last executing test programs: 6.706498603s ago: executing program 2 (id=15378): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x40}, {0x16}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e6405000000be9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578ead8ec76b17acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022e2731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181224175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329924b8b39e6dc4b2077a4b9645d8e0a445ae2c7be53d66007d491ab0f6851a2cc1cffeed15f586a035c1a2888c56f43"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x50) 6.667290317s ago: executing program 2 (id=15381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigprocmask(0x2, &(0x7f0000000040), 0x0, 0x8) connect$inet6(r1, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x14}}, @dontfrag={{0x14}}], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) 6.667081877s ago: executing program 2 (id=15382): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x8, 0x6db492fb9d83c1ea, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) readlink(&(0x7f0000000480)='./file2\x00', &(0x7f0000000600)=""/251, 0xfb) 6.243477345s ago: executing program 2 (id=15384): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) prctl$PR_PAC_RESET_KEYS(0x1d, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0xc, @string={0xc, 0x3, "3b772b5c38e2870b4e77"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000304000000880336"], 0x0, 0x0}, 0x0) 3.116705603s ago: executing program 2 (id=15423): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x88}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x1000, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000003c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x10, 0x700, 0x6, 0x1, {{0x7, 0x4, 0x3, 0x24, 0x1c, 0x64, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3b}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r8) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0c062dbd7000fedbdf251600000005000400010080000500030001000000050002e30000000005000400010069a4a69ec189a2e2c7797300003800018008000300010000000800030002000000140002006970366772657461703000000000000008000300020000000800030000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) write$P9_RGETLOCK(r9, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r9, 0x407, 0x7000000) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000003f000/0xf000)=nil, 0x400000, 0x0, 0x18100}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40047451, 0x2000000c) 2.35800871s ago: executing program 2 (id=15434): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0xc, @string={0xc, 0x3, "3b772b5c38e2870b4e77"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000304000000880336"], 0x0, 0x0}, 0x0) 962.094184ms ago: executing program 4 (id=15465): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x8, 0x6db492fb9d83c1ea, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, 0x0, &(0x7f00000000c0)=""/109}, 0x20) readlink(&(0x7f0000000480)='./file2\x00', &(0x7f0000000600)=""/251, 0xfb) 953.897955ms ago: executing program 0 (id=15466): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x40}, {0x16}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x18, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b006306", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x50) 942.531046ms ago: executing program 4 (id=15467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigprocmask(0x2, &(0x7f0000000040), 0x0, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x14}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) 914.690688ms ago: executing program 0 (id=15468): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 914.423918ms ago: executing program 4 (id=15469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00'}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000005c0)={0x1, 0x0, [{0x80000008, 0x4, 0x0, 0x0, 0xffffffff}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}]}, 0x30}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 914.131368ms ago: executing program 0 (id=15470): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 867.667142ms ago: executing program 0 (id=15471): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x8, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 867.284953ms ago: executing program 0 (id=15472): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='g', @ANYRESHEX]) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2a4, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1d4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x94, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2a4}}, 0x0) 866.980203ms ago: executing program 0 (id=15473): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001500)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c342", 0x4}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}], 0x1}}], 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x21, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in6=@remote}}, {{@in6}}}, &(0x7f0000000680)=0xe8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r3, &(0x7f00000000c0), 0x20000000}, 0x20) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xff07, 0x0, 0x0, 0x0, 0x0, "5f330000a90100f9"}) sendfile(r0, r1, &(0x7f00000006c0)=0x10001, 0x7fff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x8, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) 714.055216ms ago: executing program 4 (id=15477): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd23, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x8, 0x6db492fb9d83c1ea, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), 0x0}, 0x20) readlink(&(0x7f0000000480)='./file2\x00', &(0x7f0000000600)=""/251, 0xfb) 681.297829ms ago: executing program 4 (id=15478): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x40}, {0x16}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0}, 0x50) 655.192801ms ago: executing program 4 (id=15479): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f40)={0x2c, &(0x7f0000000c80)={0x0, 0x0, 0x4, "e06b445a"}, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x99, &(0x7f0000000580)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000d80)='neigh_update\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_control_io(r0, 0x0, &(0x7f00000013c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000d80)={0x0, 0x0, 0x4, "f6b79afc"}, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) syz_usb_control_io(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xa8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000240)={0x40, 0x5, 0xbf, {0xbf, 0x0, "4baba3bd49a4f54918577e2bf554eda329840a58df1eaac20ccbdf13e48053951ed7b08c507055fba1a63595bc06ae5e7a6d01210a358372c03065d056a64eec96ec18941875529af743b1bb55b55cb89ae0ddccca4258e3591f1295e3e8cdf88172beed8ebbbfe3b4061a1f82fe9793a991bc108c5e00a057834f217dcbb8d1506ae85698c32db468108a9bd1674965a3d9667b89c9f4a73135e8fec15647307a88be0f7be531dfeef4bce30a71aadd741f71207ec17aafc1f55532bf"}}, &(0x7f0000000340)={0x0, 0x3, 0xcf, @string={0xcf, 0x3, "910c6914fd4469e5cde12f5419696fba68dfb4d1620d8c8041d2775d9334046698a94bbda63410483adb77c74b836b3773d70b5f215ae393681df54b40d03e609561d6b8b9ca0bd58834082a9565f6ccde10e6f68028f5f1af819fd5c767bf17ea5184d8088d97ea04dd13384620fc5a1c3818d94991429c0dcbe5722c2db328f59fe91f816eec10e12aff62b9125b281fbf8f15cfefd35f635b74d5437f7e0dd627c780815af1b7212556be8c102fa1e19cea92564183a7dd858265945a177b3e23bcd28c7efe51bd99a426ee"}}, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x0, '0a'}, @local=@item_012={0x2, 0x2, 0x9, "e92d"}, @global=@item_4={0x3, 0x1, 0x8, "ce23290d"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd26, 0x5, 0x1, {0x22, 0x374}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000440)={0x0, 0x6, 0xd7, "5d8858e4cc036b40430b849a496fc1d6b997569e62a1ef0a8f7910929be29917a8f22e4c2127bf5d3369af1a6e56b870ab1350c08acd2de58488fb27df40ce1c8ed7913aafc9fdf9044be8ef36f47d204e1bd2f2a7f057512f9ece7538ab79e7f6ff6552ccfe545944704beb40ac990b57360b3ac2a64f10fb2fc9d1a2409040b203c4e9f089f759b6d91d1905beffe56864845fe846518a58af61796d048966b54572438e26d1cb06a6aa54abe8df2e320d3f8df7e7b93d998c30c30fc8189c485840454caf64211340f31285c1b70b05046f78253277"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000680)={0x20, 0x1, 0xc0, "8aaa4a9d508d11b8c96d42624da5bccf64da234c0e735bd4ea8306fcb778208842f5501fad9cea9320b60c4ddd8e0611aa54ea3e22d63c60838cfdcf9889eecce6c0410d24a1a9928d230e3a15e3a268a4148c8e8ec8d9ef6c8dff817f225fa57511729424d2da85a2d5d5a39597de285965525ef15d5dd5207de07e28322ac88c32037a9e442233b3a69a63143830d10cbbcf57781f7116b758661d560f6d06466f990f02d5f1166bbd8ef4c6122c62e16f8210d29d10cb5fe4ac54d9f5d32a"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x7f}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) 635.564193ms ago: executing program 1 (id=15480): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigprocmask(0x2, &(0x7f0000000040), 0x0, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x14}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) 609.766545ms ago: executing program 1 (id=15481): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 609.451355ms ago: executing program 1 (id=15482): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 576.482428ms ago: executing program 1 (id=15483): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x8, 0x0, 0x0, {{0x9, 0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 576.226228ms ago: executing program 1 (id=15484): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='g', @ANYRESHEX]) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2a8, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1d4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x98, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2a8}}, 0x0) 575.458858ms ago: executing program 1 (id=15485): getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close(r2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setresuid(0x0, 0xee01, 0xee00) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, 0x0, 0x0) ioctl$sock_bt_hci(r4, 0x800448d2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'batadv_slave_0\x00'}) 124.343348ms ago: executing program 3 (id=15490): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [], {0x8}, {0x10}}, 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3910744, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@noload}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r3, 0x0, &(0x7f0000000540)=@tcp=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 123.877998ms ago: executing program 3 (id=15491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) rt_sigprocmask(0x2, &(0x7f0000000040), 0x0, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r2, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x14}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0xb) 87.849172ms ago: executing program 3 (id=15492): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_FPU(r2, 0x8000ae8c, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x10000, 0xfffffffd, 