last executing test programs: 4.601596287s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000040)=ANY=[], 0x1, 0x0, 0x0) linkat(r2, &(0x7f0000001180)='./file1\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x0) llistxattr(&(0x7f00000006c0)='./file1\x00', 0x0, 0x0) 4.425253794s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) 4.235617234s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) 4.146823727s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r4}, 0x10) write$cgroup_type(r3, &(0x7f0000000000), 0x9) 3.888144937s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d8200"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) 3.664080832s ago: executing program 2: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getregs(0x1a, r1, 0x0, &(0x7f0000000100)=""/6) 3.321360455s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 3.049111757s ago: executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mount(&(0x7f0000000240), &(0x7f0000000280)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 3.03089962s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000f80)="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", 0x2000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004840, &(0x7f0000000740)={[{@i_version}, {@resuid}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}], [{@obj_type={'obj_type', 0x3d, '\x00\x00\x00\xe3^\x1b\xbc\x9a\xe6>\xaeYtK\xc0\xde\x04j\xe8\x00'}}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq}, {@euid_gt}]}, 0x1, 0x503, &(0x7f0000000a40)="$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") ioctl$KVM_RUN(r3, 0xae80, 0x0) open(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) 2.870976355s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x34e9d38ab22a5751) 2.857263337s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000380), 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) pipe2$9p(0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r7, &(0x7f0000000380), 0x20000000}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1}]}, 0x18}}, 0x0) 2.824552372s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="fb", 0x1}, {&(0x7f0000000380)="07bd9b18de8674f528cdbd0643118dce9e285248", 0x14}], 0x2, 0x0, 0x0, 0x20000400}, 0x20040000) recvmsg(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0xffffffffffffffcc, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r9) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xb0000004}) epoll_pwait(r7, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x43}}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.239069828s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kvm_userspace_exit\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.181654577s ago: executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80942, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) close_range(r0, 0xffffffffffffffff, 0x0) 1.137773324s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="2001000000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005be000000000000000000000000000000000000000ee2ca94e0000000000000000000000000000000000000000007fea000000000000000000cd7dafa276", @ANYBLOB="e884fd9396a47aaed8a659d05b373ace7af3d433c192813cfcea5084ed531b8ae37bf381bedda22ebe302cfbf6e0b789f72730f193bd", @ANYBLOB], 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="d676af940c000000b7040000080000008500000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$FUSE_DIRENTPLUS(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.t'], 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 622.587464ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 609.305676ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwritev2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 600.799967ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf974a457bb636ff6}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x2000, 0x0) 597.312358ms ago: executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0xb) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0xb8, 0x0, 0x0, [{{}, {0x0, 0x0, 0x9, 0x0, 'trans=fd,'}}]}, 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 588.316859ms ago: executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0)='4', 0x1) tee(r3, r1, 0x3, 0x0) rt_sigaction(0xd, &(0x7f0000000000)={&(0x7f0000000380)="36d2d8f2438395ff1f965a00c4c1185c840561ee00007b7bc4816a512425160000006f6aa1c463f962d60064660fd054060aa89ef3ae7864640f2a6cda00c412c12e1129", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) close(r0) 556.972274ms ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000180000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 511.532051ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000000000bbfe800000004000000000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000016c0)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 482.414765ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x3, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 470.937678ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$FIBMAP(r0, 0x6609, 0x0) 470.013418ms ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[], 0xffdd) 353.187546ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000001d850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) getitimer(0x0, &(0x7f0000000400)) 332.475529ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000008b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(0x0, 0x0) close(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 239.491494ms ago: executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigprocmask(0x0, &(0x7f0000000100), 0x0, 0x8) 174.435913ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwritev2(r2, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 99836 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 442.819854][ T24] audit: type=1326 audit(442.803:45263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd53af69 code=0x7ffc0000 [ 443.088104][ T24] audit: type=1326 audit(442.803:45264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd53af69 code=0x7ffc0000 [ 443.137104][ T24] audit: type=1326 audit(442.803:45265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06bd53af69 code=0x7ffc0000 [ 443.194139][ T24] audit: type=1326 audit(442.803:45266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd53af69 code=0x7ffc0000 [ 443.218105][ T24] audit: type=1326 audit(442.803:45267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06bd53af69 code=0x7ffc0000 [ 443.241508][ T24] audit: type=1326 audit(443.093:45268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06bd53af69 code=0x7ffc0000 [ 443.264887][ T24] audit: type=1326 audit(443.103:45269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18239 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f06bd5386e7 code=0x7ffc0000 [ 443.299647][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 443.397828][T18244] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 443.405477][T18244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 443.423066][T18244] F2FS-fs (loop1): Found nat_bits in checkpoint [ 443.475027][T18244] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 443.482085][T18244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 443.502585][T18244] attempt to access beyond end of device [ 443.502585][T18244] loop1: rw=2049, want=45104, limit=40427 [ 443.566262][T17680] attempt to access beyond end of device [ 443.566262][T17680] loop1: rw=2049, want=40968, limit=40427 [ 443.615772][T18267] kvm: pic: non byte write [ 443.629680][T14040] usb 3-1: USB disconnect, device number 60 [ 443.735619][T18293] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 443.743679][T18293] netlink: 488 bytes leftover after parsing attributes in process `syz-executor.1'. [ 443.788936][T18300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.142714][T18314] kvm: pic: non byte write [ 444.190765][T18320] syz-executor.0[18320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.190810][T18320] syz-executor.0[18320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.203239][T18299] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 444.222884][T18299] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 444.230917][ T4824] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 444.246226][T18299] F2FS-fs (loop3): Found nat_bits in checkpoint [ 444.280342][T18299] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 444.287278][T18299] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 444.289980][T18328] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 444.306155][T18328] netlink: 488 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.325002][T18299] attempt to access beyond end of device [ 444.325002][T18299] loop3: rw=2049, want=45104, limit=40427 [ 444.342784][T17730] attempt to access beyond end of device [ 444.342784][T17730] loop3: rw=2049, want=40968, limit=40427 [ 444.491982][T18337] cgroup: Bad value for 'name' [ 444.771877][T18346] kvm: pic: non byte write [ 444.780770][T18349] syz-executor.3[18349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.780820][T18349] syz-executor.3[18349] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.839243][T14040] kernel write not supported for file 18352/task/18353/clear_refs (pid: 14040 comm: kworker/1:9) [ 444.847186][ T4824] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 444.882841][ T4824] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.897470][ T4824] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 444.906787][ T4824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.914744][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.937180][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.949288][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 445.087039][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 445.326994][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 445.447157][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.526986][T14040] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 445.537111][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 445.549321][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 445.566201][ T25] usb 3-1: SerialNumber: syz [ 445.576430][ T25] usb 3-1: config 0 descriptor?? [ 445.617571][ T25] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 445.624357][ T25] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 445.637038][ T25] uvcvideo: Failed to create links for entity 255 [ 445.643357][ T25] uvcvideo: Failed to register entities (-22). [ 445.657047][ T4824] usb 2-1: string descriptor 0 read error: -71 [ 445.663238][ T4824] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 445.672057][ T326] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 445.680751][ T4824] usb 2-1: USB disconnect, device number 49 [ 445.776988][T14040] usb 1-1: Using ep0 maxpacket: 32 [ 445.837563][ T25] usb 3-1: USB disconnect, device number 61 [ 446.037084][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.051936][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.061578][ T326] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 446.070343][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.078620][ T326] usb 4-1: config 0 descriptor?? [ 446.087103][T14040] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 446.096038][T14040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.104242][T14040] usb 1-1: Product: syz [ 446.108434][T14040] usb 1-1: Manufacturer: syz [ 446.108455][ T24] kauditd_printk_skb: 235 callbacks suppressed [ 446.108467][ T24] audit: type=1326 audit(446.093:45505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.112877][T14040] usb 1-1: SerialNumber: syz [ 446.146620][ T24] audit: type=1326 audit(446.103:45506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.172715][ T24] audit: type=1326 audit(446.123:45507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.175025][T14040] usb 1-1: config 0 descriptor?? [ 446.198810][ T24] audit: type=1326 audit(446.133:45508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.227929][ T24] audit: type=1326 audit(446.133:45509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.251606][ T24] audit: type=1326 audit(446.133:45510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.275012][ T24] audit: type=1326 audit(446.133:45511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.298708][ T24] audit: type=1326 audit(446.133:45512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.323929][ T24] audit: type=1326 audit(446.133:45513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 446.352257][ T24] audit: type=1326 audit(446.133:45514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18395 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 447.007923][ T326] dragonrise 0003:0079:0006.0062: unknown main item tag 0x0 [ 447.008307][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.015247][ T326] dragonrise 0003:0079:0006.0062: item fetching failed