406] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 475.117369][T11459] device syzkaller0 entered promiscuous mode [ 475.414132][ T24] audit: type=1400 audit(475.394:21510): avc: denied { setattr } for pid=11465 comm="syz-executor.0" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 475.453670][T11479] cgroup: name respecified [ 475.461856][T11471] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 475.548454][T11471] EXT4-fs error (device loop4): ext4_xattr_ibody_get:603: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 475.560961][T11471] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 475.573461][T11471] attempt to access beyond end of device [ 475.573461][T11471] loop4: rw=2049, want=3606377192, limit=1024 [ 475.584978][T11471] EXT4-fs warning (device loop4): ext4_end_bio:351: I/O error 10 writing to inode 15 starting block 1803188595) [ 475.596661][T11471] Buffer I/O error on device loop4, logical block 1803188595 [ 475.869000][T11471] attempt to access beyond end of device [ 475.869000][T11471] loop4: rw=2049, want=3403208900, limit=1024 [ 475.881632][T11471] EXT4-fs warning (device loop4): ext4_end_bio:351: I/O error 10 writing to inode 15 starting block 1701604449) [ 475.893394][T11471] Buffer I/O error on device loop4, logical block 1701604449 [ 475.901183][T11471] attempt to access beyond end of device [ 475.901183][T11471] loop4: rw=2049, want=59110, limit=1024 [ 475.912296][T11471] EXT4-fs warning (device loop4): ext4_end_bio:351: I/O error 10 writing to inode 15 starting block 29554) [ 475.923605][T11471] Buffer I/O error on device loop4, logical block 29554 [ 475.924518][ T721] uclogic 0003:256C:006D.0068: failed retrieving Huion firmware version: -71 [ 475.939291][ T721] uclogic 0003:256C:006D.0068: failed probing parameters: -71 [ 475.946861][ T721] uclogic: probe of 0003:256C:006D.0068 failed with error -71 [ 475.958237][ T721] usb 2-1: USB disconnect, device number 53 [ 476.032890][T11238] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir1046805228/syzkaller.7NaqhC/33/bus: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 476.118735][T11238] EXT4-fs (loop4): Inode 15 (ffff88811d302f40): i_reserved_data_blocks (1) not cleared! [ 476.327427][T11495] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.334520][T11495] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.341947][T11495] device bridge_slave_0 entered promiscuous mode [ 476.350742][T11495] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.358112][T11495] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.365520][T11495] device bridge_slave_1 entered promiscuous mode [ 476.385051][T11502] syz-executor.0[11502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.385110][T11502] syz-executor.0[11502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.428679][T11495] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.447075][T11495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.454204][T11495] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.460948][T11495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.484940][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.493354][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.508014][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.532419][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.540551][ T5552] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.547410][ T5552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.555487][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.563508][ T5552] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.570369][ T5552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.586616][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.594467][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.608359][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.621354][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.632771][T11510] cgroup: name respecified [ 476.644746][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.667680][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.682343][ T421] bridge0: port 3(erspan0) entered disabled state [ 476.702520][ T421] device erspan0 left promiscuous mode [ 476.708372][ T421] bridge0: port 3(erspan0) entered disabled state [ 476.716953][T11495] device veth0_vlan entered promiscuous mode [ 476.731168][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.740840][T11495] device veth1_macvtap entered promiscuous mode [ 476.752771][ T5552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 476.781687][ T24] audit: type=1400 audit(476.764:21511): avc: denied { ioctl } for pid=11521 comm="syz-executor.1" path="socket:[66612]" dev="sockfs" ino=66612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 476.815151][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.274886][ T421] device bridge_slave_1 left promiscuous mode [ 477.281893][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.289434][ T421] device bridge_slave_0 left promiscuous mode [ 477.295750][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.303894][ T421] device veth1_macvtap left promiscuous mode [ 477.309802][ T421] device veth0_vlan left promiscuous mode [ 477.419497][T11546] device syzkaller0 entered promiscuous mode [ 477.524519][ T368] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 477.883668][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.894978][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.904902][ T368] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 477.913885][ T368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.924354][ T368] usb 2-1: config 0 descriptor?? [ 477.973532][ T15] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 478.233400][ T15] usb 1-1: Using ep0 maxpacket: 32 [ 478.405357][T11533] udc-core: couldn't find an available UDC or it's busy [ 478.412317][T11533] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 478.427838][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 478.439233][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 478.451992][ T15] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 478.461229][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.461973][T11562] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.478919][ T15] usb 1-1: config 0 descriptor?? [ 