0x714, 0x2, 0x0, [{0x7, 0x20, 0x2, '\x00', 0x79}, {0x1f, 0xff, 0x8, '\x00', 0x6}, {0x40, 0x8, 0x9}, {0xf9, 0x86, 0x7f, '\x00', 0xfb}, {0x15, 0x0, 0x1, '\x00', 0x6}, {0x2, 0x1, 0x0, '\x00', 0xff}, {0x8, 0x0, 0x2, '\x00', 0x81}, {0x40, 0x3f, 0xfb, '\x00', 0xfa}, {0x9, 0xe0, 0x7, '\x00', 0x6}, {0x0, 0x7b, 0x20, '\x00', 0x2}, {0x4, 0x0, 0x2, '\x00', 0x1}, {0x8, 0x80, 0xfb, '\x00', 0xc9}, {0x81, 0x0, 0xd1, '\x00', 0x3f}, {0x0, 0x1, 0x12, '\x00', 0xff}, {0xae, 0x8, 0x20, '\x00', 0x9}, {0x6, 0x7f, 0xfe, '\x00', 0xf8}, {0xbd, 0x0, 0x4, '\x00', 0x1}, {0x5, 0x2, 0x1, '\x00', 0x40}, {0x7, 0x5, 0x80, '\x00', 0xff}, {0x40, 0x40, 0xfc, '\x00', 0x8}, {0xfa, 0x0, 0x0, '\x00', 0x7}, {0x0, 0xe8}, {0x81, 0x40, 0x0, '\x00', 0x3f}, {0x0, 0x4, 0x0, '\x00', 0x19}]}}) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x7, 0x4f832, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff}) close(r3) 86.931082ms ago: executing program 3 (id=15493): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 20.031558ms ago: executing program 3 (id=15494): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=15495): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='g', @ANYRESHEX]) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x2a8, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x3, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}, @IFLA_VF_PORTS={0x1d4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0xc}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "714abbd2547de97cbbf6efb226f19bf9"}, @IFLA_PORT_PROFILE={0xd, 0x2, ':(\x8e^[[Z@\x00'}]}, {0x60, 0x7, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "293a02149f3b75a67093c28fd6f55a23"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e48f01e49713f0c2d839f940d9f088d8"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_ilave_0\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '):\x00'}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4d2906d0880fc8acc30fe2020f984967"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a1085e7df341b9dc3d8008a2fe5bdaad"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c7e472c916020fe41bcc5aa8f56c947"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "80ab8be51421cfa3c9e5cbfe8217e0af"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0xc, 0x2, 'syztnl0\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x13, 0x2, 'bridge_slave_0\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e078d277f38ed3a40a448f3f6b6763e8"}]}, {0x3c, 0xc, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x25}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x19, "03dd96197aca85b64424a37dbda7b694"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x7, "eb052fcd3dd4d3e8bbcbf1de857c0e1c"}]}, {0x3c, 0x18, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b2112a97bf9704ee57915340334b8271"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e8635392a70f36f95f4b9b352920ebec"}]}]}, @IFLA_GSO_MAX_SEGS={0x8}, @IFLA_AF_SPEC={0x98, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET6={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @loopback}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x2a8}}, 0x0) kernel console output (not intermixed with test programs): it(2000000096.800:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16009 comm="syz.2.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3155.101229][T16012] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3155.127143][ T30] audit: type=1326 audit(2000000096.800:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16009 comm="syz.2.14538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3155.161809][T16012] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.14539: invalid indirect mapped block 1819239214 (level 0) [ 3155.175976][T16012] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.14539: invalid indirect mapped block 1819239214 (level 1) [ 3155.190687][T16012] EXT4-fs (loop2): 1 truncate cleaned up [ 3155.196153][T16012] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 3155.251342][T16016] loop1: detected capacity change from 0 to 512 [ 3155.263698][T16018] loop2: detected capacity change from 0 to 512 [ 3155.308749][T16018] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.14541: bad orphan inode 1 [ 3155.318953][T16018] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,i_version,usrquota,min_batch_time=0x0000000000000005,data_err=abort,usrjquota=,bsdgroups,delalloc,,errors=continue. Quota mode: writeback. [ 3155.451695][T16037] netlink: 124 bytes leftover after parsing attributes in process `syz.0.14548'. [ 3155.460714][T16037] netlink: 124 bytes leftover after parsing attributes in process `syz.0.14548'. [ 3155.483865][T16039] loop0: detected capacity change from 0 to 512 [ 3155.634375][T16039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3155.656637][T20096] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3155.791420][T16039] EXT4-fs (loop0): 1 truncate cleaned up [ 3155.799545][T16039] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3155.833426][T16039] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.0.14551: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3155.853995][T16039] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 3155.871416][T16039] EXT4-fs warning (device loop0): ext4_rename_delete:3749: inode #2: comm syz.0.14551: Deleting old file: nlink 4, error=-117 [ 3156.026727][T20096] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3156.045462][T20096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3156.097046][T20096] usb 4-1: config 0 descriptor?? [ 3156.328990][T16081] loop2: detected capacity change from 0 to 2048 [ 3156.378119][T16081] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 3156.456607][T18700] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 3156.519198][T16091] loop2: detected capacity change from 0 to 512 [ 3156.536492][ T8489] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 3156.597137][T16091] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3156.608293][T16091] EXT4-fs (loop2): 1 truncate cleaned up [ 3156.613745][T16091] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3156.633623][T16091] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.2.14573: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3156.654290][T16091] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 3156.663353][T16091] EXT4-fs warning (device loop2): ext4_rename_delete:3749: inode #2: comm syz.2.14573: Deleting old file: nlink 4, error=-117 [ 3156.866594][T18700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3156.896864][ T8489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3156.907996][ T8489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3156.917744][ T8489] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3156.927040][ T8489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3156.939071][ T8489] usb 1-1: config 0 descriptor?? [ 3156.946918][T18700] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3156.957773][T18700] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 3157.126573][T18700] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3157.135575][T18700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3157.143596][T18700] usb 2-1: Product: syz [ 3157.147832][T18700] usb 2-1: Manufacturer: syz [ 3157.152530][T18700] usb 2-1: SerialNumber: syz [ 3157.216645][T20096] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3157.227185][T20096] asix: probe of 4-1:0.0 failed with error -71 [ 3157.240466][T20096] usb 4-1: USB disconnect, device number 57 [ 3157.636990][T16069] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 3157.793897][T16116] netlink: 'syz.3.14583': attribute type 25 has an invalid length. [ 3157.801811][T16116] netlink: 'syz.3.14583': attribute type 7 has an invalid length. [ 3158.189011][T16127] loop2: detected capacity change from 0 to 128 [ 3158.386567][ T8489] uclogic 0003:256C:006D.00BD: failed retrieving string descriptor #100: -71 [ 3158.395343][ T8489] uclogic 0003:256C:006D.00BD: failed retrieving pen parameters: -71 [ 3158.403208][ T8489] uclogic 0003:256C:006D.00BD: failed probing pen v1 parameters: -71 [ 3158.411211][ T8489] uclogic 0003:256C:006D.00BD: failed probing parameters: -71 [ 3158.418519][ T8489] uclogic: probe of 0003:256C:006D.00BD failed with error -71 [ 3158.427158][ T8489] usb 1-1: USB disconnect, device number 49 [ 3158.506490][ T20] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3158.546727][T18700] cdc_ncm 2-1:1.0: bind() failure [ 3158.552737][T18700] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3158.559432][T18700] cdc_ncm 2-1:1.1: bind() failure [ 3158.565251][T18700] usb 2-1: USB disconnect, device number 52 [ 3158.866703][ T20] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3158.875729][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3158.885299][ T20] usb 4-1: config 0 descriptor?? [ 3158.901635][T16136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32790 sclass=netlink_route_socket pid=16136 comm=syz.2.14592 [ 3158.934227][T16139] loop0: detected capacity change from 0 to 2048 [ 3158.957593][T16143] loop2: detected capacity change from 0 to 512 [ 3158.978286][T16139] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 3159.048969][T16143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 3159.059967][T16143] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038 (0x7fffffff) [ 3159.515365][T16174] loop0: detected capacity change from 0 to 512 [ 3159.547704][T16174] EXT4-fs (loop0): Ignoring removed bh option [ 3159.554036][T16174] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 3159.561823][T16174] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3159.570650][T16174] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 3159.579569][T16174] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.14607: attempt to clear invalid blocks 2 len 1 [ 3159.592744][T16174] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3159.607307][T16174] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.14607: invalid indirect mapped block 1819239214 (level 0) [ 3159.616526][T18700] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3159.621647][T16174] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.14607: invalid indirect mapped block 1819239214 (level 1) [ 3159.643411][T16174] EXT4-fs (loop0): 1 truncate cleaned up [ 3159.649262][T16174] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 3159.856469][ T30] kauditd_printk_skb: 1613 callbacks suppressed [ 3159.856488][ T30] audit: type=1326 audit(2000000101.800:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3159.886401][ T30] audit: type=1326 audit(2000000101.810:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3159.900693][T18700] usb 3-1: Using ep0 maxpacket: 8 [ 3159.915551][ T30] audit: type=1326 audit(2000000101.810:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3159.942720][ T30] audit: type=1326 audit(2000000101.810:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3159.966745][ T30] audit: type=1326 