at offset 1/5 [ 447.032121][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.032325][ T326] dragonrise 0003:0079:0006.0062: parse failed [ 447.046904][T18431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.047240][ T326] dragonrise: probe of 0003:0079:0006.0062 failed with error -22 [ 447.128923][T14040] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 447.221989][T18443] cgroup: Bad value for 'name' [ 447.540481][ T4824] usb 4-1: USB disconnect, device number 47 [ 447.554776][ T326] usb 1-1: USB disconnect, device number 50 [ 447.597665][T18444] SELinux: duplicate or incompatible mount options [ 447.807776][T18459] device batadv_slave_1 entered promiscuous mode [ 447.814778][T18458] device batadv_slave_1 left promiscuous mode [ 447.843725][T18463] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 448.320223][T18497] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 448.532877][T18515] incfs: Error accessing: ./file0/file0. [ 448.538659][T18515] incfs: mount failed -2 [ 448.879511][T18525] syz-executor.4[18525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.879575][T18525] syz-executor.4[18525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.797794][T18568] EXT4-fs (loop4): bad geometry: first data block 100663296 is beyond end of filesystem (512) [ 450.058932][T18599] input: syz0 as /devices/virtual/input/input57 [ 450.310436][T18616] syz-executor.2[18616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.310492][T18616] syz-executor.2[18616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.386657][ T855] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 451.083214][T18644] cgroup: Bad value for 'name' [ 451.252035][T18635] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nouid32,nodiscard,auto_da_alloc=0x000000000000003f,,errors=continue [ 451.297261][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.335876][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.345841][ T855] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 451.354771][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.363112][ T855] usb 4-1: config 0 descriptor?? [ 451.506135][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 451.506151][ T24] audit: type=1400 audit(451.483:45529): avc: denied { mounton } for pid=18634 comm="syz-executor.4" path=2F726F6F742F73797A6B616C6C65722D74657374646972323737323039393137352F73797A6B616C6C65722E4C325A386B572F3233332F66696C65312FE91F7189591E9233614B dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 451.558251][T18657] Â: renamed from pim6reg1 [ 451.687003][ T1392] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 451.857267][ T855] hid (null): bogus close delimiter [ 451.927024][ T1392] usb 1-1: Using ep0 maxpacket: 16 [ 452.048318][ T1392] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.067080][ T855] usb 4-1: language id specifier not provided by device, defaulting to English [ 452.070371][ T1392] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.102862][ T1392] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.123517][ T1392] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 0 [ 452.143016][ T1392] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.157154][ T1392] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 0 [ 452.166730][ T1392] usb 1-1: config 1 interface 0 has no altsetting 0 [ 452.234594][T18669] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 452.242204][T18669] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 452.254453][T18669] F2FS-fs (loop1): Found nat_bits in checkpoint [ 452.277911][T18669] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 452.284875][T18669] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 452.284992][T18680] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 452.301729][T18680] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 452.313434][T18680] EXT4-fs (loop4): failed to initialize system zone (-117) [ 452.320713][T18680] EXT4-fs (loop4): mount failed [ 452.327165][ T1392] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.339363][ T1392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.355968][ T1392] usb 1-1: Product: syz [ 452.370355][ T1392] usb 1-1: Manufacturer: syz [ 452.379108][ T1392] usb 1-1: SerialNumber: syz [ 452.403782][ T24] audit: type=1400 audit(452.383:45530): avc: denied { nlmsg_read } for pid=18689 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 452.403809][T18690] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.459558][T18693] syz-executor.2[18693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.459614][T18693] syz-executor.2[18693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.508382][ T855] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0063/input/input58 [ 452.533420][ T855] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0063/input/input59 [ 452.557733][ T855] uclogic 0003:256C:006D.0063: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 452.600729][T18699] overlayfs: failed to resolve './file1': -2 [ 452.677265][ T1392] usb 1-1: bad CDC descriptors [ 452.685547][ T1392] usb 1-1: USB disconnect, device number 51 [ 452.717220][ T4824] usb 4-1: USB disconnect, device number 48 [ 452.817552][ T24] audit: type=1326 audit(452.803:45531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 452.875151][ T24] audit: type=1326 audit(452.803:45532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 452.902682][ T24] audit: type=1326 audit(452.803:45533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 452.926086][ T24] audit: type=1326 audit(452.803:45534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 452.949998][ T24] audit: type=1326 audit(452.803:45535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 452.974814][ T24] audit: type=1326 audit(452.803:45536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 453.003611][ T24] audit: type=1326 audit(452.803:45537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 453.027129][ T24] audit: type=1326 audit(452.803:45538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18715 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 453.557649][T18746] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.777027][ T854] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 453.798190][T18757] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 453.809437][T18757] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 453.827081][T18757] EXT4-fs (loop3): failed to initialize system zone (-117) [ 453.835512][T18757] EXT4-fs (loop3): mount failed [ 453.988657][T18763] F2FS-fs (loop1): invalid crc value [ 454.008456][T18763] F2FS-fs (loop1): Found nat_bits in checkpoint [ 454.086576][T18763] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.016032][T17680] attempt to access beyond end of device [ 455.016032][T17680] loop1: rw=2049, want=45104, limit=40427 [ 455.109290][ T854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.121721][ T854] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.132849][ T854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.141494][ T854] usb 1-1: config 0 descriptor?? [ 455.191845][T18812] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 455.457894][T18829] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 455.465400][T18829] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 455.475863][T18829] F2FS-fs (loop1): invalid crc value [ 455.482650][T18829] F2FS-fs (loop1): Found nat_bits in checkpoint [ 455.505793][T18829] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 455.512685][T18829] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 455.521026][ T49] device bridge_slave_1 left promiscuous mode [ 455.527218][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.534734][ T49] device bridge_slave_0 left promiscuous mode [ 455.541902][T17680] F2FS-fs (loop1): access invalid blkaddr:2048 [ 455.544191][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.548402][T17680] CPU: 1 PID: 17680 Comm: syz-executor.1 Tainted: G W 5.10.214-syzkaller-00114-gd3c4d815bf09 #0 [ 455.566351][T17680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 455.576243][T17680] Call Trace: [ 455.579376][T17680] dump_stack_lvl+0x1e2/0x24b [ 455.583883][T17680] ? f2fs_get_next_page_offset+0x750/0x750 [ 455.589524][T17680] ? bfq_pos_tree_add_move+0x43b/0x43b [ 455.594821][T17680] dump_stack+0x15/0x17 [ 455.598814][T17680] f2fs_is_valid_blkaddr+0xc87/0x1370 [ 455.604019][T17680] f2fs_map_blocks+0x174c/0x3e50 [ 455.608799][T17680] ? f2fs_do_map_lock+0x280/0x280 [ 455.613662][T17680] ? bio_add_page+0x2cd/0x460 [ 455.618171][T17680] ? xa_load+0x488/0x4a0 [ 455.622252][T17680] f2fs_mpage_readpages+0xef9/0x24a0 [ 455.627378][T17680] ? f2fs_verify_bio+0x440/0x440 [ 455.632152][T17680] ? __this_cpu_preempt_check+0x13/0x20 [ 455.637522][T17680] ? __mod_memcg_lruvec_state+0x131/0x310 [ 455.643076][T17680] ? xas_nomem+0x19a/0x1d0 [ 455.647329][T17680] ? __kasan_check_read+0x11/0x20 [ 455.652189][T17680] f2fs_readahead+0xfd/0x250 [ 455.656615][T17680] ? blk_start_plug+0x5a/0x170 [ 455.661220][T17680] read_pages+0x17e/0xbf0 [ 455.665384][T17680] ? page_cache_ra_unbounded+0x890/0x890 [ 455.670849][T17680] ? add_to_page_cache_lru+0x221/0x2c0 [ 455.676145][T17680] ? add_to_page_cache_locked+0x40/0x40 [ 455.681526][T17680] ? xa_load+0x488/0x4a0 [ 455.685604][T17680] page_cache_ra_unbounded+0x6be/0x890 [ 455.687000][ T1392] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 455.690905][T17680] ? memcpy+0x56/0x70 [ 455.690928][T17680] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 455.708435][T17680] ? hashlen_string+0x120/0x120 [ 455.713119][T17680] ondemand_readahead+0x863/0xc60 [ 455.717979][T17680] ? do_wp_page+0x981/0xca0 [ 455.722323][T17680] page_cache_sync_ra+0x26c/0x2c0 [ 455.727181][T17680] f2fs_readdir+0x4e7/0xb70 [ 455.731519][T17680] ? f2fs_fill_dentries+0xe10/0xe10 [ 455.736555][T17680] ? security_file_permission+0x86/0xb0 [ 455.741934][T17680] iterate_dir+0x265/0x580 [ 455.746193][T17680] ? f2fs_fill_dentries+0xe10/0xe10 [ 455.751221][T17680] __se_sys_getdents64+0x1c1/0x460 [ 455.756257][T17680] ? __x64_sys_getdents64+0x90/0x90 [ 455.761286][T17680] ? filldir+0x680/0x680 [ 455.765375][T17680] ? debug_smp_processor_id+0x17/0x20 [ 455.770574][T17680] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 455.776483][T17680] ? irqentry_exit_to_user_mode+0x4d/0x80 [ 455.782034][T17680] __x64_sys_getdents64+0x7b/0x90 [ 455.786900][T17680] do_syscall_64+0x34/0x70 [ 455.791147][T17680] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 455.796877][T17680] RIP: 0033:0x7fb0f87bd463 [ 455.801125][T17680] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 8b fa ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 b0 ff ff ff f7 d8 [ 455.820571][T17680] RSP: 002b:00007ffcf9697748 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 455.828811][T17680] RAX: ffffffffffffffda RBX: 0000555557515850 RCX: 00007fb0f87bd463 [ 455.836619][T17680] RDX: 0000000000008000 RSI: 0000555557515850 RDI: 0000000000000005 [ 455.844431][T17680] RBP: 0000555557515824 R08: 0000000000000000 R09: 0000000000000000 [ 455.852245][T17680] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffb0 [ 455.860055][T17680] R13: 0000000000000010 R14: 0000555557515820 R15: 000000000000000a [ 455.869265][ T49] device veth1_macvtap left promiscuous mode [ 455.869296][ T854] keytouch 0003:0926:3333.0064: fixing up Keytouch IEC report descriptor [ 455.875226][ T49] device veth0_vlan left promiscuous mode [ 455.883687][T17680] attempt to access beyond end of device [ 455.883687][T17680] loop1: rw=524288, want=45072, limit=40427 [ 455.901582][ T854] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0064/input/input60 [ 455.912850][T17680] attempt to access beyond end of device [ 455.912850][T17680] loop1: rw=0, want=45072, limit=40427 [ 455.944733][ T9307] attempt to access beyond end of device [ 455.944733][ T9307] loop1: rw=2049, want=40992, limit=40427 [ 455.998891][ T854] keytouch 0003:0926:3333.0064: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 456.039179][T18856] syz-executor.3[18856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.039218][T18856] syz-executor.3[18856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.057067][ T1392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.079485][ T1392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.089150][ T1392] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 456.098051][ T1392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.106815][ T1392] usb 3-1: config 0 descriptor?? [ 456.158572][T18864] syz-executor.3[18864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.158633][T18864] syz-executor.3[18864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.200506][ T855] usb 1-1: USB disconnect, device number 52 [ 456.382484][T18873] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.389613][T18873] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.600625][T18873] device bridge_slave_0 