478.483772][T11562] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.492931][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 478.513682][T11552] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 478.533737][ T15] hub 1-1:0.0: USB hub found [ 478.887158][ T15] hub 1-1:0.0: 2 ports detected [ 479.233187][ T368] uclogic 0003:256C:006D.0069: failed retrieving Huion firmware version: -71 [ 479.241895][ T368] uclogic 0003:256C:006D.0069: failed probing parameters: -71 [ 479.249220][ T368] uclogic: probe of 0003:256C:006D.0069 failed with error -71 [ 479.257349][ T368] usb 2-1: USB disconnect, device number 54 [ 479.844665][T11603] device syzkaller0 entered promiscuous mode [ 480.442915][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 480.442940][ T24] audit: type=1326 audit(480.387:21537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.528026][ T24] audit: type=1326 audit(480.451:21538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.577126][ T24] audit: type=1326 audit(480.451:21539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2b32b449a7 code=0x7ffc0000 [ 480.671972][ T24] audit: type=1326 audit(480.461:21540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.695943][ T368] usb 1-1: USB disconnect, device number 50 [ 480.707352][ T24] audit: type=1326 audit(480.461:21541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.730782][ T24] audit: type=1326 audit(480.479:21542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.754094][ T15] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 480.756782][ T24] audit: type=1326 audit(480.479:21543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.784534][ T24] audit: type=1326 audit(480.479:21544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.809148][ T24] audit: type=1326 audit(480.479:21545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.833355][ T24] audit: type=1326 audit(480.479:21546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11551 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 480.979558][T11630] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.987288][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.010674][T11630] device bridge_slave_0 entered promiscuous mode [ 481.023550][T11630] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.030592][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.053127][T11630] device bridge_slave_1 entered promiscuous mode [ 481.159045][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.414314][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.469585][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.480754][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.490610][ T8253] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.497483][ T8253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.505712][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 481.515347][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.524313][ T8253] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.531171][ T8253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.584554][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.643293][T11630] device veth0_vlan entered promiscuous mode [ 481.650922][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.660187][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.668525][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.676195][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.683873][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.692175][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.710057][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.720103][T11630] device veth1_macvtap entered promiscuous mode [ 481.731805][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 481.748667][ T721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.660647][ T421] device bridge_slave_1 left promiscuous mode [ 482.770254][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.786404][ T421] device bridge_slave_0 left promiscuous mode [ 482.800714][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.818672][ T421] device veth1_macvtap left promiscuous mode [ 482.824513][ T421] device veth0_vlan left promiscuous mode [ 483.068347][T11699] ·: Can't open blockdev [ 483.152579][T11701] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.165603][T11701] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.177704][T11701] device bridge_slave_0 entered promiscuous mode [ 483.195072][T11701] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.207781][T11701] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.215157][T11701] device bridge_slave_1 entered promiscuous mode [ 483.266490][T11701] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.273357][T11701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.280441][T11701] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.287235][T11701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.984885][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.992771][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 484.001366][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.017723][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.029344][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.084527][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 484.092970][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 484.121775][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 484.130063][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 484.426939][T11701] device veth0_vlan entered promiscuous mode [ 484.443303][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 484.584254][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.695483][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.748334][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 484.757139][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.771660][T11701] device veth1_macvtap entered promiscuous mode [ 484.784715][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 484.792675][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 484.800998][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 484.828544][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 484.839554][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 484.985466][T11752] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 484.992810][T11752] EXT4-fs (loop0): can't