audit(2000000101.810:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3159.990787][ T30] audit: type=1326 audit(2000000101.810:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3160.019568][ T30] audit: type=1326 audit(2000000101.810:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3160.043275][ T30] audit: type=1326 audit(2000000101.810:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3160.067105][ T30] audit: type=1326 audit(2000000101.810:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3160.090695][ T20] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3160.090744][ T30] audit: type=1326 audit(2000000101.810:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16192 comm="syz.0.14616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ff00000 [ 3160.100496][ T20] asix: probe of 4-1:0.0 failed with error -71 [ 3160.101658][ T20] usb 4-1: USB disconnect, device number 58 [ 3160.136946][T18700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3160.150231][T18700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3160.160460][T18700] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3160.169893][T18700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.178682][T18700] usb 3-1: config 0 descriptor?? [ 3160.286543][T20096] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 3160.294196][T16208] loop0: detected capacity change from 0 to 512 [ 3160.356917][T16208] EXT4-fs (loop0): Ignoring removed bh option [ 3160.362852][T16208] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 3160.370156][T16208] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3160.378160][T16208] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 3160.386701][T16208] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.14622: attempt to clear invalid blocks 2 len 1 [ 3160.399981][T16208] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 3160.414305][T16208] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.14622: invalid indirect mapped block 1819239214 (level 0) [ 3160.428519][T16208] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.14622: invalid indirect mapped block 1819239214 (level 1) [ 3160.443110][T16208] EXT4-fs (loop0): 1 truncate cleaned up [ 3160.448754][T16208] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,bh,mblk_io_submit,test_dummy_encryption,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 3160.547122][T16211] loop0: detected capacity change from 0 to 2048 [ 3160.630653][T16211] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 3160.646931][T20096] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3160.663582][T20096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 3160.667791][T18700] steelseries_srws1 0003:1038:1410.00BE: item fetching failed at offset 5/7 [ 3160.683505][T20096] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 3160.685009][T18700] steelseries_srws1 0003:1038:1410.00BE: parse failed [ 3160.693148][T20096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.707017][T18700] steelseries_srws1: probe of 0003:1038:1410.00BE failed with error -22 [ 3160.720156][T20096] usb 2-1: config 0 descriptor?? [ 3160.757372][T20096] usb 2-1: MIDIStreaming interface descriptor not found [ 3160.767917][T16233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3160.808981][T16233] loop0: detected capacity change from 0 to 512 [ 3160.898663][T18700] usb 3-1: USB disconnect, device number 69 [ 3164.635252][ T20] usb 2-1: USB disconnect, device number 53 [ 3164.658143][T16258] loop0: detected capacity change from 0 to 512 [ 3164.731728][T16258] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3164.746806][T16258] EXT4-fs (loop0): 1 truncate cleaned up [ 3164.752345][T16258] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3164.772401][T16258] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.0.14633: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3164.793105][T16258] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 3164.801977][T16258] EXT4-fs warning (device loop0): ext4_rename_delete:3749: inode #2: comm syz.0.14633: Deleting old file: nlink 4, error=-117 [ 3164.934362][T20096] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3164.958048][ T4103] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3165.212357][ T4103] usb 3-1: Using ep0 maxpacket: 32 [ 3165.222854][T16277] loop0: detected capacity change from 0 to 512 [ 3165.277949][T16283] loop0: detected capacity change from 0 to 2048 [ 3165.319392][T20096] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3165.328460][T20096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3165.337340][T20096] usb 4-1: config 0 descriptor?? [ 3165.342289][ T4103] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 3165.350550][ T4103] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 3165.362642][ T4103] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3165.372755][ T4103] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 3165.380410][T16281] loop1: detected capacity change from 0 to 512 [ 3165.381479][ T4103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3165.395942][T16283] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,max_batch_time=0x0000000000000002,init_itable=0x0000000000000080,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,noload,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 3165.397066][ T4103] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 3165.433816][ T4103] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 3165.446694][ T4103] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 3165.455542][ T4103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3165.464266][ T4103] usb 3-1: config 0 descriptor?? [ 3165.726758][T18700] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 3166.014162][T18700] usb 1-1: Using ep0 maxpacket: 16 [ 3166.145309][T18700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3166.156155][T18700] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3166.169080][T18700] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3166.178196][T18700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3166.186925][T18700] usb 1-1: config 0 descriptor?? [ 3166.431084][ T4103] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 3166.548722][T20096] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3166.558598][T20096] asix: probe of 4-1:0.0 failed with error -71 [ 3166.566087][T20096] usb 4-1: USB disconnect, device number 59 [ 3166.687619][ T4103] usb 2-1: Using ep0 maxpacket: 8 [ 3166.700476][T18700] microsoft 0003:045E:07DA.00BF: No inputs registered, leaving [ 3166.708577][T18700] microsoft 0003:045E:07DA.00BF: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 3166.719889][T18700] microsoft 0003:045E:07DA.00BF: no inputs found [ 3166.726044][T18700] microsoft 0003:045E:07DA.00BF: could not initialize ff, continuing anyway [ 3166.969295][T16292] UDC core: couldn't find an available UDC or it's busy: -16 [ 3166.976674][T16292] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3166.987076][ T4103] usb 2-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=98.e6 [ 3166.996032][ T4103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3167.004003][ T4103] usb 2-1: Product: syz [ 3167.008012][ T4103] usb 2-1: Manufacturer: syz [ 3167.012387][ T4103] usb 2-1: SerialNumber: syz [ 3167.017549][ T4103] usb 2-1: config 0 descriptor?? [ 3167.062468][ T4103] rndis_host: probe of 2-1:0.0 failed with error -22 [ 3167.069210][ T4103] cdc_acm 2-1:0.0: Control and data interfaces are not separated! [ 3167.077183][ T4103] cdc_acm 2-1:0.0: This needs exactly 3 endpoints [ 3167.083863][ T4103] cdc_acm: probe of 2-1:0.0 failed with error -22 [ 3167.212864][ T4103] usb 1-1: USB disconnect, device number 50 [ 3167.279650][T20096] usb 2-1: USB disconnect, device number 54 [ 3167.385040][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 3167.385058][ T30] audit: type=1326 audit(2000000108.914:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.414715][ T30] audit: type=1326 audit(2000000108.914:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.439820][ T30] audit: type=1326 audit(2000000108.914:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.463586][ T30] audit: type=1326 audit(2000000108.914:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.487176][ T30] audit: type=1326 audit(2000000108.914:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.510764][ T30] audit: type=1326 audit(2000000108.914:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.534757][ T30] audit: type=1326 audit(2000000108.914:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.558158][ T30] audit: type=1326 audit(2000000108.914:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.581652][ T30] audit: type=1326 audit(2000000108.914:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.605359][ T30] audit: type=1326 audit(2000000108.914:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.3.14647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3167.848429][T16312] loop0: detected capacity change from 0 to 512 [ 3167.881319][T16316] loop1: detected capacity change from 0 to 128 [ 3167.890831][ T8489] usb 3-1: USB disconnect, device number 70 [ 3167.923529][T16320] loop0: detected capacity change from 0 to 512 [ 3167.929832][T16316] FAT-fs (loop1): bogus logical sector size 12 [ 3167.935817][T16316] FAT-fs (loop1): Can't find a valid FAT filesystem [ 3167.942668][T12050] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3168.000718][T16320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3168.023580][T16320] EXT4-fs (loop0): 1 truncate cleaned up [ 3168.035082][T16320] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3168.063785][T16320] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.0.14658: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3168.070320][T16318] loop2: detected capacity change from 0 to 512 [ 3168.093253][T16320] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 3168.102689][T16320] EXT4-fs warning (device loop0): ext4_rename_delete:3749: inode #2: comm syz.0.14658: Deleting old file: nlink 4, error=-117 [ 3168.227093][T12050] usb 4-1: Using ep0 maxpacket: 32 [ 3168.355519][T12050] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3168.364360][T16344] loop1: detected capacity change from 0 to 512 [ 3168.366518][T12050] usb 4-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3168.382275][T12050] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3168.389234][T12050] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 3168.398172][T12050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.407421][T12050] usb 4-1: config 0 descriptor?? [ 3168.566925][T16352] loop0: detected capacity change from 0 to 128 [ 3168.623670][T16352] FAT-fs (loop0): bogus logical sector size 12 [ 3168.630310][T16352] FAT-fs (loop0): Can't find a valid FAT filesystem [ 3168.785868][T16369] loop0: detected capacity change from 0 to 512 [ 3168.805283][T16369] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3168.822373][T16369] EXT4-fs (loop0): 1 truncate cleaned