last executing test programs: 28.794330731s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000001a0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="6beced8e46dc3f0adf33c9f7a686", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.769211844s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchown(r0, 0x0, 0xee01) 28.73027493s ago: executing program 4: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r1) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r2 = inotify_init1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000600)={0x0, 0x0}) ptrace(0x4207, r3) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) 25.624597966s ago: executing program 0: r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r2 = syz_open_pts(r1, 0x801) r3 = dup3(r2, r1, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xd) write$UHID_INPUT(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.780010338s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ae"]) 23.99885567s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4b, 0x30, &(0x7f0000000100)="f48a7f0d8257f6ed84b091ea1c52d6a0e29e67097877f6a71073ed60631c8723d20d6b3e869c32d5f5534b47f74c37813a422408131c0c79a2f66798c92105a2f4b8333812cee122b45b1a", 0x0, 0x0, 0x0, 0x2}, 0xfffffffffffffca3) 23.759141467s ago: executing program 0: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x6) 23.272975044s ago: executing program 0: syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000000c, &(0x7f0000000100)=ANY=[@ANYBLOB='errors=remount-ro,discard,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=0000000000000000000,iocharset=cp865,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000007,dmask=00000000000000000000005,\x00'], 0x1, 0x14fd, &(0x7f0000002a80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) read$ptp(r0, &(0x7f0000000100)=""/48, 0xfffffdef) mkdir(&(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 23.238249469s ago: executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000005c0)={0x41, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 21.486833992s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) pivot_root(0x0, 0x0) 21.463316496s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b000100627269646765"], 0x4c}}, 0x0) 20.580483984s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x7ff, 0x5}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x1a1381) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) creat(0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) getuid() fstat(r4, &(0x7f0000000080)) sendto$packet(r4, &(0x7f0000000180)='`', 0x1, 0x4000000, &(0x7f0000000240)={0x2f, 0x0, r3, 0x1, 0x0, 0x6, @random}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000840)) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa14000600ff0f5e24ffff"], 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000680)=""/93, &(0x7f0000000700)=""/83, 0x3000}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 20.052975197s ago: executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940a0000000800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x21) 20.035522299s ago: executing program 1: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r0) keyctl$search(0xa, 0x0, &(0x7f0000000840)='asymmetric\x00', &(0x7f0000000880)={'syz', 0x3}, 0x0) keyctl$read(0xb, r0, &(0x7f0000000000)=""/48, 0x30) r2 = add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000140)={'fscrypt:', @auto=[0x0, 0x35, 0x61, 0x30, 0x61, 0x37, 0x36, 0x65, 0x65, 0x61, 0x35, 0x65, 0x39, 0x38, 0x65, 0x66]}, &(0x7f0000000700)={0x0, "f0176c04daeeae36e66c27a087f4a4c936987def00657e2ca9bfd8ef1caacc368637ae59c0b06ded2010b44fde59071c58350e27c03bb4abbda22349eef8fcbf", 0x1d}, 0x48, 0xfffffffffffffff8) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x32, 0x39, 0x35, 0x62, 0x33, 0x61, 0x64, 0x36, 0x37, 0x65, 0x63, 0x66, 0x33, 0x64, 0x63, 0x32]}, &(0x7f00000001c0)={0x0, "1eb7660a74c2e581576bc78fd1b6f014d2e155cdf377ec4534ba783daa19368b4704242f31cff86ef2932ddb0812ac986fca0c5d41059c9bb4d2e6cd27df8133", 0x17}, 0x48, r0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) keyctl$invalidate(0x15, r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f00000006c0)={'fscrypt:', @desc3}, &(0x7f00000007c0)={0x0, "481bab49ba0318c9446631d91e632b7430738f8edb6090cb14bde17ba40e85924f5301557735e1396818b359f002860b47aaff8a8a424635379f92d547ab18df", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000400), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r4) setsockopt$inet6_opts(r3, 0x29, 0x48, &(0x7f00000000c0)=@dstopts={0x2e, 0x4, '\x00', [@pad1, @enc_lim, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra, @ra]}, 0x28) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 20.022533111s ago: executing program 1: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4205, r1, 0x1, &(0x7f0000000000)) 3.617679985s ago: executing program 4: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "b7648859dc"}, @mixer_unit={0xb, 0x24, 0x4, 0x0, 0x0, "cb5b6e3ee874"}, @mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "1253cb"}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "ce"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 3.251061962s ago: executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) 3.00636644s ago: executing program 4: syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "b7648859dc"}, @mixer_unit={0xb, 0x24, 0x4, 0x0, 0x0, "cb5b6e3ee874"}, @mixer_unit={0x8, 0x24, 0x4, 0x0, 0x0, "1253cb"}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, "ce"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 2.74909917s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2.726355424s ago: executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.883398675s ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0x100}, 0x1c, 0x0}}], 0x1, 0x0) 1.874406246s ago: executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063012f000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%pB \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x61, '\x00', 0x0, 0xffffffffffffffff, 0x240}, 0x24) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000000), 0x400000) openat$cgroup_ro(r2, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x0, 0x7, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 1.862289389s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001e000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x0, 0x0, {0xa}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 1.85214325s ago: executing program 3: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r1) sendmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r2 = inotify_init1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000600)={0x0, 0x0}) ptrace(0x4207, r3) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) 1.575986023s ago: executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 1.566796195s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f"], 0x1c}}, 0x0) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r6], 0x20}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 687.047632ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xfffd}]}}}]}, 0x40}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {0x18}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) 676.940573ms ago: executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001ac0)='ext4_request_blocks\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00', r2}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 653.926217ms ago: executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x35, 0x0, 0x0, 0x2}, {0x35, 0x0, 0x0, 0xe12b}, {0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000000000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) io_submit(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x2}]) r2 = memfd_create(&(0x7f0000000000)='\x107', 0x0) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000001003e0000000012000000003800000000000000a163000000000000000000000000007f8049e30c1e0440"], 0x58) finit_module(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000016c0), 0x3af4701e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) kernel console output (not intermixed with test programs): sysadm_t pid=12927 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe13307cf29 code=0x0 [ 383.214496][T12986] syz-executor.2[12986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.214548][T12986] syz-executor.2[12986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.227580][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.247357][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.254591][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.262418][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.269673][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.276951][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.284162][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.293770][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.301118][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.308533][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.315850][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.323208][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.331292][ T783] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 383.338808][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.346079][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.353294][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.360594][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.367993][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.375218][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.382784][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.390052][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.397269][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.404422][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.412028][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.419341][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.426647][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.433892][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.441380][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.448722][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.449169][ T453] usb 4-1: USB disconnect, device number 28 [ 383.455954][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.469232][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.476495][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.483683][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.491118][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.498690][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.505892][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.513130][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.520492][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.527673][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.534854][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.542187][ T313] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 383.552332][ T313] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 383.586160][ T783] usb 2-1: Using ep0 maxpacket: 8 [ 383.803742][ T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.815406][ T783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.825035][ T783] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 383.834045][ T783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.842750][ T783] usb 2-1: config 0 descriptor?? [ 384.052283][T13003] syz-executor.0[13003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.052328][T13003] syz-executor.0[13003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.317618][T13030] syz-executor.4[13030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.327248][ T783] itetech 0003:048D:8595.003C: unexpected long global item [ 384.338869][T13030] syz-executor.4[13030] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.341039][ T783] itetech: probe of 0003:048D:8595.003C failed with error -22 [ 384.476133][ T453] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 384.535733][ T5595] usb 2-1: USB disconnect, device number 27 [ 384.627082][T13056] syz-executor.4[13056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.627179][T13056] syz-executor.4[13056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.740676][T13058] binder: transaction release 37 bad handle 1, ret = -22 [ 384.846766][ T453] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.857605][ T453] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 384.870945][ T453] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.880101][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.893070][ T453] usb 1-1: config 0 descriptor?? [ 384.925584][T13082] syz-executor.4[13082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 384.925655][T13082] syz-executor.4[13082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.108019][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.130069][T13108] sch_fq: defrate 0 ignored. [ 385.131599][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.153733][T13111] loop2: detected capacity change from 0 to 2048 [ 385.155570][T13115] fscrypt (sda1, inode 1967): Unsupported encryption flags (0x28) [ 385.160003][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.174892][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.183496][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.191690][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.199451][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.206731][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.215117][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.222776][T13111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 385.231392][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.238616][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.245873][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.253032][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.266523][T13111] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 