entered promiscuous mode [ 456.628005][T18873] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.634930][T18873] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.642269][T18873] device bridge_slave_1 entered promiscuous mode [ 456.677791][ T1392] dragonrise 0003:0079:0006.0065: unknown main item tag 0x0 [ 456.697007][ T1392] dragonrise 0003:0079:0006.0065: item fetching failed at offset 1/5 [ 456.704982][ T1392] dragonrise 0003:0079:0006.0065: parse failed [ 456.714238][T18873] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.721082][T18873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.728175][T18873] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.735059][T18873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.742243][ T1392] dragonrise: probe of 0003:0079:0006.0065 failed with error -22 [ 456.766852][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.774227][ T1392] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.781855][ T1392] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.794477][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.804463][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.811318][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.837424][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.845382][ T1392] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.852228][ T1392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.867815][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.875592][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.888917][ T855] usb 3-1: USB disconnect, device number 62 [ 456.897495][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.911606][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.919507][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.926797][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.934460][T18873] device veth0_vlan entered promiscuous mode [ 456.950587][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.960205][T18873] device veth1_macvtap entered promiscuous mode [ 456.971646][ T326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.984904][ T1392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.054720][ T24] kauditd_printk_skb: 109 callbacks suppressed [ 457.054732][ T24] audit: type=1400 audit(457.033:45648): avc: denied { relabelfrom } for pid=18893 comm="syz-executor.1" name="UNIX" dev="sockfs" ino=102244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 457.105063][ T24] audit: type=1401 audit(457.033:45649): op=setxattr invalid_context="" [ 457.154254][T18898] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 457.192701][T18908] syz-executor.0[18908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.192752][T18908] syz-executor.0[18908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.210202][T18910] syz-executor.1[18910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.221960][T18910] syz-executor.1[18910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.248135][ T49] device bridge_slave_1 left promiscuous mode [ 457.271999][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.279614][ T49] device bridge_slave_0 left promiscuous mode [ 457.297096][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.305101][ T49] device veth1_macvtap left promiscuous mode [ 457.311114][ T49] device veth0_vlan left promiscuous mode [ 457.447030][ T855] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 457.673867][T18930] syz-executor.4[18930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.674018][T18930] syz-executor.4[18930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.827024][ T855] usb 4-1: Using ep0 maxpacket: 8 [ 457.949022][T18943] xt_TCPMSS: Only works on TCP SYN packets [ 458.017354][ T855] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 458.079228][T18955] device syzkaller0 entered promiscuous mode [ 458.107068][ T855] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.116320][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.124671][ T855] usb 4-1: SerialNumber: syz [ 458.368487][ T675] usb 4-1: USB disconnect, device number 49 [ 458.402405][T18986] Module has invalid ELF structures [ 458.410859][T18982] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 459.222046][T19006] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 459.397319][T19027] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.287007][T14040] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 460.411200][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.424441][T19057] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.436283][T19057] device bridge1 entered promiscuous mode [ 460.507308][T19068] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 460.574012][T19078] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 234: padding at end of block bitmap is not set [ 460.599131][T19078] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 460.611690][T19078] EXT4-fs (loop1): This should not happen!! Data will be lost [ 460.611690][T19078] [ 460.640146][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 158 with error 28 [ 460.658384][T14040] usb 1-1: Using ep0 maxpacket: 16 [ 460.664907][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 460.664907][ T9] [ 460.684992][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 460.696460][ T9] EXT4-fs (loop1): Free/Dirty block details [ 460.702420][ T9] EXT4-fs (loop1): free_blocks=0 [ 460.712762][ T9] EXT4-fs (loop1): dirty_blocks=160 [ 460.723186][ T9] EXT4-fs (loop1): Block reservation details [ 460.729261][ T9] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 460.825413][T14040] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 460.834931][T14040] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 460.846779][T14040] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 460.857623][T14040] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 460.867197][T14040] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 460.879971][T14040] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 460.890728][T14040] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 461.077370][T14040] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 461.086501][T14040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.094527][T14040] usb 1-1: Product: syz [ 461.102188][T14040] usb 1-1: Manufacturer: syz [ 461.106700][T14040] usb 1-1: SerialNumber: syz [ 461.907045][ T857] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 461.917433][ T24] audit: type=1326 audit(461.903:45650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 461.967206][ T24] audit: type=1326 audit(461.933:45651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.012532][ T24] audit: type=1326 audit(461.943:45652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.035985][ T24] audit: type=1326 audit(461.953:45653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.063420][ T24] audit: type=1326 audit(461.973:45654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.090470][ T24] audit: type=1326 audit(461.983:45655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.113848][ T24] audit: type=1326 audit(461.993:45656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.137675][ T24] audit: type=1326 audit(462.003:45657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.161426][ T24] audit: type=1326 audit(462.013:45658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.184802][ T24] audit: type=1326 audit(462.023:45659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.208500][ T24] audit: type=1326 audit(462.033:45660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.231846][ T24] audit: type=1326 audit(462.043:45661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.367255][ T857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.378003][ T857] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 462.386891][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.399403][ T857] usb 4-1: config 0 descriptor?? [ 462.614572][ T24] audit: type=1326 audit(462.593:45662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7fc00000 [ 462.803614][ T24] audit: type=1326 audit(462.783:45663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19128 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6149807f69 code=0x7ffc0000 [ 462.908562][T14040] usb 1-1: USB disconnect, device number 53 [ 463.092876][ T857] keytouch 0003:0926:3333.0066: fixing up Keytouch IEC report descriptor [ 463.118178][ T857] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0066/input/input62 [ 463.198261][ T857] keytouch 0003:0926:3333.0066: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 463.646267][T19166] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=103833 [ 463.656059][T19166] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=103833 [ 463.667434][T19104] exfat: Deprecated parameter 'utf8' [ 463.675528][T19104] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5183de56, utbl_chksum : 0xe619d30d) [ 463.721639][ T55] usb 4-1: USB disconnect, device number 50 [ 464.656882][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 464.669669][T19212] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 464.790055][T19218] tmpfs: Cannot retroactively limit inodes [ 464.887021][ T2461] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 465.033414][T19230] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 465.127024][ T2461] usb 4-1: Using ep0 maxpacket: 16 [ 465.248603][ T2461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.259394][ T2461] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 465.271953][ T2461] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 465.280765][ T2461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.289392][ T2461] usb 4-1: config 0 descriptor?? [ 465.328388][T19258] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 465.617044][ T20] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 465.770862][ T2461] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0067/input/input63 [ 465.847768][ T2461] microsoft 0003:045E:07DA.0067: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 465.877009][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 466.017081][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 466.026565][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 466.036574][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 466.046307][ T20] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 466.137140][ T20] usb 5-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 466.146203][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 466.154304][ T20] usb 5-1: SerialNumber: syz [ 466.174680][ T857] usb 4-1: USB disconnect, device number 51 [ 466.207417][ T20] usb-storage 5-1:1.0: USB Mass Storage device detected [ 466.214889][ T20] usb-storage 5-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 466.222375][ T20] scsi host1: usb-storage 5-1:1.0 [ 466.408108][ T857] usb 5-1: USB disconnect, device number 41 [ 466.437004][ T2461] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 466.677026][ T2461] usb 3-1: Using ep0 maxpacket: 8 [ 466.777200][T19308] syz-executor.3[19308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.777267][T19308] syz-executor.3[19308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.797048][ T2461] usb 3-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 466.818860][ T2461] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.831544][ T2461] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 466.840411][ T2461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.848651][ T2461] usb 3-1: config 0 descriptor?? [ 467.067832][T19317] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 467.088448][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.095720][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.104205][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.111590][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.118804][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.125979][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.133287][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.140478][ T857] hid-generic 0000:0000:0000.0068: unknown main item tag 0x0 [ 467.147685][ T857] hid-generic 0000:0000:0000.0068: item fetching failed at offset 8/43 [ 467.155896][ T857] hid-generic: probe of 0000:0000:0000.0068 failed with error -22 [ 467.184670][T19321] device pim6reg1 entered promiscuous mode [ 467.190485][ T323] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 467.437013][ T323] usb 5-1: Using ep0 maxpacket: 32 [ 467.447037][ T2461] usb 3-1: string descriptor 0 read error: -71 [ 467.453388][ T2461] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 467.461440][ T2461] usb 3-1: USB disconnect, device number 63 [ 467.717102][ T323] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 467.726144][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.734206][ T323] usb 5-1: Product: syz [ 467.738094][ T323] usb 5-1: Manufacturer: syz [ 467.742509][ T323] usb 5-1: SerialNumber: syz [ 467.747615][ T323] usb 5-1: config 0 descriptor?? [ 467.787068][ T857] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 468.027072][ T857] usb 1-1: Using ep0 maxpacket: 16 [ 468.158373][ T857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 468.177082][ T857] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 468.192129][ T857] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 468.202454][ T857] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 468.301944][ T857] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 468.312591][ T857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 468.320962][ T857] usb 1-1: SerialNumber: syz [ 468.399059][ T857] usb-storage 1-1:1.0: USB Mass Storage device detected [ 468.414343][ T857] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 468.427023][ T857] scsi host1: usb-storage 1-1:1.0 [ 468.447169][ T323] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9a:a5:03:75:e1:bf [ 468.459218][ T323] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 468.700038][ T323] usb 5-1: USB disconnect, device number 42 [ 468.706350][ T55] usb 1-1: USB disconnect, device number 54 [ 469.194795][T19373] 9pnet: Could not find request transport: xen [ 469.295999][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 469.296009][ T24] audit: type=1400 audit(469.273:45724): avc: denied { getopt } for pid=19381 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 469.517774][ T24] audit: type=1326 audit(469.503:45725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 469.767644][ T24] audit: type=1326 audit(469.523:45726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 469.799674][ T24] audit: type=1326 audit(469.523:45727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 469.839760][ T24] audit: type=1326 audit(469.523:45728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 469.869476][ T24] audit: type=1326 audit(469.523:45729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 469.907649][ T24] audit: type=1326 audit(469.523:45730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 469.963215][ T24] audit: type=1326 audit(469.713:45731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 470.014298][ T24] audit: type=1326 audit(469.713:45732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19403 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59e827af69 code=0x7ffc0000 [ 470.050981][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.061122][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.070254][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.079731][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.089229][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.100348][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.109124][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.117899][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.126677][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.135464][T19420] kvm [19417]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 470.787126][ T55] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 470.822980][T19457] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19457 comm=syz-executor.0 [ 471.047356][ T857] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 471.163494][ T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 471.177557][ T55] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 471.187121][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.195698][ T55] usb 3-1: config 0 descriptor?? [ 471.202286][T19480] syz-executor.4[19480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.202341][T19480] syz-executor.4[19480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.214909][ T24] audit: type=1400 audit(471.193:45733): avc: denied { bind } for pid=19479 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 471.237488][ T55] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 471.271889][T19482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19482 comm=syz-executor.4 [ 471.708150][ T323] usb 3-1: USB disconnect, device number 64 [ 472.015417][ T857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.026159][ T857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.035792][ T857] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 472.044579][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.067195][ T857] usb 4-1: config 0 descriptor?? [ 472.221246][T19490] device pim6reg1 entered promiscuous mode [ 472.363413][T19497] syz-executor.2[19497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.363520][T19497] syz-executor.2[19497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 472.379401][T19498] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 472.427180][ T857] usbhid 4-1:0.0: can't add hid device: -71 [ 472.433007][ T857] usbhid: probe of 4-1:0.0 failed with error -71 [ 472.448326][ T857] usb 4-1: USB disconnect, device number 52 [ 472.647894][T19516] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 472.669613][T19516] EXT4-fs (loop4): 1 truncate cleaned up [ 472.677025][T19516] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 473.042475][T19520] overlayfs: './file0' not a directory [ 473.386610][T19547] netem: change failed [ 473.410468][T19551] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.429386][T19552] tipc: Failed to remove local publication {66,1,1}/869366114 [ 473.437103][T19552] tipc: Failed to remove local publication {66,1,1}/869366114 [ 473.444760][T19551] device gretap0 entered promiscuous mode [ 473.463697][T19551] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 473.473322][T19551] 0ªX¹¦Dö»: renamed from gretap0 [ 473.485083][T19551] device 00ªX¹¦Dö» left promiscuous mode [ 474.275174][T19582] overlayfs: './file0' not a directory [ 474.679728][ T323] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 475.107040][ T323] usb 4-1: Using ep0 maxpacket: 8 [ 475.227051][ T323] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 475.243398][ T323] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 475.261876][ T323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.271900][ T323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 475.436995][ T857] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 475.437102][ T323] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 475.453260][ T323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.461057][ T323] usb 4-1: Product: syz [ 475.465033][ T323] usb 4-1: Manufacturer: syz [ 475.469558][ T323] usb 4-1: SerialNumber: syz [ 475.474546][ T323] usb 4-1: config 0 descriptor?? [ 475.517397][ T323] hub 4-1:0.0: bad descriptor, ignoring hub [ 475.523185][ T323] hub: probe of 4-1:0.0 failed with error -5 [ 475.687021][ T857] usb 1-1: Using ep0 maxpacket: 8 [ 475.807137][ T857] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 475.815290][ T857] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 475.825471][ T857] usb 1-1: config 135 has no interface number 0 [ 475.831557][ T857] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.844731][ T20] usb 4-1: USB disconnect, device number 53 [ 475.997089][ T857] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 476.006069][ T857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.013861][ T857] usb 1-1: Product: syz [ 476.017827][ T857] usb 1-1: Manufacturer: syz [ 476.022228][ T857] usb 1-1: SerialNumber: syz [ 476.205651][T19614] netem: change failed [ 476.287079][ T857] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 476.293406][ T857] uvcvideo: No valid video chain found. [ 476.489377][ T25] usb 1-1: USB disconnect, device number 55 [ 476.527867][T19623] syz-executor.4[19623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.527911][T19623] syz-executor.4[19623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.567345][ T857] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 476.847049][ T857] usb 4-1: Using ep0 maxpacket: 32 [ 476.987082][ T857] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.997333][ T857] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 477.008026][ T857] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 477.021665][ T857] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 477.030552][ T857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.040177][ T857] usb 4-1: config 0 descriptor?? [ 477.045412][T19642] netem: change failed [ 477.077545][ T857] usb 4-1: bad CDC descriptors [ 477.365783][ T25] usb 4-1: USB disconnect, device number 54 [ 477.704610][T19654] overlayfs: './file0' not a directory [ 478.046821][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 478.046834][ T24] audit: type=1400 audit(478.023:45737): avc: denied { getattr } for pid=19663 comm="syz-executor.2" path="socket:[105722]" dev="sockfs" ino=105722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 478.047289][ T2461] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 478.191307][T19674] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.198341][T19674] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.205589][T19674] device bridge_slave_0 entered promiscuous mode [ 478.213744][T19674] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.220789][T19674] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.228106][T19674] device bridge_slave_1 entered promiscuous mode [ 478.239403][T19678] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 478.320873][T19674] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.327748][T19674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.334865][T19674] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.341632][T19674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.371644][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.380081][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.395146][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.402803][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.430493][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.438807][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.445660][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.477184][ T2461] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.490110][ T2461] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.508740][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.517686][ T2461] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 478.544659][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.551532][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.558677][ T2461] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 478.607665][ T2461] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 478.618575][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.627065][ T2461] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 478.637760][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.688085][T19674] device veth0_vlan entered promiscuous mode [ 478.695953][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.704954][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.712921][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.720420][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.734825][T19674] device veth1_macvtap entered promiscuous mode [ 478.745313][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 478.769229][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.780358][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 478.817055][ T2461] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 478.828244][ T2461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.836736][ T2461] usb 5-1: Product: syz [ 478.841165][ T2461] usb 5-1: Manufacturer: syz [ 478.845827][ T2461] usb 5-1: SerialNumber: syz [ 479.215119][T19706] syz-executor.0[19706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.215160][T19706] syz-executor.0[19706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.419694][T19708] device pim6reg1 entered promiscuous mode [ 479.441138][T19709] overlayfs: './file0' not a directory [ 479.485124][T19712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 479.604587][T19721] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 479.616419][T19721] EXT4-fs (loop5): unable to read superblock [ 479.709120][T19737] netlink: 'syz-executor.2': attribute type 280 has an invalid length. [ 479.746816][T19747] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 479.758274][T19747] EXT4-fs (loop7): unable to read superblock [ 479.823774][T19656] syz-executor.4[19656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.823834][T19656] syz-executor.4[19656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.377070][ T2461] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 480.394469][ T2461] cdc_ncm 5-1:1.0: bind() failure [ 480.400418][ T2461] cdc_ncm 5-1:1.1: bind() failure [ 480.417610][ T2461] usb 5-1: USB disconnect, device number 43 [ 480.547023][ T857] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 480.766397][T19782] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 480.778056][T19782] EXT4-fs (loop5): unable to read superblock [ 480.795770][T19784] device pim6reg1 entered promiscuous mode [ 480.917103][ T857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.928198][ T857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.938160][ T857] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 480.947127][ T857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.955681][ T857] usb 1-1: config 0 descriptor?? [ 481.030453][T19802] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 481.127199][ T2461] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 481.347050][ T675] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 481.367074][ T2461] usb 3-1: Using ep0 maxpacket: 8 [ 481.427304][ T857] hid (null): bogus close delimiter [ 481.487810][ T2461] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 481.495864][ T2461] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 481.503780][ T2461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.513687][ T2461] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 481.587002][ T675] usb 5-1: Using ep0 maxpacket: 32 [ 481.637124][ T857] usb 1-1: language id specifier not provided by device, defaulting to English [ 481.677112][ T2461] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 481.685988][ T2461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.693827][ T2461] usb 3-1: Product: syz [ 481.697762][ T2461] usb 3-1: Manufacturer: syz [ 481.702170][ T2461] usb 3-1: SerialNumber: syz [ 481.707084][ T675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 481.718195][ T2461] usb 3-1: config 0 descriptor?? [ 481.723016][ T675] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 481.733910][ T675] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 481.742794][ T675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.751073][ T675] usb 5-1: config 0 descriptor?? [ 481.757261][ T2461] hub 3-1:0.0: bad descriptor, ignoring hub [ 481.762987][ T2461] hub: probe of 3-1:0.0 failed with error -5 [ 481.768893][T19806] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 481.787380][ T675] hub 5-1:0.0: USB hub found [ 482.058020][ T857] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0069/input/input64 [ 482.070320][ T857] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0069/input/input65 [ 482.077159][ T2461] usb 3-1: USB disconnect, device number 65 [ 482.082832][ T857] uclogic 0003:256C:006D.0069: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 482.087657][ T675] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 482.264160][ T857] usb 1-1: USB disconnect, device number 56 [ 482.367949][ T675] hid-generic 0003:046D:C314.006A: item fetching failed at offset 0/1 [ 482.376143][ T675] hid-generic: probe of 0003:046D:C314.006A failed with error -22 [ 482.494776][T19812] input: syz1 as /devices/virtual/input/input66 [ 482.687139][ T2461] usb 5-1: USB disconnect, device number 44 [ 482.868352][T19824] overlayfs: './file0' not a directory [ 483.243843][T19856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.568599][ T2461] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 483.695054][T19870] syz-executor.2[19870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.695098][T19870] syz-executor.2[19870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.839326][T19870] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 483.927090][ T2461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.937872][ T2461] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 483.946658][ T2461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.955218][ T2461] usb 5-1: config 0 descriptor?? [ 484.438795][ T2461] hid-generic 0003:1B1C:1B3E.006B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 484.517453][ T25] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 484.798626][ T323] usb 5-1: USB disconnect, device number 45 [ 485.057094][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.067793][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.077356][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 485.086172][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.095443][ T25] usb 1-1: config 0 descriptor?? [ 485.353968][T19900] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 485.668149][ T25] logitech-hidpp-device 0003:046D:C086.006C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 485.858355][ T323] usb 1-1: USB disconnect, device number 57 [ 485.942545][ T24] audit: type=1400 audit(485.923:45738): avc: denied { setattr } for pid=19903 comm="syz-executor.2" name="PACKET" dev="sockfs" ino=107020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 486.103132][T19907] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.110278][T19907] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.117546][T19907] device bridge_slave_0 entered promiscuous mode [ 486.124320][T19907] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.131281][T19907] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.138525][T19907] device bridge_slave_1 entered promiscuous mode [ 486.184761][T19907] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.191633][T19907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.198738][T19907] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.205513][T19907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.230679][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.238653][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.250505][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.295917][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.304217][ T675] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.311079][ T675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.318760][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.329054][ T675] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.335886][ T675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.343153][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.351054][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.376424][T19907] device veth0_vlan entered promiscuous mode [ 486.386779][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.394787][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.402943][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.410734][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.460359][T19907] device veth1_macvtap entered promiscuous mode [ 486.470163][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.480063][T19914] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.486908][T19914] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.494216][T19914] device bridge_slave_0 entered promiscuous mode [ 486.506027][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 486.516645][T19914] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.524193][T19914] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.533178][T19914] device bridge_slave_1 entered promiscuous mode [ 486.541816][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.598931][T19914] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.605777][T19914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.612866][T19914] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.619663][T19914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.641663][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 486.649280][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.656316][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.678081][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 486.686001][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.692838][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.700299][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 486.709151][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.715974][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.723383][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 486.731123][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 486.742621][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 486.754248][T19914] device veth0_vlan entered promiscuous mode [ 486.760920][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 486.768638][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 486.775841][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 486.788888][T19914] device veth1_macvtap entered promiscuous mode [ 486.795798][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 486.805004][ T49] device bridge_slave_1 left promiscuous mode [ 486.811243][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.819056][ T49] device bridge_slave_0 left promiscuous mode [ 486.825122][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.832820][ T49] device veth1_macvtap left promiscuous mode [ 486.838994][ T49] device veth0_vlan left promiscuous mode [ 486.915496][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 486.925498][T14040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.995630][ T24] audit: type=1326 audit(486.973:45739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19948 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x0 [ 487.076471][T19957] syz-executor.2[19957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.076533][T19957] syz-executor.2[19957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.090437][T19957] input: syz1 as /devices/virtual/input/input67 [ 487.189726][T19973] syz-executor.0[19973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.189833][T19973] syz-executor.0[19973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.204019][ T24] audit: type=1326 audit(487.183:45740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19972 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 487.240758][ T24] audit: type=1326 audit(487.183:45741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19972 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 487.265075][ T24] audit: type=1326 audit(487.223:45742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19972 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 487.273414][T19977] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 487.417024][ T20] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 487.568471][ T55] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 487.657535][ T49] device bridge_slave_1 left promiscuous mode [ 487.663533][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.670862][ T49] device bridge_slave_0 left promiscuous mode [ 487.676886][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.684536][ T49] device veth1_macvtap left promiscuous mode [ 487.687054][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 487.690634][ T49] device veth0_vlan left promiscuous mode [ 487.827126][ T20] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 487.839876][ T55] usb 3-1: device descriptor read/64, error -71 [ 487.931893][T19987] syz-executor.1[19987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.931935][T19987] syz-executor.1[19987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.945039][T19987] input: syz1 as /devices/virtual/input/input68 [ 488.027117][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.40 [ 488.035970][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.043803][ T20] usb 5-1: Product: syz [ 488.047829][ T20] usb 5-1: Manufacturer: syz [ 488.052181][ T20] usb 5-1: SerialNumber: syz [ 488.087597][ T24] audit: type=1107 audit(488.073:45743): pid=19991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='11a' [ 488.227323][ T55] usb 3-1: device descriptor read/64, error -71 [ 488.337537][ T20] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 488.428469][ T24] audit: type=1326 audit(488.413:45744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 488.452809][ T24] audit: type=1326 audit(488.413:45745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 488.476738][ T24] audit: type=1326 audit(488.413:45746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 488.500120][ T55] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 488.507902][ T24] audit: type=1326 audit(488.443:45747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20026 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 488.538959][ T675] usb 5-1: USB disconnect, device number 46 [ 488.641796][T20043] usb usb8: usbfs: process 20043 (syz-executor.0) did not claim interface 0 before use [ 488.796994][ T55] usb 3-1: device descriptor read/64, error -71 [ 489.071227][T20059] syz-executor.0[20059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.071279][T20059] syz-executor.0[20059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.187092][ T55] usb 3-1: device descriptor read/64, error -71 [ 489.327090][ T55] usb usb3-port1: attempt power cycle [ 489.577039][ T675] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 489.786458][ T55] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 489.957106][ T55] usb 3-1: device descriptor read/8, error -71 [ 490.017057][ T675] usb 5-1: config 0 has no interfaces? [ 490.137093][ T675] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 490.146179][ T675] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 490.154187][ T675] usb 5-1: Product: syz [ 490.158226][ T675] usb 5-1: Manufacturer: syz [ 490.163247][ T675] usb 5-1: config 0 descriptor?? [ 490.227066][ T55] usb 3-1: device descriptor read/8, error -71 [ 490.278976][T20136] syz-executor.2[20136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.279060][T20136] syz-executor.2[20136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.397086][T14040] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 490.417139][ T20] usb 5-1: USB disconnect, device number 47 [ 490.687098][T14040] usb 2-1: Using ep0 maxpacket: 8 [ 490.817467][T14040] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 490.853015][T14040] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.343227][T14040] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.361743][T14040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.377194][T14040] usb 2-1: Product: syz [ 491.383246][T14040] usb 2-1: Manufacturer: syz [ 492.050563][T14040] usb 2-1: SerialNumber: syz [ 492.150022][T20179] device pim6reg1 entered promiscuous mode [ 492.298284][T20134] udc-core: couldn't find an available UDC or it's busy [ 492.305047][T20134] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 492.375012][T20196] device pim6reg1 entered promiscuous mode [ 492.417230][T14040] usb 2-1: 0:2 : does not exist [ 492.423281][T14040] usb 2-1: USB disconnect, device number 50 [ 492.449872][ T24] kauditd_printk_skb: 10 callbacks suppressed [ 492.449884][ T24] audit: type=1326 audit(492.433:45758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20198 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 492.479690][ T24] audit: type=1326 audit(492.463:45759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20198 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 492.503176][ T24] audit: type=1326 audit(492.463:45760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20198 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 492.526807][ T24] audit: type=1326 audit(492.463:45761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20198 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 492.550428][ T24] audit: type=1326 audit(492.463:45762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20198 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 494.077297][T20222] EXT4-fs (loop1): Test dummy encryption mode enabled [ 494.148383][T20222] EXT4-fs error (device loop1): __ext4_iget:4958: inode #11: block 1: comm syz-executor.1: invalid block [ 494.181370][T20222] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 494.329333][T20222] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 494.536317][T20230] device syzkaller0 entered promiscuous mode [ 494.680117][T20245] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 495.007011][ T675] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 495.377069][ T675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.387847][ T675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.397465][ T675] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.410149][ T675] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 495.418949][ T675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.428131][ T675] usb 1-1: config 0 descriptor?? [ 495.458974][T20279] device pim6reg1 entered promiscuous mode [ 495.957789][ T675] prodikeys 0003:041E:2801.006D: unexpected long global item [ 495.965159][ T675] prodikeys 0003:041E:2801.006D: hid parse failed [ 495.971485][ T2461] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 495.978889][ T675] prodikeys: probe of 0003:041E:2801.006D failed with error -22 [ 496.158151][ T675] usb 1-1: USB disconnect, device number 58 [ 496.227021][ T2461] usb 5-1: Using ep0 maxpacket: 16 [ 496.347168][ T2461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.358094][ T2461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.367673][ T2461] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 496.380241][ T2461] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 496.389082][ T2461] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.397613][ T2461] usb 5-1: config 0 descriptor?? [ 496.498548][T20310] device pim6reg1 entered promiscuous mode [ 496.922316][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 496.951435][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.016260][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.083544][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.149714][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.210649][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.278024][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.338703][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.412740][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.471093][ T2461] microsoft 0003:045E:07DA.006E: unknown main item tag 0x0 [ 497.597338][ T2461] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.006E/input/input70 [ 498.145581][ T2461] microsoft 0003:045E:07DA.006E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 498.158529][ T2461] usb 5-1: USB disconnect, device number 49 [ 498.174566][ T24] audit: type=1326 audit(498.153:45763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.198063][ T24] audit: type=1326 audit(498.153:45764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.221675][ T24] audit: type=1326 audit(498.183:45765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.245731][ T24] audit: type=1326 audit(498.213:45766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.270344][ T24] audit: type=1326 audit(498.213:45767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.293863][ T24] audit: type=1326 audit(498.253:45768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.317328][ T24] audit: type=1326 audit(498.253:45769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.340735][ T24] audit: type=1326 audit(498.253:45770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf828ff6e7 code=0x7ffc0000 [ 498.364073][ T24] audit: type=1326 audit(498.253:45771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf828c53b9 code=0x7ffc0000 [ 498.387712][ T24] audit: type=1326 audit(498.253:45772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20336 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf82901f69 code=0x7ffc0000 [ 498.447152][T20347] device syzkaller0 entered promiscuous mode [ 498.538217][T20344] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz-executor.4: invalid block [ 498.552478][T20344] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 498.571566][T20344] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,max_dir_size_kb=0x0000000000000009,data_err=abort,grpquota,noinit_itable,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue [ 498.623407][T20358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2145 sclass=netlink_route_socket pid=20358 comm=syz-executor.2 [ 498.649250][T20358] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 499.567885][T20404] SELinux: security_context_str_to_sid(u) failed for (dev sda1, type ext4) errno=-22 [ 500.238667][T20434] device syzkaller0 entered promiscuous mode [ 501.711268][T20471] SELinux: security_context_str_to_sid(u) failed for (dev sda1, type ext4) errno=-22 [ 501.802059][T20478] device syzkaller0 entered promiscuous mode [ 502.007025][ T20] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 502.147026][ T675] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 502.154477][ T2461] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 502.387089][ T675] usb 5-1: Using ep0 maxpacket: 8 [ 502.392049][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.402802][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.412368][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 502.421191][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.429546][ T20] usb 2-1: config 0 descriptor?? [ 502.507078][ T675] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 502.518148][ T2461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.528931][ T675] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 502.538538][ T2461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 502.549127][ T675] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 502.561876][ T2461] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.574617][ T2461] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.583406][ T2461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.591816][ T2461] usb 3-1: config 0 descriptor?? [ 502.607067][T20483] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 502.647091][ T675] usb 5-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 502.655926][ T675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 502.664105][ T675] usb 5-1: SerialNumber: syz [ 502.687077][T20485] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 502.707527][ T675] hub 5-1:1.0: bad descriptor, ignoring hub [ 502.713339][ T675] hub: probe of 5-1:1.0 failed with error -5 [ 502.908371][T20485] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 503.067937][ T2461] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0 [ 503.075168][ T2461] plantronics 0003:047F:FFFF.0070: unknown main item tag 0x0 [ 503.082646][ T2461] plantronics 0003:047F:FFFF.0070: No inputs registered, leaving [ 503.095267][ T2461] plantronics 0003:047F:FFFF.0070: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 503.295667][T20512] device veth1_macvtap left promiscuous mode [ 503.302929][T20512] device veth1_macvtap entered promiscuous mode [ 503.307235][T20473] F2FS-fs (loop1): Unrecognized mount option "usrquota=}-" or missing value [ 503.309602][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.348157][ T675] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 503.417068][ T20] usb 2-1: string descriptor 0 read error: -71 [ 503.447076][ T20] uclogic 0003:256C:006D.006F: failed retrieving string descriptor #200: -71 [ 503.455751][ T20] uclogic 0003:256C:006D.006F: failed retrieving pen parameters: -71 [ 503.463639][ T20] uclogic 0003:256C:006D.006F: failed probing pen v2 parameters: -71 [ 503.471645][ T20] uclogic 0003:256C:006D.006F: failed probing parameters: -71 [ 503.478901][ T20] uclogic: probe of 0003:256C:006D.006F failed with error -71 [ 503.486970][ T20] usb 2-1: USB disconnect, device number 51 [ 503.667142][ T309] usb 5-1: USB disconnect, device number 50 [ 503.673341][ T309] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 503.856718][ T309] usb 3-1: USB disconnect, device number 70 [ 503.887328][T20520] device syzkaller0 entered promiscuous mode [ 503.954991][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 503.955002][ T24] audit: type=1326 audit(503.933:45780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 503.988131][T20526] device syzkaller0 entered promiscuous mode [ 504.003808][ T24] audit: type=1326 audit(503.933:45781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 504.044908][ T24] audit: type=1326 audit(503.933:45782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 504.073949][ T24] audit: type=1326 audit(503.933:45783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 504.098604][ T24] audit: type=1326 audit(503.933:45784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20527 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 504.707173][ T20] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 504.797014][ T675] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 504.967164][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 505.157156][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.171033][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.171094][T20562] device wireguard0 entered promiscuous mode [ 505.188605][ T675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 505.199683][ T675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 505.210676][ T675] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.223805][ T675] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.232984][ T675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.260921][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 505.273596][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 505.275427][ T675] usb 1-1: config 0 descriptor?? [ 505.282402][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.283037][ T20] usb 3-1: config 0 descriptor?? [ 505.307086][T20541] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 505.655150][T20568] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.662056][T20568] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.669522][T20568] device bridge_slave_0 entered promiscuous mode [ 