up [ 3168.828037][T16369] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3168.831093][T16372] loop2: detected capacity change from 0 to 512 [ 3168.855159][T16369] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.0.14680: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3168.876381][T16369] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 3168.885385][T16369] EXT4-fs warning (device loop0): ext4_rename_delete:3749: inode #2: comm syz.0.14680: Deleting old file: nlink 4, error=-117 [ 3168.912270][T12050] hkems 0003:2006:0118.00C0: unbalanced delimiter at end of report description [ 3168.921351][T12050] hkems 0003:2006:0118.00C0: parse failed [ 3168.926970][T12050] hkems: probe of 0003:2006:0118.00C0 failed with error -22 [ 3168.987204][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14683'. [ 3169.080022][T16388] loop0: detected capacity change from 0 to 2048 [ 3169.095093][T16388] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 3169.152407][ T4103] usb 4-1: USB disconnect, device number 60 [ 3169.157814][T16398] loop0: detected capacity change from 0 to 512 [ 3169.181661][T16398] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3169.204075][T16398] EXT4-fs (loop0): 1 truncate cleaned up [ 3169.210288][T16398] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3169.235918][T16398] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.0.14692: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3169.259631][T16398] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 3169.275193][T16398] EXT4-fs warning (device loop0): ext4_rename_delete:3749: inode #2: comm syz.0.14692: Deleting old file: nlink 4, error=-117 [ 3169.294658][T16405] loop2: detected capacity change from 0 to 512 [ 3169.455016][T16421] loop0: detected capacity change from 0 to 2048 [ 3169.482842][T16421] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 3169.486893][T16428] loop2: detected capacity change from 0 to 512 [ 3169.514926][T16428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3169.531946][T16428] EXT4-fs (loop2): 1 truncate cleaned up [ 3169.541446][T16428] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3169.546915][T16434] loop1: detected capacity change from 0 to 512 [ 3169.561605][T16428] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.2.14706: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3169.586568][T16428] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 3169.590457][T16434] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature [ 3169.603327][T16428] EXT4-fs warning (device loop2): ext4_rename_delete:3749: inode #2: comm syz.2.14706: Deleting old file: nlink 4, error=-117 [ 3169.691423][T16441] loop2: detected capacity change from 0 to 512 [ 3169.758797][T16443] netlink: 'syz.3.14712': attribute type 25 has an invalid length. [ 3169.766701][T16443] netlink: 'syz.3.14712': attribute type 7 has an invalid length. [ 3170.031906][T16458] bridge0: port 2(bridge_slave_1) entered disabled state [ 3170.038966][T16458] bridge0: port 1(bridge_slave_0) entered disabled state [ 3170.058540][T16458] bridge0: port 2(bridge_slave_1) entered blocking state [ 3170.065419][T16458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3170.072550][T16458] bridge0: port 1(bridge_slave_0) entered blocking state [ 3170.079319][T16458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3170.086789][T16458] device bridge0 entered promiscuous mode [ 3170.715032][T16476] kvm [16475]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1e [ 3170.725266][T16476] kvm [16475]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x42 [ 3170.738222][T16476] kvm [16475]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8a7 [ 3170.768941][T16476] kvm [16475]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x138 [ 3170.843338][T16489] loop1: detected capacity change from 0 to 512 [ 3170.875625][T16485] loop2: detected capacity change from 0 to 4096 [ 3170.935190][T16485] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 3170.993627][T16485] kvm [16484]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd3600004b08 [ 3171.305967][ T2677] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3171.436009][T16500] netlink: 'syz.3.14732': attribute type 25 has an invalid length. [ 3171.443921][T16500] netlink: 'syz.3.14732': attribute type 7 has an invalid length. [ 3171.554686][T16509] bridge0: port 2(bridge_slave_1) entered disabled state [ 3171.561763][T16509] bridge0: port 1(bridge_slave_0) entered disabled state [ 3171.568885][T16509] device bridge0 left promiscuous mode [ 3171.583803][T16509] bridge0: port 2(bridge_slave_1) entered blocking state [ 3171.590722][T16509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3171.598127][T16509] bridge0: port 1(bridge_slave_0) entered blocking state [ 3171.605046][T16509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3171.612573][T16509] device bridge0 entered promiscuous mode [ 3171.733697][ T2677] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3171.742646][ T2677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.751447][ T2677] usb 2-1: config 0 descriptor?? [ 3173.697767][T16522] TCP: TCP_TX_DELAY enabled [ 3173.994381][T16543] loop2: detected capacity change from 0 to 512 [ 3174.630813][ T2677] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3174.640777][ T2677] asix: probe of 2-1:0.0 failed with error -71 [ 3174.647763][ T2677] usb 2-1: USB disconnect, device number 55 [ 3175.049410][T16557] kvm [16548]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1e [ 3175.110117][T16557] kvm [16548]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x42 [ 3175.142169][T16557] kvm [16548]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8a7 [ 3175.145723][T16569] loop2: detected capacity change from 0 to 512 [ 3175.196858][T16557] kvm [16548]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x138 [ 3175.519118][T16590] loop2: detected capacity change from 0 to 512 [ 3175.645904][T16590] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3175.655902][ T4103] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 3175.709908][T16590] EXT4-fs (loop2): 1 truncate cleaned up [ 3175.715522][T16590] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3175.771367][T16599] 9pnet: Could not find request transport: f [ 3175.782064][T16590] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.2.14771: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3175.827689][T16590] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 3175.837924][T16590] EXT4-fs warning (device loop2): ext4_rename_delete:3749: inode #2: comm syz.2.14771: Deleting old file: nlink 4, error=-117 [ 3176.127504][ T4103] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 3176.141386][ T4103] usb 1-1: config 0 has no interface number 0 [ 3176.151865][ T4103] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3176.163123][ T4103] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3176.172970][ T4103] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3176.181966][ T4103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3176.190957][ T4103] usb 1-1: config 0 descriptor?? [ 3176.296341][T16620] loop2: detected capacity change from 0 to 512 [ 3176.498781][T16634] loop2: detected capacity change from 0 to 512 [ 3176.620305][T16634] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 3176.710639][ T4103] uclogic 0003:256C:006D.00C1: No inputs registered, leaving [ 3176.726915][ T4103] uclogic 0003:256C:006D.00C1: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input25 [ 3176.741872][T16634] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038 (0x7fffffff) [ 3177.050615][ T20] usb 1-1: USB disconnect, device number 51 [ 3177.153800][T12050] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3177.163207][T16651] bridge0: port 2(bridge_slave_1) entered disabled state [ 3177.172523][T16651] bridge0: port 1(bridge_slave_0) entered disabled state [ 3177.184976][T16651] device bridge0 left promiscuous mode [ 3177.194313][T16651] bridge0: port 2(bridge_slave_1) entered blocking state [ 3177.201215][T16651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3177.208327][T16651] bridge0: port 1(bridge_slave_0) entered blocking state [ 3177.215262][T16651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3177.222593][T16651] device bridge0 entered promiscuous mode [ 3177.320848][T16662] device bridge0 left promiscuous mode [ 3177.453176][T12050] usb 3-1: Using ep0 maxpacket: 8 [ 3177.527912][T18700] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 3177.613568][T12050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3177.625179][T12050] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3177.636001][T12050] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3177.636386][ T30] kauditd_printk_skb: 153 callbacks suppressed [ 3177.636403][ T30] audit: type=1326 audit(2000000118.501:4883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.644987][T12050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3177.660822][ T30] audit: type=1326 audit(2000000118.520:4884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.681264][T12050] usb 3-1: config 0 descriptor?? [ 3177.748941][T16675] 9pnet: Could not find request transport: f [ 3177.757311][ T30] audit: type=1326 audit(2000000118.520:4885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.785343][ T30] audit: type=1326 audit(2000000118.520:4886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.809670][ T30] audit: type=1326 audit(2000000118.520:4887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.835273][ T30] audit: type=1326 audit(2000000118.520:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.874342][T16685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14806'. [ 3177.892028][ T30] audit: type=1326 audit(2000000118.520:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.915828][T18700] usb 2-1: config index 0 descriptor too short (expected 1042, got 18) [ 3177.924187][ T30] audit: type=1326 audit(2000000118.520:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.947942][T18700] usb 2-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 3177.957202][T18700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3177.961265][ T30] audit: type=1326 audit(2000000118.520:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3177.971165][T18700] usb 2-1: config 0 descriptor?? [ 3177.990985][ T30] audit: type=1326 audit(2000000118.520:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16668 comm="syz.0.14799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3178.031176][T18700] usb 2-1: NDI device with a latency value of 1 [ 3178.169378][ T2677] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 3178.265636][T18700] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 3178.274120][T18700] usb 2-1: Detected FT-X [ 3178.288066][T12050] steelseries_srws1 0003:1038:1410.00C2: item fetching failed at offset 5/7 [ 3178.296863][T12050] steelseries_srws1 0003:1038:1410.00C2: parse failed [ 3178.297901][ T8489] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3178.303958][T12050] steelseries_srws1: probe of 0003:1038:1410.00C2 failed with error -22 [ 3178.311192][T18700] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3178.340495][T18700] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3178.361856][T18700] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 3178.369601][T18700] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3178.379766][T18700] usb 2-1: USB disconnect, device number 56 [ 3178.386323][T18700] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3178.395856][T18700] ftdi_sio 2-1:0.0: device disconnected [ 3178.425915][ T2677] usb 1-1: Using ep0 maxpacket: 8 [ 3178.503828][T12050] usb 3-1: USB disconnect, device number 71 [ 3178.554446][ T2677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3178.564089][ T2677] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 3178.573001][ T2677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3178.581967][ T2677] usb 1-1: config 0 descriptor?? [ 3178.629690][ T2677] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 3178.637336][ T2677] usb 1-1: Detected SIO [ 3178.641368][ T2677] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 3178.649011][ T2677] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3178.665779][T16698] netlink: 'syz.3.14811': attribute type 25 has an invalid length. [ 3178.673590][T16698] netlink: 'syz.3.14811': attribute type 7 has an invalid length. [ 3179.051215][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14806'. [ 3179.060805][T16704] loop1: detected capacity change from 0 to 512 [ 3179.061923][T12050] usb 1-1: USB disconnect, device number 52 [ 3179.073956][T12050] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3179.084038][T12050] ftdi_sio 1-1:0.0: device disconnected [ 3179.137701][T16704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3179.154908][T16704] EXT4-fs (loop1): 1 truncate cleaned up [ 3179.160789][T16704] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3179.181061][T16704] EXT4-fs error (device loop1): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.1.14813: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3179.202663][T16704] EXT4-fs error (device loop1) in ext4_delete_entry:2751: Corrupt filesystem [ 3179.202698][T16710] 9pnet: Could not find request transport: f [ 3179.212921][T16704] EXT4-fs warning (device loop1): ext4_rename_delete:3749: inode #2: comm syz.1.14813: Deleting old file: nlink 4, error=-117 [ 3179.640571][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14824'. [ 3179.701175][T16735] fuse: Bad value for 'fd' [ 3179.711944][T16735] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 3179.727598][T16740] netlink: 'syz.3.14828': attribute type 25 has an invalid length. [ 3179.735495][T16740] netlink: 'syz.3.14828': attribute type 7 has an invalid length. [ 3179.805269][ T2677] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3180.416866][T16737] kvm [16736]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1e [ 3180.427254][T16737] kvm [16736]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x42 [ 3180.445099][T16737] kvm [16736]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8a7 [ 3180.475379][T16737] kvm [16736]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x138 [ 3180.519041][T16764] device pim6reg1 entered promiscuous mode [ 3180.532145][ T2677] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3180.545890][ T2677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3180.564851][ T2677] usb 3-1: config 0 descriptor?? [ 3180.605539][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14838'. [ 3180.751316][T16766] kvm [16765]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1e [ 3180.761658][T16766] kvm [16765]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x42 [ 3180.774327][T16766] kvm [16765]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8a7 [ 3180.794633][T16766] kvm [16765]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x138 [ 3180.866209][T16772] loop0: detected capacity change from 0 to 512 [ 3180.906137][ T20] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3180.966925][T16778] fuse: Bad value for 'fd' [ 3180.972088][T16778] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 3181.006716][T16786] loop1: detected capacity change from 0 to 512 [ 3181.006738][T16784] loop0: detected capacity change from 0 to 1024 [ 3181.056788][T16784] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 3181.063919][T16784] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3181.078311][T16784] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 3181.090272][T16786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3181.124832][T16786] EXT4-fs (loop1): 1 truncate cleaned up [ 3181.130297][T16786] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3181.132864][T16784] device pim6reg1 entered promiscuous mode [ 3181.165199][T16784] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 3181.166757][T16786] EXT4-fs error (device loop1): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.1.14844: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3181.193156][ T20] usb 4-1: Using ep0 maxpacket: 8 [ 3181.194450][T16786] EXT4-fs error (device loop1) in ext4_delete_entry:2751: Corrupt filesystem [ 3181.207199][T16786] EXT4-fs warning (device loop1): ext4_rename_delete:3749: inode #2: comm syz.1.14844: Deleting old file: nlink 4, error=-117 [ 3181.334234][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3181.344099][ T20] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 3181.353704][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3181.367610][ T20] usb 4-1: config 0 descriptor?? [ 3181.416653][ T20] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 3181.439157][ T20] usb 4-1: Detected SIO [ 3181.443812][ T20] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 2 [ 3181.467221][ T20] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3181.701156][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14838'. [ 3181.710683][T12050] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 3181.757342][T16806] loop1: detected capacity change from 0 to 512 [ 3181.783129][ T20] usb 4-1: USB disconnect, device number 61 [ 3181.877825][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3181.879511][ T2677] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3181.888242][ T20] ftdi_sio 4-1:0.0: device disconnected [ 3181.897020][ T2677] asix: probe of 3-1:0.0 failed with error -71 [ 3181.911933][ T2677] usb 3-1: USB disconnect, device number 72 [ 3181.985914][T12050] usb 1-1: Using ep0 maxpacket: 8 [ 3182.199817][T12050] usb 1-1: unable to get BOS descriptor or descriptor too short [ 3182.306706][T12050] usb 1-1: config 0 has no interfaces? [ 3182.471631][T16823] loop2: detected capacity change from 0 to 128 [ 3182.556841][T16829] loop2: detected capacity change from 0 to 512 [ 3182.575432][T16829] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3182.586400][T16829] EXT4-fs (loop2): 1 truncate cleaned up [ 3182.591864][T16829] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3182.610568][T12050] usb 1-1: language id specifier not provided by device, defaulting to English [ 3182.616003][T16829] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.2.14863: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3182.639722][T16829] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 3182.648543][T16829] EXT4-fs warning (device loop2): ext4_rename_delete:3749: inode #2: comm syz.2.14863: Deleting old file: nlink 4, error=-117 [ 3182.712953][ T2677] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3182.766440][T12050] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3182.775620][T12050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3182.784142][T12050] usb 1-1: Product: syz [ 3182.788798][T12050] usb 1-1: Manufacturer: 尯த绦鉎ھåï»í⴮쇡 [ 3182.795488][T12050] usb 1-1: SerialNumber: syz [ 3182.811108][T12050] usb 1-1: config 0 descriptor?? [ 3182.999102][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 3182.999120][ T30] audit: type=1326 audit(2000000123.515:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.028780][ T30] audit: type=1326 audit(2000000123.515:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.055814][ T30] audit: type=1326 audit(2000000123.515:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.079490][ T30] audit: type=1326 audit(2000000123.515:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.103456][T12563] usb 1-1: USB disconnect, device number 53 [ 3183.109733][ T30] audit: type=1326 audit(2000000123.515:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.133329][ T2677] usb 4-1: config index 0 descriptor too short (expected 1042, got 18) [ 3183.134300][ T30] audit: type=1326 audit(2000000123.515:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.141672][ T2677] usb 4-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 3183.173710][ T2677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3183.181676][ T30] audit: type=1326 audit(2000000123.515:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.182563][ T2677] usb 4-1: config 0 descriptor?? [ 3183.205498][ T30] audit: type=1326 audit(2000000123.515:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.233755][ T30] audit: type=1326 audit(2000000123.515:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.257408][ T30] audit: type=1326 audit(2000000123.515:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16832 comm="syz.2.