last executing test programs: 4.809146958s ago: executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) brk(0x20ffc004) 3.908193727s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 2.536218439s ago: executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) brk(0x20ffc004) 2.514548812s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000180), &(0x7f00000004c0)=r4}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 2.437392484s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_lru_insertion\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 2.285164418s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x810, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001500)={0x2c, &(0x7f00000012c0)={0x0, 0x0, 0x3, {0x3, 0x0, 'k'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x44110) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x4}, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x101}}}}]}, 0x78}}, 0x0) 1.43125455s ago: executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.419056751s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f00000000c0), 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.408934153s ago: executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000081f100df000000a7d9de16c708db7200"}) readv(r0, &(0x7f0000001240)=[{&(0x7f0000001440)=""/57, 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = syz_open_pts(r0, 0x42) r3 = dup3(r2, r0, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0x1006) 1.290053471s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xf) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0xfffffffffffffe89, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) 1.243851038s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x552d, &(0x7f000000d000)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x81009431, 0xffffffffffffffff) 1.03745787s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff3ae644850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x0) 995.728137ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_newneigh={0x40, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x100, 0x1, 0x4, r6, 0x80000001, '\x00', r8, r0, 0x3, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='block_split\x00'}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40001) 934.329216ms ago: executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000004800)={'erspan0\x00', &(0x7f0000007100)=@ethtool_gstrings={0x1b, 0x7}}) 919.241079ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[]) 876.276495ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)=ANY=[]) 349.039886ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000091c3000071101c000000000027000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 341.709528ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) flock(0xffffffffffffffff, 0x0) 331.22314ms ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x31, 0x0}, 0x0) 325.32192ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 315.736142ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_newneigh={0x40, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x4, 0x100, 0x1, 0x4, r6, 0x80000001, '\x00', r8, r0, 0x3, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='block_split\x00'}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='block_split\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40001) 244.858653ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 231.477665ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff0000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) 145.163268ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 76.685318ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/90, 0x5a}], 0x1, 0x0, 0x0) 57.211621ms ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000002000000000000080000000850000003600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 56.861921ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000080), 0x20) 13.388818ms ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7, 0x700, 0x3ff, 0x8, {{0x2a, 0x4, 0x1, 0x0, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x7, [0x0, 0x7fff8000, 0x400]}, @noop, @timestamp={0x44, 0x18, 0xa5, 0x0, 0xc, [0x1, 0x42, 0x9, 0x400, 0x8]}, @generic={0x44, 0x8, "9d4744247a1e"}, @ssrr={0x89, 0x13, 0xc0, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @ssrr={0x89, 0x27, 0x83, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @empty, @private=0xa010102, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100, @empty]}, @ssrr={0x89, 0x27, 0xff, [@private=0xa010102, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}]}}}}}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffff001, '\x00', r0, r1, 0x4, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 11.176898ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000091c3000071101c000000000027000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 0s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x7, 0x700, 0x3ff, 0x8, {{0x2a, 0x4, 0x1, 0x0, 0xa8, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x7, [0x0, 0x7fff8000, 0x400]}, @noop, @timestamp={0x44, 0x18, 0xa5, 0x0, 0xc, [0x1, 0x42, 0x9, 0x400, 0x8]}, @generic={0x44, 0x8, "9d4744247a1e"}, @ssrr={0x89, 0x13, 0xc0, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @ssrr={0x89, 0x27, 0x83, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast2, @empty, @private=0xa010102, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100, @empty]}, @ssrr={0x89, 0x27, 0xff, [@private=0xa010102, @local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x34}, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}]}}}}}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffff001, '\x00', r0, r1, 0x4, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7f) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): ETDEV_CHANGE): vlan0: link becomes ready [ 119.165938][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.174209][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.192658][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.201087][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.294246][ T3633] loop1: detected capacity change from 0 to 1024 [ 119.303365][ T3633] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.411621][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 119.412080][ T2096] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.598119][ T1971] EXT4-fs (loop4): unmounting filesystem. [ 120.107657][ T3619] EXT4-fs (loop1): unmounting filesystem. [ 120.124801][ T3654] loop0: detected capacity change from 0 to 512 [ 120.135059][ T3654] EXT4-fs (loop0): 1 truncate cleaned up [ 120.140728][ T3654] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.449232][ T3160] EXT4-fs (loop0): unmounting filesystem. [ 120.481107][ T3672] syz-executor.1[3672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.481201][ T3672] syz-executor.1[3672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.554284][ T3678] loop3: detected capacity change from 0 to 1024 [ 120.606596][ T3678] EXT4-fs: Ignoring removed orlov option [ 120.621449][ T3678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.636777][ T3678] ext4: Bad value for 'barrier' [ 120.737262][ T3672] loop1: detected capacity change from 0 to 40427 [ 120.746147][ T3672] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x1f10) [ 120.754414][ T3672] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.764886][ T3672] F2FS-fs (loop1): invalid crc value [ 120.782774][ T3672] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.809441][ T2336] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.889563][ T3672] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 120.891030][ T3691] loop2: detected capacity change from 0 to 512 [ 120.898219][ T3672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 120.908114][ T3691] EXT4-fs (loop2): 1 truncate cleaned up [ 120.917393][ T484] device bridge_slave_1 left promiscuous mode [ 120.923811][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.937293][ T3691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.949228][ T484] device bridge_slave_0 left promiscuous mode [ 120.953989][ T3694] syz-executor.4[3694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.955280][ T3694] syz-executor.4[3694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.968941][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.001462][ T1900] EXT4-fs (loop2): unmounting filesystem. [ 121.002202][ T484] device veth1_macvtap left promiscuous mode [ 121.087353][ T484] device veth0_vlan left promiscuous mode [ 121.131833][ T2336] usb 1-1: Using ep0 maxpacket: 32 [ 121.322435][ T2336] usb 1-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 121.369812][ T2336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.420138][ T2336] usb 1-1: config 0 descriptor?? [ 121.425439][ T319] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.492659][ T2336] smsc75xx v1.0.0 [ 121.496147][ T2336] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 121.506402][ T2336] smsc75xx: probe of 1-1:0.0 failed with error -22 [ 121.517663][ T3694] loop4: detected capacity change from 0 to 40427 [ 121.525211][ T3694] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x1f10) [ 121.534834][ T3694] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 121.544258][ T3694] F2FS-fs (loop4): invalid crc value [ 121.552127][ T3694] F2FS-fs (loop4): Found nat_bits in checkpoint [ 121.594420][ T3694] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 121.601787][ T3694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 121.671036][ T3715] serio: Serial port pts0 [ 121.686158][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 121.686176][ T28] audit: type=1400 audit(1717412026.934:509): avc: denied { write } for pid=3718 comm="syz-executor.4" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.720148][ T60] usb 1-1: USB disconnect, device number 9 [ 121.722088][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 121.729843][ T28] audit: type=1400 audit(1717412026.974:510): avc: denied { map } for pid=3718 comm="syz-executor.4" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 121.901675][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.912698][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.922623][ T319] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.936389][ T319] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.945462][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.954573][ T319] usb 2-1: config 0 descriptor?? [ 122.165274][ T3755] xt_CT: No such helper "netbios-ns" [ 122.416768][ T28] audit: type=1326 audit(1717412027.664:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9787cee9 code=0x7ffc0000 [ 122.442728][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.447873][ T28] audit: type=1400 audit(1717412027.664:512): avc: denied { create } for pid=3768 comm="syz-executor.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 122.450015][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.471305][ T28] audit: type=1326 audit(1717412027.694:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9787cee9 code=0x7ffc0000 [ 122.481772][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.503743][ T28] audit: type=1326 audit(1717412027.694:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9787cee9 code=0x7ffc0000 [ 122.532844][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.540837][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.551303][ T28] audit: type=1326 audit(1717412027.694:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffa9787cee9 code=0x7ffc0000 [ 122.575277][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.575804][ T28] audit: type=1326 audit(1717412027.694:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9787cee9 code=0x7ffc0000 [ 122.582696][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.606856][ T28] audit: type=1326 audit(1717412027.694:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa9787cee9 code=0x7ffc0000 [ 122.638211][ T28] audit: type=1326 audit(1717412027.694:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3769 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9787cee9 code=0x7ffc0000 [ 122.656008][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.673656][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.690336][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.704171][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.716942][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.724314][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.733527][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.742018][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.749328][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.756555][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.763918][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.770996][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.778072][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.785113][ T319] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 122.792295][ T319] microsoft 0003:045E:07DA.0011: No inputs registered, leaving [ 122.800013][ T319] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 122.827887][ T319] microsoft 0003:045E:07DA.0011: no inputs found [ 122.834087][ T319] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 122.844006][ T319] usb 2-1: USB disconnect, device number 11 [ 122.927658][ T3798] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.408269][ T3832] sock: sock_timestamping_bind_phc: sock not bind to device [ 124.744068][ T3858] fuse: Unknown parameter '' [ 124.760605][ T3834] loop3: detected capacity change from 0 to 40427 [ 124.778594][ T3834] F2FS-fs (loop3): Invalid log sectorsize (2) [ 