mount with commit=6, fs mounted w/o journal [ 485.258106][ T421] device bridge_slave_1 left promiscuous mode [ 485.265231][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.284908][ T421] device bridge_slave_0 left promiscuous mode [ 485.320519][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.347905][ T421] device veth1_macvtap left promiscuous mode [ 485.369457][ T421] device veth0_vlan left promiscuous mode [ 486.123980][ T24] kauditd_printk_skb: 16 callbacks suppressed [ 486.123997][ T24] audit: type=1326 audit(2000000001.246:21563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 486.155381][ T24] audit: type=1326 audit(2000000001.246:21564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 486.213507][ T24] audit: type=1326 audit(2000000001.282:21565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 486.510685][ T24] audit: type=1326 audit(2000000001.301:21566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 486.545318][ T24] audit: type=1326 audit(2000000001.310:21567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 486.570254][ T24] audit: type=1326 audit(2000000001.569:21568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 486.579608][T11807] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 486.606110][ T24] audit: type=1326 audit(2000000001.578:21569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b32b45ea9 code=0x7ffc0000 [ 486.636704][ T24] audit: type=1326 audit(2000000001.578:21570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b32b43627 code=0x7ffc0000 [ 486.667129][ T24] audit: type=1326 audit(2000000001.578:21571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b32b09309 code=0x7ffc0000 [ 487.155196][ T24] audit: type=1326 audit(2000000001.578:21572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b32b43627 code=0x7ffc0000 [ 487.238593][T11813] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 487.245794][T11813] EXT4-fs (loop4): can't mount with commit=6, fs mounted w/o journal [ 488.992743][ C1] sched: RT throttling activated [ 489.198753][ T5552] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 489.642998][ T5552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.655104][ T5552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.666011][ T5552] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.675173][ T5552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.680523][T11878] syz-executor.2[11878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.683024][T11878] syz-executor.2[11878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.704191][ T5552] usb 4-1: config 0 descriptor?? [ 489.721161][T11878] syz-executor.2[11878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.721218][T11878] syz-executor.2[11878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.755153][T11878] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 490.239536][ T5552] keytouch 0003:0926:3333.006A: fixing up Keytouch IEC report descriptor [ 490.259416][ T5552] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006A/input/input90 [ 490.361230][ T5552] keytouch 0003:0926:3333.006A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 490.930570][T11922] syz-executor.2[11922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.930632][T11922] syz-executor.2[11922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.964426][T11922] syz-executor.2[11922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.981702][T11922] syz-executor.2[11922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.996572][T11922] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 491.017078][ T5] usb 4-1: USB disconnect, device number 56 [ 491.393649][T11934] F2FS-fs (loop4): Invalid segment count (0) [ 491.403856][T11934] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 491.418005][T11934] F2FS-fs (loop4): invalid crc value [ 491.431159][T11934] F2FS-fs (loop4): Found nat_bits in checkpoint [ 491.462685][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.469587][T11954] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.480949][T11954] device bridge_slave_0 entered promiscuous mode [ 491.482104][T11934] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 491.488234][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.494571][T11934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 491.501239][T11954] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.519977][T11954] device bridge_slave_1 entered promiscuous mode [ 491.539968][T11495] attempt to access beyond end of device [ 491.539968][T11495] loop4: rw=2049, want=45104, limit=40427 [ 491.588088][T11954] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.594977][T11954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.602115][T11954] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.608979][T11954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.635246][T11404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.643878][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.652228][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.673916][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.682198][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.689164][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.690542][ T5] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 491.696649][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.711958][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.718823][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.737581][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.746004][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.767045][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.775606][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.783809][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.792263][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.801142][T11954] device veth0_vlan entered promiscuous mode [ 491.823192][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.833588][T11954] device veth1_macvtap entered promiscuous mode [ 491.848785][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.854095][T11966] EXT4-fs (loop4): Ignoring removed orlov option [ 491.863058][T11966] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 491.882651][ T799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.892253][T11966] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 