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3183.258119][ T2677] usb 4-1: NDI device with a latency value of 1 [ 3183.316599][T16843] loop1: detected capacity change from 0 to 1024 [ 3183.345076][T16843] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 3183.352534][T16843] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3183.365174][T18700] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3183.368332][T16843] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 3183.405743][T16843] device pim6reg1 entered promiscuous mode [ 3183.414098][T16843] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 3183.493340][ T2677] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 3183.500946][ T2677] usb 4-1: Detected FT-X [ 3183.525379][ T2677] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3183.547167][ T2677] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3183.569102][ T2677] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 3183.585199][ T2677] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3183.595275][T16855] loop1: detected capacity change from 0 to 512 [ 3183.603511][ T2677] usb 4-1: USB disconnect, device number 62 [ 3183.609783][ T2677] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3183.619487][ T2677] ftdi_sio 4-1:0.0: device disconnected [ 3183.652606][T16858] loop1: detected capacity change from 0 to 512 [ 3183.684648][T16858] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3183.722394][T16858] EXT4-fs (loop1): 1 truncate cleaned up [ 3183.749472][T16858] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3183.768456][T18700] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3183.777930][T18700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3183.786323][T16858] EXT4-fs error (device loop1): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.1.14876: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3183.786788][T18700] usb 3-1: config 0 descriptor?? [ 3183.811650][T16858] EXT4-fs error (device loop1) in ext4_delete_entry:2751: Corrupt filesystem [ 3183.821093][T16858] EXT4-fs warning (device loop1): ext4_rename_delete:3749: inode #2: comm syz.1.14876: Deleting old file: nlink 4, error=-117 [ 3184.166586][T16882] loop0: detected capacity change from 0 to 2048 [ 3184.240082][T16891] loop1: detected capacity change from 0 to 128 [ 3184.491399][T16882] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 3184.637380][T16902] loop0: detected capacity change from 0 to 512 [ 3184.673537][T16902] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 3184.684618][T16902] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038 (0x7fffffff) [ 3184.979272][T12050] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3185.118454][T18700] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3185.128602][T18700] asix: probe of 3-1:0.0 failed with error -71 [ 3185.136072][T18700] usb 3-1: USB disconnect, device number 73 [ 3185.267939][T12050] usb 1-1: Using ep0 maxpacket: 8 [ 3185.406987][T12050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3185.417747][T12050] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3185.427234][T12050] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3185.436148][T12050] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3185.444684][T12050] usb 1-1: config 0 descriptor?? [ 3185.682779][T16919] device bridge0 entered promiscuous mode [ 3185.881807][T16936] kvm [16934]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe8 [ 3185.941428][T18700] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 3185.953242][T12050] steelseries_srws1 0003:1038:1410.00C3: item fetching failed at offset 5/7 [ 3185.961988][T12050] steelseries_srws1 0003:1038:1410.00C3: parse failed [ 3185.968661][T12563] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 3185.976637][T12050] steelseries_srws1: probe of 0003:1038:1410.00C3 failed with error -22 [ 3186.168662][ T8489] usb 1-1: USB disconnect, device number 54 [ 3186.326397][T18700] usb 3-1: config index 0 descriptor too short (expected 1042, got 18) [ 3186.334761][T18700] usb 3-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d [ 3186.344231][T18700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3186.358460][T18700] usb 3-1: config 0 descriptor?? [ 3186.404942][T18700] usb 3-1: NDI device with a latency value of 1 [ 3186.411852][T12563] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3186.420728][T12563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3186.433630][T12563] usb 2-1: config 0 descriptor?? [ 3186.636364][T18700] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 3186.646187][T18700] usb 3-1: Detected FT-X [ 3186.668781][T18700] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 3186.690824][T18700] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 3186.711202][T18700] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 3186.718957][T18700] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3186.728281][T18700] usb 3-1: USB disconnect, device number 74 [ 3186.735074][T18700] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3186.762113][T18700] ftdi_sio 3-1:0.0: device disconnected [ 3186.781797][T16943] bridge0: port 2(bridge_slave_1) entered disabled state [ 3186.788794][T16943] bridge0: port 1(bridge_slave_0) entered disabled state [ 3186.799054][T16943] bridge0: port 2(bridge_slave_1) entered blocking state [ 3186.805897][T16943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3186.813060][T16943] bridge0: port 1(bridge_slave_0) entered blocking state [ 3186.819920][T16943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3186.827239][T16943] device bridge0 entered promiscuous mode [ 3187.014965][T16955] device bridge0 left promiscuous mode [ 3187.056495][ T8489] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3187.198969][T16961] kvm [16960]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe8 [ 3187.235372][T16968] loop2: detected capacity change from 0 to 512 [ 3187.286517][T16968] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.14921: Invalid inode bitmap blk 4 in block_group 0 [ 3187.300193][T16968] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none. [ 3187.323466][T16968] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 3187.459572][ T8489] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 3187.469762][ T8489] usb 1-1: config 0 has no interface number 0 [ 3187.481854][T16976] loop2: detected capacity change from 0 to 512 [ 3187.488196][ T8489] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3187.499665][ T8489] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3187.509654][ T8489] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3187.518979][ T8489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3187.528244][ T8489] usb 1-1: config 0 descriptor?? [ 3187.584560][T16976] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 3187.596603][T16976] EXT4-fs (loop2): 1 truncate cleaned up [ 3187.602422][T16976] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3187.644216][T16976] EXT4-fs error (device loop2): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.2.14924: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3187.652029][T12563] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3187.674204][T12563] asix: probe of 2-1:0.0 failed with error -71 [ 3187.685610][T12563] usb 2-1: USB disconnect, device number 57 [ 3187.695977][T16976] EXT4-fs error (device loop2) in ext4_delete_entry:2751: Corrupt filesystem [ 3187.705662][T16976] EXT4-fs warning (device loop2): ext4_rename_delete:3749: inode #2: comm syz.2.14924: Deleting old file: nlink 4, error=-117 [ 3187.876475][T20096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3188.065784][ T8489] uclogic 0003:256C:006D.00C4: No inputs registered, leaving [ 3188.078648][ T8489] uclogic 0003:256C:006D.00C4: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input25 [ 3188.244506][T12563] usb 1-1: USB disconnect, device number 55 [ 3188.248103][T17003] loop1: detected capacity change from 0 to 512 [ 3188.347286][T17003] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3188.358785][T17003] EXT4-fs (loop1): 1 truncate cleaned up [ 3188.364262][T17003] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000003,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 3188.384131][T17003] EXT4-fs error (device loop1): ext4_generic_delete_entry:2680: inode #2: block 13: comm syz.1.14936: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 3188.404529][T17003] EXT4-fs error (device loop1) in ext4_delete_entry:2751: Corrupt filesystem [ 3188.413430][T17003] EXT4-fs warning (device loop1): ext4_rename_delete:3749: inode #2: comm syz.1.14936: Deleting old file: nlink 4, error=-117 [ 3188.443075][ T8489] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3188.549927][T12050] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3188.742114][T17007] loop1: detected capacity change from 0 to 512 [ 3188.806512][T12050] usb 4-1: Using ep0 maxpacket: 8 [ 3188.822585][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 3188.822604][ T30] audit: type=1326 audit(2000000128.959:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3188.858041][ T30] audit: type=1326 audit(2000000128.959:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3188.881864][ T30] audit: type=1326 audit(2000000128.959:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3188.909570][ T30] audit: type=1326 audit(2000000128.959:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3188.933402][ T30] audit: type=1326 audit(2000000128.997:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3188.934993][ T8489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3188.957743][T12050] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 3188.977298][ T30] audit: type=1326 audit(2000000128.997:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3189.011579][T12050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3189.022920][T12050] usb 4-1: config 0 descriptor?? [ 3189.027878][ T30] audit: type=1326 audit(2000000128.997:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3190.414551][T17023] loop1: detected capacity change from 0 to 128 [ 3190.415564][ T30] audit: type=1326 audit(2000000128.997:5058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3190.447531][ T30] audit: type=1326 audit(2000000128.997:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3190.453019][ T8489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3190.480508][ T30] audit: type=1326 audit(2000000128.997:5060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17012 comm="syz.0.14940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fb24a934ef9 code=0x7ffc0000 [ 3190.483629][T17025] device veth0 entered promiscuous mode [ 3190.506421][ T8489] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3190.509987][T17025] device vlan2 entered promiscuous mode [ 3190.524928][ T8489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3190.538259][T17025] device veth0 left promiscuous mode [ 3190.550034][ T8489] usb 3-1: config 0 descriptor?? [ 3190.582263][T17031] tmpfs: Unknown parameter 'grpquota' [ 3190.859234][ T2677] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 3190.901857][T20096] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 3191.126460][ T2677] usb 2-1: Using ep0 maxpacket: 16 [ 3191.276585][ T2677] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3191.286834][T20096] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 3191.287386][ T2677] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3191.295472][T20096] usb 1-1: config 0 has no interface number 0 [ 3191.304801][ T2677] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3191.311426][T20096] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3191.321543][ T2677] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3191.340055][T20096] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3191.351534][T20096] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3191.360430][T20096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3191.377135][T20096] usb 1-1: config 0 descriptor?? [ 3191.514502][T17053] IPv6: NLM_F_REPLACE set, but no existing node found! [ 3191.533770][ T2677] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3191.542653][ T2677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3191.551225][ T2677] usb 2-1: Product: syz [ 3191.555676][ T2677] usb 2-1: Manufacturer: syz [ 3191.560108][ T2677] usb 2-1: SerialNumber: syz [ 3191.582200][T17059] usb usb8: usbfs: process 17059 (syz.4.14959) did not claim interface 0 before use [ 3191.615616][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14959'. [ 