505.676360][T20568] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.683442][T20568] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.690648][T20568] device bridge_slave_1 entered promiscuous mode [ 505.726921][T20568] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.733799][T20568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.740869][T20568] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.747667][T20568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.755506][ T675] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 505.764206][ T675] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0 [ 505.768405][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.771887][ T675] plantronics 0003:047F:FFFF.0071: No inputs registered, leaving [ 505.788427][ T675] plantronics 0003:047F:FFFF.0071: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 505.790415][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.810750][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.810955][ T675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.817908][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.843665][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.850905][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.858108][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.865149][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.872170][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.879214][ T20] microsoft 0003:045E:07DA.0072: unknown main item tag 0x0 [ 505.888548][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0072/input/input72 [ 505.900340][ T20] microsoft 0003:045E:07DA.0072: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 505.913309][ T675] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.927107][ T675] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.944000][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.952236][ T2461] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.959118][ T2461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.966543][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.981629][ T2461] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.988604][ T2461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.010114][ T20] usb 3-1: USB disconnect, device number 71 [ 506.028239][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.036792][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 506.053476][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 506.065943][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 506.084598][T20589] EXT4-fs (loop4): Ignoring removed orlov option [ 506.091197][T20589] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 506.247923][T20589] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 506.300919][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 506.308297][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 506.316762][T20568] device veth0_vlan entered promiscuous mode [ 506.319009][ T24] audit: type=1400 audit(506.293:45785): avc: denied { setattr } for pid=20588 comm="syz-executor.4" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 506.330626][T20568] device veth1_macvtap entered promiscuous mode [ 506.354251][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.369519][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.377867][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.519259][ T49] device bridge_slave_1 left promiscuous mode [ 506.525352][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.548084][ T49] device bridge_slave_0 left promiscuous mode [ 506.556996][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.570827][ T49] device veth1_macvtap left promiscuous mode [ 506.583131][ T309] usb 1-1: USB disconnect, device number 59 [ 506.599212][ T49] device veth0_vlan left promiscuous mode [ 507.037004][ T2461] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 507.086650][T20648] device veth1_macvtap left promiscuous mode [ 507.096026][T20648] device veth1_macvtap entered promiscuous mode [ 507.359540][ T24] audit: type=1400 audit(507.343:45786): avc: denied { setopt } for pid=20669 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 507.397767][ T2461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.634767][ T2461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.644356][ T2461] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 507.653260][ T2461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.663944][ T2461] usb 4-1: config 0 descriptor?? [ 507.837634][ T24] audit: type=1326 audit(507.823:45787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 507.863345][ T24] audit: type=1326 audit(507.823:45788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 507.887989][ T24] audit: type=1326 audit(507.843:45789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20691 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 507.997090][ T309] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 508.407542][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.436973][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.471096][ T2461] hid-multitouch 0003:0EEF:72D0.0073: item fetching failed at offset 3/5 [ 508.479734][ T2461] hid-multitouch: probe of 0003:0EEF:72D0.0073 failed with error -22 [ 508.488527][ T2461] usb 4-1: USB disconnect, device number 55 [ 508.489083][ T309] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 508.503390][ T309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.512581][ T309] usb 5-1: config 0 descriptor?? [ 508.933712][T20717] bpf_get_probe_write_proto: 2 callbacks suppressed [ 508.933722][T20717] syz-executor.0[20717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.940431][T20717] syz-executor.0[20717] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.127628][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 509.127639][ T24] audit: type=1326 audit(509.113:45792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c3da4f69 code=0x7ffc0000 [ 509.168817][ T24] audit: type=1326 audit(509.113:45793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c3da4f69 code=0x7ffc0000 [ 509.195415][ T24] audit: type=1326 audit(509.153:45794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f75c3da4f69 code=0x7ffc0000 [ 509.219577][ T24] audit: type=1326 audit(509.153:45795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c3da4f69 code=0x7ffc0000 [ 509.243290][ T24] audit: type=1326 audit(509.153:45796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20727 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c3da4f69 code=0x7ffc0000 [ 509.267308][ T309] usb 5-1: language id specifier not provided by device, defaulting to English [ 509.676558][T20742] 9pnet: Insufficient options for proto=fd [ 509.693307][ T24] audit: type=1326 audit(509.673:45797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 509.716917][ T24] audit: type=1326 audit(509.673:45798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 509.740982][ T24] audit: type=1326 audit(509.683:45799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 509.765704][ T24] audit: type=1326 audit(509.683:45800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 509.791227][ T24] audit: type=1326 audit(509.683:45801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20743 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0b563bf69 code=0x7ffc0000 [ 509.937172][ T309] uclogic 0003:256C:006D.0074: failed retrieving string descriptor #100: -71 [ 509.947845][ T309] uclogic 0003:256C:006D.0074: failed retrieving pen parameters: -71 [ 509.960500][ T309] uclogic 0003:256C:006D.0074: failed probing pen v1 parameters: -71 [ 509.968710][ T309] uclogic 0003:256C:006D.0074: failed probing parameters: -71 [ 509.980263][ T309] uclogic: probe of 0003:256C:006D.0074 failed with error -71 [ 509.989651][ T309] usb 5-1: USB disconnect, device number 51 [ 510.167043][ T675] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 510.356246][T20778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.365784][T20778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.413582][T20784] incfs: Options parsing error. -22 [ 510.418802][T20784] incfs: mount failed -22 [ 510.527042][ T675] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.541436][ T675] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.637135][ T675] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.646124][ T675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.654106][ T675] usb 2-1: SerialNumber: syz [ 510.937649][ T675] usb 2-1: 0:2 : does not exist [ 510.943138][T20802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.953125][ T675] usb 2-1: USB disconnect, device number 52 [ 510.954962][T20802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 511.007471][T20810] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 511.215992][T20840] tmpfs: Unknown parameter 'w' [ 511.267029][ T855] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 511.712703][T20871] tmpfs: Unknown parameter 'w' [ 511.759658][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.770632][ T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.780525][ T855] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 511.789583][ T855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.798163][ T855] usb 4-1: config 0 descriptor?? [ 512.217050][ T2461] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 512.266633][T20893] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 512.577122][ T2461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.587971][ T2461] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.657043][ T325] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 512.677117][ T2461] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 512.685970][ T2461] usb 5-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 512.693929][ T2461] usb 5-1: Product: syz [ 512.698901][ T2461] usb 5-1: config 0 descriptor?? [ 512.747514][ T855] usb 4-1: language id specifier not provided by device, defaulting to English [ 512.757247][ T323] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 512.997059][ T323] usb 1-1: Using ep0 maxpacket: 32 [ 513.037096][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.057013][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.066650][ T325] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 513.096984][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.117077][ T323] usb 1-1: config 0 has no interfaces? [ 513.117243][ T325] usb 3-1: config 0 descriptor?? [ 513.177936][ T2461] konepure 0003:1E7D:2DB4.0076: unknown main item tag 0x0 [ 513.187188][ T2461] konepure 0003:1E7D:2DB4.0076: collection stack underflow [ 513.201942][ T2461] konepure 0003:1E7D:2DB4.0076: item 0 2 0 12 parsing failed [ 513.218027][ T2461] konepure 0003:1E7D:2DB4.0076: parse failed [ 513.230503][ T2461] konepure: probe of 0003:1E7D:2DB4.0076 failed with error -22 [ 513.277083][ T323] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 513.289293][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.305886][ T323] usb 1-1: Product: syz [ 513.314303][ T323] usb 1-1: Manufacturer: syz [ 513.323150][ T323] usb 1-1: SerialNumber: syz [ 513.333786][ T323] usb 1-1: config 0 descriptor?? [ 513.382117][ T20] usb 5-1: USB disconnect, device number 52 [ 513.387935][ T855] uclogic 0003:256C:006D.0075: failed retrieving string descriptor #100: -71 [ 513.396428][ T855] uclogic 0003:256C:006D.0075: failed retrieving pen parameters: -71 [ 513.427011][ T855] uclogic 0003:256C:006D.0075: failed probing pen v1 parameters: -71 [ 513.434912][ T855] uclogic 0003:256C:006D.0075: failed probing parameters: -71 [ 513.442433][ T855] uclogic: probe of 0003:256C:006D.0075 failed with error -71 [ 513.450942][ T855] usb 4-1: USB disconnect, device number 56 [ 513.579675][ T323] usb 1-1: USB disconnect, device number 60 [ 513.627913][ T325] hid-multitouch 0003:0EEF:72D0.0077: item fetching failed at offset 3/5 [ 513.636614][ T325] hid-multitouch: probe of 0003:0EEF:72D0.0077 failed with error -22 [ 513.833745][ T325] usb 3-1: USB disconnect, device number 72 [ 513.944453][T20948] syz-executor.4[20948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.944495][T20948] syz-executor.4[20948] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.129205][T20969] input: syz1 as /devices/virtual/input/input74 [ 514.567017][ T323] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 514.692536][T21029] FAT-fs (loop1): Directory bread(block 64) failed [ 514.699155][T21029] FAT-fs (loop1): Directory bread(block 65) failed [ 514.705549][T21029] FAT-fs (loop1): Directory bread(block 66) failed [ 514.712117][T21029] FAT-fs (loop1): Directory bread(block 67) failed [ 514.720321][T21029] FAT-fs (loop1): Directory bread(block 68) failed [ 514.727676][T21029] FAT-fs (loop1): Directory bread(block 69) failed [ 514.734482][T21029] FAT-fs (loop1): Directory bread(block 70) failed [ 514.740938][T21029] FAT-fs (loop1): Directory bread(block 71) failed [ 514.747318][T21029] FAT-fs (loop1): Directory