124.784722][ T3834] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 124.804659][ T3834] F2FS-fs (loop3): Found nat_bits in checkpoint [ 124.841638][ T60] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 124.857890][ T3834] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 124.865052][ T3834] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 124.916822][ T576] syz-executor.3: attempt to access beyond end of device [ 124.916822][ T576] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 125.091562][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 125.461718][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.477543][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.487763][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 125.500755][ T60] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.509727][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.518569][ T60] usb 2-1: config 0 descriptor?? [ 126.003012][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.010297][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.038854][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.057136][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.077727][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.092744][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.105963][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.123241][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.136941][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.151136][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.165115][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.178815][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.193699][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.208975][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.231655][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.238804][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.261615][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.268727][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.291657][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.299110][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.311655][ T60] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 126.319045][ T60] microsoft 0003:045E:07DA.0012: No inputs registered, leaving [ 126.333123][ T60] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 126.347676][ T60] microsoft 0003:045E:07DA.0012: no inputs found [ 126.354123][ T60] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 126.364599][ T60] usb 2-1: USB disconnect, device number 12 [ 126.738142][ T3900] loop3: detected capacity change from 0 to 131072 [ 126.745943][ T3900] F2FS-fs (loop3): Test dummy encryption mode enabled [ 126.753637][ T3900] F2FS-fs (loop3): invalid crc value [ 126.761937][ T3900] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.767810][ T3952] loop0: detected capacity change from 0 to 256 [ 126.807873][ T3900] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.817610][ T3958] xt_bpf: check failed: parse error [ 126.847006][ T3900] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 126.856629][ T3961] syz-executor.4 (pid 3961) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 126.876214][ T3961] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 126.914458][ T3961] fscrypt: AES-128-CBC-ESSIV using implementation "essiv(cbc-aes-aesni,sha256-avx2)" [ 127.087869][ T3982] loop0: detected capacity change from 0 to 256 [ 127.142183][ T3985] loop0: detected capacity change from 0 to 256 [ 127.230654][ T3988] loop4: detected capacity change from 0 to 256 [ 127.895082][ T4021] loop4: detected capacity change from 0 to 512 [ 127.917952][ T4021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.979786][ T4021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 127.994200][ T4021] ext4 filesystem being mounted at /root/syzkaller-testdir4091116899/syzkaller.1pQM9p/199/file1 supports timestamps until 2038 (0x7fffffff) [ 128.021992][ T1971] EXT4-fs (loop4): unmounting filesystem. [ 128.102913][ T28] kauditd_printk_skb: 462 callbacks suppressed [ 128.102935][ T28] audit: type=1326 audit(1717412033.354:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4032 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dc6e7cee9 code=0x0 [ 128.118992][ T4019] loop0: detected capacity change from 0 to 40427 [ 128.140449][ T4019] F2FS-fs (loop0): Invalid log blocks per segment (5) [ 128.147513][ T4019] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 128.493204][ T4019] F2FS-fs (loop0): Found nat_bits in checkpoint [ 128.496436][ T4044] loop2: detected capacity change from 0 to 256 [ 128.511381][ T4044] FAT-fs (loop2): Directory bread(block 64) failed [ 128.517882][ T4044] FAT-fs (loop2): Directory bread(block 65) failed [ 128.525572][ T4044] FAT-fs (loop2): Directory bread(block 66) failed [ 128.532030][ T4019] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 128.532042][ T4044] FAT-fs (loop2): Directory bread(block 67) failed [ 128.532088][ T4044] FAT-fs (loop2): Directory bread(block 68) failed [ 128.539076][ T4019] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.545430][ T4044] FAT-fs (loop2): Directory bread(block 69) failed [ 128.565472][ T4044] FAT-fs (loop2): Directory bread(block 70) failed [ 128.572004][ T4044] FAT-fs (loop2): Directory bread(block 71) failed [ 128.575308][ T28] audit: type=1400 audit(1717412033.824:982): avc: denied { ioctl } for pid=4017 comm="syz-executor.0" path="socket:[32596]" dev="sockfs" ino=32596 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.578507][ T4044] FAT-fs (loop2): Directory bread(block 72) failed [ 128.609714][ T4044] FAT-fs (loop2): Directory bread(block 73) failed [ 128.621406][ T3160] syz-executor.0: attempt to access beyond end of device [ 128.621406][ T3160] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 128.679133][ T4050] binder: 4049:4050 ioctl c0306201 200003c0 returned -14 [ 128.751659][ T2336] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 128.925507][ T4070] loop3: detected capacity change from 0 to 256 [ 128.933237][ T4070] exfat: Deprecated parameter 'namecase' [ 128.953593][ T4070] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 128.990260][ T28] audit: type=1400 audit(1717412034.234:983): avc: denied { map } for pid=4069 comm="syz-executor.3" path="/root/syzkaller-testdir3523013437/syzkaller.OS0iV4/271/file2/memory.events" dev="loop3" ino=1048734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.058431][ T4063] loop0: detected capacity change from 0 to 40427 [ 129.066661][ T4063] F2FS-fs (loop0): Invalid log blocks per segment (5) [ 129.073633][ T4063] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.109311][ T4063] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.117976][ T28] audit: type=1400 audit(1717412034.374:984): avc: denied { write } for pid=4091 comm="syz-executor.3" name="fdinfo" dev="proc" ino=32689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 129.160116][ T28] audit: type=1400 audit(1717412034.374:985): avc: denied { add_name } for pid=4091 comm="syz-executor.3" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 129.204267][ T28] audit: type=1400 audit(1717412034.374:986): avc: denied { create } for pid=4091 comm="syz-executor.3" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 129.225507][ T2336] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 129.234993][ T4063] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.235898][ T2336] usb 5-1: config 0 has no interface number 0 [ 129.245695][ T4063] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.255778][ T2336] usb 5-1: config 0 interface 182 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 129.279942][ T2336] usb 5-1: config 0 interface 182 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 129.293220][ T28] audit: type=1400 audit(1717412034.374:987): avc: denied { associate } for pid=4091 comm="syz-executor.3" name="memory.events" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 129.326797][ T2336] usb 5-1: config 0 interface 182 altsetting 0 endpoint 0x7 has invalid maxpacket 1136, setting to 1024 [ 129.349079][ T3160] syz-executor.0: attempt to access beyond end of device [ 129.349079][ T3160] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 129.364323][ T2336] usb 5-1: config 0 interface 182 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 129.376307][ T4101] incfs: Options parsing error. -22 [ 129.383326][ T4101] incfs: mount failed -22 [ 129.383874][ T28] audit: type=1400 audit(1717412034.394:988): avc: denied { watch } for pid=4091 comm="syz-executor.3" path="/proc/4091/fdinfo" dev="proc" ino=32689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 129.418774][ T2336] usb 5-1: config 0 interface 182 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 129.430045][ T2336] usb 5-1: config 0 interface 182 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 129.440901][ T2336] usb 5-1: config 0 interface 182 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 129.450771][ T2336] usb 5-1: Dual-Role OTG device on HNP port [ 129.471815][ T2336] usb 5-1: New USB device found, idVendor=2357, idProduct=0107, bcdDevice=a6.89 [ 129.492167][ T2336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.514382][ T2336] usb 5-1: config 0 descriptor?? [ 129.541913][ T4041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 129.566761][ T4095] loop2: detected capacity change from 0 to 40427 [ 129.576710][ T4095] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 129.594287][ T4095] F2FS-fs (loop2): invalid crc value [ 129.597446][ T4114] loop3: detected capacity change from 0 to 256 [ 129.606206][ T4095] F2FS-fs (loop2): invalid crc value [ 129.606310][ T4114] exfat: Deprecated parameter 'namecase' [ 129.616857][ T4095] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 129.631058][ T4114] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 129.681747][ T28] audit: type=1326 audit(1717412034.924:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4117 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa9787cee9 code=0x0 [ 129.771141][ T319] usb 5-1: USB disconnect, device number 8 [ 129.911234][ T4135] loop1: detected capacity change from 0 to 256 [ 129.919241][ T4135] exfat: Deprecated parameter 'namecase' [ 129.925432][ T4135] exfat: Deprecated parameter 'utf8' [ 129.930991][ T4135] exfat: Deprecated parameter 'namecase' [ 129.936855][ T4135] exfat: Deprecated parameter 'utf8' [ 129.945218][ T4135] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 129.974960][ T28] audit: type=1400 audit(1717412035.224:990): avc: denied { rename } for pid=4134 comm="syz-executor.1" name="file0" dev="loop1" ino=1048739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.998555][ T4135] exFAT-fs (loop1): error, found bogus dentry(37) beyond unused empty group(22) (start_clu : 5, cur_clu : 5) [ 130.041749][ T2336] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.308992][ T4168] Invalid ELF header magic: != ELF [ 130.330336][ T4170] loop3: detected capacity change from 0 to 256 [ 130.337341][ T4170] exfat: Deprecated parameter 'namecase' [ 130.343674][ T4170] exfat: Deprecated parameter 'utf8' [ 130.348913][ T4170] exfat: Deprecated parameter 'namecase' [ 130.354513][ T4170] exfat: Deprecated parameter 'utf8' [ 130.371589][ T4170] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 130.405495][ T4170] exFAT-fs (loop3): error, found bogus dentry(37) beyond unused empty group(22) (start_clu : 5, cur_clu : 5) [ 130.421911][ T2336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.433144][ T2336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.443429][ T2336] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.452521][ T2336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.461290][ T2336] usb 3-1: config 0 descriptor?? [ 130.631721][ T4199] loop0: detected capacity change from 0 to 256 [ 130.638456][ T4199] exfat: Deprecated parameter 'namecase' [ 130.644000][ T4199] exfat: Deprecated parameter 'utf8' [ 130.649046][ T4199] exfat: Deprecated parameter 'namecase' [ 130.654550][ T4199] exfat: Deprecated parameter 'utf8' [ 130.663224][ T4199] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 130.693147][ T4199] exFAT-fs (loop0): error, found bogus dentry(37) beyond unused empty group(22) (start_clu : 5, cur_clu : 5) [ 130.716999][ T4202] syz-executor.0[4202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.717055][ T4202] syz-executor.0[4202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.245266][ T4229] loop4: detected capacity change from 0 to 512 [ 131.273837][ T4229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 131.282867][ T4229] ext4 filesystem being mounted at /root/syzkaller-testdir4091116899/syzkaller.1pQM9p/205/file0 supports timestamps until 2038 (0x7fffffff) [ 131.312845][ T1971] EXT4-fs (loop4): unmounting filesystem. [ 131.444470][ T4249] Invalid ELF header magic: != ELF [ 131.486828][ T4253] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 131.496154][ T4253] overlayfs: failed to look up (file1) for ino (-5) [ 131.533032][ T4255] loop3: detected capacity change from 0 to 512 [ 131.550327][ T4255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.575574][ T4255] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 131.595767][ T4255] EXT4-fs (loop3): 1 truncate cleaned up [ 131.604797][ T4255] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.638215][ T576] EXT4-fs (loop3): unmounting filesystem. [ 131.652772][ T2336] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 131.706634][ T4264] loop3: detected capacity change from 0 to 512 [ 131.759032][ T4264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.770660][ T4264] ext4 filesystem being mounted at /root/syzkaller-testdir3523013437/syzkaller.OS0iV4/307/file0 supports timestamps until 2038 (0x7fffffff) [ 131.803436][ T576] EXT4-fs (loop3): unmounting filesystem. [ 131.854298][ T2336] usb 3-1: USB disconnect, device number 11 [ 132.078231][ T4290] loop3: detected capacity change from 0 to 256 [ 132.300871][ T4308] syz-executor.1[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.300967][ T4308] syz-executor.1[4308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.388654][ T4301] loop3: detected capacity change from 0 to 40427 [ 132.408491][ T4301] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 132.419416][ T4301] F2FS-fs (loop3): invalid crc value [ 132.425768][ T4301] F2FS-fs (loop3): invalid crc value [ 132.431117][ T4301] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 132.534547][ T4335] loop1: detected capacity change from 0 to 256 [ 132.586712][ T4342] syz-executor.3[4342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.586822][ T4342] syz-executor.3[4342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.601927][ T319] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 132.642547][ T4345] syz-executor.0[4345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.642663][ T4345] syz-executor.0[4345] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.861594][ T345] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 132.991700][ T319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 133.002707][ T319] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.092834][ T4373] device wireguard0 entered promiscuous mode [ 133.301795][ T319] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.310841][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.318749][ T319] usb 5-1: SerialNumber: syz [ 133.331660][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.342668][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.351780][ T4311] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.359550][ T345] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 133.369776][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.384119][ T345] usb 2-1: config 0 descriptor?? [ 133.430680][ T28] kauditd_printk_skb: 380 callbacks suppressed [ 133.430701][ T28] audit: type=1326 audit(1717412038.674:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.461403][ T28] audit: type=1326 audit(1717412038.674:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.486106][ T28] audit: type=1326 audit(1717412038.674:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.511646][ T28] audit: type=1326 audit(1717412038.674:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.535643][ T28] audit: type=1326 audit(1717412038.684:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.559316][ T28] audit: type=1326 audit(1717412038.684:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.583054][ T28] audit: type=1326 audit(1717412038.684:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.607064][ T28] audit: type=1326 audit(1717412038.684:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.631224][ T28] audit: type=1326 audit(1717412038.684:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.655581][ T28] audit: type=1326 audit(1717412038.684:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff49527cee9 code=0x7ffc0000 [ 133.692980][ T4381] device bridge0 entered promiscuous mode [ 133.698706][ T4381] device macsec1 entered promiscuous mode [ 133.705486][ T4381] device bridge0 left promiscuous mode [ 133.750562][ T4385] sit0: mtu greater than device maximum [ 133.872125][ T4399] loop2: detected capacity change from 0 to 512 [ 133.879711][ T4399] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.892091][ T4399] EXT4-fs (loop2): 1 truncate cleaned up [ 133.897652][ T4399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.917303][ T1900] EXT4-fs (loop2): unmounting filesystem. [ 133.935984][ T4406] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 134.050608][ T4415] sit0: mtu greater than device maximum [ 134.099127][ T4421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.108359][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.120131][ T4421] tc_dump_action: action bad kind [ 134.125841][ T4423] syz-executor.0[4423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.125939][ T4423] syz-executor.0[4423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.571644][ T345] uclogic 0003:256C:006D.0014: interface is invalid, ignoring [ 134.777353][ T24] usb 2-1: USB disconnect, device number 13 [ 135.026525][ T4448] loop3: detected capacity change from 0 to 512 [ 135.058774][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.067893][ T4448] ext4 filesystem being mounted at /root/syzkaller-testdir3523013437/syzkaller.OS0iV4/345/file0 supports timestamps until 2038 (0x7fffffff) [ 135.084852][ T4448] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 135.097728][ T4448] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz-executor.3: mark_inode_dirty error [ 135.111588][ T4448] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz-executor.3: corrupted inode contents [ 135.124123][ T4448] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 135.149655][ T576] EXT4-fs (loop3): unmounting filesystem. [ 135.293773][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.300629][ T4469] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.308411][ T4469] device bridge_slave_0 entered promiscuous mode [ 135.316118][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.329440][ T4469] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.336932][ T4469] device bridge_slave_1 entered promiscuous mode [ 135.381714][ T319] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 135.388536][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.397368][ T319] usb 5-1: USB disconnect, device number 9 [ 135.439852][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.446946][ T4469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.454211][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.461383][ T4469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.498541][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.507040][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.511645][ T2336] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 135.522223][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.546639][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.555054][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.563355][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.570931][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.579667][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.586720][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.612812][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.620776][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.636959][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.664235][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.677458][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.691393][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.707364][ T4469] device veth0_vlan entered promiscuous mode [ 135.733456][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.746131][ T4469] device veth1_macvtap entered promiscuous mode [ 135.759265][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 135.771777][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.773115][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 135.797037][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.821468][ T24] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.840901][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.856608][ T24] usb 3-1: config 0 descriptor?? [ 135.876439][ T4490] device bridge0 entered promiscuous mode [ 135.892274][ T4490] device macsec1 entered promiscuous mode [ 135.901686][ T2336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.912650][ T4490] device bridge0 left promiscuous mode [ 135.919036][ T2336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.931775][ T360] device bridge_slave_1 left promiscuous mode [ 135.938911][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.939733][ T2336] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 135.956049][ T360] device bridge_slave_0 left promiscuous mode [ 135.967853][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.968164][ T2336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.999433][ T360] device veth1_macvtap left promiscuous mode [ 136.008201][ T2336] usb 4-1: config 0 descriptor?? [ 136.012197][ T360] device veth0_vlan left promiscuous mode [ 136.041011][ T4494] incfs: ino conflict with backing FS 1 [ 136.068335][ T4494] incfs: ino conflict with backing FS 2 [ 136.223283][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.230411][ T4495] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.238542][ T4495] device bridge_slave_0 entered promiscuous mode [ 136.246484][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.253644][ T4495] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.262560][ T4495] device bridge_slave_1 entered promiscuous mode [ 136.338479][ T4495] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.345545][ T4495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.352811][ T4495] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.359904][ T4495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.444084][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.453175][ T4506] loop4: detected capacity change from 0 to 2048 [ 136.459801][ T319] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.467688][ T319] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.488445][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.496808][ T4506] loop4: p3 < > p4 < > [ 136.497680][ T319] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.500795][ T4506] loop4: partition table partially beyond EOD, truncated [ 136.500867][ T4506] loop4: p3 start 4284289 is beyond EOD, [ 136.507963][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.508444][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.521616][ T4506] truncated [ 136.528704][ T319] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.545563][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.569837][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.578108][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.600917][ T4495] device veth0_vlan entered promiscuous mode [ 136.609410][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 136.617891][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.625842][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.633514][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.651116][ T2335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.660777][ T4495] device veth1_macvtap entered promiscuous mode [ 136.685546][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.696917][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.811760][ T24] usb 3-1: string descriptor 0 read error: -71 [ 136.831771][ T24] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #200: -71 [ 136.844076][ T24] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71 [ 136.863837][ T24] uclogic 0003:256C:006D.0015: failed probing pen v2 parameters: -71 [ 136.880883][ T24] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 136.893307][ T24] uclogic: probe of 0003:256C:006D.0015 failed with error -71 [ 136.907278][ T24] usb 3-1: USB disconnect, device number 12 [ 136.931666][ T2336] usb 4-1: string descriptor 0 read error: -71 [ 136.951729][ T2336] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 136.960404][ T2336] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 136.978880][ T2336] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 136.992614][ T2336] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 137.010706][ T2336] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 137.019950][ T2336] usb 4-1: USB disconnect, device number 11 [ 137.072486][ T360] device bridge_slave_1 left promiscuous mode [ 137.079647][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.098841][ T360] device bridge_slave_0 left promiscuous mode [ 137.106630][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.116161][ T360] device veth1_macvtap left promiscuous mode [ 137.129092][ T360] device veth0_vlan left promiscuous mode [ 137.328157][ T4529] device ip6gretap0 entered promiscuous mode [ 137.334165][ T4529] device macsec1 entered promiscuous mode [ 137.340830][ T4529] device ip6gretap0 left promiscuous mode [ 137.364757][ T4533] loop1: detected capacity change from 0 to 2048 [ 137.372011][ T4533] EXT4-fs: Ignoring removed orlov option [ 137.383896][ T4533] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.409434][ T4533] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 137.434514][ T4533] EXT4-fs (loop1): Remounting filesystem read-only [ 137.452927][ T4543] loop4: detected capacity change from 0 to 128 [ 137.464984][ T4495] EXT4-fs (loop1): unmounting filesystem. [ 138.631922][ T4575] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.647199][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.654882][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.663211][ T4568] device bridge_slave_0 entered promiscuous mode [ 138.670952][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.678270][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.689405][ T4568] device bridge_slave_1 entered promiscuous mode [ 138.721885][ T360] device bridge_slave_1 left promiscuous mode [ 138.730331][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.750020][ T4585] loop4: detected capacity change from 0 to 2048 [ 138.757937][ T360] device bridge_slave_0 left promiscuous mode [ 138.758933][ T4585] EXT4-fs: Ignoring removed