3191.887199][T20096] uclogic 0003:256C:006D.00C6: No inputs registered, leaving [ 3191.898155][T20096] uclogic 0003:256C:006D.00C6: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input25 [ 3192.025842][ T8489] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00C5/input/input143 [ 3192.039123][ T8489] uclogic 0003:256C:006D.00C5: input,hidraw1: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 3192.061384][ T2677] usb 2-1: USB disconnect, device number 58 [ 3192.102697][T20096] usb 1-1: USB disconnect, device number 56 [ 3192.245290][ T8489] usb 3-1: USB disconnect, device number 75 [ 3192.494958][T12050] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 3192.513277][T12050] asix: probe of 4-1:0.0 failed with error -71 [ 3192.533194][T12050] usb 4-1: USB disconnect, device number 63 [ 3192.550595][T17085] bridge: RTM_NEWNEIGH with invalid ether address [ 3192.618670][T17089] device bridge0 left promiscuous mode [ 3192.632384][T17089] device bridge0 entered promiscuous mode [ 3192.762747][T17093] device syzkaller0 entered promiscuous mode [ 3192.920742][T17115] loop1: detected capacity change from 0 to 512 [ 3193.308471][T17134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3193.450243][T17140] loop0: detected capacity change from 0 to 512 [ 3193.468047][T17143] device bridge0 left promiscuous mode [ 3193.488994][T20096] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3193.499314][T17143] device bridge0 entered promiscuous mode [ 3193.589301][T17152] loop1: detected capacity change from 0 to 512 [ 3193.755934][T17159] loop1: detected capacity change from 0 to 512 [ 3193.874560][T20096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3193.890277][T20096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3193.901191][T20096] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3193.910808][T20096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3193.934686][T20096] usb 4-1: config 0 descriptor?? [ 3194.176768][ T30] kauditd_printk_skb: 221 callbacks suppressed [ 3194.176787][ T30] audit: type=1326 audit(2000000133.973:5282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.220227][ T30] audit: type=1326 audit(2000000133.973:5283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.261814][T17186] loop0: detected capacity change from 0 to 512 [ 3194.288455][T17189] device syzkaller0 entered promiscuous mode [ 3194.295208][ T30] audit: type=1326 audit(2000000133.973:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.331284][ T30] audit: type=1326 audit(2000000133.973:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.397863][ T30] audit: type=1326 audit(2000000133.973:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.421724][ T30] audit: type=1326 audit(2000000133.982:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.447594][ T30] audit: type=1326 audit(2000000134.001:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.479760][ T30] audit: type=1326 audit(2000000134.001:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.506015][ T30] audit: type=1326 audit(2000000134.001:5290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.529989][ T30] audit: type=1326 audit(2000000134.001:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17181 comm="syz.2.15012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3194.761194][T12050] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3194.878772][T12563] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3195.017724][T12050] usb 1-1: Using ep0 maxpacket: 16 [ 3195.135340][T12563] usb 3-1: Using ep0 maxpacket: 32 [ 3195.146722][T12050] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 3195.263778][T12563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3195.275130][T12563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3195.284686][T12563] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 3195.293557][T12563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3195.302753][T12563] usb 3-1: config 0 descriptor?? [ 3195.317175][T12050] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 3195.326045][T12050] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3195.334046][T12050] usb 1-1: Product: syz [ 3195.338027][T12050] usb 1-1: Manufacturer: syz [ 3195.342514][T12050] usb 1-1: SerialNumber: syz [ 3195.347733][T12050] usb 1-1: config 0 descriptor?? [ 3195.392906][T12050] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 3195.400614][T12050] usb 1-1: Detected FT232RL [ 3195.457346][T20096] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00C7/input/input144 [ 3195.470495][T20096] uclogic 0003:256C:006D.00C7: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 3195.521914][ T2677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3195.532048][T17210] loop1: detected capacity change from 0 to 512 [ 3195.616568][T12050] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 3195.671805][ T20] usb 4-1: USB disconnect, device number 64 [ 3195.718523][T17214] loop1: detected capacity change from 0 to 512 [ 3195.820659][T12563] hid-rmi 0003:0461:4E72.00C8: unknown main item tag 0x0 [ 3195.827665][T12563] hid-rmi 0003:0461:4E72.00C8: unknown main item tag 0x0 [ 3195.834910][T12563] hid-rmi 0003:0461:4E72.00C8: unknown main item tag 0x0 [ 3195.841870][T12563] hid-rmi 0003:0461:4E72.00C8: unknown main item tag 0x0 [ 3195.848731][T12563] hid-rmi 0003:0461:4E72.00C8: unknown main item tag 0x0 [ 3195.865937][T12563] hid-rmi 0003:0461:4E72.00C8: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0 [ 3195.877190][T12050] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 3195.889791][T12050] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3195.904251][T12050] usb 1-1: USB disconnect, device number 57 [ 3195.911121][T12050] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3195.922827][T12050] ftdi_sio 1-1:0.0: device disconnected [ 3196.036751][T12563] usb 3-1: USB disconnect, device number 76 [ 3196.126051][T17223] device syzkaller0 entered promiscuous mode [ 3196.211776][T17227] device pim6reg1 entered promiscuous mode [ 3196.535995][T12050] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 3196.942257][T12050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3196.952721][T18700] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 3196.953769][T12050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3196.970327][T12050] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3196.979589][T12050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3196.989469][T12050] usb 2-1: config 0 descriptor?? [ 3197.010567][T17258] loop2: detected capacity change from 0 to 1024 [ 3197.071415][T17258] EXT4-fs (loop2): Ignoring removed orlov option [ 3197.077683][T17258] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 3197.093665][T17258] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 3197.252109][T18700] usb 4-1: Using ep0 maxpacket: 32 [ 3197.391249][T18700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3197.404759][T18700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3197.416641][T18700] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3197.425579][T18700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3197.434645][T18700] usb 4-1: config 0 descriptor?? [ 3197.455342][T17243] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 3197.488177][T18700] hub 4-1:0.0: USB hub found [ 3197.560427][T17278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3197.576849][T17278] loop0: detected capacity change from 0 to 512 [ 3197.615643][T12563] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 3197.702557][T17280] loop0: detected capacity change from 0 to 512 [ 3197.722618][T18700] hub 4-1:0.0: 2 ports detected [ 3197.735453][T17280] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 3197.746457][T17280] ext4 filesystem being mounted at /458/file0 supports timestamps until 2038 (0x7fffffff) [ 3198.000509][T12563] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 3198.011259][T12563] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3198.043238][ T20] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3198.107622][T12563] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3198.116515][T12563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3198.124382][T12563] usb 3-1: SerialNumber: syz [ 3198.150185][T17265] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 3198.299765][ T20] usb 1-1: Using ep0 maxpacket: 8 [ 3198.386135][T17265] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 3198.428194][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3198.438963][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3198.448563][ T20] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3198.457477][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3198.466407][T12050] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C9/input/input145 [ 3198.478794][ T20] usb 1-1: config 0 descriptor?? [ 3198.484963][T12050] uclogic 0003:256C:006D.00C9: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 3198.681683][T12050] usb 2-1: USB disconnect, device number 59 [ 3198.879140][T12563] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 3198.995842][ T20] steelseries_srws1 0003:1038:1410.00CA: item fetching failed at offset 5/7 [ 3199.004639][ T20] steelseries_srws1 0003:1038:1410.00CA: parse failed [ 3199.012083][ T20] steelseries_srws1: probe of 0003:1038:1410.00CA failed with error -22 [ 3199.210287][ T8489] usb 1-1: USB disconnect, device number 58 [ 3199.872893][T17308] loop0: detected capacity change from 0 to 128 [ 3199.900574][T17308] tipc: Started in network mode [ 3199.905438][T17308] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 3199.912516][T17308] tipc: Enabled bearer , priority 10 [ 3200.449335][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 3200.449353][ T30] audit: type=1326 audit(2000000139.838:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.485368][ T8489] usb 3-1: USB disconnect, device number 77 [ 3200.491736][ T30] audit: type=1326 audit(2000000139.875:5306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.515944][ T30] audit: type=1326 audit(2000000139.875:5307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.541993][ T8489] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 3200.542331][ T30] audit: type=1326 audit(2000000139.875:5308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.585815][ T30] audit: type=1326 audit(2000000139.875:5309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.614684][ T30] audit: type=1326 audit(2000000139.875:5310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.638663][ T2677] usb 4-1-port2: over-current condition [ 3200.654290][ T30] audit: type=1326 audit(2000000139.875:5311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.690280][ T30] audit: type=1326 audit(2000000139.875:5312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.727525][ T30] audit: type=1326 audit(2000000139.875:5313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.753698][ T30] audit: type=1326 