last executing test programs: 3.828877131s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r2, &(0x7f00000003c0), 0xb) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) 3.773384569s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.355724333s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) set_tid_address(0x0) 3.301858672s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 3.192737629s ago: executing program 1: r0 = creat(&(0x7f0000003840)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x1f) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r3, 0xffffffffffffffff, 0x0) 3.049197351s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 3.004182438s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, r3+10000000}}, 0x0) tkill(r2, 0x1000000000016) 1.985996524s ago: executing program 1: ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x2, r1, 0x1ffff000, 0x0) 1.563540739s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.414419702s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.391072056s ago: executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0x7) setuid(r2) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 1.355610701s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000840)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000440), 0x3, 0x40010102, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000040), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32, @ANYBLOB], 0x0}, 0x90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)=""/138, &(0x7f00000000c0)=0x8a) 1.350385562s ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/81, 0x51}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 1.325093966s ago: executing program 2: creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="bc030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5], 0x3bc}}, 0x0) 1.302896369s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f0000000000)='B') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, &(0x7f0000000440)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x64000600) 1.274866263s ago: executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x5f4) rt_tgsigqueueinfo(0x0, r0, 0x14, &(0x7f0000000140)={0x0, 0xfffffeff, 0x3f}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000001c0)="eaacdce9ce6bd466d02312fca454523ec9a6d6002680720d78ab6ed1c515832544") ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000200)={0x1, "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"}) 1.266050595s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) symlinkat(&(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) 1.118467128s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002000)={{r2}, &(0x7f0000001f80), &(0x7f0000001fc0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.093098572s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000180)='fib_table_lookup\x00', r1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) 1.066462306s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.042838589s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000f96e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000400)=[{r1}], 0x1, &(0x7f0000000440)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 582.67167ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) 573.737352ms ago: executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 555.645134ms ago: executing program 0: creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="bc030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5], 0x3bc}}, 0x0) 537.984097ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x3, 0xffffffffffffffff) 437.485652ms ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1}, 0xc) 428.282234ms ago: executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000280)) 288.190126ms ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff9}]}) setitimer(0x0, 0x0, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000008c0)='sys_enter\x00'}, 0x10) kcmp(0x0, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 120.129281ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 0s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r3, &(0x7f00000004c0)={0xa0}, 0xa0) write$FUSE_OPEN(r3, &(0x7f0000000240)={0x20}, 0x20) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): ser memory! [ 188.538882][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.557779][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.565285][ T4909] device bridge_slave_0 entered promiscuous mode [ 188.572381][ T4909] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.579373][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.586884][ T4909] device bridge_slave_1 entered promiscuous mode [ 188.597967][ T1410] usb 3-1: USB disconnect, device number 11 [ 188.648113][ T4909] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.654960][ T4909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.662104][ T4909] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.668866][ T4909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.695450][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.703288][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.711123][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.730994][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.739267][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.746127][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.754205][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.762600][ T1254] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.769479][ T1254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.787352][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.795278][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.810462][ T4909] device veth0_vlan entered promiscuous mode [ 188.821224][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.830444][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.838445][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.845835][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.863480][ T4909] device veth1_macvtap entered promiscuous mode [ 188.872374][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.889756][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.899606][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.925526][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.941272][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.153044][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 189.174744][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.181678][ T4949] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.189114][ T4949] device bridge_slave_0 entered promiscuous mode [ 189.198258][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.205393][ T4949] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.215030][ T4949] device bridge_slave_1 entered promiscuous mode [ 189.251611][ T4963] tipc: Failed to remove local publication {66,1,1}/3393897171 [ 189.259814][ T4963] tipc: Failed to remove local publication {66,1,1}/3393897171 [ 189.270261][ T4949] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.277226][ T4949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.284307][ T4949] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.291235][ T4949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.318391][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.325764][ T1410] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.333055][ T1410] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.357721][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.366501][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.374776][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.381668][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.388980][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.397034][ T1410] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.403869][ T1410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.412117][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.419961][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.430415][ T4949] device veth0_vlan entered promiscuous mode [ 189.437375][ T2037] device bridge_slave_1 left promiscuous mode [ 189.443562][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.451258][ T2037] device bridge_slave_0 left promiscuous mode [ 189.458995][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.467540][ T2037] device veth1_macvtap left promiscuous mode [ 189.473406][ T2037] device veth0_vlan left promiscuous mode [ 189.558634][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.566520][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.573782][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.582654][ T4967] F2FS-fs (loop4): Wrong segment_count / block_count (64 > 16384) [ 189.588973][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.598099][ T4967] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 189.601882][ T4949] device veth1_macvtap entered promiscuous mode [ 189.608871][ T4967] F2FS-fs (loop4): Found nat_bits in checkpoint [ 189.619373][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.628517][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.654315][ T4967] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 189.661656][ T4967] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.693347][ T1794] attempt to access beyond end of device [ 189.693347][ T1794] loop4: rw=524288, want=45072, limit=40427 [ 189.704884][ T1794] attempt to access beyond end of device [ 189.704884][ T1794] loop4: rw=0, want=45072, limit=40427 [ 189.719009][ T1794] attempt to access beyond end of device [ 189.719009][ T1794] loop4: rw=2049, want=45112, limit=40427 [ 189.963752][ T4980] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.970619][ T4980] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.974820][ T4953] 9pnet: p9_fd_create_tcp (4953): problem connecting socket to 127.0.0.1 [ 189.978131][ T4980] device bridge_slave_0 entered promiscuous mode [ 189.992730][ T4980] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.000153][ T4980] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.008263][ T4980] device bridge_slave_1 entered promiscuous mode [ 190.058901][ T4980] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.065782][ T4980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.072886][ T4980] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.079654][ T4980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.117501][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.125160][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.132542][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.148242][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.156278][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.163144][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.171038][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.180222][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.187090][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.205656][ T4980] device veth0_vlan entered promiscuous mode [ 190.213735][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.221969][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.229727][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.237577][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.244773][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.253295][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.528647][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.550065][ T4980] device veth1_macvtap entered promiscuous mode [ 190.563746][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.579544][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.628094][ T2037] device bridge_slave_1 left promiscuous mode [ 190.634848][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.643145][ T2037] device bridge_slave_0 left promiscuous mode [ 190.651677][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.687505][ T2037] device bridge_slave_1 left promiscuous mode [ 191.693515][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.701610][ T2037] device bridge_slave_0 left promiscuous mode [ 191.707818][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.715755][ T2037] device veth1_macvtap left promiscuous mode [ 191.721824][ T2037] device veth0_vlan left promiscuous mode [ 191.740132][ T5042] overlayfs: failed to get inode (-116) [ 191.745733][ T5042] overlayfs: failed to get inode (-116) [ 191.799230][ T5039] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 193.023937][ T5059] tipc: Failed to remove local publication {66,1,1}/1183370414 [ 193.031854][ T5059] tipc: Failed to remove local publication {66,1,1}/1183370414 [ 194.285791][ T5107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.548170][ T24] kauditd_printk_skb: 37 callbacks suppressed [ 194.548186][ T24] audit: type=1326 audit(2000000055.300:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5118 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba240a8ea9 code=0x0 [ 194.649395][ T5128] mmap: syz-executor.0 (5128) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 195.336752][ T1410] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 195.380616][ T24] audit: type=1400 audit(2000000056.130:5339): avc: denied { map } for pid=5133 comm="syz-executor.0" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 195.606834][ T1410] usb 2-1: Using ep0 maxpacket: 16 [ 196.535608][ T5164] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 196.543600][ T5164] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 196.568287][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.646821][ T1410] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 196.655752][ T1410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.674379][ T1410] usb 2-1: Product: syz [ 196.682191][ T1410] usb 2-1: Manufacturer: syz [ 196.686624][ T1410] usb 2-1: SerialNumber: syz [ 196.691846][ T1410] usb 2-1: config 0 descriptor?? [ 196.737509][ T1410] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 196.748657][ T1410] usb 2-1: Detected FT232H [ 196.946801][ T1410] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 197.763276][ T1410] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 197.771737][ T1410] usb 2-1: USB disconnect, device number 6 [ 197.778528][ T1410] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 197.787835][ T1410] ftdi_sio 2-1:0.0: device disconnected [ 197.807526][ T5194] device pim6reg1 entered promiscuous mode [ 197.868546][ T24] audit: type=1326 audit(2000000058.620:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 197.892404][ T24] audit: type=1326 audit(2000000058.620:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 197.916263][ T24] audit: type=1326 audit(2000000058.620:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 197.940219][ T24] audit: type=1326 audit(2000000058.620:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 197.964616][ T24] audit: type=1326 audit(2000000058.620:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 197.988406][ T24] audit: type=1326 audit(2000000058.620:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 198.012612][ T24] audit: type=1326 audit(2000000058.620:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 198.036362][ T24] audit: type=1326 audit(2000000058.620:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 198.809889][ T5221] device pim6reg1 entered promiscuous mode [ 199.566938][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.573821][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.581244][ T5241] device bridge_slave_0 entered promiscuous mode [ 199.593505][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.600407][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.608082][ T5241] device bridge_slave_1 entered promiscuous mode [ 199.672535][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.679436][ T5241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.686511][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.693286][ T5241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.773441][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.781564][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.789443][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.858921][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.867525][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.875470][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.882330][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.890401][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.899138][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.907189][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.914041][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.921433][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.936204][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.955239][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.963397][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.973233][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 199.983695][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.000477][ T5241] device veth0_vlan entered promiscuous mode [ 200.011864][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.020121][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 200.028559][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 200.036057][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 200.048861][ T1411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 200.057108][ T1411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 200.069247][ T5241] device veth1_macvtap entered promiscuous mode [ 200.080458][ T1411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 200.088338][ T1411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 200.096391][ T1411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 200.115900][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 200.124715][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 200.159790][ T5259] device pim6reg1 entered promiscuous mode [ 200.277968][ T2037] device bridge_slave_1 left promiscuous mode [ 200.283997][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.291615][ T2037] device bridge_slave_0 left promiscuous mode [ 200.301368][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.309348][ T2037] device veth1_macvtap left promiscuous mode [ 200.315496][ T2037] device veth0_vlan left promiscuous mode [ 200.634500][ T373] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.680322][ T5266] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 200.688581][ T5266] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 201.026835][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.037918][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.047515][ T373] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 201.056406][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.066811][ T373] usb 5-1: config 0 descriptor?? [ 201.159690][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 201.159701][ T24] audit: type=1107 audit(2000000061.910:5352): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 201.219764][ T5281] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 201.227890][ T5281] EXT4-fs (loop2): 1 truncate cleaned up [ 201.233616][ T5281] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,journal_dev=0x0000000000000002,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue [ 201.566795][ T20] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 201.708283][ T373] uclogic 0003:5543:0522.0012: No inputs registered, leaving [ 201.725859][ T373] uclogic 0003:5543:0522.0012: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.4-1/input0 [ 201.908441][ T1410] usb 5-1: USB disconnect, device number 13 [ 201.936842][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 201.947858][ T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 201.957782][ T20] usb 3-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 201.966634][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.975017][ T20] usb 3-1: config 0 descriptor?? [ 202.219669][ T54] usb 3-1: USB disconnect, device number 12 [ 202.366778][ T20] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 202.418478][ T5311] syz-executor.4[5311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.418516][ T5311] syz-executor.4[5311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.606750][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 202.736900][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 202.748010][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 202.758933][ T20] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 202.766890][ T373] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 202.767723][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.783394][ T20] usb 2-1: config 0 descriptor?? [ 202.806828][ T5309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.268154][ T5309] udc-core: couldn't find an available UDC or it's busy [ 203.274950][ T5309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 203.287063][ T20] hid (null): report_id 0 is invalid [ 203.293759][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.301007][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.308206][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.315384][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.322606][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.329809][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.337006][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.344208][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.351422][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.358617][ T20] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 203.365813][ T20] hid-generic 0003:0158:0100.0013: report_id 0 is invalid [ 203.372748][ T20] hid-generic 0003:0158:0100.0013: item 0 1 1 8 parsing failed [ 203.380284][ T20] hid-generic: probe of 0003:0158:0100.0013 failed with error -22 [ 203.396838][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.407589][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.417072][ T373] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.425937][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.434262][ T373] usb 5-1: config 0 descriptor?? [ 203.488485][ T20] usb 2-1: USB disconnect, device number 7 [ 204.053191][ T5339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.542045][ T5343] fuse: Unknown parameter '0000000000000000000300000000000000000000003' [ 204.576923][ T373] uclogic 0003:256C:006D.0014: failed retrieving Huion firmware version: -71 [ 204.585626][ T373] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 204.592999][ T373] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 204.601020][ T373] usb 5-1: USB disconnect, device number 14 [ 204.619741][ T5349] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 205.168925][ T24] audit: type=1326 audit(2000000065.920:5353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.235191][ T24] audit: type=1326 audit(2000000065.920:5354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.329243][ T24] audit: type=1326 audit(2000000065.920:5355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.434265][ T24] audit: type=1326 audit(2000000065.920:5356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.459053][ T24] audit: type=1326 audit(2000000065.920:5357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.483291][ T24] audit: type=1326 audit(2000000065.920:5358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.507156][ T24] audit: type=1326 audit(2000000065.920:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.531188][ T24] audit: type=1326 audit(2000000065.920:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 205.555383][ T24] audit: type=1326 audit(2000000065.920:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5372 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 206.927959][ T24] kauditd_printk_skb: 330 callbacks suppressed [ 206.927971][ T24] audit: type=1400 audit(2000000067.680:5692): avc: denied { create } for pid=5448 comm="syz-executor.2" name="#53" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 206.957917][ T5455] input: syz1 as /devices/virtual/input/input26 [ 206.962810][ T24] audit: type=1400 audit(2000000067.680:5693): avc: denied { link } for pid=5448 comm="syz-executor.2" name="#53" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 206.987114][ T24] audit: type=1400 audit(2000000067.680:5694): avc: denied { rename } for pid=5448 comm="syz-executor.2" name="#54" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 207.148345][ T5472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 207.159987][ T5472] EXT4-fs (loop2): 1 orphan inode deleted [ 207.165590][ T5472] EXT4-fs (loop2): 1 truncate cleaned up [ 207.171114][ T5472] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota, [ 207.192392][ T5472] EXT4-fs error (device loop2): ext4_search_dir:1520: inode #12: block 7: comm syz-executor.2: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 207.211539][ T5472] EXT4-fs (loop2): Remounting filesystem read-only [ 207.367048][ T5485] loop1: p1 p4 [ 207.370401][ T5485] loop1: p1 size 8388608 extends beyond EOD, truncated [ 207.386845][ T5485] loop1: p4 start 4278190080 is beyond EOD, truncated [ 207.514436][ T24] audit: type=1326 audit(2000000068.260:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24e534ea9 code=0x7ffc0000 [ 207.538882][ T24] audit: type=1326 audit(2000000068.300:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24e534ea9 code=0x7ffc0000 [ 207.562779][ T24] audit: type=1326 audit(2000000068.300:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24e534ea9 code=0x7ffc0000 [ 207.588206][ T24] audit: type=1326 audit(2000000068.340:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24e534ea9 code=0x7ffc0000 [ 207.612191][ T24] audit: type=1326 audit(2000000068.340:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24e534ea9 code=0x7ffc0000 [ 207.636015][ T24] audit: type=1326 audit(2000000068.340:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24e534ea9 code=0x7ffc0000 [ 207.659913][ T24] audit: type=1326 audit(2000000068.370:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5507 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24e534ea9 code=0x7ffc0000 [ 207.727597][ T5514] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.739439][ T5514] EXT4-fs (loop1): 1 orphan inode deleted [ 207.745032][ T5514] EXT4-fs (loop1): 1 truncate cleaned up [ 207.750653][ T5514] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota, [ 207.792269][ T5514] EXT4-fs error (device loop1): ext4_search_dir:1520: inode #12: block 7: comm syz-executor.1: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 207.948173][ T5514] EXT4-fs (loop1): Remounting filesystem read-only [ 208.770078][ T5551] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 