orlov option [ 138.767648][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.778884][ T4587] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 138.779226][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 138.779241][ T28] audit: type=1400 audit(1717412044.024:1451): avc: denied { relabelfrom } for pid=4586 comm="syz-executor.0" name="" dev="pipefs" ino=35359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 138.819161][ T360] device veth1_macvtap left promiscuous mode [ 138.825540][ T28] audit: type=1400 audit(1717412044.074:1452): avc: denied { relabelto } for pid=4586 comm="syz-executor.0" name="" dev="pipefs" ino=35359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 138.835237][ T360] device veth0_vlan left promiscuous mode [ 138.856500][ T4585] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 138.931743][ T4585] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 138.948657][ T4599] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 138.994413][ T4585] EXT4-fs (loop4): Remounting filesystem read-only [ 139.019814][ T1971] EXT4-fs (loop4): unmounting filesystem. [ 139.206269][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.217519][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.244598][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.253492][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.271892][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.278861][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.291699][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.299974][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.310691][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.317679][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.339222][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.347242][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.362157][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.381849][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.405921][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.416827][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.425364][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.434028][ T4568] device veth0_vlan entered promiscuous mode [ 139.448051][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.458827][ T4568] device veth1_macvtap entered promiscuous mode [ 139.471307][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.486720][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.681667][ T60] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 139.985863][ T4671] device pim6reg1 entered promiscuous mode [ 140.052177][ T60] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 140.066388][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.161751][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.171004][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.181980][ T60] usb 4-1: SerialNumber: syz [ 140.199525][ T4683] overlayfs: missing 'lowerdir' [ 140.211725][ T4615] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.495654][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.503097][ T4690] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.513456][ T4690] device bridge_slave_0 entered promiscuous mode [ 140.522961][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.530473][ T4690] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.538077][ T4690] device bridge_slave_1 entered promiscuous mode [ 140.618871][ T4690] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.625919][ T4690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.632954][ T4690] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.639797][ T4690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.649895][ T4706] overlayfs: statfs failed on './file0' [ 140.671121][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.680027][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.687653][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.700347][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 140.709391][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.716376][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.733615][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 140.741867][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.748726][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.762474][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.772770][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.787575][ T4711] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.799771][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.811482][ T4713] serio: Serial port pts0 [ 140.816140][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.825095][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.832691][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.841044][ T484] device bridge_slave_1 left promiscuous mode [ 140.847667][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.855355][ T484] device bridge_slave_0 left promiscuous mode [ 140.861411][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.869717][ T484] device veth1_macvtap left promiscuous mode [ 140.875670][ T484] device veth0_vlan left promiscuous mode [ 140.937678][ T4690] device veth0_vlan entered promiscuous mode [ 140.950841][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.960976][ T4690] device veth1_macvtap entered promiscuous mode [ 140.972491][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.986439][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.001566][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 141.001644][ T2096] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.097236][ T4723] loop0: detected capacity change from 0 to 8192 [ 141.123314][ T4726] overlayfs: statfs failed on './file0' [ 141.209007][ T28] audit: type=1400 audit(1717412046.454:1453): avc: denied { unmount } for pid=4469 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 141.213944][ T4728] overlayfs: missing 'lowerdir' [ 141.293959][ T4734] overlayfs: statfs failed on './file0' [ 141.354880][ T28] audit: type=1400 audit(1717412046.604:1454): avc: denied { mount } for pid=4741 comm="syz-executor.0" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 141.355901][ T4742] 9pnet: Could not find request transport: rdma [ 141.377576][ T28] audit: type=1400 audit(1717412046.604:1455): avc: denied { mounton } for pid=4741 comm="syz-executor.0" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 141.408001][ T4742] loop0: detected capacity change from 0 to 16 [ 141.424432][ T4742] erofs: (device loop0): mounted with root inode @ nid 36. [ 141.432253][ T28] audit: type=1400 audit(1717412046.634:1456): avc: denied { mounton } for pid=4741 comm="syz-executor.0" path="/root/syzkaller-testdir1927295155/syzkaller.njuD4A/21/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 141.475787][ T28] audit: type=1400 audit(1717412046.724:1457): avc: denied { unmount } for pid=4469 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 141.499573][ T28] audit: type=1400 audit(1717412046.744:1458): avc: denied { mounton } for pid=4744 comm="syz-executor.4" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 141.558426][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.566509][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.574576][ T4744] device bridge_slave_0 entered promiscuous mode [ 141.583321][ T28] audit: type=1400 audit(1717412046.834:1459): avc: denied { read } for pid=4752 comm="syz-executor.0" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.601626][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.608276][ T28] audit: type=1400 audit(1717412046.834:1460): avc: denied { open } for pid=4752 comm="syz-executor.0" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 141.640058][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.647079][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.655955][ T4744] device bridge_slave_1 entered promiscuous mode [ 141.713321][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.720412][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.727712][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.734599][ T4744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.760238][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.768258][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.776210][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.786404][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 141.795425][ T2336] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.802694][ T2336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.822619][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 141.830963][ T2336] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.837858][ T2336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.845524][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 141.855942][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 141.871683][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 141.872906][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.898943][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.909145][ T4744] device veth0_vlan entered promiscuous mode [ 141.917188][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.925791][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.951996][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.963325][ T4744] device veth1_macvtap entered promiscuous mode [ 141.976643][ T2336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.992498][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.023870][ T484] device bridge_slave_1 left promiscuous mode [ 142.031688][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.045183][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.052925][ T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.063850][ T484] device bridge_slave_0 left promiscuous mode [ 142.070440][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.070448][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 142.086347][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.097444][ T484] device veth1_macvtap left promiscuous mode [ 142.104125][ T484] device veth0_vlan left promiscuous mode [ 142.132646][ T24] hub 2-1:4.0: USB hub found [ 142.140834][ T4774] 9pnet: Could not find request transport: rdma [ 142.154554][ T4774] loop2: detected capacity change from 0 to 16 [ 142.169554][ T4774] erofs: (device loop2): mounted with root inode @ nid 36. [ 142.209825][ T4778] SELinux: security_context_str_to_sid (root::) failed with errno=-22 [ 142.351719][ T24] hub 2-1:4.0: 2 ports detected [ 142.481830][ T60] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 142.489394][ T60] usb 4-1: USB disconnect, device number 12 [ 142.661644][ T319] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.731676][ T24] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 142.738691][ T24] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 142.772637][ T24] usb 2-1: USB disconnect, device number 14 [ 142.823125][ T4809] loop0: detected capacity change from 0 to 8192 [ 142.901646][ T319] usb 3-1: Using ep0 maxpacket: 32 [ 142.995410][ T4817] syz-executor.0[4817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.995476][ T4817] syz-executor.0[4817] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.021758][ T319] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.044352][ T319] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.054431][ T319] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 143.063723][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.112304][ T319] hub 3-1:4.0: USB hub found [ 143.331712][ T319] hub 3-1:4.0: 2 ports detected [ 143.415469][ T4850] syz-executor.3[4850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.415581][ T4850] syz-executor.3[4850] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.761762][ T339] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 144.031634][ T345] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 144.151709][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.162712][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.172415][ T339] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.185152][ T339] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 144.194180][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.203319][ T339] usb 4-1: config 0 descriptor?? [ 144.301605][ T345] usb 2-1: Using ep0 maxpacket: 32 [ 144.431693][ T345] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.442950][ T345] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.452765][ T345] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 144.471658][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.512201][ T345] hub 2-1:4.0: USB hub found [ 144.571604][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 144.571618][ T28] audit: type=1326 audit(1717412049.814:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.602504][ T28] audit: type=1326 audit(1717412049.814:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.626880][ T319] hub 3-1:4.0: activate --> -90 [ 144.632366][ T28] audit: type=1326 audit(1717412049.814:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.656858][ T28] audit: type=1326 audit(1717412049.814:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.681226][ T28] audit: type=1326 audit(1717412049.814:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.707827][ T28] audit: type=1326 audit(1717412049.814:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.712806][ T339] betop 0003:11C2:2208.0017: item fetching failed at offset 4/5 [ 144.732219][ T28] audit: type=1326 audit(1717412049.814:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.741713][ T345] hub 2-1:4.0: 2 ports detected [ 