491.927367][ T24] kauditd_printk_skb: 2401 callbacks suppressed [ 491.927382][ T24] audit: type=1400 audit(2000000006.599:23974): avc: denied { map } for pid=11965 comm="syz-executor.4" path="/root/syzkaller-testdir4259504947/syzkaller.Ln0ipN/49/file1/file0/bus" dev="devtmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 491.972703][T11966] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.4: corrupt xattr in inline inode [ 492.000694][T11966] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #12: comm syz-executor.4: corrupted in-inode xattr [ 492.023114][ T24] audit: type=1400 audit(2000000006.691:23975): avc: denied { unlink } for pid=11495 comm="syz-executor.4" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 492.046779][T11495] ================================================================== [ 492.054668][T11495] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc67/0xc80 [ 492.062467][T11495] Read of size 4 at addr ffff88813ab5e000 by task syz-executor.4/11495 [ 492.070534][T11495] [ 492.072712][T11495] CPU: 1 PID: 11495 Comm: syz-executor.4 Tainted: G W 5.10.214-syzkaller-00187-ge6f44899ce5d #0 [ 492.084248][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 492.094143][T11495] Call Trace: [ 492.097281][T11495] dump_stack_lvl+0x1e2/0x24b [ 492.101891][T11495] ? bfq_pos_tree_add_move+0x43b/0x43b [ 492.107169][T11495] ? panic+0x80b/0x80b [ 492.111072][T11495] ? ext4_mark_iloc_dirty+0x2c23/0x3e60 [ 492.116456][T11495] print_address_description+0x81/0x3b0 [ 492.121832][T11495] kasan_report+0x179/0x1c0 [ 492.126175][T11495] ? __ext4_journal_ensure_credits+0x470/0x470 [ 492.132173][T11495] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 492.137632][T11495] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 492.143099][T11495] __asan_report_load4_noabort+0x14/0x20 [ 492.148567][T11495] ext4_xattr_delete_inode+0xc67/0xc80 [ 492.153863][T11495] ? sb_end_intwrite+0x110/0x110 [ 492.158634][T11495] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 492.164535][T11495] ? __kasan_check_read+0x11/0x20 [ 492.169401][T11495] ext4_evict_inode+0x1095/0x1730 [ 492.174261][T11495] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 492.179986][T11495] ? inode_io_list_del_locked+0x1ad/0x210 [ 492.185541][T11495] ? _raw_spin_unlock+0x4d/0x70 [ 492.190228][T11495] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 492.195954][T11495] evict+0x2a3/0x6c0 [ 492.199698][T11495] iput+0x632/0x7e0 [ 492.203335][T11495] vfs_rmdir+0x271/0x3f0 [ 492.207424][T11495] do_rmdir+0x2cf/0x5c0 [ 492.211415][T11495] ? d_delete_notify+0xd0/0xd0 [ 492.216004][T11495] ? strncpy_from_user+0x18e/0x2d0 [ 492.220962][T11495] ? getname_flags+0x1fd/0x520 [ 492.225549][T11495] __x64_sys_unlinkat+0xdf/0xf0 [ 492.230237][T11495] do_syscall_64+0x34/0x70 [ 492.234491][T11495] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 492.240302][T11495] RIP: 0033:0x7f6d53603687 [ 492.244561][T11495] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 492.263996][T11495] RSP: 002b:00007fff83bd0ee8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 492.272246][T11495] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f6d53603687 [ 492.280055][T11495] RDX: 0000000000000200 RSI: 00007fff83bd2090 RDI: 00000000ffffff9c [ 492.287882][T11495] RBP: 00007f6d53660636 R08: 0000000000000000 R09: 0000000000000000 [ 492.295765][T11495] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff83bd2090 [ 492.303574][T11495] R13: 00007f6d53660636 R14: 0000000000077d71 R15: 0000000000000007 [ 492.311387][T11495] [ 492.313549][T11495] The buggy address belongs to the page: [ 492.319040][T11495] page:ffffea0004ead780 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x13ab5e [ 492.329090][T11495] flags: 0x4000000000000000() [ 492.333610][T11495] raw: 4000000000000000 ffffea0004ead7c8 ffffea0004ead708 0000000000000000 [ 492.342027][T11495] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 492.350439][T11495] page dumped because: kasan: bad access detected [ 492.356693][T11495] page_owner tracks the page as freed [ 492.361908][T11495] page last allocated via order 0, migratetype Movable, gfp_mask 0x8100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x8000000), pid 11938, ts 491915619172, free_ts 491991950755 [ 492.378391][T11495] prep_new_page+0x166/0x180 [ 492.382815][T11495] get_page_from_freelist+0x2d8c/0x2f30 [ 492.388198][T11495] __alloc_pages_nodemask+0x435/0xaf0 [ 492.393403][T11495] handle_pte_fault+0x1782/0x3e30 [ 492.398264][T11495] handle_mm_fault+0x11d6/0x1a10 [ 492.403040][T11495] exc_page_fault+0x2a6/0x5b0 [ 492.407551][T11495] asm_exc_page_fault+0x1e/0x30 [ 492.412234][T11495] page last free stack trace: [ 492.416753][T11495] free_unref_page_prepare+0x2ae/0x2d0 [ 492.422046][T11495] free_unref_page_list+0x122/0xb20 [ 492.427081][T11495] release_pages+0xea0/0xef0 [ 492.431508][T11495] free_pages_and_swap_cache+0x8a/0xa0 [ 492.436798][T11495] tlb_flush_mmu+0xd0/0x180 [ 492.441138][T11495] unmap_page_range+0x1f34/0x23b0 [ 492.445997][T11495] unmap_vmas+0x37f/0x4f0 [ 492.450165][T11495] exit_mmap+0x2f2/0x5c0 [ 492.454246][T11495] __mmput+0x95/0x2d0 [ 492.458064][T11495] mmput+0x59/0x170 [ 492.461708][T11495] do_exit+0xbda/0x2a50 [ 492.465701][T11495] do_group_exit+0x141/0x310 [ 492.470131][T11495] __x64_sys_exit_group+0x3f/0x40 [ 492.474990][T11495] do_syscall_64+0x34/0x70 [ 492.479246][T11495] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 492.484963][T11495] [ 492.487137][T11495] Memory state around the buggy address: [ 492.492607][T11495] ffff88813ab5df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2033/05/18 03:33:27 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 492.500504][T11495] ffff88813ab5df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 492.508402][T11495] >ffff88813ab5e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 492.516296][T11495] ^ [ 492.520205][T11495] ffff88813ab5e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 492.528101][T11495] ffff88813ab5e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 492.535996][T11495] ================================================================== [ 492.543898][T11495] Disabling lock debugging due to kernel taint [ 492.560286][ T799] Bluetooth: hci0: command 0x1003 tx timeout [ 492.566150][ T2132] Bluetooth: hci0: sending frame failed (-49)