208.778081][ T5551] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 209.286759][ T54] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 209.916858][ T54] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 209.927933][ T54] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 209.941622][ T54] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 209.950945][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.976850][ T5563] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 210.028609][ T5587] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 210.037461][ T5587] ext4 filesystem being mounted at /root/syzkaller-testdir2016574513/syzkaller.aEwfzw/61/file0 supports timestamps until 2038 (0x7fffffff) [ 210.182825][ T5600] xt_ecn: cannot match TCP bits for non-tcp packets [ 210.512201][ T5612] EXT4-fs (loop1): Unrecognized mount option "fsuuid=67491ed9-b1ac-0be6-52eb-fd2fdc6" or missing value [ 210.657236][ T5563] udc-core: couldn't find an available UDC or it's busy [ 210.663987][ T5563] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 210.896811][ T54] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 210.904616][ T54] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input27 [ 210.915314][ T54] usb 5-1: USB disconnect, device number 15 [ 210.922149][ T5627] input: syz0 as /devices/virtual/input/input28 [ 210.928354][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 211.317767][ T5631] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 211.325359][ T5631] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 211.336031][ T5631] F2FS-fs (loop1): Found nat_bits in checkpoint [ 211.368670][ T5631] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 211.375571][ T5631] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 211.393202][ T5631] overlayfs: failed to resolve './file1': -2 [ 212.060785][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 212.060800][ T24] audit: type=1326 audit(2000000072.810:5773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.091393][ T24] audit: type=1326 audit(2000000072.810:5774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.115524][ T24] audit: type=1326 audit(2000000072.810:5775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.139655][ T24] audit: type=1326 audit(2000000072.820:5776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.163805][ T24] audit: type=1326 audit(2000000072.820:5777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.179693][ T54] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 212.195429][ T24] audit: type=1326 audit(2000000072.820:5778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.228172][ T24] audit: type=1326 audit(2000000072.850:5779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.252213][ T24] audit: type=1326 audit(2000000072.850:5780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9511108627 code=0x7ffc0000 [ 212.276801][ T24] audit: type=1326 audit(2000000072.850:5781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95110ce309 code=0x7ffc0000 [ 212.300748][ T24] audit: type=1326 audit(2000000072.850:5782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5677 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f951110aea9 code=0x7ffc0000 [ 212.446824][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 212.576812][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 212.586396][ T54] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 212.595878][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 212.605440][ T54] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 212.706843][ T54] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 212.715725][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 212.723541][ T54] usb 3-1: SerialNumber: syz [ 212.777275][ T54] usb-storage 3-1:1.0: USB Mass Storage device detected [ 212.784829][ T54] usb-storage 3-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 212.792479][ T54] scsi host1: usb-storage 3-1:1.0 [ 212.978571][ T54] usb 3-1: USB disconnect, device number 13 [ 213.127316][ T5695] bridge: RTM_NEWNEIGH with invalid ether address [ 213.150954][ T5699] xt_ecn: cannot match TCP bits for non-tcp packets [ 213.168978][ T5701] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 213.506748][ T1410] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 213.515324][ T5713] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.548885][ T5713] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.555733][ T5713] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 64: padding at end of block bitmap is not set [ 213.570422][ T5713] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5643: Corrupt filesystem [ 213.579903][ T5713] EXT4-fs (loop2): 1 orphan inode deleted [ 213.585682][ T5713] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 213.596911][ T5713] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor.2: deleted inode referenced: 16 [ 213.609351][ T5713] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor.2: deleted inode referenced: 16 [ 213.621307][ T5713] overlayfs: failed to resolve './file2': -117 [ 213.866797][ T1410] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.876828][ T1410] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 213.956862][ T1410] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 213.965813][ T1410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 213.973540][ T1410] usb 5-1: SerialNumber: syz [ 213.986785][ T699] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 214.272746][ T5726] bridge: RTM_NEWNEIGH with invalid ether address [ 214.406856][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.417565][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.427096][ T699] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 214.435909][ T699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.444264][ T699] usb 3-1: config 0 descriptor?? [ 214.590479][ T1410] usb 5-1: 0:2 : does not exist [ 214.595469][ T1410] usb 5-1: unit 5 not found! [ 214.635119][ T5743] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 214.723998][ T1410] usb 5-1: USB disconnect, device number 16 [ 215.193579][ T699] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 215.200442][ T699] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 215.207215][ T699] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 215.213921][ T699] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 215.220683][ T699] lg-g15 0003:046D:C222.0015: unknown main item tag 0x0 [ 215.227478][ T699] lg-g15 0003:046D:C222.0015: item fetching failed at offset 8/11 [ 215.235258][ T699] lg-g15: probe of 0003:046D:C222.0015 failed with error -22 [ 215.350085][ T373] usb 3-1: USB disconnect, device number 14 [ 215.387359][ T5753] exfat: Deprecated parameter 'utf8' [ 215.394639][ T5753] exfat: Bad value for 'umask' [ 215.489001][ T5755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65525 sclass=netlink_route_socket pid=5755 comm=syz-executor.1 [ 215.557342][ T5753] FAT-fs (loop1): Unrecognized mount option "00000270" or missing value [ 215.727370][ T5764] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 216.373290][ T373] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 216.956805][ T373] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.966764][ T373] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.046843][ T373] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 217.066484][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 217.091580][ T373] usb 2-1: SerialNumber: syz [ 217.360647][ T5825] syz-executor.2[5825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.360687][ T5825] syz-executor.2[5825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.638257][ T5829] EXT4-fs (loop4): Unrecognized mount option "fsuuid=67491ed9-b1ac-0be6-52eb-fd2fdc6" or missing value [ 217.782162][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.789307][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.796588][ T5833] device bridge_slave_0 entered promiscuous mode [ 217.804007][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.810928][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.821932][ T5833] device bridge_slave_1 entered promiscuous mode [ 217.828845][ T373] usb 2-1: 0:2 : does not exist [ 217.833585][ T373] usb 2-1: unit 5 not found! [ 217.851339][ T373] usb 2-1: USB disconnect, device number 8 [ 217.893056][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.899951][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.907037][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.913817][ T5833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.945446][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.953990][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.961349][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.968685][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.977633][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.985664][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.992507][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.012707][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.023611][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.030475][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.112018][ T5850] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 218.281061][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.289931][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.304184][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.315576][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.324933][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 218.332554][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 218.341098][ T5833] device veth0_vlan entered promiscuous mode [ 218.353921][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.365484][ T5833] device veth1_macvtap entered promiscuous mode [ 218.376882][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.390283][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.556722][ T3141] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 218.996849][ T3141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.013433][ T3141] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.034761][ T3141] usb 5-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 219.054483][ T3141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.076402][ T3141] usb 5-1: config 0 descriptor?? [ 219.167395][ T110] device bridge_slave_1 left promiscuous mode [ 219.174584][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.189798][ T110] device bridge_slave_0 left promiscuous mode [ 219.202340][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.219639][ T110] device veth1_macvtap left promiscuous mode [ 219.230959][ T110] device veth0_vlan left promiscuous mode [ 219.486868][ T3141] usbhid 5-1:0.0: can't add hid device: -71 [ 219.492859][ T3141] usbhid: probe of 5-1:0.0 failed with error -71 [ 219.512565][ T3141] usb 5-1: USB disconnect, device number 17 [ 219.682809][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 219.682823][ T24] audit: type=1400 audit(2000000080.430:5808): avc: denied { ioctl } for pid=5887 comm="syz-executor.0" path="socket:[38683]" dev="sockfs" ino=38683 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.044152][ T24] audit: type=1326 audit(2000000080.790:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5913 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb24e534ea9 code=0x0 [ 220.837028][ T5928] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.026870][ T5928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.071276][ T24] audit: type=1400 audit(2000000081.810:5810): avc: denied { shutdown } for pid=5939 comm="syz-executor.0" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.850732][ T5833] attempt to access beyond end of device [ 221.850732][ T5833] loop3: rw=2049, want=45104, limit=40427 [ 221.892014][ T5958] syz-executor.2[5958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.892069][ T5958] syz-executor.2[5958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.317803][ T5970] input: syz0 as /devices/virtual/input/input29 [ 222.339909][ T2037] Bluetooth: hci0: Frame reassembly failed (-84) [ 223.881279][ T24] audit: type=1400 audit(2000000084.630:5811): avc: denied { shutdown } for pid=5996 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.976774][ T373] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 223.987814][ T6004] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.173673][ T6015] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1768846636 (3537693272 ns) > initial count (1927074542 ns). Using initial count to start timer. [ 224.416793][ T1411] Bluetooth: hci0: command 0x1003 tx timeout [ 224.417005][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.422785][ T3489] Bluetooth: hci0: sending frame failed (-49) [ 224.439430][ T373] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.449039][ T373] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 224.457984][ T373] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.466704][ T373] usb 5-1: config 0 descriptor?? [ 224.930667][ T373] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0 [ 224.937638][ T373] lg-g15 0003:046D:C222.0016: unknown main item tag 0x0 [ 224.946829][ T373] lg-g15 0003:046D:C222.0016: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 225.036776][ T379] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 225.180492][ T373] usb 5-1: USB