144.763558][ T28] audit: type=1326 audit(1717412049.814:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.776982][ T339] betop 0003:11C2:2208.0017: parse failed [ 144.792006][ T28] audit: type=1326 audit(1717412049.814:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.800447][ T339] betop: probe of 0003:11C2:2208.0017 failed with error -22 [ 144.830324][ T28] audit: type=1326 audit(1717412049.814:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4862 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655f27cee9 code=0x7fc00000 [ 144.940685][ T339] usb 4-1: USB disconnect, device number 13 [ 145.121609][ T345] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 145.127844][ T345] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 145.162993][ T345] usb 2-1: USB disconnect, device number 15 [ 145.501646][ T2336] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.681854][ T4892] SELinux: security_context_str_to_sid (root::) failed with errno=-22 [ 145.704044][ T4894] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 145.741747][ T2336] usb 1-1: Using ep0 maxpacket: 8 [ 145.791230][ T4902] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.800646][ T4902] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.861634][ T2336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.951768][ T2336] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 145.960798][ T2336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 145.972469][ T2336] usb 1-1: SerialNumber: syz [ 145.977419][ T2336] usb 1-1: config 0 descriptor?? [ 146.022222][ T2336] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 146.029139][ T2336] uvcvideo 1-1:0.0: Entity type for entity Output 255 was not initialized! [ 146.037569][ T2336] usb 1-1: Failed to create links for entity 255 [ 146.044115][ T2336] usb 1-1: Failed to register entities (-22). [ 146.122621][ T2336] usb 3-1: USB disconnect, device number 13 [ 146.134412][ T4915] loop4: detected capacity change from 0 to 256 [ 146.141652][ T319] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 146.156069][ T4915] FAT-fs (loop4): Directory bread(block 64) failed [ 146.162610][ T4915] FAT-fs (loop4): Directory bread(block 65) failed [ 146.169183][ T4915] FAT-fs (loop4): Directory bread(block 66) failed [ 146.175602][ T4915] FAT-fs (loop4): Directory bread(block 67) failed [ 146.182036][ T4915] FAT-fs (loop4): Directory bread(block 68) failed [ 146.188381][ T4915] FAT-fs (loop4): Directory bread(block 69) failed [ 146.194813][ T4915] FAT-fs (loop4): Directory bread(block 70) failed [ 146.201046][ T4915] FAT-fs (loop4): Directory bread(block 71) failed [ 146.207494][ T4915] FAT-fs (loop4): Directory bread(block 72) failed [ 146.214416][ T4915] FAT-fs (loop4): Directory bread(block 73) failed [ 146.223392][ T6] usb 1-1: USB disconnect, device number 10 [ 146.251611][ T345] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.259821][ T484] kworker/u4:5: attempt to access beyond end of device [ 146.259821][ T484] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 146.511576][ T345] usb 4-1: Using ep0 maxpacket: 32 [ 146.641662][ T345] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.652581][ T345] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.662489][ T345] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.671561][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.712075][ T345] hub 4-1:4.0: USB hub found [ 146.766266][ T4934] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 146.827385][ T4940] loop2: detected capacity change from 0 to 256 [ 146.834219][ T4940] exfat: Deprecated parameter 'utf8' [ 146.839443][ T4940] exfat: Deprecated parameter 'namecase' [ 146.845479][ T4940] exfat: Bad value for 'namecase' [ 146.849110][ T4938] SELinux: security_context_str_to_sid (root::) failed with errno=-22 [ 146.895736][ T4948] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.931662][ T345] hub 4-1:4.0: 2 ports detected [ 147.332181][ T345] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 147.338588][ T345] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 147.351850][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 147.381921][ T345] usb 4-1: USB disconnect, device number 14 [ 147.591630][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 147.711646][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.721753][ T2096] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 147.753436][ T4974] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.801897][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 147.811028][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 147.819836][ T24] usb 3-1: SerialNumber: syz [ 147.837495][ T24] usb 3-1: config 0 descriptor?? [ 147.882614][ T24] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 147.889636][ T24] uvcvideo 3-1:0.0: Entity type for entity Output 255 was not initialized! [ 147.898405][ T24] usb 3-1: Failed to create links for entity 255 [ 147.905112][ T24] usb 3-1: Failed to register entities (-22). [ 147.935150][ T4992] loop1: detected capacity change from 0 to 256 [ 147.947366][ T4992] FAT-fs (loop1): Directory bread(block 64) failed [ 147.954041][ T4992] FAT-fs (loop1): Directory bread(block 65) failed [ 147.955661][ T4996] syz-executor.0[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.960565][ T4992] FAT-fs (loop1): Directory bread(block 66) failed [ 147.960589][ T4996] syz-executor.0[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.973451][ T4992] FAT-fs (loop1): Directory bread(block 67) failed [ 147.991926][ T4996] syz-executor.0[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.997896][ T4996] syz-executor.0[4996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.998420][ T4992] FAT-fs (loop1): Directory bread(block 68) failed [ 148.028576][ T4992] FAT-fs (loop1): Directory bread(block 69) failed [ 148.035002][ T4992] FAT-fs (loop1): Directory bread(block 70) failed [ 148.041392][ T4992] FAT-fs (loop1): Directory bread(block 71) failed [ 148.047951][ T4992] FAT-fs (loop1): Directory bread(block 72) failed [ 148.054930][ T4992] FAT-fs (loop1): Directory bread(block 73) failed [ 148.105699][ T484] kworker/u4:5: attempt to access beyond end of device [ 148.105699][ T484] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 148.131951][ T345] usb 3-1: USB disconnect, device number 14 [ 148.176617][ T5010] loop1: detected capacity change from 0 to 256 [ 148.189581][ T5010] FAT-fs (loop1): Directory bread(block 64) failed [ 148.196115][ T5010] FAT-fs (loop1): Directory bread(block 65) failed [ 148.202931][ T5010] FAT-fs (loop1): Directory bread(block 66) failed [ 148.209414][ T5010] FAT-fs (loop1): Directory bread(block 67) failed [ 148.216328][ T5010] FAT-fs (loop1): Directory bread(block 68) failed [ 148.222960][ T5010] FAT-fs (loop1): Directory bread(block 69) failed [ 148.230220][ T5010] FAT-fs (loop1): Directory bread(block 70) failed [ 148.236889][ T5010] FAT-fs (loop1): Directory bread(block 71) failed [ 148.245707][ T5010] FAT-fs (loop1): Directory bread(block 72) failed [ 148.252573][ T5010] FAT-fs (loop1): Directory bread(block 73) failed [ 148.291809][ T301] kworker/u4:3: attempt to access beyond end of device [ 148.291809][ T301] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 148.324786][ T5019] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.491823][ T5029] loop1: detected capacity change from 0 to 256 [ 148.506573][ T5029] FAT-fs (loop1): Directory bread(block 64) failed [ 148.513134][ T5029] FAT-fs (loop1): Directory bread(block 65) failed [ 148.519568][ T5029] FAT-fs (loop1): Directory bread(block 66) failed [ 148.526189][ T5029] FAT-fs (loop1): Directory bread(block 67) failed [ 148.532858][ T5029] FAT-fs (loop1): Directory bread(block 68) failed [ 148.539625][ T5029] FAT-fs (loop1): Directory bread(block 69) failed [ 148.546155][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 148.546302][ T5029] FAT-fs (loop1): Directory bread(block 70) failed [ 148.560161][ T5029] FAT-fs (loop1): Directory bread(block 71) failed [ 148.566546][ T5029] FAT-fs (loop1): Directory bread(block 72) failed [ 148.572874][ T5029] FAT-fs (loop1): Directory bread(block 73) failed [ 148.605134][ T360] kworker/u4:4: attempt to access beyond end of device [ 148.605134][ T360] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 148.911709][ T319] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 148.961702][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.972751][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.982428][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.991632][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.001295][ T6] usb 5-1: config 0 descriptor?? [ 149.038402][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.045654][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.053991][ T5044] device bridge_slave_0 entered promiscuous mode [ 149.061668][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.068533][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.076459][ T5044] device bridge_slave_1 entered promiscuous mode [ 149.128580][ T5044] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.135578][ T5044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.142935][ T5044] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.149792][ T5044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.178109][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.187437][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.196716][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.213385][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.222006][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.229095][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.236581][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.245236][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.252232][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.272843][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.286179][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.303151][ T319] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 149.329204][ T5044] device veth0_vlan entered promiscuous mode [ 149.339469][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.353354][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.362753][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.370670][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.391729][ T319] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 149.392235][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.403801][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 149.411813][ T5044] device veth1_macvtap entered promiscuous mode [ 149.425577][ T319] usb 3-1: SerialNumber: syz [ 149.432287][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.454095][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.483003][ T319] usb 3-1: bad CDC descriptors [ 149.519992][ T5061] loop1: detected capacity change from 0 to 256 [ 149.532808][ T360] device bridge_slave_1 left promiscuous mode [ 149.536607][ T5061] FAT-fs (loop1): Directory bread(block 64) failed [ 149.540031][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.545521][ T5061] FAT-fs (loop1): Directory bread(block 65) failed [ 149.559048][ T5061] FAT-fs (loop1): Directory bread(block 66) failed [ 149.565848][ T360] device bridge_slave_0 left promiscuous mode [ 149.566063][ T5061] FAT-fs (loop1): Directory bread(block 67) failed [ 149.575028][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.578862][ T5061] FAT-fs (loop1): Directory bread(block 68) failed [ 149.591842][ T28] kauditd_printk_skb: 1129 callbacks suppressed [ 149.591866][ T28] audit: type=1326 audit(1717412054.844:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29d107a667 code=0x7ffc0000 [ 149.599542][ T5061] FAT-fs (loop1): Directory bread(block 69) failed [ 149.622191][ T28] audit: type=1326 audit(1717412054.844:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29d1040329 code=0x7ffc0000 [ 149.622291][ T28] audit: type=1326 audit(1717412054.844:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d107cee9 code=0x7ffc0000 [ 149.622316][ T28] audit: type=1326 audit(1717412054.844:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29d107a667 code=0x7ffc0000 [ 149.622340][ T28] audit: type=1326 audit(1717412054.844:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29d1040329 code=0x7ffc0000 [ 149.622362][ T28] audit: type=1326 audit(1717412054.844:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d107cee9 code=0x7ffc0000 [ 149.622383][ T28] audit: type=1326 audit(1717412054.844:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29d107a667 code=0x7ffc0000 [ 149.622403][ T28] audit: type=1326 audit(1717412054.844:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29d1040329 code=0x7ffc0000 [ 149.622502][ T28] audit: type=1326 audit(1717412054.844:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d107cee9 code=0x7ffc0000 [ 149.622534][ T28] audit: type=1326 audit(1717412054.844:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29d107a667 code=0x7ffc0000 [ 149.854382][ T360] device veth1_macvtap left promiscuous mode [ 149.860291][ T360] device veth0_vlan left promiscuous mode [ 149.871127][ T24] usb 3-1: USB disconnect, device number 15 [ 149.882268][ T6] usb 5-1: string descriptor 0 read error: -71 [ 149.883763][ T5061] FAT-fs (loop1): Directory bread(block 70) failed [ 149.900518][ T5061] FAT-fs (loop1): Directory bread(block 71) failed [ 149.907878][ T6] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 149.907885][ T5061] FAT-fs (loop1): Directory bread(block 72) failed [ 149.907919][ T6] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 149.919987][ T5061] FAT-fs (loop1): Directory bread(block 73) failed [ 