385.281089][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.281383][T13111] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 385.291193][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.300516][T13111] EXT4-fs (loop2): This should not happen!! Data will be lost [ 385.300516][T13111] [ 385.317045][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.317084][T13111] EXT4-fs (loop2): Total free blocks count 0 [ 385.330090][T13111] EXT4-fs (loop2): Free/Dirty block details [ 385.335713][T13111] EXT4-fs (loop2): free_blocks=2415919104 [ 385.341388][T13111] EXT4-fs (loop2): dirty_blocks=32 [ 385.346262][T13111] EXT4-fs (loop2): Block reservation details [ 385.352101][T13111] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 385.352290][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.372773][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.380152][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.387578][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 385.387593][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.399853][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.407840][ T453] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 385.414094][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.414117][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.421887][ T453] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 385.428520][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.444351][ T453] plantronics 0003:047F:FFFF.003E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 385.450494][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.469821][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.477015][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.484193][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.491412][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.498630][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.505799][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.513016][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.520232][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.527425][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.534615][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.541829][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.549034][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.556242][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.563431][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.570673][ T331] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 385.578501][ T331] hid-generic 0000:0000:0000.003D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 385.632903][T13141] sch_fq: defrate 0 ignored. [ 385.643751][T13143] fscrypt (sda1, inode 1968): Unsupported encryption flags (0x28) [ 385.782598][T13170] fscrypt (sda1, inode 1968): Unsupported encryption flags (0x28) [ 385.860781][T13182] 9pnet_fd: Insufficient options for proto=fd [ 385.932526][T13196] fscrypt (sda1, inode 1969): Unsupported encryption flags (0x28) [ 385.937175][ T331] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 386.196130][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 386.296476][T10333] usb 1-1: USB disconnect, device number 25 [ 386.316312][ T331] usb 3-1: descriptor type invalid, skip [ 386.396315][ T331] usb 3-1: config 0 has no interfaces? [ 386.556383][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.582803][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.729067][ T331] usb 3-1: Product: syz [ 387.062869][ T331] usb 3-1: Manufacturer: syz [ 387.094573][ T331] usb 3-1: SerialNumber: syz [ 387.161912][ T331] usb 3-1: config 0 descriptor?? [ 387.553197][ T331] usb 3-1: USB disconnect, device number 34 [ 387.606713][T13246] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.615716][T13246] FAT-fs (loop3): unable to read boot sector [ 387.673147][T13257] loop0: detected capacity change from 0 to 2048 [ 387.728210][T13257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 387.740563][T13257] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 387.763301][T13257] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 387.783634][T13257] EXT4-fs (loop0): This should not happen!! Data will be lost [ 387.783634][T13257] [ 387.793500][T13257] EXT4-fs (loop0): Total free blocks count 0 [ 387.799961][T13257] EXT4-fs (loop0): Free/Dirty block details [ 387.805771][T13257] EXT4-fs (loop0): free_blocks=2415919104 [ 387.813491][T13257] EXT4-fs (loop0): dirty_blocks=32 [ 387.819156][T13257] EXT4-fs (loop0): Block reservation details [ 387.824951][T13257] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 387.831541][ T1155] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 387.939126][T13285] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.948278][T13285] FAT-fs (loop7): unable to read boot sector [ 389.418979][T13322] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 389.434861][T13322] FAT-fs (loop5): unable to read boot sector [ 389.457713][T13324] fuse: Bad value for 'fd' [ 389.665994][T13347] __nla_validate_parse: 5 callbacks suppressed [ 389.666015][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.681620][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.691794][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.703428][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.715389][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.725288][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.735150][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.745182][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.754670][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.764095][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.836150][ T24] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 390.486354][ T24] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 390.513512][ T24] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 390.531157][ T24] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 390.540384][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.846330][ T24] usb 3-1: string descriptor 0 read error: -71 [ 390.854117][ T24] hub 3-1:32.0: USB hub found [ 390.946272][ T24] hub 3-1:32.0: config failed, can't read hub descriptor (err -22) [ 391.066363][ T24] usb 3-1: USB disconnect, device number 35 [ 391.303107][T13395] fuse: Bad value for 'fd' [ 391.320531][T13396] can0: slcan on ptm0. [ 392.715184][T13435] bpf_get_probe_write_proto: 6 callbacks suppressed [ 392.715206][T13435] syz-executor.1[13435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.741962][ T28] audit: type=1400 audit(1718651551.579:10835): avc: denied { sqpoll } for pid=13436 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 392.776280][T13435] syz-executor.1[13435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 392.816188][T13388] can0 (unregistered): slcan off ptm0. [ 392.894840][T13444] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 392.913934][T13444] FAT-fs (loop1): unable to read boot sector [ 393.325714][ T28] audit: type=1326 audit(1718651552.159:10836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452307cf29 code=0x7ffc0000 [ 393.375470][ T28] audit: type=1326 audit(1718651552.189:10837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f452307cf29 code=0x7ffc0000 [ 393.402443][ T28] audit: type=1326 audit(1718651552.189:10838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452307cf29 code=0x7ffc0000 [ 393.427039][ T28] audit: type=1326 audit(1718651552.189:10839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f452307cf29 code=0x7ffc0000 [ 393.451111][ T28] audit: type=1326 audit(1718651552.189:10840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f452307cf29 code=0x7ffc0000 [ 393.475240][ T28] audit: type=1326 audit(1718651552.189:10841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f452307a6a7 code=0x7ffc0000 [ 393.499683][ T28] audit: type=1326 audit(1718651552.189:10842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4523040379 code=0x7ffc0000 [ 393.523635][ T28] audit: type=1326 audit(1718651552.189:10843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f452307cf29 code=0x7ffc0000 [ 393.559838][ T28] audit: type=1326 audit(1718651552.189:10844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f452307a6a7 code=0x7ffc0000 [ 394.960833][T13503] EXT4-fs (sda1): re-mounted. Quota mode: none. [ 395.030070][T13514] __nla_validate_parse: 9 callbacks suppressed [ 395.030089][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.051587][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.063405][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.106183][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.127061][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.149293][T13497] overlayfs: failed to resolve './file0': -2 [ 395.167849][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.186616][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.216421][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.225952][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.240211][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.299086][T13539] syz-executor.3[13539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.299162][T13539] syz-executor.3[13539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.376085][ T453] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 395.807870][T13556] overlayfs: failed to resolve './file0': -2 [ 395.869366][T13235] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 396.030791][T13566] gretap0: refused to change device tx_queue_len [ 396.037406][T13566] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 396.156258][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.167125][ T453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.176735][ T453] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 396.185678][ T453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.200905][ T453] usb 3-1: config 0 descriptor?? [ 396.276196][T13235] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 396.285357][T13235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.294550][T13235] usb 1-1: config 0 descriptor?? [ 396.312175][T13587] syz-executor.3[13587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.312220][T13587] syz-executor.3[13587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.326955][T13587] syz-executor.3[13587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.341110][T13587] syz-executor.3[13587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.957031][ T453] arvo 0003:1E7D:30D4.003F: unknown main item tag 0x0 [ 396.975250][ T453] arvo 0003:1E7D:30D4.003F: unknown main item tag 0x0 [ 396.982320][ T453] arvo 0003:1E7D:30D4.003F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 397.012371][T13607] fuse: Bad value for 'fd' [ 397.380125][ T331] usb 3-1: USB disconnect, device number 36 [ 397.488052][T13669] syz-executor.3[13669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.488118][T13669] syz-executor.3[13669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.504027][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.522940][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.530426][T13662] device bridge_slave_0 entered promiscuous mode [ 397.541191][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.548456][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.556341][T13662] device bridge_slave_1 entered promiscuous mode [ 397.596714][T13675] tipc: Started in network mode [ 397.601423][T13675] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 397.609753][T13675] tipc: Enabling of bearer rejected, failed to enable media [ 397.629937][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.636806][T13662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.643843][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.650693][T13662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.670841][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 397.678198][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.685214][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.694075][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 397.702241][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.709085][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.727618][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 397.735582][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.742417][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.749755][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 397.770047][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 397.780853][T13685] syz-executor.3[13685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.780926][T13685] syz-executor.3[13685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.786589][T13662] device veth0_vlan entered promiscuous mode [ 397.812255][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.820414][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.836349][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.845876][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 397.862163][T13662] device veth1_macvtap entered promiscuous mode [ 397.870548][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.877235][T13694] fuse: Bad value for 'fd' [ 397.891229][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 397.914955][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.048379][T13726] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 398.084643][T13731] tipc: Started in network mode [ 398.096085][T13731] tipc: Node identity 00000000000000000000ffff, cluster identity 4711 [ 398.111205][T13731] tipc: Enabling of bearer rejected, failed to enable media [ 398.128276][ T1155] device bridge_slave_1 left promiscuous mode [ 398.136971][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.174778][ T1155] device bridge_slave_0 left promiscuous mode [ 398.184333][T13735] loop1: detected capacity change from 0 to 8192 [ 398.190924][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.191929][T13735] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 398.209081][ T1155] device veth1_macvtap