disconnect, device number 18 [ 225.497052][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.508610][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.518467][ T379] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 225.527510][ T379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.563957][ T379] usb 3-1: config 0 descriptor?? [ 226.198357][ T379] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 226.205246][ T379] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 226.212177][ T379] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 226.219080][ T379] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 226.225824][ T379] lg-g15 0003:046D:C222.0017: unknown main item tag 0x0 [ 226.232621][ T379] lg-g15 0003:046D:C222.0017: item fetching failed at offset 8/11 [ 226.240429][ T379] lg-g15: probe of 0003:046D:C222.0017 failed with error -22 [ 226.438241][ T1410] usb 3-1: USB disconnect, device number 15 [ 226.496741][ T379] Bluetooth: hci0: command 0x1001 tx timeout [ 226.502861][ T3489] Bluetooth: hci0: sending frame failed (-49) [ 226.690468][ T24] audit: type=1400 audit(2000000087.440:5812): avc: denied { getattr } for pid=6048 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 226.690543][ T6049] overlayfs: statfs failed on './file0' [ 226.880609][ T6054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1768846636 (3537693272 ns) > initial count (1927074542 ns). Using initial count to start timer. [ 227.005440][ T24] audit: type=1326 audit(2000000087.740:5813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 227.029440][ T24] audit: type=1326 audit(2000000087.740:5814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 227.079008][ T24] audit: type=1326 audit(2000000087.740:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 227.103656][ T24] audit: type=1326 audit(2000000087.740:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 227.128356][ T24] audit: type=1326 audit(2000000087.740:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 227.153533][ T24] audit: type=1326 audit(2000000087.740:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a24c66627 code=0x7ffc0000 [ 227.188704][ T24] audit: type=1326 audit(2000000087.740:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1a24c2c309 code=0x7ffc0000 [ 227.221500][ T24] audit: type=1326 audit(2000000087.740:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f1a24c68ea9 code=0x7ffc0000 [ 227.253921][ T24] audit: type=1326 audit(2000000087.750:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a24c66627 code=0x7ffc0000 [ 228.213610][ T6081] EXT4-fs (loop2): orphan cleanup on readonly fs [ 228.237377][ T6081] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 97: padding at end of block bitmap is not set [ 228.253241][ T6081] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2915: inode #15: comm syz-executor.2: corrupted xattr block 19 [ 228.265778][ T6081] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 228.274814][ T6081] EXT4-fs (loop2): 1 orphan inode deleted [ 228.280899][ T6081] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,,errors=continue [ 228.318653][ T6090] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1768846636 (3537693272 ns) > initial count (1927074542 ns). Using initial count to start timer. [ 228.477492][ T6093] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 228.485101][ T6093] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 228.495680][ T6093] F2FS-fs (loop4): Found nat_bits in checkpoint [ 228.526902][ T6093] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 228.533755][ T6093] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 228.551595][ T6093] overlayfs: failed to resolve './file1': -2 [ 228.576727][ T379] Bluetooth: hci0: command 0x1009 tx timeout [ 228.967821][ T5241] EXT4-fs error (device loop2): ext4_readdir:260: inode #12: block 13: comm syz-executor.2: path /root/syzkaller-testdir3192448237/syzkaller.jQT7T1/72/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=4096 fake=0 [ 228.993327][ T699] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.994691][ T5241] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 229.012669][ T5241] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor.2: deleted inode referenced: 15 [ 229.185520][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.192585][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.200093][ T6111] device bridge_slave_0 entered promiscuous mode [ 229.208716][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.215536][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.222838][ T6111] device bridge_slave_1 entered promiscuous mode [ 229.256732][ T699] usb 5-1: Using ep0 maxpacket: 32 [ 229.264161][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.271007][ T6111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.278094][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.284874][ T6111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.305478][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.312820][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.319967][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.329094][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.337525][ T1410] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.344352][ T1410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.362293][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.370440][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.377385][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.384480][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.392003][ T699] usb 5-1: config 1 has an invalid interface number: 6 but max is 0 [ 229.399998][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.408049][ T699] usb 5-1: config 1 has no interface number 0 [ 229.413937][ T699] usb 5-1: config 1 interface 6 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 229.423655][ T699] usb 5-1: config 1 interface 6 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 229.433015][ T6111] device veth0_vlan entered promiscuous mode [ 229.441292][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 229.449637][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 229.457457][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 229.464602][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 229.477005][ T6111] device veth1_macvtap entered promiscuous mode [ 229.487280][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 229.495607][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.504194][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 229.597006][ T699] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 229.605918][ T699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.613680][ T699] usb 5-1: Product: syz [ 229.618061][ T699] usb 5-1: Manufacturer: syz [ 229.623065][ T699] usb 5-1: SerialNumber: syz [ 229.630436][ T6121] syz-executor.2[6121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.630478][ T6121] syz-executor.2[6121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.643005][ T2037] device bridge_slave_1 left promiscuous mode [ 229.643220][ T6121] syz-executor.2[6121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.654831][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.667000][ T6121] syz-executor.2[6121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.679054][ T2037] device bridge_slave_0 left promiscuous mode [ 229.696554][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.704687][ T2037] device veth1_macvtap left promiscuous mode [ 229.710726][ T2037] device veth0_vlan left promiscuous mode [ 229.787013][ T6125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1768846636 (3537693272 ns) > initial count (1927074542 ns). Using initial count to start timer. [ 229.887473][ T699] usblp 5-1:1.6: usblp0: USB Unidirectional printer dev 19 if 6 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 230.118661][ T354] usb 5-1: USB disconnect, device number 19 [ 230.134964][ T354] usblp0: removed [ 230.774811][ T6137] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.785712][ T6137] syz-executor.2[6137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.042959][ T6141] syz-executor.2[6141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.054597][ T6141] syz-executor.2[6141] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 232.976724][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 232.976802][ T24] audit: type=1400 audit(2000000093.720:5862): avc: denied { read write } for pid=6191 comm="syz-executor.2" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.151936][ T24] audit: type=1400 audit(2000000093.720:5863): avc: denied { open } for pid=6191 comm="syz-executor.2" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 233.290039][ T6216] tap0: tun_chr_ioctl cmd 1074025673 [ 233.476768][ T354] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 233.566810][ T699] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 233.806838][ T699] usb 4-1: Using ep0 maxpacket: 8 [ 233.896822][ T354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.907647][ T354] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.916774][ T373] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 233.920411][ T354] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.936793][ T354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.945082][ T354] usb 5-1: config 0 descriptor?? [ 234.126830][ T699] usb 4-1: New USB device found, idVendor=0403, idProduct=d9aa, bcdDevice=d7.15 [ 234.135743][ T699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.143560][ T699] usb 4-1: Product: syz [ 234.147526][ T699] usb 4-1: Manufacturer: syz [ 234.151886][ T699] usb 4-1: SerialNumber: syz [ 234.156966][ T699] usb 4-1: config 0 descriptor?? [ 234.166766][ T373] usb 3-1: Using ep0 maxpacket: 8 [ 234.197688][ T699] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 234.205302][ T699] usb 4-1: Detected FT-X [ 234.286893][ T373] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 234.295758][ T373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.304169][ T373] usb 3-1: config 0 descriptor?? [ 234.406800][ T699] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 234.426829][ T699] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 234.446829][ T699] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 234.453679][ T699] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 234.462121][ T699] usb 4-1: USB disconnect, device number 12 [ 234.468481][ T699] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 234.476842][ T354] usbhid 5-1:0.0: can't add hid device: -71 [ 234.477736][ T699] ftdi_sio 4-1:0.0: device disconnected [ 234.483508][ T354] usbhid: probe of 5-1:0.0 failed with error -71 [ 234.495774][ T354] usb 5-1: USB disconnect, device number 20 [ 234.968212][ T6224] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000009,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue [ 235.006825][ T373] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 235.026784][ T373] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 235.036570][ T373] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 235.076888][ T373] asix: probe of 3-1:0.0 failed with error -71 [ 235.083746][ T373] usb 3-1: USB disconnect, device number 16 [ 235.706720][ T1410] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 236.044743][ T6274] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 236.086814][ T1410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.099092][ T1410] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.112421][ T1410] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.121349][ T1410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.129768][ T1410] usb 5-1: config 0 descriptor?? [ 236.696857][ T1410] usbhid 5-1:0.0: can't add hid device: -71 [ 236.702692][ T1410] usbhid: probe of 5-1:0.0 failed with error -71 [ 236.709534][ T1410] usb 5-1: USB disconnect, device number 21 [ 236.826790][ T699] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 237.827506][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.840270][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.849858][ T699] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 237.859749][ T699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.970441][ T699] usb 3-1: config 0 descriptor?? [ 237.980396][ T6302] syz-executor.4[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.980458][ T6302] syz-executor.4[6302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 238.019400][ T6306] SELinux: security_context_str_to_sid(s) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 238.516958][ T699] hid (null): bogus close delimiter [ 238.736829][ T699] usb 3-1: language id specifier not provided by device, defaulting to English [ 239.079962][ T6316] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.116185][ T6316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 239.179216][ T5833] attempt to access beyond end of device [ 239.179216][ T5833] loop3: rw=2049, want=45104, limit=40427 [ 239.216815][ T699] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 239.451517][ T354] usb 3-1: USB disconnect, device number 17 [ 240.246764][ T699] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 240.324307][ T24] audit: type=1400 audit(2000000101.070:5864): avc: denied { mounton } for pid=6365 comm="syz-executor.0" path="/root/syzkaller-testdir2513249440/syzkaller.GQGIn7/480/file0" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 