149.925496][ T6] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 149.946459][ T6] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 149.953951][ T6] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 149.967816][ T6] usb 5-1: USB disconnect, device number 10 [ 150.045534][ T484] kworker/u4:5: attempt to access beyond end of device [ 150.045534][ T484] loop1: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 150.117694][ T5069] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 150.141487][ T5070] mmap: syz-executor.1 (5070) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.237205][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.244525][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.252075][ T5074] device bridge_slave_0 entered promiscuous mode [ 150.259635][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.266664][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.275913][ T5074] device bridge_slave_1 entered promiscuous mode [ 150.342944][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.349917][ T5074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.357078][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.363835][ T5074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.402896][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.416316][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.417155][ T5087] syz-executor.2[5087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.423818][ T5087] syz-executor.2[5087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.435663][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.454401][ T345] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.469473][ T5087] syz-executor.2[5087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.469588][ T5087] syz-executor.2[5087] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.507964][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.529354][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.536288][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.543700][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.555367][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.562285][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.569810][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.578094][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.600041][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 150.608969][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 150.616880][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 150.626810][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 150.637914][ T5074] device veth0_vlan entered promiscuous mode [ 150.655398][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.665308][ T5074] device veth1_macvtap entered promiscuous mode [ 150.678220][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.694664][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.836400][ T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.847542][ T345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.862081][ T5120] syz-executor.0[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.862182][ T5120] syz-executor.0[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.874982][ T345] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 150.891862][ T338] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 150.897095][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.906855][ T5120] syz-executor.0[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.913796][ T345] usb 4-1: config 0 descriptor?? [ 150.925581][ T5120] syz-executor.0[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.950006][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.969672][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.980279][ T5121] device bridge_slave_0 entered promiscuous mode [ 150.991382][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.999055][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.007009][ T5121] device bridge_slave_1 entered promiscuous mode [ 151.066662][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.073722][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.081005][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.088033][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.099918][ T5130] loop0: detected capacity change from 0 to 256 [ 151.125212][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.138194][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.156895][ T360] device bridge_slave_1 left promiscuous mode [ 151.167192][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.175473][ T360] device bridge_slave_0 left promiscuous mode [ 151.181686][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.190179][ T360] device veth1_macvtap left promiscuous mode [ 151.196458][ T360] device veth0_vlan left promiscuous mode [ 151.281889][ T338] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 151.308887][ T5138] device veth0_vlan left promiscuous mode [ 151.316503][ T5138] device veth0_vlan entered promiscuous mode [ 151.332374][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.339880][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.372726][ T338] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.373585][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.391863][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.393172][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.403746][ T338] usb 3-1: SerialNumber: syz [ 151.411472][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.419382][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.427213][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.436408][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.445909][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.452824][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.460354][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.462195][ T338] usb 3-1: bad CDC descriptors [ 151.474437][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.482622][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.490841][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.512608][ T345] hid-multitouch 0003:1FD2:6007.0019: unknown main item tag 0x0 [ 151.541266][ T5121] device veth0_vlan entered promiscuous mode [ 151.549865][ T345] hid-multitouch 0003:1FD2:6007.0019: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 151.569273][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.578737][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.587174][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.595186][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.603724][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.611340][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.624866][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.633014][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.642357][ T5121] device veth1_macvtap entered promiscuous mode [ 151.653928][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 151.674900][ T6] usb 3-1: USB disconnect, device number 16 [ 151.681035][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.689701][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 151.701922][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.711198][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.746590][ T339] usb 4-1: USB disconnect, device number 15 [ 151.835920][ T5178] loop1: detected capacity change from 0 to 256 [ 151.871607][ T60] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 152.022877][ T5182] loop4: detected capacity change from 0 to 40427 [ 152.029967][ T5182] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.037537][ T5182] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.048259][ T5182] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.075394][ T5182] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.082560][ T5182] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.242413][ T360] device bridge_slave_1 left promiscuous mode [ 152.248538][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.262212][ T360] device bridge_slave_0 left promiscuous mode [ 152.270403][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.289375][ T360] device veth1_macvtap left promiscuous mode [ 152.299114][ T360] device veth0_vlan left promiscuous mode [ 152.311806][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.329920][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.339620][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 152.348613][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.360820][ T5203] overlayfs: statfs failed on './file0' [ 152.366670][ T60] usb 1-1: config 0 descriptor?? [ 152.421634][ T338] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.671680][ T338] usb 5-1: Using ep0 maxpacket: 8 [ 152.701625][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 152.731802][ T39] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 152.791690][ T338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.881716][ T338] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 152.890874][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 152.899002][ T338] usb 5-1: SerialNumber: syz [ 152.904010][ T338] usb 5-1: config 0 descriptor?? [ 152.944842][ T338] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 152.951765][ T338] uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized! [ 152.960344][ T338] usb 5-1: Failed to create links for entity 255 [ 152.966574][ T338] usb 5-1: Failed to register entities (-22). [ 153.061688][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 153.091703][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.102532][ T2336] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 153.110035][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.120077][ T39] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 153.129364][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.137868][ T39] usb 3-1: config 0 descriptor?? [ 153.145054][ T339] usb 5-1: USB disconnect, device number 11 [ 153.151620][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.160821][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.168757][ T24] usb 4-1: SerialNumber: syz [ 153.212077][ T24] usb 4-1: bad CDC descriptors [ 153.414812][ T24] usb 4-1: USB disconnect, device number 16 [ 153.461709][ T2336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.472791][ T2336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.482695][ T2336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.495375][ T2336] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 153.504365][ T60] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #200: -71 [ 153.504370][ T2336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.504402][ T60] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 153.529122][ T60] uclogic 0003:256C:006D.001A: failed probing pen v2 parameters: -71 [ 153.529265][ T2336] usb 2-1: config 0 descriptor?? [ 153.537335][ T60] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 153.549446][ T60] uclogic: probe of 0003:256C:006D.001A failed with error -71 [ 153.558642][ T60] usb 1-1: USB disconnect, device number 11 [ 153.622314][ T39] hid-multitouch 0003:1FD2:6007.001B: unknown main item tag 0x0 [ 153.630886][ T39] hid-multitouch 0003:1FD2:6007.001B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 153.825071][ T60] usb 3-1: USB disconnect, device number 17 [ 153.945299][ T5236] overlayfs: statfs failed on './file0' [ 154.022501][ T2336] betop 0003:11C2:2208.001C: item fetching failed at offset 4/5 [ 154.030300][ T2336] betop 0003:11C2:2208.001C: parse failed [ 154.035958][ T2336] betop: probe of 0003:11C2:2208.001C failed with error -22 [ 154.238195][ T2336] usb 2-1: USB disconnect, device number 16 [ 154.476894][ T5255] loop0: detected capacity change from 0 to 40427 [ 154.488970][ T5255] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 154.505210][ T5255] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 154.528789][ T5271] serio: Serial port ptm0 [ 154.557816][ T5255] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.569014][ T5278] serio: Serial port ptm0 [ 154.601753][ T28] kauditd_printk_skb: 4310 callbacks suppressed [ 154.601775][ T28] audit: type=1326 audit(1717412059.844:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d107cee9 code=0x7ffc0000 [ 154.632829][ T28] audit: type=1326 audit(1717412059.854:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29d107a667 code=0x7ffc0000 [ 154.640457][ T5282] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.659165][ T28] audit: type=1326 audit(1717412059.854:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29d1040329 code=0x7ffc0000 [ 154.666682][ T5255] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 154.690847][ T28] audit: type=1326 audit(1717412059.854:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d107cee9 code=0x7ffc0000 [ 154.698467][ T5282] FAT-fs (loop5): unable to read boot sector [ 154.722835][ T28] audit: type=1326 audit(1717412059.854:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29d107a667 code=0x7ffc0000 [ 154.728444][ T5255] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 154.752199][ T28] audit: type=1326 audit(1717412059.854:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29d1040329 code=0x7ffc0000 [ 154.786133][ T28] audit: type=1326 audit(1717412059.854:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d107cee9 code=0x7ffc0000 [ 154.816476][ T28] audit: type=1326 audit(1717412059.854:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f29d107a667 code=0x7ffc0000 [ 154.867409][ T28] audit: type=1326 audit(1717412059.854:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f29d1040329 code=0x7ffc0000 [ 