left promiscuous mode [ 398.229293][T13704] overlayfs: failed to resolve './file0': -2 [ 398.356359][ T331] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 398.383477][T13755] syz-executor.3[13755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.383558][T13755] syz-executor.3[13755] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 398.486158][T13235] usb 1-1: Cannot set autoneg [ 398.506215][T13235] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 398.518421][T13235] usb 1-1: USB disconnect, device number 26 [ 399.452681][T13765] loop1: detected capacity change from 0 to 40427 [ 399.461042][T13765] F2FS-fs (loop1): invalid crc value [ 399.467056][T13765] F2FS-fs (loop1): Found nat_bits in checkpoint [ 399.489352][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.500638][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.507508][T13765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 399.510419][ T331] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 399.526506][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.535879][ T331] usb 3-1: config 0 descriptor?? [ 399.548306][T13765] overlayfs: failed to resolve './file0': -2 [ 399.561465][T13781] syz-executor.4[13781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.561534][T13781] syz-executor.4[13781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 399.577431][T13662] syz-executor.1: attempt to access beyond end of device [ 399.577431][T13662] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.751052][T13808] loop0: detected capacity change from 0 to 2048 [ 401.057793][T13808] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 401.072412][T13808] ext4 filesystem being mounted at /root/syzkaller-testdir3321170635/syzkaller.B5FVmy/182/file0 supports timestamps until 2038 (0x7fffffff) [ 401.092390][T13816] loop1: detected capacity change from 0 to 256 [ 401.126683][T13816] exfat: Deprecated parameter 'namecase' [ 401.133439][T11532] EXT4-fs (loop0): unmounting filesystem. [ 401.139149][T13816] exfat: Deprecated parameter 'namecase' [ 401.145181][T13816] exfat: Deprecated parameter 'namecase' [ 401.153113][T13816] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 401.196642][T13824] syz-executor.3[13824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.196723][T13824] syz-executor.3[13824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.277210][ T331] arvo 0003:1E7D:30D4.0040: unknown main item tag 0x0 [ 401.304297][ T331] arvo 0003:1E7D:30D4.0040: unknown main item tag 0x0 [ 401.321714][ T331] arvo 0003:1E7D:30D4.0040: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 401.464978][T13836] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.478926][T13836] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.480343][T13826] overlayfs: failed to resolve './file0': -2 [ 401.496518][T13836] device bridge_slave_0 entered promiscuous mode [ 401.508929][T13836] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.517658][T13836] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.524952][T13836] device bridge_slave_1 entered promiscuous mode [ 401.566061][T13836] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.572928][T13836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.580030][T13836] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.586807][T13836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.682084][T13855] kvm: pic: non byte write [ 401.795395][T10333] usb 3-1: USB disconnect, device number 37 [ 401.802691][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 401.818453][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.828280][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.869694][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.878011][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.884847][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.892107][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.900424][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.907262][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.919312][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 401.927095][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.939281][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.950176][T13836] device veth0_vlan entered promiscuous mode [ 401.956905][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.964585][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.971953][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.984409][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.993213][T13836] device veth1_macvtap entered promiscuous mode [ 402.001856][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 402.011838][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 402.056754][ T1155] device bridge_slave_1 left promiscuous mode [ 402.062660][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.070079][ T1155] device bridge_slave_0 left promiscuous mode [ 402.076169][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.083676][ T1155] device veth1_macvtap left promiscuous mode [ 402.089579][ T1155] device veth0_vlan left promiscuous mode [ 402.216448][T13863] syz-executor.0[13863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.216513][T13863] syz-executor.0[13863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 402.306894][T13871] device pim6reg1 entered promiscuous mode [ 402.518399][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 402.518413][ T28] audit: type=1400 audit(1718651561.359:10869): avc: denied { execute } for pid=13892 comm="syz-executor.0" path="/root/syzkaller-testdir2068552961/syzkaller.x3kxCj/6/file0/bus" dev="ramfs" ino=77265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 402.948336][T13930] loop0: detected capacity change from 0 to 1024 [ 402.955475][T13930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.966443][T13930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.974986][T13930] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (20000) [ 403.046984][T13930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13930 comm=syz-executor.0 [ 403.113878][T13967] serio: Serial port ptm0 [ 403.593300][T13983] device pim6reg1 entered promiscuous mode [ 403.708839][ T28] audit: type=1326 audit(1718651562.549:10870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14004 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9cc07cf29 code=0x0 [ 403.779951][T14019] loop0: detected capacity change from 0 to 512 [ 403.796911][T14019] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 403.811190][T14025] device pim6reg1 entered promiscuous mode [ 403.812415][T14012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14012 comm=syz-executor.4 [ 403.829715][T14019] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 403.842361][T14019] EXT4-fs (loop0): 1 truncate cleaned up [ 403.847926][T14019] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 403.862730][T13836] EXT4-fs (loop0): unmounting filesystem. [ 403.886694][ T28] audit: type=1326 audit(1718651562.719:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14038 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70b187cf29 code=0x0 [ 404.057287][ T28] audit: type=1326 audit(1718651562.899:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14068 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70b187cf29 code=0x0 [ 404.091935][T14063] device pim6reg1 entered promiscuous mode [ 404.553360][T14091] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 404.914686][T14122] loop1: detected capacity change from 0 to 131072 [ 404.923087][T14122] F2FS-fs (loop1): invalid crc value [ 404.930573][T14122] F2FS-fs (loop1): Found nat_bits in checkpoint [ 404.975956][T14122] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 405.965215][T14171] loop1: detected capacity change from 0 to 1024 [ 405.972143][T14171] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 405.981983][T14171] EXT4-fs (loop1): invalid journal inode [ 405.987478][T14171] EXT4-fs (loop1): can't get journal size [ 405.993274][T14171] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz-executor.1: blocks 48-48 from inode overlap system zone [ 406.008136][T14171] EXT4-fs (loop1): failed to initialize system zone (-117) [ 406.015396][T14171] EXT4-fs (loop1): mount failed [ 406.036128][T13235] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 406.183150][T14171] loop1: detected capacity change from 0 to 512 [ 406.190107][T14171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 406.199710][T14171] EXT4-fs (loop1): orphan cleanup on readonly fs [ 406.209172][T14171] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 248: padding at end of block bitmap is not set [ 406.224265][T14171] Quota error (device loop1): write_blk: dquota write failed [ 406.233324][T14171] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 406.243633][T14171] EXT4-fs (loop1): 1 truncate cleaned up [ 406.286403][T14171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 406.287265][T13235] usb 1-1: Using ep0 maxpacket: 8 [ 406.301828][T13662] EXT4-fs (loop1): unmounting filesystem. [ 406.333848][T14191] loop1: detected capacity change from 0 to 512 [ 406.343425][T14191] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 406.353522][T14191] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 406.363852][T14191] EXT4-fs (loop1): 1 truncate cleaned up [ 406.369738][T14191] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 406.388111][T13662] EXT4-fs (loop1): unmounting filesystem. [ 406.416195][T13235] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 406.425588][T13235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.434502][T13235] usb 1-1: config 0 descriptor?? [ 406.696148][T13235] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 407.289666][T14229] loop1: detected capacity change from 0 to 512 [ 407.298786][T14229] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 407.308423][T14232] loop2: detected capacity change from 0 to 256 [ 407.308887][T14229] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 407.325130][T14229] EXT4-fs (loop1): 1 truncate cleaned up [ 407.345178][T14229] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 407.378989][T13662] EXT4-fs (loop1): unmounting filesystem. [ 407.646930][ T331] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 408.032348][ T331] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 408.041319][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.049924][ T331] usb 3-1: config 0 descriptor?? [ 408.291456][T14234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.299858][T14234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.348538][T14298] cgroup: Invalid name [ 408.996254][T13235] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 409.016483][T13235] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 409.039401][T13235] asix: probe of 1-1:0.0 failed with error -71 [ 409.048388][T13235] usb 1-1: USB disconnect, device number 27 [ 409.751058][ T28] audit: type=1400 audit(1718651568.579:10873): avc: denied { nlmsg_write } for pid=14377 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 409.970639][T14391] EXT4-fs warning (device sda1): ext4_group_extend:1877: need to use ext2online to resize further [ 410.286089][ T453] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 410.398068][ T331] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 410.411194][ T331] asix: probe of 3-1:0.0 failed with error -71 [ 410.418037][ T331] usb 3-1: USB disconnect, device number 38 [ 410.676266][ T453] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.686494][ T453] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 410.786162][ T453] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 410.795061][ T453] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 410.802908][ T453] usb 2-1: SerialNumber: syz [ 410.822382][ T28] audit: type=1326 audit(1718651569.659:10874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100a47cf29 code=0x7ffc0000 [ 410.846577][ T331] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 410.849558][ T28] audit: type=1326 audit(1718651569.659:10875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100a47cf29 code=0x7ffc0000 [ 410.878284][ T28] audit: type=1326 audit(1718651569.659:10876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f100a47cf29 code=0x7ffc0000 [ 410.902336][ T28] audit: type=1326 audit(1718651569.659:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100a47cf29 code=0x7ffc0000 [ 410.926969][ T28] audit: type=1326 audit(1718651569.659:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f100a47cf29 code=0x7ffc0000 [ 410.956902][ T28] audit: type=1400 audit(1718651569.799:10879): avc: denied { ioctl } for pid=14424 comm="syz-executor.0" path="socket:[78630]" dev="sockfs" ino=78630 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.055038][ T28] audit: type=1400 audit(1718651569.889:10880): avc: denied { mount } for pid=14440 comm="syz-executor.0" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 411.077982][ T28] audit: type=1400 audit(1718651569.899:10881): avc: denied { unmount } for pid=13836 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 411.096075][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 411.166548][ T453] usb 2-1: USB disconnect, device number 28 [ 411.226185][ T331] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 411.236517][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.245851][ T331] usb 3-1: config 0 descriptor?? [ 411.263585][T14455] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.270482][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.277868][T14455] device bridge_slave_0 entered promiscuous mode [ 411.285967][T14455] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.293208][T14455] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.300352][T14455] device bridge_slave_1 entered promiscuous mode [ 411.526397][ T331] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 