bread(block 72) failed [ 514.753584][T21029] FAT-fs (loop1): Directory bread(block 73) failed [ 514.807019][ T323] usb 1-1: Using ep0 maxpacket: 32 [ 514.867117][ T325] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 515.109436][ T323] usb 1-1: config 0 has no interfaces? [ 515.212780][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 515.212791][ T24] audit: type=1400 audit(515.193:45824): avc: denied { nlmsg_write } for pid=21044 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 515.277296][T21049] device veth0_vlan left promiscuous mode [ 515.283261][T21049] device veth0_vlan entered promiscuous mode [ 515.290824][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.298485][ T323] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 515.310133][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.318381][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.331334][ T4824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.341279][ T323] usb 1-1: Product: syz [ 515.345677][ T323] usb 1-1: Manufacturer: syz [ 515.350719][ T323] usb 1-1: SerialNumber: syz [ 515.355762][ T323] usb 1-1: config 0 descriptor?? [ 515.367219][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.381256][ T325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.390987][ T325] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 515.399933][ T325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.408778][ T325] usb 3-1: config 0 descriptor?? [ 515.603009][ T323] usb 1-1: USB disconnect, device number 61 [ 515.897975][ T325] hid-multitouch 0003:0EEF:72D0.0078: item fetching failed at offset 3/5 [ 515.906354][ T325] hid-multitouch: probe of 0003:0EEF:72D0.0078 failed with error -22 [ 516.100344][ T325] usb 3-1: USB disconnect, device number 73 [ 519.019312][T21083] 9pnet: Insufficient options for proto=fd [ 519.118676][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 519.129739][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.158349][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 519.169100][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.177320][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 519.185378][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.206852][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.215250][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.244095][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 519.265687][ T2461] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 520.099977][T21134] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 520.138167][ T24] audit: type=1326 audit(520.123:45825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.176572][ T24] audit: type=1326 audit(520.123:45826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.201323][ T24] audit: type=1326 audit(520.123:45827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.225145][ T24] audit: type=1326 audit(520.123:45828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.248694][ T325] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 520.260794][ T24] audit: type=1326 audit(520.123:45829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.284541][ T24] audit: type=1326 audit(520.123:45830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.317074][ T24] audit: type=1326 audit(520.143:45831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.372435][ T24] audit: type=1326 audit(520.153:45832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.396116][ T24] audit: type=1326 audit(520.183:45833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.431585][ T24] audit: type=1326 audit(520.183:45834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.474676][T21160] netem: incorrect gi model size [ 520.486061][T21160] netem: change failed [ 520.500953][ T24] audit: type=1326 audit(520.183:45835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.540878][ T24] audit: type=1326 audit(520.183:45836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.564653][ T24] audit: type=1326 audit(520.183:45837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4296af69 code=0x7ffc0000 [ 520.588166][ T325] usb 1-1: Using ep0 maxpacket: 32 [ 520.737659][ T325] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.759998][ T325] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.857615][ T325] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 520.866760][ T325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.907594][ T325] hub 1-1:4.0: USB hub found [ 521.071783][T21187] device veth0_vlan left promiscuous mode [ 521.078144][T21187] device veth0_vlan entered promiscuous mode [ 521.085121][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.095215][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.110850][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.119363][ T325] hub 1-1:4.0: 2 ports detected [ 521.211514][T21203] overlayfs: invalid redirect ((null)) [ 521.301234][T21201] F2FS-fs (loop4): Found nat_bits in checkpoint [ 521.371745][T21211] incfs: Options parsing error. -22 [ 521.380763][T21211] incfs: mount failed -22 [ 521.390539][T21201] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 521.417088][ T325] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 521.424404][ T325] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 521.450888][T15501] attempt to access beyond end of device [ 521.450888][T15501] loop4: rw=2049, want=45104, limit=40427 [ 521.469498][ T325] usb 1-1: USB disconnect, device number 62 [ 521.767957][T21239] EXT4-fs (loop4): error: journal path ./file0 is not a block device [ 521.901841][T21255] EXT4-fs (loop1): orphan cleanup on readonly fs [ 521.928053][T21255] EXT4-fs (loop1): 1 truncate cleaned up [ 521.938574][T21255] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 522.209386][T21286] EXT4-fs (loop3): error: journal path ./file0 is not a block device [ 522.267010][ T323] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 522.427342][T21294] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 522.447938][ T675] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 522.462286][T21298] incfs_lookup_dentry err:-14 [ 522.466780][T21298] incfs: Can't find or create .incomplete dir in ./file0 [ 522.473944][T21298] incfs: mount failed -14 [ 522.627470][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.638390][ T323] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.647972][ T323] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 522.656773][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.671922][ T323] usb 5-1: config 0 descriptor?? [ 522.687088][ T675] usb 2-1: Using ep0 maxpacket: 32 [ 522.865639][T21314] device veth0_vlan left promiscuous mode [ 522.873792][T21314] device veth0_vlan entered promiscuous mode [ 523.027125][ T675] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.033092][T21316] incfs: Options parsing error. -22 [ 523.038040][ T675] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.043026][T21316] incfs: mount failed -22 [ 523.052608][ T675] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 523.052620][ T675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.087568][ T675] hub 2-1:4.0: USB hub found [ 523.207314][ T323] hid (null): bogus close delimiter [ 523.215324][T21325] 9pnet: Insufficient options for proto=fd [ 523.307111][ T675] hub 2-1:4.0: 2 ports detected [ 523.427124][ T323] usb 5-1: string descriptor 0 read error: -22 [ 523.514003][T21331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 523.607071][ T675] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 523.613394][ T675] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 523.622121][T21336] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 523.647905][ T675] usb 2-1: USB disconnect, device number 53 [ 523.988167][ T323] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0079/input/input75 [ 524.000640][ T323] uclogic 0003:256C:006D.0079: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 524.053950][T21346] incfs: Options parsing error. -22 [ 524.059156][T21346] incfs: mount failed -22 [ 524.193076][T21360] incfs_lookup_dentry err:-14 [ 524.197694][T21360] incfs: Can't find or create .incomplete dir in ./file0 [ 524.204667][T21360] incfs: mount failed -14 [ 524.252352][T21365] incfs: mount failed -22 [ 524.385474][T21370] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.392774][T21370] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.400406][T21370] device bridge_slave_0 entered promiscuous mode [ 524.407836][T21370] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.414714][T21370] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.422290][T21370] device bridge_slave_1 entered promiscuous mode [ 524.469701][T21370] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.476581][T21370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.483708][T21370] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.490575][T21370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.515025][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.523055][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.530738][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.547972][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.555973][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.562830][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.574345][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.582446][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.589310][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.597168][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.614363][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.622633][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.634021][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.642945][T21381] EXT4-fs (loop3): Ignoring removed orlov option [ 524.649395][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.654334][T21381] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 524.656777][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 524.670080][T21381] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 524.679278][T21370] device veth0_vlan entered promiscuous mode [ 524.706329][T21381] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 524.707584][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.719722][ T675] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 524.729827][T21370] device veth1_macvtap entered promiscuous mode [ 524.734940][T21381] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2204: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 524.745914][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.768847][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.777547][T20568] ================================================================== [ 524.785432][T20568] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc67/0xc80 [ 524.793229][T20568] Read of size 4 at addr ffff88813da87000 by task syz-executor.3/20568 [ 524.801296][T20568] [ 524.803477][T20568] CPU: 0 PID: 20568 Comm: syz-executor.3 Tainted: G W 5.10.214-syzkaller-00114-gd3c4d815bf09 #0 [ 524.815010][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 1970/01/01 00:08:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 524.824904][T20568] Call Trace: [ 524.828052][T20568] dump_stack_lvl+0x1e2/0x24b [ 524.832559][T20568] ? bfq_pos_tree_add_move+0x43b/0x43b [ 524.837852][T20568] ? panic+0x80b/0x80b [ 524.841763][T20568] ? ext4_mark_iloc_dirty+0x2c23/0x3e60 [ 524.847139][T20568] print_address_description+0x81/0x3b0 [ 524.852524][T20568] kasan_report+0x179/0x1c0 [ 524.856855][T20568] ? __ext4_journal_ensure_credits+0x470/0x470 [ 524.862848][T20568] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 524.868314][T20568] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 524.873789][T20568] __asan_report_load4_noabort+0x14/0x20 [ 524.879251][T20568] ext4_xattr_delete_inode+0xc67/0xc80 [ 524.884546][T20568] ? sb_end_intwrite+0x110/0x110 [ 524.889323][T20568] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 524.895225][T20568] ? __kasan_check_read+0x11/0x20 [ 524.900088][T20568] ext4_evict_inode+0x1095/0x1730 [ 524.904944][T20568] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 524.910674][T20568] ? __kasan_check_write+0x14/0x20 [ 524.915618][T20568] ? _raw_spin_lock+0xa4/0x1b0 [ 524.920216][T20568] ? _raw_spin_trylock_bh+0x190/0x190 [ 524.925424][T20568] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 524.931151][T20568] evict+0x2a3/0x6c0 [ 524.934884][T20568] iput+0x632/0x7e0 [ 524.938535][T20568] vfs_rmdir+0x271/0x3f0 [ 524.942696][T20568] do_rmdir+0x2cf/0x5c0 [ 524.946692][T20568] ? d_delete_notify+0xd0/0xd0 [ 524.951289][T20568] ? strncpy_from_user+0x18e/0x2d0 [ 524.956235][T20568] ? getname_flags+0x1fd/0x520 [ 524.960834][T20568] __x64_sys_unlinkat+0xdf/0xf0 [ 524.965522][T20568] do_syscall_64+0x34/0x70 [ 524.969775][T20568] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 524.9