154.902203][ T28] audit: type=1326 audit(1717412059.854:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5249 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29d107cee9 code=0x7ffc0000 [ 154.940642][ T5300] serio: Serial port ptm0 [ 155.037363][ T5316] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.065817][ T5316] FAT-fs (loop7): unable to read boot sector [ 155.090286][ T5331] tipc: Started in network mode [ 155.095753][ T5331] tipc: Node identity e0000001, cluster identity 4711 [ 155.102682][ T5331] tipc: Enabling of bearer rejected, failed to enable media [ 155.136541][ T5340] loop0: detected capacity change from 0 to 1024 [ 155.153861][ T5340] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 155.222781][ T5074] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor.0: path /root/syzkaller-testdir2005386186/syzkaller.30JULv/17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.251963][ T5074] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.272224][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.288772][ T5074] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor.0: path /root/syzkaller-testdir2005386186/syzkaller.30JULv/17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.315460][ T5074] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.335522][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.352243][ T5074] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor.0: path /root/syzkaller-testdir2005386186/syzkaller.30JULv/17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.384270][ T5074] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.405304][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.417715][ T5074] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor.0: path /root/syzkaller-testdir2005386186/syzkaller.30JULv/17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.444172][ T5074] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.465801][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.471799][ T5363] tipc: Started in network mode [ 155.478105][ T5074] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor.0: path /root/syzkaller-testdir2005386186/syzkaller.30JULv/17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.482246][ T5363] tipc: Node identity e0000001, cluster identity 4711 [ 155.515016][ T5363] tipc: Enabling of bearer rejected, failed to enable media [ 155.516419][ T5074] EXT4-fs error (device loop0): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.542993][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.555568][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.574957][ T5360] loop1: detected capacity change from 0 to 2048 [ 155.582301][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.596033][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.618591][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.633057][ T5360] Alternate GPT is invalid, using primary GPT. [ 155.636222][ T5074] EXT4-fs warning (device loop0): ext4_empty_dir:3101: inode #11: comm syz-executor.0: directory missing '.' [ 155.648431][ T5360] loop1: p1 p2 p3 [ 155.660851][ T5371] loop3: detected capacity change from 0 to 1024 [ 155.679197][ T5371] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 155.704226][ T576] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir3523013437/syzkaller.OS0iV4/396/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.731397][ T576] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.751050][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 155.762911][ T576] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir3523013437/syzkaller.OS0iV4/396/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.789609][ T576] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.809420][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 155.821284][ T576] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir3523013437/syzkaller.OS0iV4/396/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.848337][ T576] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.867918][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 155.880858][ T576] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir3523013437/syzkaller.OS0iV4/396/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.882502][ T5074] EXT4-fs (loop0): unmounting filesystem. [ 155.908275][ T576] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.933368][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 155.945366][ T576] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir3523013437/syzkaller.OS0iV4/396/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 155.990706][ T576] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.026012][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 156.047881][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 156.067232][ T5391] loop4: detected capacity change from 0 to 512 [ 156.080465][ T5391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 156.089081][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 156.109714][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 156.134878][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 156.162964][ T5391] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 156.182456][ T576] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.' [ 156.194341][ T5391] ext4 filesystem being mounted at /root/syzkaller-testdir3988169748/syzkaller.OxNKUq/59/file1 supports timestamps until 2038 (0x7fffffff) [ 156.197597][ T5397] loop1: detected capacity change from 0 to 2048 [ 156.239841][ T4744] EXT4-fs (loop4): unmounting filesystem. [ 156.289825][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.292611][ T5397] Alternate GPT is invalid, using primary GPT. [ 156.296772][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.304738][ T5397] loop1: p1 p2 p3 [ 156.310441][ T5403] device bridge_slave_0 entered promiscuous mode [ 156.323580][ T576] EXT4-fs (loop3): unmounting filesystem. [ 156.323819][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.336681][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.344129][ T5403] device bridge_slave_1 entered promiscuous mode [ 156.402533][ T5412] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.416877][ T5412] FAT-fs (loop9): unable to read boot sector [ 156.438004][ T5414] tipc: Failed to remove unknown binding: 66,1,1/0:680695303/680695305 [ 156.456596][ T5414] tipc: Failed to remove unknown binding: 66,1,1/0:680695303/680695305 [ 156.503516][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.510426][ T5403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.517587][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.524668][ T5403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.583108][ T484] device bridge_slave_1 left promiscuous mode [ 156.587409][ T5427] loop1: detected capacity change from 0 to 1024 [ 156.589221][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.607923][ T484] device bridge_slave_0 left promiscuous mode [ 156.614172][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.623048][ T484] device veth1_macvtap left promiscuous mode [ 156.628948][ T484] device veth0_vlan left promiscuous mode [ 156.636092][ T5427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 156.662351][ T5121] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir71579209/syzkaller.vmnLx1/27/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.688449][ T5121] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.708643][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.721862][ T5121] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir71579209/syzkaller.vmnLx1/27/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.747918][ T5121] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.767696][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.779992][ T5121] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir71579209/syzkaller.vmnLx1/27/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.806124][ T5121] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.825819][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.837539][ T5121] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir71579209/syzkaller.vmnLx1/27/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.865189][ T5121] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.885341][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.897411][ T5121] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor.1: path /root/syzkaller-testdir71579209/syzkaller.vmnLx1/27/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.923965][ T5121] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 156.931654][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.945293][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.962943][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.975091][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.987708][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 156.999877][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 157.012862][ T5121] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor.1: directory missing '.' [ 157.072871][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.080546][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.089255][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.126129][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.134331][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.145840][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.153872][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.163479][ T5121] EXT4-fs (loop1): unmounting filesystem. [ 157.193483][ T5437] loop2: detected capacity change from 0 to 2048 [ 157.201366][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.210436][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.212922][ T5437] Alternate GPT is invalid, using primary GPT. [ 157.224470][ T5403] device veth0_vlan entered promiscuous mode [ 157.232319][ T5437] loop2: p1 p2 p3 [ 157.243204][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.255484][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.263970][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.271417][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.288914][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.296704][ T5429] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.303903][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.315084][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.324546][ T5429] device bridge_slave_0 entered promiscuous mode [ 157.325037][ T39] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 157.340869][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.349701][ T39] usb 5-1: config 0 descriptor?? [ 157.351737][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.368918][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.381908][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.390063][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.399957][ T5429] device bridge_slave_1 entered promiscuous mode [ 157.427112][ T5403] device veth1_macvtap entered promiscuous mode [ 157.435045][ T5448] tipc: Failed to remove unknown binding: 66,1,1/0:3896792607/3896792609 [ 157.444220][ T5448] tipc: Failed to remove unknown binding: 66,1,1/0:3896792607/3896792609 [ 157.484323][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.492547][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.500890][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.510461][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.519068][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.624404][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.632053][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.639548][ T5446] device bridge_slave_0 entered promiscuous mode [ 157.652352][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.659478][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.667098][ T5446] device bridge_slave_1 entered promiscuous mode [ 157.690791][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.697781][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.705446][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.712443][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.780667][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.785959][ T5472] loop2: detected capacity change from 0 to 2048 [ 157.794462][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.802638][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.813096][ T5472] Alternate GPT is invalid, using primary GPT. [ 157.819472][ T5472] loop2: p1 p2 p3 [ 157.832737][ T39] pantherlord 0003:0810:0002.001D: item fetching failed at offset 0/3 [ 157.840990][ T39] pantherlord 0003:0810:0002.001D: parse failed [ 157.851898][ T39] pantherlord: probe of 0003:0810:0002.001D failed with error -22 [ 157.862891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.871090][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.877983][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.886064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.894506][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.901382][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.927016][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.940911][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.961120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.971995][ T5478] tipc: Failed to remove unknown binding: 66,1,1/0:301053697/301053699 [ 157.980575][ T5478] tipc: Failed to remove unknown binding: 66,1,1/0:301053697/301053699 [ 157.982068][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.016931][ T5429] device veth0_vlan entered promiscuous mode [ 