240.324592][ T6366] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 240.362457][ T6366] FAT-fs (loop1): unable to read boot sector [ 240.486875][ T699] usb 3-1: Using ep0 maxpacket: 8 [ 240.826809][ T699] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 240.835648][ T699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.844232][ T699] usb 3-1: config 0 descriptor?? [ 241.360667][ T6400] device pim6reg1 entered promiscuous mode [ 241.546808][ T699] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 241.566817][ T699] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 241.577288][ T699] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 241.601687][ T354] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 241.616861][ T699] asix: probe of 3-1:0.0 failed with error -71 [ 241.623740][ T699] usb 3-1: USB disconnect, device number 18 [ 241.727489][ T24] audit: type=1400 audit(2000000102.480:5865): avc: denied { getopt } for pid=6415 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 242.096801][ T354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.107676][ T354] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.117314][ T354] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 242.126165][ T354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.141217][ T354] usb 5-1: config 0 descriptor?? [ 242.207668][ T6433] syz-executor.2[6433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.207708][ T6433] syz-executor.2[6433] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.996993][ T354] hid (null): bogus close delimiter [ 243.806874][ T354] usb 5-1: string descriptor 0 read error: -71 [ 243.882936][ T354] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 243.891810][ T354] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 243.900051][ T354] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 243.908327][ T354] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 243.915795][ T354] uclogic: probe of 0003:256C:006D.0019 failed with error -71 [ 243.918005][ T6485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.924138][ T354] usb 5-1: USB disconnect, device number 22 [ 244.028594][ T24] audit: type=1400 audit(2000000104.770:5866): avc: denied { mount } for pid=6482 comm="syz-executor.3" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 244.471148][ T6490] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 244.485208][ T6490] FAT-fs (loop2): Filesystem has been set read-only [ 244.497932][ T6490] attempt to access beyond end of device [ 244.497932][ T6490] loop2: rw=524288, want=2073, limit=128 [ 244.520520][ T6490] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 244.528368][ T6490] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 244.536209][ T6490] attempt to access beyond end of device [ 244.536209][ T6490] loop2: rw=0, want=2073, limit=128 [ 244.702131][ T24] audit: type=1400 audit(2000000105.450:5867): avc: denied { unmount } for pid=5833 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 245.026750][ T3141] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.286199][ T6533] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.686835][ T3141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.698020][ T3141] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.698049][ T3141] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.698062][ T3141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.698724][ T3141] usb 4-1: config 0 descriptor?? [ 245.747291][ T6547] syz-executor.4[6547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.747423][ T6547] syz-executor.4[6547] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.247036][ T3141] hid (null): bogus close delimiter [ 246.670709][ T6557] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.678618][ T6557] FAT-fs (loop4): Filesystem has been set read-only [ 246.685252][ T6557] attempt to access beyond end of device [ 246.685252][ T6557] loop4: rw=524288, want=2073, limit=128 [ 246.696531][ T6557] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.704320][ T6557] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 246.712109][ T6557] attempt to access beyond end of device [ 246.712109][ T6557] loop4: rw=0, want=2073, limit=128 [ 247.027096][ T3141] usb 4-1: string descriptor 0 read error: -71 [ 247.046858][ T3141] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #200: -71 [ 247.055509][ T3141] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 247.063418][ T3141] uclogic 0003:256C:006D.001A: failed probing pen v2 parameters: -71 [ 247.071319][ T3141] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 247.078652][ T3141] uclogic: probe of 0003:256C:006D.001A failed with error -71 [ 247.087266][ T3141] usb 4-1: USB disconnect, device number 13 [ 247.790355][ T6590] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 247.798274][ T6590] FAT-fs (loop2): Filesystem has been set read-only [ 247.804742][ T6590] attempt to access beyond end of device [ 247.804742][ T6590] loop2: rw=524288, want=2073, limit=128 [ 247.815749][ T6590] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 247.823441][ T6590] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 247.831203][ T6590] attempt to access beyond end of device [ 247.831203][ T6590] loop2: rw=0, want=2073, limit=128 [ 249.196733][ T699] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.296583][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.304209][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.311818][ T6619] device bridge_slave_0 entered promiscuous mode [ 249.322544][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.329555][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.339700][ T6619] device bridge_slave_1 entered promiscuous mode [ 249.416609][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.423488][ T6619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.430607][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.437466][ T6619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.461462][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.469628][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.487110][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.495781][ T6642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6642 comm=syz-executor.0 [ 249.504581][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.532510][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.541393][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.548255][ T3141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.555673][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.564783][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.571641][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.580192][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.591382][ T699] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.601361][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.608970][ T699] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 249.618266][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.625906][ T699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.641284][ T6619] device veth0_vlan entered promiscuous mode [ 249.647896][ T699] usb 3-1: config 0 descriptor?? [ 249.659156][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 249.667485][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.675359][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.682655][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.696885][ T6619] device veth1_macvtap entered promiscuous mode [ 249.707530][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.716417][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 249.732587][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.899271][ T6665] 9pnet: Insufficient options for proto=fd [ 250.026828][ T354] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 250.385653][ T699] hid (null): bogus close delimiter [ 250.556840][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.567659][ T354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.577344][ T354] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 250.586285][ T354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.594765][ T354] usb 2-1: config 0 descriptor?? [ 250.837107][ T699] usb 3-1: string descriptor 0 read error: -71 [ 250.856961][ T699] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71 [ 250.869006][ T699] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 250.887677][ T699] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71 [ 250.895732][ T699] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 250.918619][ T699] uclogic: probe of 0003:256C:006D.001B failed with error -71 [ 250.923564][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.933409][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.937743][ T699] usb 3-1: USB disconnect, device number 19 [ 250.940798][ T6697] device bridge_slave_0 entered promiscuous mode [ 250.957860][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.966434][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.987842][ T6697] device bridge_slave_1 entered promiscuous mode [ 251.108919][ T354] wacom 0003:056A:005E.001C: hidraw0: USB HID v0.00 Device [HID 056a:005e] on usb-dummy_hcd.1-1/input0 [ 251.118045][ T6697] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.126648][ T6697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.133741][ T6697] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.140532][ T6697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.175825][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.183962][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.193035][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.216883][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.225063][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.231931][ T3141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.239538][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.256793][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.263708][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.287188][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.295259][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.310740][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.311272][ T354] usb 2-1: USB disconnect, device number 9 [ 251.323523][ T6697] device veth0_vlan entered promiscuous mode [ 251.332037][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.340514][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.348512][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.372024][ T6697] device veth1_macvtap entered promiscuous mode [ 251.388214][ T6709] syz-executor.2[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.388274][ T6709] syz-executor.2[6709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.401142][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 251.430061][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 251.444259][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 251.453055][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.462965][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.533616][ T24] audit: type=1400 audit(2000000112.280:5868): avc: denied { mounton } for pid=6712 comm="syz-executor.3" path="/root/syzkaller-testdir3921724127/syzkaller.Eb0XGY/0/bus/file0" dev="loop3" ino=1048711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 251.562380][ T6713] 9pnet: Insufficient options for proto=fd [ 251.569097][ T110] device bridge_slave_1 left promiscuous mode [ 251.576348][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.585895][ T6713] incfs: Can't find or create .incomplete dir in ./file0 [ 251.594198][ T110] device bridge_slave_0 left promiscuous mode [ 251.600569][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.608120][ T6713] incfs: mount failed -28 [ 251.613191][ T110] device veth1_macvtap left promiscuous mode [ 251.621772][ T110] device veth0_vlan left promiscuous mode [ 252.232164][ T24] audit: type=1326 audit(2000000112.980:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6735 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3159627ea9 code=0x0 [ 252.367972][ T6744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 252.379572][ T6744] EXT4-fs (loop2): 1 truncate cleaned up [ 252.385133][ T6744] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug_want_extra_isize=0x000000000000002e,,errors=continue [ 252.493314][ T6748] syz-executor.2[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.493364][ T6748] syz-executor.2[6748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.057366][ T6769] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.059966][ T6750] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 253.085786][ T6750] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 253.096033][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.109485][ T6750] F2FS-fs (loop4): Found nat_bits in checkpoint [ 253.154557][ T6750] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 253.158988][ T6775] 9pnet: Insufficient options for proto=fd [ 253.161603][ T6750] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 253.901076][ T6784] device pim6reg1 entered promiscuous mode [ 254.070328][ T6803] syz-executor.0[6803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.070388][ T6803] syz-executor.0[6803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.306845][ T379] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.560646][ T24] audit: type=1400 audit(2000000116.310:5870): avc: denied { ioctl } for pid=6855 comm="syz-executor.1" path="socket:[42651]" dev="sockfs" ino=42651 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.686949][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.701557][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.711621][ T379] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 255.720772][ T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.739005][ T379] usb 5-1: config 0 descriptor?? [ 255.826752][ T354] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 255.891990][ T6875] 9pnet: Insufficient options for proto=fd [ 255.900764][ T6875] incfs: Can't find or create .incomplete dir in ./file0 [ 255.908332][ T6875] incfs: mount failed -28 [ 256.069337][ T6884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 256.075984][ T6884] EXT4-fs error (device loop3): ext4_find_extent:928: inode #4: comm syz-executor.3: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 256.093590][ T6884] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 256.103186][ T6884] EXT4-fs warning (device loop3): ext4_enable_quotas:6455: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 256.117826][ T6884] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 256.124581][ T6884] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 256.207023][ T379] hid (null): bogus close delimiter [ 256.266804][ T354] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.557532][ T354] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.567263][ T354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.575382][ T354] usb 3-1: Product: syz [ 256.580785][ T354] usb 3-1: Manufacturer: syz [ 256.585490][ T354] usb 3-1: SerialNumber: syz [ 256.902296][ T24] audit: type=1400 audit(2000000117.600:5871): avc: denied { read write } for pid=349 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.927647][ T24] audit: type=1400 audit(2000000117.600:5872): avc: denied { open } for pid=349 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.951156][ T379] usb 5-1: string descriptor 0 read error: -71 [ 256.957317][ T24] audit: type=1400 audit(2000000117.600:5873): avc: denied { ioctl } for pid=349 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=1022 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 256.982193][ T379] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71 [ 256.990932][ T379] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 256.998912][ T379] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71 [ 257.007840][ T379] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 257.015232][ T379] uclogic: probe of 0003:256C:006D.001D failed with error -71 [ 257.026488][ T6908] cgroup: none used incorrectly [ 257.027337][ T379] usb 5-1: USB disconnect, device number 23 [ 257.755005][ T6929] 9pnet: Insufficient options for proto=fd [ 257.763634][ T6929] incfs: Can't find or create .incomplete dir in ./file0 [ 257.771392][ T6929] incfs: mount failed -28 [ 258.897167][ T24] audit: type=1400 audit(2000000119.180:5874): avc: denied { create } for pid=6951 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 258.954902][ T354] cdc_ncm 3-1:1.0: bind() failure [ 258.987255][ T354] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 259.027712][ T354] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 259.035243][ T354] usb 3-1: USB disconnect, device number 20 [ 259.088379][ T24] audit: type=1326 audit(2000000119.840:5875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6988 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba240a8ea9 code=0x0 [ 259.259817][ T15] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 259.324231][ T6997] EXT4-fs (loop4): orphan cleanup on readonly fs [ 259.336239][ T6997] EXT4-fs error (device loop4): ext4_find_extent:928: inode #4: comm syz-executor.4: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 259.364359][ T6997] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 259.374311][ T6997] EXT4-fs warning (device loop4): ext4_enable_quotas:6455: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 259.389098][ T6997] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 259.395692][ T6997] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 259.881473][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.892315][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.901960][ T15] usb 4-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 259.910937][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.927242][ T15] usb 4-1: config 0 descriptor?? [ 260.055019][ T24] audit: type=1400 audit(2000000120.800:5876): avc: denied { mount } for pid=7017 comm="syz-executor.1" name="/" dev="configfs" ino=12731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 260.081176][ T24] audit: type=1400 audit(2000000120.800:5877): avc: denied { read } for pid=7017 comm="syz-executor.1" name="/" dev="configfs" ino=12731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.103636][ T24] audit: type=1400 audit(2000000120.800:5878): avc: denied { open } for pid=7017 comm="syz-executor.1" path="/root/syzkaller-testdir4039288577/syzkaller.sEk1sC/37/file0" dev="configfs" ino=12731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 260.135793][ T24] audit: type=1400 audit(2000000120.840:5879): avc: denied { unmount } for pid=6619 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 260.317896][ T7053] EXT4-fs (loop0): Test dummy encryption mode enabled [ 260.324587][ T7053] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 260.333825][ T7053] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz-executor.0: iget: bogus i_mode (0) [ 260.345673][ T7053] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz-executor.0: couldn't read orphan inode 17 (err -117) [ 260.358430][ T7053] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 260.385310][ T7053] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz-executor.0: bg 0: block 7: invalid block bitmap [ 260.406750][ T20] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 260.414837][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.439808][ T349] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 260.452927][ T15] wacom 0003:056A:005E.001E: hidraw0: USB HID v0.00 Device [HID 056a:005e] on usb-dummy_hcd.3-1/input0 [ 260.465157][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.489909][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.514419][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.538628][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.563039][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.587217][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.611395][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.635464][ T349] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir2513249440/syzkaller.GQGIn7/557/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 260.664822][ T354] usb 4-1: USB disconnect, device number 14 [ 260.801689][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.808720][ T7074] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.815955][ T7074] device bridge_slave_0 entered promiscuous mode [ 260.822830][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.829953][ T7074] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.837260][ T7074] device bridge_slave_1 entered promiscuous mode [ 260.876920][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.882978][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.888091][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.894541][ T7074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.904448][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 260.911229][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.920054][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.926831][ T7074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.935462][ T20] usb 5-1: config 0 descriptor?? [ 260.961901][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 260.971758][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.063704][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.081924][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.089920][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.096768][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.103985][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.111948][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.118777][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.213132][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.271672][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.414954][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.436295][ T7074] device veth0_vlan entered promiscuous mode [ 261.445187][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.453489][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.460754][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.470192][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.477329][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.484494][ T7081] device bridge_slave_0 entered promiscuous mode [ 261.491321][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.498233][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.505396][ T7081] device bridge_slave_1 entered promiscuous mode [ 261.520347][ T7074] device veth1_macvtap entered promiscuous mode [ 261.529406][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.549496][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.561606][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.597834][ T2038] device bridge_slave_1 left promiscuous mode [ 261.603900][ T2038] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.612209][ T2038] device bridge_slave_0 left promiscuous mode [ 261.618335][ T2038] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.626517][ T2038] device veth1_macvtap left promiscuous mode [ 261.634837][ T2038] device veth0_vlan left promiscuous mode [ 261.657950][ T7095] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 261.726974][ T354] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 261.748955][ T7101] device pim6reg1 entered promiscuous mode [ 261.757702][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.764549][ T7081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.771680][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.778444][ T7081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.786916][ T3141] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.794004][ T3141] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.817010][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.824481][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.831962][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.840999][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.857026][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.863898][ T3141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.915182][ T7108] device ip6tnl0 entered promiscuous mode [ 261.920816][ T7108] device vlan2 entered promiscuous mode [ 261.926962][ T7108] device ip6tnl0 left promiscuous mode [ 261.939550][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.948174][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.956157][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.963019][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.963108][ T20] usb 5-1: string descriptor 0 read error: -71 [ 261.973132][ T7110] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.995310][ T354] usb 4-1: Using ep0 maxpacket: 16 [ 262.001251][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.009151][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.016987][ T20] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 262.025663][ T20] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 262.033867][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.042381][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.049933][ T20] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 262.058148][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.066224][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.074119][ T20] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 262.081534][ T20] uclogic: probe of 0003:256C:006D.001F failed with error -71 [ 262.089036][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.097864][ T20] usb 5-1: USB disconnect, device number 24 [ 262.104529][ T1410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.113078][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.120506][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.127915][ T7081] device veth0_vlan entered promiscuous mode [ 262.150000][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.158348][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.168891][ T7081] device veth1_macvtap entered promiscuous mode [ 262.179393][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.187675][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.197110][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.205869][ T2038] tipc: Left network mode [ 262.211380][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.219852][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.296825][ T354] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 262.305728][ T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.313736][ T354] usb 4-1: Product: syz [ 262.317795][ T354] usb 4-1: Manufacturer: syz [ 262.322134][ T354] usb 4-1: SerialNumber: syz [ 262.329027][ T354] usb 4-1: config 0 descriptor?? [ 262.357768][ T7118] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_APPEND" or missing value [ 262.607728][ T354] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 262.615048][ T354] usb 4-1: USB disconnect, device number 15 [ 262.658337][ T2038] device bridge_slave_1 left promiscuous mode [ 262.666144][ T2038] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.678797][ T2038] device bridge_slave_0 left promiscuous mode [ 262.684791][ T2038] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.116721][ T20] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 263.167540][ T7150] EXT4-fs (loop3): Unrecognized mount option "mask=MAY_APPEND" or missing value [ 263.226740][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 263.486829][ T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.497106][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.596775][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.607887][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.617727][ T25] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.627074][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.635792][ T25] usb 2-1: config 0 descriptor?? [ 263.666973][ T20] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.675918][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.683723][ T20] usb 5-1: Product: syz [ 263.688352][ T20] usb 5-1: Manufacturer: syz [ 263.692791][ T20] usb 5-1: SerialNumber: syz [ 263.747224][ T20] usb 5-1: selecting invalid altsetting 1 [ 263.748576][ T7165] syz-executor.3[7165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.752903][ T7165] syz-executor.3[7165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.767414][ T7165] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program [ 263.907672][ T7171] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.919015][ T7171] EXT4-fs (loop2): 1 truncate cleaned up [ 263.924455][ T7171] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nodiscard,stripe=0x0000000000000b5c,,errors=continue [ 263.941826][ T24] kauditd_printk_skb: 6 callbacks suppressed [ 263.941842][ T24] audit: type=1400 audit(2000000124.700:5886): avc: denied { mounton } for pid=7170 comm="syz-executor.2" path="/root/syzkaller-testdir3516703556/syzkaller.TbTgIL/15/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 263.975201][ T24] audit: type=1400 audit(2000000124.700:5887): avc: denied { map } for pid=7170 comm="syz-executor.2" path="/root/syzkaller-testdir3516703556/syzkaller.TbTgIL/15/file0/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 263.983032][ T7074] EXT4-fs error (device loop2): htree_dirblock_to_tree:1091: inode #2: block 13: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 264.004612][ T24] audit: type=1400 audit(2000000124.720:5888): avc: denied { ioctl } for pid=7170 comm="syz-executor.2" path="/root/syzkaller-testdir3516703556/syzkaller.TbTgIL/15/file0/file1" dev="loop2" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 264.226841][ T20] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 264.227634][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.232721][ T20] cdc_ncm 5-1:1.0: bind() failure [ 264.239903][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.245880][ T20] cdc_ncm 5-1:1.1: bind() failure [ 264.251878][ T7175] device bridge_slave_0 entered promiscuous mode [ 264.265820][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.272801][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.280050][ T7175] device bridge_slave_1 entered promiscuous mode [ 264.319686][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.326549][ T7175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.333662][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.340422][ T7175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.361646][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.369194][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.376227][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.385651][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.394139][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.400996][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.417488][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.425399][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.432144][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.439723][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.447504][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.461267][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 264.474295][ T7175] device veth0_vlan entered promiscuous mode [ 264.480530][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 264.488404][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.495581][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.512004][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.520795][ T7175] device veth1_macvtap entered promiscuous mode [ 264.531871][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 264.546444][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.597817][ T7186] EXT4-fs (loop2): Unrecognized mount option "mask=MAY_APPEND" or missing value [ 264.657355][ T25] usb 2-1: string descriptor 0 read error: -71 [ 264.677087][ T25] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #200: -71 [ 264.686282][ T2038] device bridge_slave_1 left promiscuous mode [ 264.686334][ T25] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 264.692984][ T2038] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.707270][ T25] uclogic 0003:256C:006D.0020: failed probing pen v2 parameters: -71 [ 264.715294][ T25] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 264.722892][ T25] uclogic: probe of 0003:256C:006D.0020 failed with error -71 [ 264.730480][ T2038] device bridge_slave_0 left promiscuous mode [ 264.731381][ T25] usb 2-1: USB disconnect, device number 10 [ 264.744992][ T2038] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.762301][ T2038] device veth1_macvtap left promiscuous mode [ 264.772944][ T2038] device veth0_vlan left promiscuous mode [ 264.780860][ T7198] syz-executor.2[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.780915][ T7198] syz-executor.2[7198] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.793387][ T7198] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program [ 264.890583][ T7200] device ip6tnl0 entered promiscuous mode [ 264.896195][ T7200] device vlan2 entered promiscuous mode [ 264.902016][ T7200] device ip6tnl0 left promiscuous mode [ 264.908979][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.979268][ T7208] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 264.989856][ T24] audit: type=1400 audit(2000000125.750:5889): avc: denied { relabelto } for pid=7207 comm="syz-executor.3" name="file0" dev="sda1" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 265.090516][ T2037] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.097571][ T24] audit: type=1326 audit(2000000125.850:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7207 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfd12cbea9 code=0x0 [ 265.571426][ T7229] device ip6tnl0 entered promiscuous mode [ 265.577203][ T7229] device vlan2 entered promiscuous mode [ 265.583455][ T7229] device ip6tnl0 left promiscuous mode [ 265.842846][ T24] audit: type=1400 audit(2000000126.590:5891): avc: denied { rmdir } for pid=6697 comm="syz-executor.3" name="file0" dev="sda1" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_notify_exec_t:s0" [ 265.872554][ T54] usb 5-1: USB disconnect, device number 25 [ 265.938515][ T7239] overlayfs: statfs failed on './file0' [ 266.044535][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.225947][ T24] audit: type=1326 audit(2000000126.970:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7244 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff428fea9 code=0x0 [ 266.273206][ T7249] kvm [7248]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 266.284968][ T7256] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz-executor.3: Invalid inode bitmap blk 4 in block_group 0 [ 266.298278][ T7256] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue [ 267.107730][ T7270] overlayfs: unrecognized mount option "2VCý1seté•“Œ8" or missing value [ 267.514096][ T7285] device ip6tnl0 entered promiscuous mode [ 267.519773][ T7285] device vlan2 entered promiscuous mode [ 267.530626][ T7285] device ip6tnl0 left promiscuous mode [ 268.331997][ T7288] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 268.435287][ T24] audit: type=1400 audit(2000000129.180:5893): avc: denied { ioctl } for pid=7286 comm="syz-executor.3" path="socket:[46140]" dev="sockfs" ino=46140 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.488246][ T7288] EXT4-fs (loop4): 1 truncate cleaned up [ 268.498193][ T7288] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,nodiscard,stripe=0x0000000000000b5c,,errors=continue [ 268.520652][ T24] audit: type=1400 audit(2000000129.270:5894): avc: denied { mounton } for pid=7299 comm="syz-executor.2" path="/root/syzkaller-testdir1425660429/syzkaller.n9UloP/11/file0" dev="sda1" ino=2068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 268.565626][ T4980] EXT4-fs error (device loop4): htree_dirblock_to_tree:1091: inode #2: block 13: comm syz-executor.4: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 268.792071][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.802147][ T24] audit: type=1400 audit(2000000129.550:5895): avc: denied { mounton } for pid=7323 comm="syz-executor.2" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 268.806275][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.831335][ T7308] kvm [7307]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xef00000000 [ 268.834817][ T7315] device bridge_slave_0 entered promiscuous mode [ 268.847632][ T7308] kvm [7307]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 268.858128][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.865303][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.872695][ T7315] device bridge_slave_1 entered promiscuous mode [ 268.883756][ T7308] kvm [7307]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x4500000000 [ 268.893309][ T7308] kvm [7307]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 268.919828][ T7326] device ip6tnl0 entered promiscuous mode [ 268.921911][ T7308] kvm [7307]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x17800000000 [ 268.930519][ T7326] device vlan2 entered promiscuous mode [ 268.934314][ T7308] kvm [7307]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 268.951658][ T7326] device ip6tnl0 left promiscuous mode [ 268.952057][ T7308] kvm [7307]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x66be700111 [ 268.966536][ T7308] kvm [7307]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x4500000000 [ 269.032145][ T7315] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.039253][ T7315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.046346][ T7315] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.053223][ T7315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.107074][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.114958][ T699] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.127859][ T699] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.137490][ T7332] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.159331][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 269.168537][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.175403][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.176787][ T7332] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 269.183276][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.487737][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.494595][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.545168][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.553203][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.565994][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.581123][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.589076][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.598285][ T3141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.611343][ T7315] device veth0_vlan entered promiscuous mode [ 269.626032][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.633858][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.654939][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.662703][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.676112][ T7315] device veth1_macvtap entered promiscuous mode [ 269.683658][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.692064][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.713385][ T699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.723383][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.738932][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.747333][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.756468][ T2037] device bridge_slave_1 left promiscuous mode [ 269.762578][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.771601][ T2037] device bridge_slave_0 left promiscuous mode [ 269.784663][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.796730][ T2037] device veth1_macvtap left promiscuous mode [ 269.802966][ T2037] device veth0_vlan left promiscuous mode [ 269.929438][ T24] audit: type=1326 audit(2000000130.680:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7335 