411.608931][T14455] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.615926][T14455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.622994][T14455] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.629800][T14455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.654455][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 411.666795][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.674115][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.689739][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.697636][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.704375][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.711796][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.719702][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.726438][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.747439][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.755561][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 411.766337][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.797174][T14455] device veth0_vlan entered promiscuous mode [ 411.803505][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 411.812319][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 411.819662][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 411.827369][ T8] device bridge_slave_1 left promiscuous mode [ 411.833368][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.840781][ T8] device bridge_slave_0 left promiscuous mode [ 411.846825][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.854765][ T8] device veth1_macvtap left promiscuous mode [ 411.860821][ T8] device veth0_vlan left promiscuous mode [ 411.942099][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 411.954165][T14455] device veth1_macvtap entered promiscuous mode [ 411.965885][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 411.978369][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.004664][T14469] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.011568][T14469] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.018811][T14469] device bridge_slave_0 entered promiscuous mode [ 412.025958][T14469] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.032980][T14469] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.040346][T14469] device bridge_slave_1 entered promiscuous mode [ 412.049696][T14478] __nla_validate_parse: 5 callbacks suppressed [ 412.049710][T14478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.147974][ T783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 412.155170][ T783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.167562][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 412.175631][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 412.183670][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.190502][T14465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.197855][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 412.205866][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 412.213796][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.220624][T14465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.227795][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.236865][ T8] tipc: Left network mode [ 412.246119][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 412.253917][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 412.261598][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 412.269446][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 412.281956][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 412.290146][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 412.300770][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.308564][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.316714][T14469] device veth0_vlan entered promiscuous mode [ 412.325961][T14469] device veth1_macvtap entered promiscuous mode [ 412.334191][ T783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.341564][ T783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.348735][ T783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.356859][ T783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.364706][ T783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 412.378371][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 412.386502][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.394534][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.402503][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 412.616009][T14495] loop1: detected capacity change from 0 to 512 [ 412.622965][T14495] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 412.633844][T14495] EXT4-fs (loop1): orphan cleanup on readonly fs [ 412.640070][T14495] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz-executor.1: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 412.657728][T14495] EXT4-fs error (device loop1): ext4_quota_enable:6946: comm syz-executor.1: Bad quota inode: 3, type: 0 [ 412.669259][T14495] EXT4-fs warning (device loop1): ext4_enable_quotas:6987: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 412.683936][T14495] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 412.692635][T14495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 412.706792][T14495] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 412.717364][T14495] EXT4-fs warning (device loop1): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 412.733085][T14469] EXT4-fs (loop1): unmounting filesystem. [ 413.060730][T14508] loop1: detected capacity change from 0 to 40427 [ 413.109984][ T8] device bridge_slave_1 left promiscuous mode [ 413.115951][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.123327][ T8] device bridge_slave_0 left promiscuous mode [ 413.129353][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.136978][ T8] device veth1_macvtap left promiscuous mode [ 413.140645][T14508] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 413.142882][ T8] device veth0_vlan left promiscuous mode [ 413.158611][T14508] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 413.169205][T14508] F2FS-fs (loop1): Found nat_bits in checkpoint [ 413.202205][T14508] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 413.225538][T14508] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 413.236060][T14508] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 413.305443][ T331] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 413.330119][ T331] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 413.341112][ T331] asix: probe of 3-1:0.0 failed with error -71 [ 413.349676][ T331] usb 3-1: USB disconnect, device number 39 [ 414.318303][T14531] syz-executor.1: attempt to access beyond end of device [ 414.318303][T14531] loop1: rw=2049, sector=45096, nr_sectors = 64 limit=40427 [ 414.502384][T14537] loop2: detected capacity change from 0 to 512 [ 414.509348][T14537] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 414.520486][T14537] EXT4-fs (loop2): orphan cleanup on readonly fs [ 414.527645][T14537] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 414.545258][T14537] EXT4-fs error (device loop2): ext4_quota_enable:6946: comm syz-executor.2: Bad quota inode: 3, type: 0 [ 414.556527][T14537] EXT4-fs warning (device loop2): ext4_enable_quotas:6987: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 414.571265][T14537] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 414.596149][T14537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 414.624683][T14537] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 414.751334][T14537] EXT4-fs warning (device loop2): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 414.771560][T12695] EXT4-fs (loop2): unmounting filesystem. [ 415.272122][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.476128][T14465] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 416.499194][T14581] netlink: 924 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.736265][T14465] usb 3-1: Using ep0 maxpacket: 8 [ 416.856183][T14465] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 416.865152][T14465] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.874502][T14465] usb 3-1: config 0 descriptor?? [ 416.891550][T14597] fuse: Bad value for 'fd' [ 417.136271][T14465] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 417.962330][T14611] sock: sock_timestamping_bind_phc: sock not bind to device [ 417.973596][T14613] netlink: 924 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.085464][T14635] loop1: detected capacity change from 0 to 256 [ 418.896839][T14640] netlink: 924 bytes leftover after parsing attributes in process `syz-executor.4'. [ 419.046140][T14465] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 419.109994][T14465] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 419.258876][T14465] asix: probe of 3-1:0.0 failed with error -71 [ 419.365983][T14465] usb 3-1: USB disconnect, device number 40 [ 420.006297][ T28] audit: type=1400 audit(1718651578.829:10882): avc: denied { create } for pid=14679 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 420.154624][T14676] incfs: Options parsing error. -22 [ 420.162225][T14676] incfs: mount failed -22 [ 420.360653][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 420.370248][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xd00000800 [ 420.379852][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe00000000 [ 420.389379][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1100000800 [ 420.398904][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1200000000 [ 420.408504][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1500000800 [ 420.418004][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1600000000 [ 420.427598][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1900000800 [ 420.437232][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1a00000000 [ 420.446897][T14686] kvm [14685]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1d00000800 [ 421.600099][T14733] loop1: detected capacity change from 0 to 256 [ 421.609339][T14733] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 421.850121][T14745] device pim6reg1 entered promiscuous mode [ 422.175856][T14757] input: syz0 as /devices/virtual/input/input82 [ 422.990896][T14779] loop2: detected capacity change from 0 to 256 [ 423.016668][T14779] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 423.030128][T14779] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 423.566080][ T453] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 423.783493][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 423.976119][ T453] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.986062][ T453] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 424.096154][ T453] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 424.105087][ T453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.112874][ T453] usb 1-1: SerialNumber: syz [ 424.143476][T14807] loop2: detected capacity change from 0 to 256 [ 424.152098][T14807] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 424.164130][T14807] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 424.195855][T14811] loop2: detected capacity change from 0 to 256 [ 424.516534][ T453] usb 1-1: USB disconnect, device number 28 [ 425.060968][T14829] loop2: detected capacity change from 0 to 256 [ 425.069595][T14829] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 425.086931][ T28] audit: type=1326 audit(1718651839.923:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b187cf29 code=0x7ffc0000 [ 425.111176][ T28] audit: type=1326 audit(1718651839.923:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70b187cf29 code=0x7ffc0000 [ 425.135174][ T28] audit: type=1326 audit(1718651839.923:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b187cf29 code=0x7ffc0000 [ 425.159586][ T28] audit: type=1326 audit(1718651839.923:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f70b187cf29 code=0x7ffc0000 [ 425.161787][ T5926] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz0] on syz1 [ 425.183421][ T28] audit: type=1326 audit(1718651839.923:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b187cf29 code=0x7ffc0000 [ 425.216782][ T28] audit: type=1326 audit(1718651839.923:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f70b187cf29 code=0x7ffc0000 [ 425.240770][ T28] audit: type=1326 audit(1718651839.923:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14828 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70b187cf29 code=0x7ffc0000 [ 425.806080][ T1028] Bluetooth: hci0: command 0x1003 tx timeout [ 425.806077][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 426.157415][T14857] loop1: detected capacity change from 0 to 256 [ 426.168670][T14857] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104b5, chksum : 0x6646eacc, utbl_chksum : 0xe619d30d) [ 426.349302][ T28] audit: type=1326 audit(1718652097.187:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63527cf29 code=0x7ffc0000 [ 428.019154][ T28] audit: type=1326 audit(1718652098.257:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff63527cf29 code=0x7ffc0000 [ 428.043121][ T28] audit: type=1326 audit(1718652098.257:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63527cf29 code=0x7ffc0000 [ 428.080077][T14865] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 428.089544][T14865] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 428.098383][ T335] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 428.315726][T14876] input: syz0 as /devices/virtual/input/input83 [ 428.337899][T14873] kvm_set_msr_common: 17 callbacks suppressed [ 428.337916][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 428.360198][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xd00000800 [ 428.372564][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe00000000 [ 428.388086][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1100000800 [ 428.399941][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1200000000 [ 428.413956][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1500000800 [ 428.425825][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1600000000 [ 428.439071][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1900000800 [ 428.449301][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1a00000000 [ 428.458881][T14873] kvm [14872]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1d00000800 [ 428.486171][ T335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.496242][ T335] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 428.576239][ T335] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 428.585310][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 428.593207][ T335] usb 1-1: SerialNumber: syz [ 428.624310][T14878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14878 comm=syz-executor.4 [ 428.637254][T14878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14878 comm=syz-executor.4 [ 429.036726][ T335] usb 1-1: USB disconnect, device number 29 [ 429.154073][T14894] 9pnet: p9_errstr2errno: server reported unknown error Çi6rµŠÞHÿ~²B-ª¿ [ 429.536647][T14900] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 429.549181][T14900] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 429.916977][ T335] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 430.053962][ T530] Bluetooth: hci0: Frame reassembly failed (-84) [ 430.132729][T14922] input: syz0 as /devices/virtual/input/input84 [ 430.326139][ T335] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 430.335025][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.343238][ T335] usb 3-1: config 0 descriptor?? [ 430.736278][T14908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.744630][T14908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.410719][T14945] syz-executor.4[14945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.410773][T14945] syz-executor.4[14945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.638042][T14952] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 431.658624][T14952] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 431.741291][T14962] 9pnet_fd: Insufficient options for proto=fd [ 432.016079][T14465] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 432.126079][ T3219] Bluetooth: hci0: command 0x1003 tx timeout [ 432.126088][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 432.144763][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 432.153851][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 432.163542][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 432.163555][ T28] audit: type=1400 audit(1718652102.997:10897): avc: denied { create } for pid=14965 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 432.163787][T14966] netlink: 212 bytes leftover after parsing attributes in process `syz-executor.1'. [ 432.280039][T14968] loop1: detected capacity change from 0 to 40427 [ 432.286931][T14968] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 432.294483][T14968] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 432.304581][T14968] F2FS-fs (loop1): Found nat_bits in checkpoint [ 432.327904][T14968] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 432.334805][T14968] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 432.350761][ T28] audit: type=1400 audit(1718652103.187:10898): avc: denied { lock } for pid=14967 comm="syz-executor.1" path="/root/syzkaller-testdir1564385271/syzkaller.JRqtI1/34/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 432.416167][T14465] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 432.425121][T14465] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 432.435748][T14465] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.445348][T14465] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 432.456332][T14465] usb 1-1: config 1 interface 1 has no altsetting 0 [ 432.562477][T14977] syz-executor.4[14977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.562549][T14977] syz-executor.4[14977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 432.616226][T14465] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.637337][T14465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.645237][T14465] usb 1-1: Product: syz [ 432.649364][T14465] usb 1-1: Manufacturer: syz [ 432.653826][T14465] usb 1-1: SerialNumber: syz [ 432.658325][ T335] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 432.670666][ T335] asix: probe of 3-1:0.0 failed with error -71 [ 432.677553][ T335] usb 3-1: USB disconnect, device number 41 [ 432.745890][T14980] loop1: detected capacity change from 0 to 512 [ 432.752642][T14980] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 432.761396][T14980] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 432.770985][T14980] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz-executor.1: bg 0: block 18: invalid block bitmap [ 432.783756][T14980] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6157: Corrupt filesystem [ 432.792511][T14980] EXT4-fs (loop1): 1 truncate cleaned up [ 432.798079][T14980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 432.800764][T14986] loop2: detected capacity change from 0 to 512 [ 432.806806][T14980] ext2 filesystem being mounted at /root/syzkaller-testdir1564385271/syzkaller.JRqtI1/36/file0 supports timestamps until 2038 (0x7fffffff) [ 432.831793][T14980] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 432.847895][T14986] EXT4-fs (loop2): 1 orphan inode deleted [ 432.853561][T14986] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 432.862502][T14986] ext4 filesystem being mounted at /root/syzkaller-testdir3228712492/syzkaller.DCK820/153/file1 supports timestamps until 2038 (0x7fffffff) [ 432.862884][T14469] EXT4-fs (loop1): unmounting filesystem. [ 433.004306][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.006197][T14465] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 433.012874][T14996] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.026153][T14465] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 433.027086][T14996] device bridge_slave_0 entered promiscuous mode [ 433.033672][T14465] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 433.048048][T14465] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 433.062157][T14996] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.069078][T14996] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.079315][T15000] syz-executor.2[15000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.079600][T15000] syz-executor.2[15000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.228259][T14996] device bridge_slave_1 entered promiscuous mode [ 433.253107][T14465] usb 1-1: USB disconnect, device number 30 [ 433.291635][T14996] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.298485][T14996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.305547][T14996] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.312367][T14996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.336166][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.343457][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.350724][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.359355][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 433.367578][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.374415][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.385244][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 433.393212][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.400049][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.417237][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.425339][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 433.433031][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 433.445220][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.453026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.460404][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.467935][T14996] device veth0_vlan entered promiscuous mode [ 433.480369][T14996] device veth1_macvtap entered promiscuous mode [ 433.487100][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 433.499987][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 433.508152][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.687707][T12695] EXT4-fs (loop2): unmounting filesystem. [ 433.747162][ T8] device bridge_slave_1 left promiscuous mode [ 433.753172][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.760328][ T8] device bridge_slave_0 left promiscuous mode [ 433.766339][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.774568][ T8] device veth1_macvtap left promiscuous mode [ 433.781034][ T8] device veth0_vlan left promiscuous mode [ 433.949139][T15024] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 433.976242][T15027] loop2: detected capacity change from 0 to 2048 [ 433.991037][T15027] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 433.999557][T15027] ext4 filesystem being mounted at /root/syzkaller-testdir3228712492/syzkaller.DCK820/157/bus supports timestamps until 2038 (0x7fffffff) [ 434.015522][T15027] fs-verity: sha512 using implementation "sha512-avx2" [ 434.027366][T12695] EXT4-fs (loop2): unmounting filesystem. [ 434.039974][T15040] loop2: detected capacity change from 0 to 512 [ 434.057880][T15040] EXT4-fs (loop2): 1 orphan inode deleted [ 434.063408][T15040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 434.072205][T15040] ext4 filesystem being mounted at /root/syzkaller-testdir3228712492/syzkaller.DCK820/158/file1 supports timestamps until 2038 (0x7fffffff) [ 434.234839][T15044] syz-executor.2[15044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.235183][T15044] syz-executor.2[15044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 434.508473][ T8] tipc: Left network mode [ 434.553708][ T28] audit: type=1400 audit(1718652105.387:10899): avc: denied { setopt } for pid=15050 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 434.588804][T15053] fuse: Bad value for 'fd' [ 434.614909][T15055] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 434.660810][ T28] audit: type=1400 audit(1718652105.497:10900): avc: denied { unmount } for pid=14455 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 434.717284][T15066] loop0: detected capacity change from 0 to 256 [ 434.737933][T15066] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 434.999893][T12695] EXT4-fs (loop2): unmounting filesystem. [ 435.212729][T15067] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.238735][T15074] loop1: detected capacity change from 0 to 512 [ 435.257747][T15067] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.274054][T15067] device bridge_slave_0 entered promiscuous mode [ 435.281234][T15074] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 435.485295][T15074] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz-executor.1: invalid indirect mapped block 83886080 (level 1) [ 435.515750][T15074] EXT4-fs (loop1): Remounting filesystem read-only [ 435.522216][T15076] device pim6reg1 entered promiscuous mode [ 435.530055][T15067] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.530493][T15074] EXT4-fs (loop1): 1 orphan inode deleted [ 435.542507][T15074] EXT4-fs (loop1): 1 truncate cleaned up [ 435.546054][T15067] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.556117][T15074] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 435.562123][T15067] device bridge_slave_1 entered promiscuous mode [ 435.595932][T15069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.605099][T15069] tipc: Started in network mode [ 435.609965][T15069] tipc: Node identity 30307830, cluster identity 4711 [ 435.616565][T15069] tipc: Node number set to 808482864 [ 435.636096][T14996] EXT4-fs (loop1): unmounting filesystem. [ 435.675312][T15067] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.682188][T15067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.689246][T15067] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.696059][T15067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.733095][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.739450][T15099] syz-executor.1[15099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.739978][T15099] syz-executor.1[15099] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.753182][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.772497][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 435.780589][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 435.799745][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 435.807921][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.814746][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.821908][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.830551][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.837385][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.844544][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.846132][ T39] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 435.852601][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.872578][T15067] device veth0_vlan entered promiscuous mode [ 435.881700][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.889525][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.896828][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.903976][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.917021][ T8] device bridge_slave_1 left promiscuous mode [ 435.923124][T15104] loop0: detected capacity change from 0 to 2048 [ 435.923187][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.936990][ T8] device bridge_slave_0 left promiscuous mode [ 435.942928][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.943063][T15104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 435.961586][ T8] device veth1_macvtap left promiscuous mode [ 435.967611][ T8] device veth0_vlan left promiscuous mode [ 435.974657][T15104] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 436.055830][T14455] EXT4-fs (loop0): unmounting filesystem. [ 436.066968][T15067] device veth1_macvtap entered promiscuous mode [ 436.079622][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 436.092269][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.103104][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.116386][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 436.124659][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.171076][T15122] loop0: detected capacity change from 0 to 1024 [ 436.197578][T15122] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 