158.024151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.041381][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.048435][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.060305][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.068845][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.077400][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.084340][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.095862][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.104023][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.111896][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.128647][ T338] usb 5-1: USB disconnect, device number 12 [ 158.137263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.146142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.172737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.180986][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.189001][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.197216][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.212000][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 158.220623][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.232924][ T484] device bridge_slave_1 left promiscuous mode [ 158.239008][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.246656][ T484] device bridge_slave_0 left promiscuous mode [ 158.253176][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.261948][ T484] device bridge_slave_1 left promiscuous mode [ 158.268255][ T484] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.275814][ T484] device bridge_slave_0 left promiscuous mode [ 158.282279][ T484] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.291052][ T484] device veth1_macvtap left promiscuous mode [ 158.297568][ T484] device veth0_vlan left promiscuous mode [ 158.303735][ T484] device veth1_macvtap left promiscuous mode [ 158.309763][ T484] device veth0_vlan left promiscuous mode [ 158.486301][ T5429] device veth1_macvtap entered promiscuous mode [ 158.496673][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.504634][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.512622][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.526948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.534618][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.542848][ T5446] device veth0_vlan entered promiscuous mode [ 158.557939][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.566339][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.574946][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.583553][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.596560][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.605496][ T339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.623017][ T5446] device veth1_macvtap entered promiscuous mode [ 158.650985][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.665432][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.674840][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.688663][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.697897][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.753984][ T5501] tipc: Failed to remove unknown binding: 66,1,1/0:1154792036/1154792038 [ 158.767360][ T5501] tipc: Failed to remove unknown binding: 66,1,1/0:1154792036/1154792038 [ 158.925013][ T339] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 159.173571][ T6] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 159.331798][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.355506][ T5542] loop4: detected capacity change from 0 to 40427 [ 159.357348][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.371932][ T339] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 159.372045][ T5542] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 159.381086][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.392040][ T5542] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 159.397968][ T339] usb 4-1: config 0 descriptor?? [ 159.407870][ T5542] F2FS-fs (loop4): invalid crc value [ 159.418005][ T5542] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.443915][ T5542] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.451058][ T5542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.466666][ T4744] syz-executor.4: attempt to access beyond end of device [ 159.466666][ T4744] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.581739][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.592969][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.603967][ T6] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 159.613269][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.622573][ T6] usb 2-1: config 0 descriptor?? [ 159.695654][ T28] kauditd_printk_skb: 1015 callbacks suppressed [ 159.695680][ T28] audit: type=1400 audit(1717412064.944:7947): avc: denied { create } for pid=5559 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 160.112762][ T6] pantherlord 0003:0810:0002.001F: item fetching failed at offset 0/3 [ 160.133131][ T6] pantherlord 0003:0810:0002.001F: parse failed [ 160.140262][ T5572] loop4: detected capacity change from 0 to 40427 [ 160.147875][ T6] pantherlord: probe of 0003:0810:0002.001F failed with error -22 [ 160.159491][ T5572] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 160.170729][ T5572] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 160.180798][ T5572] F2FS-fs (loop4): invalid crc value [ 160.191579][ T5572] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.232629][ T5572] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 160.240389][ T5572] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 160.285468][ T4744] syz-executor.4: attempt to access beyond end of device [ 160.285468][ T4744] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 160.316398][ T6] usb 2-1: USB disconnect, device number 17 [ 160.551810][ T339] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #200: -71 [ 160.561998][ T339] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 160.570020][ T339] uclogic 0003:256C:006D.001E: failed probing pen v2 parameters: -71 [ 160.578195][ T339] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 160.586411][ T339] uclogic: probe of 0003:256C:006D.001E failed with error -71 [ 160.603494][ T339] usb 4-1: USB disconnect, device number 17 [ 160.848330][ T5642] loop1: detected capacity change from 0 to 1024 [ 160.855676][ T5642] EXT4-fs: Ignoring removed orlov option [ 160.861766][ T5642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.874350][ T5642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.894814][ T5642] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.1: corrupt xattr in inline inode [ 160.908958][ T5642] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.1: corrupted in-inode xattr [ 160.925274][ T5649] loop2: detected capacity change from 0 to 1024 [ 160.930747][ T28] audit: type=1400 audit(1717412066.174:7948): avc: denied { unlink } for pid=5446 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 160.933304][ T5649] EXT4-fs: Ignoring removed orlov option [ 160.955298][ T28] audit: type=1400 audit(1717412066.184:7949): avc: denied { unlink } for pid=5446 comm="syz-executor.1" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 160.960124][ T5649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.990313][ T5446] EXT4-fs (loop1): unmounting filesystem. [ 161.004934][ T5649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 161.030700][ T5655] syz-executor.1[5655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.030799][ T5655] syz-executor.1[5655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.038911][ T5649] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.2: corrupt xattr in inline inode [ 161.067924][ T5649] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.2: corrupted in-inode xattr [ 161.108930][ T5655] syz-executor.1[5655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.109024][ T5655] syz-executor.1[5655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.125790][ T1900] ================================================================== [ 161.145319][ T1900] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0 [ 161.153127][ T1900] Read of size 4 at addr ffff8881312ca000 by task syz-executor.2/1900 [ 161.161203][ T1900] [ 161.163377][ T1900] CPU: 0 PID: 1900 Comm: syz-executor.2 Tainted: G W 6.1.78-syzkaller-00134-g997e6b3f6a21 #0 [ 161.174746][ T1900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 161.184794][ T1900] Call Trace: [ 161.187916][ T1900] [ 161.190693][ T1900] dump_stack_lvl+0x151/0x1b7 [ 161.195284][ T1900] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 161.200600][ T1900] ? _printk+0xd1/0x111 [ 161.204849][ T1900] ? __virt_addr_valid+0x242/0x2f0 [ 161.209802][ T1900] print_report+0x158/0x4e0 [ 161.214126][ T1900] ? __virt_addr_valid+0x242/0x2f0 [ 161.219083][ T1900] ? kasan_addr_to_slab+0xd/0x80 [ 161.223840][ T1900] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 161.229317][ T1900] kasan_report+0x13c/0x170 [ 161.233648][ T1900] ? ext4_xattr_delete_inode+0xcd0/0xce0 [ 161.239228][ T1900] __asan_report_load4_noabort+0x14/0x20 [ 161.244678][ T1900] ext4_xattr_delete_inode+0xcd0/0xce0 [ 161.249976][ T1900] ? sb_end_intwrite+0x130/0x130 [ 161.254926][ T1900] ? ext4_expand_extra_isize_ea+0x1c40/0x1c40 [ 161.260945][ T1900] ? __kasan_check_read+0x11/0x20 [ 161.265906][ T1900] ? ext4_inode_is_fast_symlink+0x295/0x3d0 [ 161.271623][ T1900] ? ext4_evict_inode+0xbc2/0x1550 [ 161.276656][ T1900] ext4_evict_inode+0xef9/0x1550 [ 161.281441][ T1900] ? _raw_spin_unlock+0x4c/0x70 [ 161.286140][ T1900] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 161.292188][ T1900] ? _raw_spin_unlock+0x4c/0x70 [ 161.296874][ T1900] ? inode_io_list_del+0x18b/0x1a0 [ 161.302027][ T1900] ? ext4_inode_is_fast_symlink+0x3d0/0x3d0 [ 161.307875][ T1900] evict+0x2a3/0x630 [ 161.311582][ T1900] iput+0x642/0x870 [ 161.315270][ T1900] vfs_rmdir+0x3c2/0x500 [ 161.319333][ T1900] do_rmdir+0x3ab/0x630 [ 161.323322][ T1900] ? d_delete_notify+0x160/0x160 [ 161.328078][ T1900] __x64_sys_unlinkat+0xdf/0xf0 [ 161.332761][ T1900] do_syscall_64+0x3d/0xb0 [ 161.337098][ T1900] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 161.342882][ T1900] RIP: 0033:0x7ff49527c6c7 [ 161.347079][ T1900] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 161.366775][ T1900] RSP: 002b:00007ffe369716f8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 161.375135][ T1900] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007ff49527c6c7 [ 161.382962][ T1900] RDX: 0000000000000200 RSI: 00007ffe369728a0 RDI: 00000000ffffff9c [ 161.391286][ T1900] RBP: 00007ff4952c8336 R08: 0000000000000000 R09: 0000000000000000 [ 161.399178][ T1900] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffe369728a0 [ 161.407003][ T1900] R13: 00007ff4952c8336 R14: 000000000002747f R15: 0000000000000009 [ 161.415029][ T1900] [ 161.417975][ T1900] [ 161.420124][ T1900] The buggy address belongs to the physical page: [ 161.426930][ T1900] page:ffffea0004c4b280 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x1312ca [ 161.437073][ T1900] flags: 0x4000000000000000(zone=1) [ 161.442105][ T1900] raw: 4000000000000000 ffffea0004961d88 ffffea0004c3b048 0000000000000000 [ 161.450525][ T1900] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 161.459121][ T1900] page dumped because: kasan: bad access detected [ 161.465359][ T1900] page_owner tracks the page as freed [ 161.470751][ T1900] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5658, tgid 5658 (syz-executor.3), ts 161107209778, free_ts 161123756312 [ 161.488769][ T1900] post_alloc_hook+0x213/0x220 [ 161.493476][ T1900] prep_new_page+0x1b/0x110 [ 161.497779][ T1900] get_page_from_freelist+0x27ea/0x2870 [ 161.503254][ T1900] __alloc_pages+0x3a1/0x780 [ 161.507681][ T1900] __folio_alloc+0x15/0x40 [ 161.512054][ T1900] wp_page_copy+0x261/0x1690 [ 161.516477][ T1900] do_wp_page+0xc25/0xdf0 [ 161.520647][ T1900] handle_mm_fault+0x15a2/0x2f40 [ 161.525426][ T1900] exc_page_fault+0x3b3/0x700 [ 161.529921][ T1900] asm_exc_page_fault+0x27/0x30 [ 161.534844][ T1900] page last free stack trace: [ 161.539378][ T1900] free_unref_page_prepare+0x83d/0x850 [ 161.544634][ T1900] free_unref_page_list+0xf1/0x7b0 [ 161.549590][ T1900] release_pages+0xf7f/0xfe0 [ 161.554099][ T1900] free_pages_and_swap_cache+0x8a/0xa0 [ 161.559396][ T1900] tlb_finish_mmu+0x1e0/0x3f0 [ 161.563910][ T1900] exit_mmap+0x421/0x940 [ 161.567990][ T1900] __mmput+0x95/0x310 [ 161.571805][ T1900] mmput+0x56/0x170 [ 161.575458][ T1900] do_exit+0xb29/0x2b80 [ 161.579545][ T1900] do_group_exit+0x21a/0x2d0 [ 161.583948][ T1900] get_signal+0x169d/0x1820 [ 161.588288][ T1900] arch_do_signal_or_restart+0xb0/0x16f0 [ 161.593755][ T1900] exit_to_user_mode_loop+0x74/0xa0 [ 161.598794][ T1900] exit_to_user_mode_prepare+0x5a/0xa0 [ 161.604123][ T1900] syscall_exit_to_user_mode+0x26/0x140 [ 161.609466][ T1900] do_syscall_64+0x49/0xb0 [ 161.613814][ T1900] [ 161.615973][ T1900] Memory state around the buggy address: [ 161.621449][ T1900] ffff8881312c9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.629424][ T1900] ffff8881312c9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 161.637265][ T1900] >ffff8881312ca000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 161.645152][ T1900] ^ [ 161.649230][ T1900] ffff8881312ca080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 2024/06/03 10:54:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 161.657319][ T1900] ffff8881312ca100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 161.665371][ T1900] ================================================================== [ 161.729991][ T1900] Disabling lock debugging due to kernel taint [ 161.853769][ T8] tipc: Left network mode [ 161.854048][ T1900] EXT4-fs (loop2): unmounting filesystem.