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ff428fea9 code=0x0 [ 270.192565][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.201048][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.237883][ T7363] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 270.252911][ T7363] EXT4-fs (loop2): 1 truncate cleaned up [ 270.256241][ T7369] device syz_tun entered promiscuous mode [ 270.258711][ T7363] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,nodiscard,stripe=0x0000000000000b5c,,errors=continue [ 270.264350][ T7369] device macsec1 entered promiscuous mode [ 270.284452][ T7369] device syz_tun left promiscuous mode [ 270.333744][ T7175] EXT4-fs error (device loop2): htree_dirblock_to_tree:1091: inode #2: block 13: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 270.537034][ T354] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 270.539001][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.551327][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.558509][ T7376] device bridge_slave_0 entered promiscuous mode [ 270.565193][ T7380] device pim6reg1 entered promiscuous mode [ 270.572118][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.580448][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.588202][ T7376] device bridge_slave_1 entered promiscuous mode [ 270.640028][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.646897][ T7376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.654161][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.661032][ T7376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.693186][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.701459][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.708967][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.716342][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.731611][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.739841][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.746691][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.754003][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.762484][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.769375][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.782209][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.799753][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.807787][ T354] usb 4-1: Using ep0 maxpacket: 16 [ 270.818701][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 270.831859][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 270.840003][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 270.847514][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 270.858223][ T7376] device veth0_vlan entered promiscuous mode [ 270.868950][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.878588][ T7376] device veth1_macvtap entered promiscuous mode [ 270.891839][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 270.903032][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.945150][ T7394] syz-executor.1[7394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.945188][ T7394] syz-executor.1[7394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.956835][ T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 270.979872][ T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 270.990547][ T354] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 271.001924][ T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.016850][ T354] usb 4-1: config 0 descriptor?? [ 271.027332][ T2037] device bridge_slave_1 left promiscuous mode [ 271.033339][ T2037] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.040957][ T2037] device bridge_slave_0 left promiscuous mode [ 271.047309][ T2037] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.055715][ T2037] device veth1_macvtap left promiscuous mode [ 271.062799][ T2037] device veth0_vlan left promiscuous mode [ 271.200764][ T7405] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 271.209170][ T24] audit: type=1326 audit(2000000131.970:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386dcc7ea9 code=0x7ffc0000 [ 271.233171][ T24] audit: type=1326 audit(2000000131.970:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f386dcc7ea9 code=0x7ffc0000 [ 271.257235][ T24] audit: type=1326 audit(2000000131.970:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386dcc7ea9 code=0x7ffc0000 [ 271.281408][ T24] audit: type=1326 audit(2000000131.970:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7402 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386dcc7ea9 code=0x7ffc0000 [ 271.505549][ T7366] udc-core: couldn't find an available UDC or it's busy [ 271.512682][ T7366] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 271.529763][ T354] hid-generic 0003:0158:0100.0021: unknown main item tag 0x1 [ 271.546743][ T354] hid-generic 0003:0158:0100.0021: unexpected long global item [ 271.554288][ T354] hid-generic: probe of 0003:0158:0100.0021 failed with error -22 [ 271.727976][ T3141] usb 4-1: USB disconnect, device number 16 [ 272.077717][ T7431] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.091369][ T7431] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 272.104398][ T7431] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: missing EA_INODE flag [ 272.116361][ T7431] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 272.129093][ T7431] EXT4-fs (loop2): 1 orphan inode deleted [ 272.134625][ T7431] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001, [ 272.231259][ T7437] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 272.388914][ T7447] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 272.557057][ T7459] syz-executor.4[7459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.557118][ T7459] syz-executor.4[7459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.596529][ T24] audit: type=1400 audit(2000000133.340:5901): avc: denied { accept } for pid=7464 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 272.672345][ T7475] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 273.106715][ T373] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 273.246765][ T20] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 273.346729][ T373] usb 3-1: Using ep0 maxpacket: 16 [ 273.438179][ T7502] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 273.466834][ T373] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.491608][ T373] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 273.504590][ T373] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 273.528710][ T373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.537493][ T373] usb 3-1: config 0 descriptor?? [ 273.677449][ T20] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 273.700614][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.744553][ T20] usb 5-1: config 0 descriptor?? [ 273.815973][ T24] audit: type=1326 audit(2000000134.560:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd12cbea9 code=0x7ffc0000 [ 273.839779][ T24] audit: type=1326 audit(2000000134.560:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fcfd12cbea9 code=0x7ffc0000 [ 273.863647][ T24] audit: type=1326 audit(2000000134.560:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd12cbea9 code=0x7ffc0000 [ 273.887636][ T24] audit: type=1326 audit(2000000134.560:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcfd12cbea9 code=0x7ffc0000 [ 273.912237][ T7515] EXT4-fs (loop3): Ignoring removed orlov option [ 273.918566][ T7515] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 273.928177][ T7515] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 273.957112][ T7515] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 273.970580][ T7515] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2204: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 273.989652][ T6697] ================================================================== [ 273.997541][ T6697] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc67/0xc80 [ 274.005347][ T6697] Read of size 4 at addr ffff88813335c000 by task syz-executor.3/6697 [ 274.013323][ T6697] [ 274.015503][ T6697] CPU: 0 PID: 6697 Comm: syz-executor.3 Tainted: G W 5.10.214-syzkaller-00187-ge6f44899ce5d #0 [ 274.026954][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 274.036844][ T6697] Call Trace: [ 274.039983][ T6697] dump_stack_lvl+0x1e2/0x24b [ 274.044492][ T6697] ? bfq_pos_tree_add_move+0x43b/0x43b [ 274.049780][ T6697] ? panic+0x80b/0x80b [ 274.053686][ T6697] ? ext4_mark_iloc_dirty+0x2c23/0x3e60 [ 274.059071][ T6697] print_address_description+0x81/0x3b0 [ 274.064446][ T6697] kasan_report+0x179/0x1c0 [ 274.068791][ T6697] ? __ext4_journal_ensure_credits+0x470/0x470 [ 274.074778][ T6697] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 274.080246][ T6697] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 274.085718][ T6697] __asan_report_load4_noabort+0x14/0x20 [ 274.091180][ T6697] ext4_xattr_delete_inode+0xc67/0xc80 [ 274.096496][ T6697] ? sb_end_intwrite+0x110/0x110 [ 274.101254][ T6697] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 274.107164][ T6697] ? __kasan_check_read+0x11/0x20 [ 274.112021][ T6697] ext4_evict_inode+0x1095/0x1730 [ 274.116883][ T6697] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 274.122606][ T6697] ? inode_io_list_del_locked+0x1ad/0x210 [ 274.128157][ T6697] ? _raw_spin_unlock+0x4d/0x70 [ 274.132842][ T6697] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 274.138570][ T6697] evict+0x2a3/0x6c0 [ 274.142303][ T6697] iput+0x632/0x7e0 [ 274.145949][ T6697] vfs_rmdir+0x271/0x3f0 [ 274.150028][ T6697] do_rmdir+0x2cf/0x5c0 [ 274.154021][ T6697] ? d_delete_notify+0xd0/0xd0 [ 274.158623][ T6697] ? strncpy_from_user+0x18e/0x2d0 [ 274.163566][ T6697] ? getname_flags+0x1fd/0x520 [ 274.168182][ T6697] ? __bpf_trace_sys_enter+0x62/0x70 [ 274.173300][ T6697] __x64_sys_unlinkat+0xdf/0xf0 [ 274.177982][ T6697] do_syscall_64+0x34/0x70 [ 274.182234][ T6697] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 274.187957][ T6697] RIP: 0033:0x7fcfd12cb687 [ 274.192213][ T6697] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 274.211649][ T6697] RSP: 002b:00007ffc04209648 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 274.219894][ T6697] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fcfd12cb687 [ 274.227702][ T6697] RDX: 0000000000000200 RSI: 00007ffc0420a7f0 RDI: 00000000ffffff9c [ 274.235513][ T6697] RBP: 00007fcfd1328636 R08: 0000000000000000 R09: 0000000000000000 [ 274.243323][ T6697] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc0420a7f0 [ 274.251143][ T6697] R13: 00007fcfd1328636 R14: 0000000000042dbc R15: 0000000000000007 [ 274.258959][ T6697] [ 274.261110][ T6697] The buggy address belongs to the page: [ 274.266605][ T6697] page:ffffea0004ccd700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x13335c [ 274.276654][ T6697] flags: 0x4000000000000000() [ 274.281172][ T6697] raw: 4000000000000000 ffffea0004bc3f08 ffffea0004d4eb48 0000000000000000 [ 274.289591][ T6697] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 274.298002][ T6697] page dumped because: kasan: bad access detected [ 274.304256][ T6697] page_owner tracks the page as freed [ 274.309467][ T6697] page last allocated via order 0, migratetype Movable, gfp_mask 0x8100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x8000000), pid 7508, ts 273563006716, free_ts 273661480622 [ 274.325867][ T6697] prep_new_page+0x166/0x180 [ 274.330297][ T6697] get_page_from_freelist+0x2d8c/0x2f30 [ 274.335674][ T6697] __alloc_pages_nodemask+0x435/0xaf0 [ 274.340887][ T6697] handle_pte_fault+0x1782/0x3e30 [ 274.345739][ T6697] __handle_speculative_fault+0x13a6/0x1ec0 [ 274.351467][ T6697] exc_page_fault+0x234/0x5b0 [ 274.355983][ T6697] asm_exc_page_fault+0x1e/0x30 [ 274.360663][ T6697] page last free stack trace: [ 274.365185][ T6697] free_unref_page_prepare+0x2ae/0x2d0 [ 274.370484][ T6697] free_unref_page_list+0x122/0xb20 [ 274.375515][ T6697] release_pages+0xea0/0xef0 [ 274.379938][ T6697] free_pages_and_swap_cache+0x8a/0xa0 [ 274.385232][ T6697] tlb_flush_mmu+0xd0/0x180 [ 274.389574][ T6697] unmap_page_range+0x1f34/0x23b0 [ 274.394431][ T6697] unmap_vmas+0x37f/0x4f0 [ 274.398597][ T6697] exit_mmap+0x2f2/0x5c0 [ 274.402676][ T6697] __mmput+0x95/0x2d0 [ 274.406494][ T6697] mmput+0x59/0x170 [ 274.410143][ T6697] do_exit+0xbda/0x2a50 [ 274.414134][ T6697] do_group_exit+0x141/0x310 [ 274.418564][ T6697] get_signal+0x10a0/0x1410 [ 274.422899][ T6697] arch_do_signal_or_restart+0xbd/0x17c0 [ 274.428367][ T6697] exit_to_user_mode_loop+0x9b/0xd0 [ 274.433400][ T6697] syscall_exit_to_user_mode+0xc5/0x1d0 [ 274.438780][ T6697] [ 274.440946][ T6697] Memory state around the buggy address: [ 274.446418][ T6697] ffff88813335bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 274.454316][ T6697] ffff88813335bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2033/05/18 03:35:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 274.462215][ T6697] >ffff88813335c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.470118][ T6697] ^ [ 274.474018][ T6697] ffff88813335c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.481917][ T6697] ffff88813335c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 274.489808][ T6697] ================================================================== [ 274.497716][ T6697] Disabling lock debugging due to kernel taint [ 274.586863][ T20] usb 5-1: Cannot set MAC address [ 274.591814][ T20] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 274.602075][ T20] usb 5-1: USB disconnect, device number 26