436.216108][ T39] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.226272][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.239221][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 436.248283][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.257888][T14455] EXT4-fs (loop0): unmounting filesystem. [ 436.258171][ T39] usb 3-1: config 0 descriptor?? [ 436.306457][ T39] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 436.530387][T15145] overlayfs: unrecognized mount option "obj_role=" or missing value [ 436.966439][T15156] kvm_set_msr_common: 17 callbacks suppressed [ 436.966452][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 436.982016][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xd00000800 [ 436.993656][T15167] loop0: detected capacity change from 0 to 512 [ 436.999085][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe00000000 [ 437.000689][T15167] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 437.010341][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1100000800 [ 437.027050][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1200000000 [ 437.037732][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1500000800 [ 437.047637][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1600000000 [ 437.057444][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1900000800 [ 437.067061][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1a00000000 [ 437.075088][T15174] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 437.076879][T15156] kvm [15155]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1d00000800 [ 438.237191][T15213] loop1: detected capacity change from 0 to 256 [ 438.280463][T15213] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 438.312038][T15199] loop2: detected capacity change from 0 to 40427 [ 438.328863][T15199] F2FS-fs (loop2): Mismatch valid blocks 5 vs. 7 [ 438.404759][T15225] overlayfs: unrecognized mount option "obj_role=" or missing value [ 438.576422][T15199] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 438.883002][T15238] fuse: Bad value for 'fd' [ 439.691717][T15270] loop0: detected capacity change from 0 to 2048 [ 439.694486][T15272] 9pnet_fd: Insufficient options for proto=fd [ 439.778651][T15274] overlayfs: unrecognized mount option "obj_role=" or missing value [ 439.911701][T15270] loop0: unable to read partition table [ 439.918606][T15270] loop0: partition table beyond EOD, truncated [ 439.924678][T15270] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 440.021526][T15276] loop0: detected capacity change from 0 to 512 [ 440.028200][T15276] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 440.129326][ T5926] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 440.467116][ T335] usb 3-1: USB disconnect, device number 42 [ 440.526360][ T5926] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 440.535501][ T5926] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 440.546265][ T5926] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 440.555812][ T5926] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.567656][ T5926] usb 2-1: config 1 interface 1 has no altsetting 0 [ 440.715756][T15292] loop2: detected capacity change from 0 to 512 [ 440.722537][T15292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 440.733744][T15292] EXT4-fs (loop2): 1 truncate cleaned up [ 440.739258][T15292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 440.747566][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.756704][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.764539][ T5926] usb 2-1: Product: syz [ 440.768581][ T5926] usb 2-1: Manufacturer: syz [ 440.772960][ T5926] usb 2-1: SerialNumber: syz [ 440.774629][T12695] EXT4-fs (loop2): unmounting filesystem. [ 440.942308][T15298] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.949283][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.956648][T15298] device bridge_slave_0 entered promiscuous mode [ 440.965575][T15298] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.972483][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.979821][T15298] device bridge_slave_1 entered promiscuous mode [ 441.026645][T15298] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.033529][T15298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.040596][T15298] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.047389][T15298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.067928][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.075267][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.082590][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.091703][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.100248][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.107081][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.117370][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.125299][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.132133][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.139332][ T5926] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 441.147696][ T5926] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 441.155058][ T5926] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 441.163273][ T5926] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 441.170979][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.183001][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.194506][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 441.205467][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 441.213382][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 441.220719][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 441.231048][T15298] device veth0_vlan entered promiscuous mode [ 441.239500][ T5926] usb 2-1: USB disconnect, device number 29 [ 441.244646][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 441.254252][T15298] device veth1_macvtap entered promiscuous mode [ 441.264285][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.276431][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.307336][ T8] device bridge_slave_1 left promiscuous mode [ 441.313468][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.321346][ T8] device bridge_slave_0 left promiscuous mode [ 441.327803][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.335972][ T8] device veth1_macvtap left promiscuous mode [ 441.342291][ T8] device veth0_vlan left promiscuous mode [ 441.461370][T15310] loop3: detected capacity change from 0 to 512 [ 441.468293][T15310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 441.481630][T15310] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz-executor.3: invalid indirect mapped block 83886080 (level 1) [ 441.496251][T15310] EXT4-fs (loop3): Remounting filesystem read-only [ 441.502716][T15310] EXT4-fs (loop3): 1 orphan inode deleted [ 441.508368][T15310] EXT4-fs (loop3): 1 truncate cleaned up [ 441.513728][T15310] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 441.525345][T15310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.534590][T15310] tipc: Started in network mode [ 441.539305][T15310] tipc: Node identity 30307830, cluster identity 4711 [ 441.545914][T15310] tipc: Node number set to 808482864 [ 441.560293][T15067] EXT4-fs (loop3): unmounting filesystem. [ 441.680010][T15322] loop1: detected capacity change from 0 to 2048 [ 441.799872][T15322] loop1: unable to read partition table [ 441.808147][T15322] loop1: partition table beyond EOD, truncated [ 441.814128][T15322] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 441.937584][ T28] audit: type=1400 audit(1718652112.777:10901): avc: denied { search } for pid=14455 comm="syz-executor.0" name="/" dev="configfs" ino=12114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 442.040241][T15337] loop1: detected capacity change from 0 to 512 [ 442.048111][T15337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 442.059794][T15337] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz-executor.1: invalid indirect mapped block 83886080 (level 1) [ 442.073994][T15337] EXT4-fs (loop1): Remounting filesystem read-only [ 442.080497][T15337] EXT4-fs (loop1): 1 orphan inode deleted [ 442.086127][T15337] EXT4-fs (loop1): 1 truncate cleaned up [ 442.091508][T15337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 442.103424][T15337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 442.136944][T14996] EXT4-fs (loop1): unmounting filesystem. [ 442.164503][T15340] 9pnet_fd: Insufficient options for proto=fd [ 442.272182][ T28] audit: type=1400 audit(1718652113.107:10902): avc: denied { getopt } for pid=15347 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.300163][T15350] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.326332][ T39] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.446072][ T5926] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 442.477183][T15363] incfs: Options parsing error. -22 [ 442.482268][T15363] incfs: mount failed -22 [ 442.565369][T15376] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.596153][ T454] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.647466][T15386] loop2: detected capacity change from 0 to 512 [ 442.670493][T15386] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 442.681991][T15386] EXT4-fs (loop2): 1 truncate cleaned up [ 442.690052][T15392] incfs: Options parsing error. -22 [ 442.695091][T15392] incfs: mount failed -22 [ 442.699323][T15386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 442.757799][T15298] EXT4-fs (loop2): unmounting filesystem. [ 442.826413][ T5926] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 442.835395][ T5926] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 442.846470][ T5926] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.855974][ T5926] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.866863][ T5926] usb 2-1: config 1 interface 1 has no altsetting 0 [ 442.891321][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.898237][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.905254][T15398] device bridge_slave_0 entered promiscuous mode [ 442.911879][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.918884][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.925996][T15398] device bridge_slave_1 entered promiscuous mode [ 442.966355][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.973186][T15398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.980298][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.987086][T15398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.007823][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 443.015089][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.022148][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.036139][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.045086][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.053558][ T5926] usb 2-1: Product: syz [ 443.053779][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.057627][ T5926] usb 2-1: Manufacturer: syz [ 443.057643][ T5926] usb 2-1: SerialNumber: syz [ 443.065975][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.081072][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.088306][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.096369][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.103196][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.110363][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.117971][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.132719][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.143323][T15398] device veth0_vlan entered promiscuous mode [ 443.149587][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.157312][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.164476][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.176193][T15398] device veth1_macvtap entered promiscuous mode [ 443.184230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.197148][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.205276][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.322096][T15408] device syzkaller0 entered promiscuous mode [ 443.416912][ T8] device bridge_slave_1 left promiscuous mode [ 443.425765][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.436171][ T5926] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 443.445127][ T8] device bridge_slave_0 left promiscuous mode [ 443.451241][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.455658][ T5926] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 443.469917][ T8] device veth1_macvtap left promiscuous mode [ 443.474092][ T5926] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 443.484848][ T5926] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 443.486298][ T8] device veth0_vlan left promiscuous mode [ 443.549095][ T5926] usb 2-1: USB disconnect, device number 30 [ 443.566893][T15422] incfs: Options parsing error. -22 [ 443.571987][T15422] incfs: mount failed -22 [ 443.608749][T15414] kvm_set_msr_common: 71 callbacks suppressed [ 443.608766][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xa00000000 [ 443.626521][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xd00000800 [ 443.645295][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe00000000 [ 443.659403][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1100000800 [ 443.668957][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1200000000 [ 443.678739][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1500000800 [ 443.688524][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1600000000 [ 443.699922][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1900000800 [ 443.710080][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1a00000000 [ 443.710936][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.719830][T15414] kvm [15413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1d00000800 [ 443.735110][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.768109][T15425] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.775694][T15425] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.794317][T15425] device bridge_slave_0 entered promiscuous mode [ 443.810080][T15425] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.821915][T15425] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.837972][T15425] device bridge_slave_1 entered promiscuous mode [ 444.043958][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.053267][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.075001][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.092034][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.107718][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.114596][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.129031][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 444.139769][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 444.154951][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.161831][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.162081][T15449] input: syz0 as /devices/virtual/input/input85 [ 444.199498][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 444.208229][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.218145][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.236813][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 444.245344][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 444.253516][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 444.261046][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 444.268747][T15425] device veth0_vlan entered promiscuous mode [ 444.284944][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.294801][T15425] device veth1_macvtap entered promiscuous mode [ 444.305815][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.314482][T15451] loop1: detected capacity change from 0 to 2048 [ 444.322392][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.342157][ T28] audit: type=1326 audit(1718652115.177:10903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0007cf29 code=0x7ffc0000 [ 444.366882][ T28] audit: type=1326 audit(1718652115.177:10904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0007cf29 code=0x7ffc0000 [ 444.396239][ T28] audit: type=1326 audit(1718652115.177:10905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf0007cf29 code=0x7ffc0000 [ 444.420351][ T28] audit: type=1326 audit(1718652115.177:10906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0007cf29 code=0x7ffc0000 [ 444.444543][ T28] audit: type=1326 audit(1718652115.177:10907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0007cf29 code=0x7ffc0000 [ 444.470267][ T28] audit: type=1326 audit(1718652115.177:10908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf0007cf29 code=0x7ffc0000 [ 444.502979][ T28] audit: type=1326 audit(1718652115.337:10909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf0007cf29 code=0x7ffc0000 [ 444.523910][T15451] loop1: unable to read partition table [ 444.527320][ T28] audit: type=1326 audit(1718652115.337:10910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf0007a6a7 code=0x7ffc0000 [ 444.532604][T15451] loop1: partition table beyond EOD, truncated [ 444.563056][T15451] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 444.616969][ T8] device bridge_slave_1 left promiscuous mode [ 444.623016][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.631919][ T8] device bridge_slave_0 left promiscuous mode [ 444.638128][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.647503][ T8] device veth1_macvtap left promiscuous mode [ 444.653679][ T8] device veth0_vlan left promiscuous mode [ 444.727517][T15464] 9pnet_fd: Insufficient options for proto=fd [ 444.778215][T15455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 444.788226][T15456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 444.859957][T15476] device syzkaller0 entered promiscuous mode [ 445.069902][T15485] loop0: detected capacity change from 0 to 256 [ 445.078653][T15485] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010470, chksum : 0x23280b3e, utbl_chksum : 0xe619d30d) [ 445.161046][T15486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.300683][ T8] tipc: Left network mode [ 445.586906][T15494] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.603882][T15494] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.611217][T15494] device bridge_slave_0 entered promiscuous mode [ 445.627802][T15494] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.634690][T15494] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.642027][T15494] device bridge_slave_1 entered promiscuous mode [ 445.773853][T15494] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.780742][T15494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.787825][T15494] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.794596][T15494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.949174][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.960679][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.968049][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.986418][ T8] device bridge_slave_1 left promiscuous mode [ 445.992352][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.000635][ T8] device bridge_slave_0 left promiscuous mode [ 446.007389][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.015193][ T8] device veth1_macvtap left promiscuous mode [ 446.021080][ T8] device veth0_vlan left promiscuous mode [ 446.119117][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 446.136317][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.144298][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.151143][T14465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.176156][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.194444][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.212575][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.219446][T14465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.236569][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 446.244482][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 446.252332][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 446.260248][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 446.279534][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.288047][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.300259][T15494] device veth0_vlan entered promiscuous mode [ 446.308066][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.315785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.330125][T15494] device veth1_macvtap entered promiscuous mode [ 446.338134][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.345369][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.352857][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.360949][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.369157][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.387157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.395303][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.403478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.412004][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.063080][T15531] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.301452][T15537] loop2: detected capacity change from 0 to 2048 [ 447.317484][T15537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 447.331447][T15537] EXT4-fs (loop2): can't enable nombcache during remount [ 447.375965][T15398] EXT4-fs (loop2): unmounting filesystem. [ 447.656135][ T19] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 447.895020][T15554] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.902326][T15554] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.909619][T15554] device bridge_slave_0 entered promiscuous mode [ 447.921017][T15554] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.928041][T15554] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.935268][T15554] device bridge_slave_1 entered promiscuous mode [ 448.002355][T15554] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.009223][T15554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.016326][T15554] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.023092][T15554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.046187][ T19] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.066610][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.074145][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.082358][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.118984][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.127010][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.142095][T15554] device veth0_vlan entered promiscuous mode [ 448.149171][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 448.157830][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.165587][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.172844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.193124][T15554] device veth1_macvtap entered promiscuous mode [ 448.200563][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 448.218136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.226556][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.236132][ T19] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 448.245059][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.254851][ T19] usb 4-1: Product: syz [ 448.258919][ T19] usb 4-1: Manufacturer: syz [ 448.270000][ T19] usb 4-1: SerialNumber: syz [ 448.284615][ T19] usb 4-1: config 0 descriptor?? [ 448.367149][T15570] input: syz0 as /devices/virtual/input/input86 [ 448.416875][ T8] device bridge_slave_1 left promiscuous mode [ 448.422812][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.430205][ T8] device bridge_slave_0 left promiscuous mode [ 448.436281][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.444229][ T8] device veth1_macvtap left promiscuous mode [ 448.450376][ T8] device veth0_vlan left promiscuous mode [ 448.547312][ T19] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 448.554899][ T19] usb 4-1: USB disconnect, device number 29 [ 449.376126][ T454] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 449.736105][ T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.756038][ T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.775767][ T454] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 449.795905][ T454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.806579][ T454] usb 4-1: config 0 descriptor?? [ 450.204392][T15600] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 450.806124][ T454] usb 4-1: string descriptor 0 read error: -71 [ 450.826087][ T454] uclogic 0003:256C:006D.0042: failed retrieving string descriptor #200: -71 [ 450.844804][ T454] uclogic 0003:256C:006D.0042: failed retrieving pen parameters: -71 [ 450.854884][ T454] uclogic 0003:256C:006D.0042: failed probing pen v2 parameters: -71 [ 450.875048][ T454] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 450.885124][ T454] uclogic: probe of 0003:256C:006D.0042 failed with error -71 [ 450.906116][ T454] usb 4-1: USB disconnect, device number 30 [ 451.185350][T15621] loop2: detected capacity change from 0 to 128 [ 452.101946][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 452.101994][ T28] audit: type=1400 audit(1718652122.927:11111): avc: denied { map } for pid=15637 comm="syz-executor.3" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 452.575256][T15646] loop2: detected capacity change from 0 to 128 [ 452.595997][T15646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 452.605731][T15646] ext4 filesystem being mounted at /root/syzkaller-testdir4235812632/syzkaller.k7dR9z/25/mnt supports timestamps until 2038 (0x7fffffff) [ 452.697956][T15554] EXT4-fs (loop2): unmounting filesystem. [ 453.149741][T15650] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.156673][T15650] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.163944][T15650] device bridge_slave_0 entered promiscuous mode [ 453.170930][T15650] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.178234][T15650] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.185496][T15650] device bridge_slave_1 entered promiscuous mode [ 453.227217][ T8] device bridge_slave_1 left promiscuous mode [ 453.233437][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.240781][ T8] device bridge_slave_0 left promiscuous mode [ 453.247109][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.254940][ T8] device veth1_macvtap left promiscuous mode [ 453.260838][ T8] device veth0_vlan left promiscuous mode [ 453.390454][T15650] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.397365][T15650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.404422][T15650] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.411214][T15650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.439164][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.447728][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.454776][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.473206][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.481386][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.488240][T14465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.495612][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.503606][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.510450][T14465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.518202][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 453.536822][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 453.545612][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 453.555225][T15650] device veth0_vlan entered promiscuous mode [ 453.561811][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 453.570591][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 453.577855][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 453.591410][T15650] device veth1_macvtap entered promiscuous mode [ 453.599329][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 453.614045][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.622536][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.769942][T15659] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 453.798478][ T28] audit: type=1400 audit(1718652124.617:11112): avc: denied { write } for pid=15656 comm="syz-executor.2" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 455.759529][T15683] loop2: detected capacity change from 0 to 128 [ 455.776520][T15683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 455.784913][T15683] ext4 filesystem being mounted at /root/syzkaller-testdir719329262/syzkaller.Qv7Jrx/6/mnt supports timestamps until 2038 (0x7fffffff) [ 455.927457][T15650] EXT4-fs (loop2): unmounting filesystem. [ 456.134511][T15687] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.141912][T15687] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.149617][T15687] device bridge_slave_0 entered promiscuous mode [ 456.158217][T15687] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.165052][T15687] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.172370][T15687] device bridge_slave_1 entered promiscuous mode [ 456.241687][T15687] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.248561][T15687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.255643][T15687] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.262456][T15687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.276908][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.301022][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.309216][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.316554][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.386796][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.394800][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.401652][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.409015][ T453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.417663][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.424500][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.492215][T15696] overlayfs: failed to resolve './file2': -2 [ 456.757537][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.765721][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.773807][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.781321][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.788630][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.796393][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.804173][T15687] device veth0_vlan entered promiscuous mode [ 456.819120][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.828269][T15687] device veth1_macvtap entered promiscuous mode [ 456.837438][ T8] device bridge_slave_1 left promiscuous mode [ 456.843395][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.850725][ T8] device bridge_slave_0 left promiscuous mode [ 456.856819][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.864662][ T8] device veth1_macvtap left promiscuous mode [ 456.870548][ T8] device veth0_vlan left promiscuous mode [ 456.957328][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.965744][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 458.077872][T15715] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 459.256533][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 459.745944][T15785] loop3: detected capacity change from 0 to 128 [ 459.768726][T15785] syz-executor.3: attempt to access beyond end of device [ 459.768726][T15785] loop3: rw=0, sector=97, nr_sectors = 944 limit=128 [ 459.989110][T15794] loop2: detected capacity change from 0 to 128 [ 460.464933][T15812] loop3: detected capacity change from 0 to 128 [ 460.497396][T15812] syz-executor.3: attempt to access beyond end of device [ 460.497396][T15812] loop3: rw=0, sector=97, nr_sectors = 944 limit=128 [ 460.869061][ T28] audit: type=1400 audit(1718652131.707:11113): avc: denied { remount } for pid=15819 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 460.996070][T14465] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 461.186051][ T331] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 461.236049][T14465] usb 4-1: Using ep0 maxpacket: 8 [ 461.356424][T14465] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 461.367100][T14465] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 461.376552][T14465] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.546142][T14465] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.555145][T14465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.562984][T14465] usb 4-1: Product: syz [ 461.567062][T14465] usb 4-1: Manufacturer: syz [ 461.571474][T14465] usb 4-1: SerialNumber: syz [ 461.626110][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.635632][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 461.643451][ T331] usb 3-1: SerialNumber: syz [ 461.696392][ T331] cdc_ether 3-1:1.0: skipping garbage [ 461.701655][ T331] usb 3-1: bad CDC descriptors [ 461.898863][T10333] usb 3-1: USB disconnect, device number 43 [ 461.916126][T14465] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 461.947849][T14465] usb 4-1: USB disconnect, device number 31 [ 462.443006][T15837] loop2: detected capacity change from 0 to 128 [ 462.529556][T15837] syz-executor.2: attempt to access beyond end of device [ 462.529556][T15837] loop2: rw=0, sector=97, nr_sectors = 944 limit=128 [ 462.647041][T15843] loop3: detected capacity change from 0 to 128 [ 463.336047][T15855] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 463.749415][T15858] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.756299][T15858] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.763551][T15858] device bridge_slave_0 entered promiscuous mode [ 463.770380][T15858] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.777460][T15858] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.784683][T15858] device bridge_slave_1 entered promiscuous mode [ 463.849237][T15858] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.856112][T15858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.863196][T15858] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.869990][T15858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.896983][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.904546][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.911752][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.929161][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.937150][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.943973][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.951196][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.959920][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.966775][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.988198][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 463.997292][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.005124][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.017646][T15858] device veth0_vlan entered promiscuous mode [ 464.026462][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.034430][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.042577][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.071325][T15858] device veth1_macvtap entered promiscuous mode [ 464.082662][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.114378][T15865] loop2: detected capacity change from 0 to 512 [ 464.201722][T15865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 464.216174][T15865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 464.229795][T15865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 464.244090][T15865] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 464.258247][T15865] EXT4-fs (loop2): 1 orphan inode deleted [ 464.263883][T15865] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 464.577517][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 464.603892][T10333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 464.687374][ T10] device bridge_slave_1 left promiscuous mode [ 464.694032][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.701716][ T10] device bridge_slave_0 left promiscuous mode [ 464.709447][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.723187][ T10] device veth1_macvtap left promiscuous mode [ 464.734223][ T10] device veth0_vlan left promiscuous mode [ 464.739828][ T28] audit: type=1326 audit(1718652135.567:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15880 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7138a7cf29 code=0x0 [ 464.937193][T15884] Invalid ELF section header overflow [ 464.970075][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.977359][T15883] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.984601][T15883] device bridge_slave_0 entered promiscuous mode [ 464.991448][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.998455][T15883] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.005860][T15883] device bridge_slave_1 entered promiscuous mode [ 465.015601][T15687] EXT4-fs (loop2): unmounting filesystem. [ 465.087004][T15883] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.093858][T15883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.100977][T15883] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.107760][T15883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.134947][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.142561][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.149906][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.168146][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.176358][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.183193][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.190412][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.198418][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.205247][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.213340][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.221145][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.236396][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 465.248659][T15883] device veth0_vlan entered promiscuous mode [ 465.256516][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.264287][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.271934][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.284106][T15883] device veth1_macvtap entered promiscuous mode [ 465.292086][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 465.307136][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.315469][T14465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 465.426088][ T331] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 465.786114][ T331] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.816880][ T10] device bridge_slave_1 left promiscuous mode [ 465.822848][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.830175][ T10] device bridge_slave_0 left promiscuous mode [ 465.836427][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.844461][ T10] device veth1_macvtap left promiscuous mode [ 465.850366][ T10] device veth0_vlan left promiscuous mode [ 465.976112][ T331] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 465.985371][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.993270][ T331] usb 3-1: Product: syz [ 466.001282][ T331] usb 3-1: Manufacturer: syz [ 466.005757][ T331] usb 3-1: SerialNumber: syz [ 466.011015][ T331] usb 3-1: config 0 descriptor?? [ 466.257381][ T331] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 466.264626][ T331] usb 3-1: USB disconnect, device number 44 [ 467.688130][ T28] audit: type=1326 audit(1718652138.527:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15923 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a9907cf29 code=0x0 [ 467.891085][T15926] Invalid ELF section header overflow [ 468.342426][T15928] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 468.353971][T15928] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 468.362213][T15928] CPU: 0 PID: 15928 Comm: syz-executor.4 Tainted: G W 6.1.78-syzkaller-00013-gde6fb073c606 #0 [ 468.373668][T15928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 468.383565][T15928] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 2024/06/17 19:22:19 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 468.389639][T15928] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 ac 07 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 04 25 00 48 89 5c 24 18 4c 8b [ 468.409081][T15928] RSP: 0018:ffffc90000a476c0 EFLAGS: 00010246 [ 468.414985][T15928] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 468.422792][T15928] RDX: ffffc90000f69000 RSI: 0000000000000414 RDI: 0000000000000415 [ 468.430605][T15928] RBP: ffffc90000a47818 R08: 0000000000000005 R09: ffffffff8411e3d3 [ 468.438415][T15928] R10: 0000000000000004 R11: ffff888128e11440 R12: dffffc0000000000 [ 468.446227][T15928] R13: ffff88812c166500 R14: 1ffff92000148ee4 R15: 0000000000000000 [ 468.454383][T15928] FS: 00007ffbcdaa56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 468.463149][T15928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.469573][T15928] CR2: 0000000020010000 CR3: 0000000126b88000 CR4: 00000000003506b0 [ 468.477385][T15928] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 468.485196][T15928] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 468.493004][T15928] Call Trace: [ 468.496130][T15928] [ 468.498920][T15928] ? __die_body+0x62/0xb0 [ 468.503073][T15928] ? die_addr+0x9f/0xd0 [ 468.507074][T15928] ? exc_general_protection+0x317/0x4c0 [ 468.512455][T15928] ? asm_exc_general_protection+0x27/0x30 [ 468.518004][T15928] ? xdp_do_generic_redirect+0x303/0xad0 [ 468.523473][T15928] ? dev_map_generic_redirect+0x90/0x7d0 [ 468.528965][T15928] ? __free_pages_core+0x180/0x180 [ 468.533886][T15928] ? __this_cpu_preempt_check+0x13/0x20 [ 468.539268][T15928] ? bq_enqueue+0x3e0/0x3e0 [ 468.543607][T15928] ? bpf_prog_run_generic_xdp+0x9aa/0x1110 [ 468.549251][T15928] xdp_do_generic_redirect+0x411/0xad0 [ 468.554996][T15928] do_xdp_generic+0x53e/0x800 [ 468.559506][T15928] ? generic_xdp_tx+0x560/0x560 [ 468.564203][T15928] ? tun_get_user+0x2340/0x3a90 [ 468.568882][T15928] tun_get_user+0x238a/0x3a90 [ 468.573398][T15928] ? cpu_curr_snapshot+0x90/0x90 [ 468.578168][T15928] ? tun_do_read+0x1ee0/0x1ee0 [ 468.582767][T15928] ? ref_tracker_alloc+0x31d/0x450 [ 468.587714][T15928] ? ref_tracker_dir_print+0x160/0x160 [ 468.