audit(2000000139.875:5314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17325 comm="syz.1.15062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8632f0ef9 code=0x7ffc0000 [ 3200.876259][ T2677] usb 4-1-port2: config error [ 3200.972433][ T20] tipc: Node number set to 10005162 [ 3201.015630][T17379] loop0: detected capacity change from 0 to 512 [ 3201.042063][T17379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 3201.050086][ T8489] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3201.058779][T17379] System zones: 1-12 [ 3201.069017][T17379] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #11: comm syz.0.15074: iget: bogus i_mode (0) [ 3201.083220][T17379] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.15074: couldn't read orphan inode 11 (err -117) [ 3201.095542][ T20] usb 4-1: USB disconnect, device number 65 [ 3201.096231][T17379] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 3201.132881][T18700] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 3201.260406][T17400] syz.0.15077[17400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3201.260513][T17400] syz.0.15077[17400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3201.276692][T17400] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 3201.432409][ T8489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3201.453984][ T8489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3201.464628][ T8489] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3201.473520][ T8489] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3201.493630][ T8489] usb 3-1: config 0 descriptor?? [ 3201.539178][T18700] usb 2-1: config 0 has an invalid interface number: 25 but max is 0 [ 3201.551349][T18700] usb 2-1: config 0 has no interface number 0 [ 3201.557304][T18700] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3201.868618][T18700] usb 2-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3201.882000][T18700] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3201.890881][T18700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3201.907062][T18700] usb 2-1: config 0 descriptor?? [ 3202.419564][T18700] uclogic 0003:256C:006D.00CC: No inputs registered, leaving [ 3202.437694][T18700] uclogic 0003:256C:006D.00CC: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input25 [ 3202.543543][T17439] netlink: 104 bytes leftover after parsing attributes in process `syz.0.15092'. [ 3202.632779][T12050] usb 2-1: USB disconnect, device number 60 [ 3202.995878][ T8489] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00CB/input/input146 [ 3203.018676][ T8489] uclogic 0003:256C:006D.00CB: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 3203.403421][ T8489] usb 3-1: USB disconnect, device number 78 [ 3203.734331][T17463] loop1: detected capacity change from 0 to 512 [ 3203.743968][T17466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=17466 comm=syz.4.15104 [ 3203.760659][T17466] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.15104'. [ 3203.778356][T17463] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 3203.789498][T17463] ext4 filesystem being mounted at /506/file0 supports timestamps until 2038 (0x7fffffff) [ 3204.200954][T12050] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 3204.478898][T12050] usb 2-1: Using ep0 maxpacket: 8 [ 3204.617978][T12050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3204.632976][T12050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3204.643740][T12050] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 3204.657931][T12050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3204.674826][T12050] usb 2-1: config 0 descriptor?? [ 3204.842569][ T20] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3205.002848][T12563] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3205.174971][T12050] steelseries_srws1 0003:1038:1410.00CD: item fetching failed at offset 5/7 [ 3205.183629][T12050] steelseries_srws1 0003:1038:1410.00CD: parse failed [ 3205.190458][T12050] steelseries_srws1: probe of 0003:1038:1410.00CD failed with error -22 [ 3205.199228][T20096] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3205.248798][ T20] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 3205.257273][ T20] usb 3-1: config 0 has no interface number 0 [ 3205.263239][T12563] usb 1-1: Using ep0 maxpacket: 16 [ 3205.268203][ T20] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3205.279386][ T20] usb 3-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3205.289057][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3205.297918][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3205.306950][ T20] usb 3-1: config 0 descriptor?? [ 3205.389339][T12050] usb 2-1: USB disconnect, device number 61 [ 3205.580347][T12563] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=94.d7 [ 3205.589480][T12563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3205.597376][T12563] usb 1-1: Product: syz [ 3205.601290][T12563] usb 1-1: Manufacturer: syz [ 3205.605830][T12563] usb 1-1: SerialNumber: syz [ 3205.611358][T12563] usb 1-1: config 0 descriptor?? [ 3205.633654][T20096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3205.644477][T20096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3205.653991][T20096] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3205.663629][T12563] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 3205.670542][T20096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3205.679881][T20096] usb 4-1: config 0 descriptor?? [ 3205.806080][ T20] uclogic 0003:256C:006D.00CE: No inputs registered, leaving [ 3205.814047][ T20] uclogic 0003:256C:006D.00CE: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input25 [ 3205.878344][ T20] usb 1-1: USB disconnect, device number 59 [ 3206.022323][T12050] usb 3-1: USB disconnect, device number 79 [ 3206.445059][T17526] loop0: detected capacity change from 0 to 512 [ 3206.521475][T17526] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 3206.832828][ T30] kauditd_printk_skb: 126 callbacks suppressed [ 3206.832846][ T30] audit: type=1326 audit(2000000145.815:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3206.888701][ T30] audit: type=1326 audit(2000000145.815:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3206.935364][ T30] audit: type=1326 audit(2000000145.815:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3206.965251][ T30] audit: type=1326 audit(2000000145.815:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3206.993770][ T30] audit: type=1326 audit(2000000145.815:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3207.018037][ T30] audit: type=1326 audit(2000000145.815:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3207.044024][ T30] audit: type=1326 audit(2000000145.815:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3207.068001][ T30] audit: type=1326 audit(2000000145.815:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3207.092424][ T30] audit: type=1326 audit(2000000145.815:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3207.116638][ T30] audit: type=1326 audit(2000000145.815:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17540 comm="syz.2.15132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3207.172948][T12050] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3207.228008][T20096] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00CF/input/input147 [ 3207.241760][T20096] uclogic 0003:256C:006D.00CF: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 3207.279856][ T8489] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 3207.352886][T17555] syz.4.15137[17555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3207.353022][T17555] syz.4.15137[17555] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3207.367632][T17555] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 3207.456286][T20096] usb 4-1: USB disconnect, device number 66 [ 3207.536438][ T8489] usb 2-1: Using ep0 maxpacket: 32 [ 3207.600736][T12050] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3207.610032][T12050] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3207.622480][T12050] usb 3-1: config 0 descriptor?? [ 3207.665154][ T8489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3207.681931][ T8489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3207.691870][ T8489] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 3207.706565][ T8489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3207.722438][ T8489] usb 2-1: config 0 descriptor?? [ 3208.124450][T12050] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3208.134847][T12050] asix: probe of 3-1:0.0 failed with error -71 [ 3208.147228][T12050] usb 3-1: USB disconnect, device number 80 [ 3208.232739][ T8489] hid-rmi 0003:0461:4E72.00D0: unknown main item tag 0x0 [ 3208.239663][ T8489] hid-rmi 0003:0461:4E72.00D0: unknown main item tag 0x0 [ 3208.246581][ T8489] hid-rmi 0003:0461:4E72.00D0: unknown main item tag 0x0 [ 3208.253690][ T8489] hid-rmi 0003:0461:4E72.00D0: unknown main item tag 0x0 [ 3208.260471][ T8489] hid-rmi 0003:0461:4E72.00D0: unknown main item tag 0x0 [ 3208.269598][ T8489] hid-rmi 0003:0461:4E72.00D0: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 3208.323479][T17596] Â: renamed from pim6reg1 [ 3208.392121][T17598] cgroup: Need name or subsystem set [ 3208.449816][ T8489] usb 2-1: USB disconnect, device number 62 [ 3208.748801][T12050] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3208.979903][T12563] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3209.081679][T17633] loop1: detected capacity change from 0 to 512 [ 3209.163828][T17633] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 3209.174734][T17633] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038 (0x7fffffff) [ 3209.193587][T12050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3209.204569][T12050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3209.214198][T12050] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3209.223072][T12050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3209.232265][T12050] usb 4-1: config 0 descriptor?? [ 3209.257758][T12563] usb 3-1: Using ep0 maxpacket: 8 [ 3209.288271][T17638] netlink: 276 bytes leftover after parsing attributes in process `syz.1.15172'. [ 3209.386217][T12563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3209.397360][T12563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3209.407001][T12563] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 3209.416214][T12563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3209.431443][T12563] usb 3-1: config 0 descriptor?? [ 3209.698648][T17618] UDC core: couldn't find an available UDC or it's busy: -16 [ 3209.705880][T17618] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 3209.738725][ T8489] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 3210.006809][T12563] logitech 0003:046D:C20E.00D2: rdesc size test failed for formula gp [ 3210.015170][T12563] logitech 0003:046D:C20E.00D2: unbalanced delimiter at end of report description [ 3210.024466][T12563] logitech 0003:046D:C20E.00D2: parse failed [ 3210.030372][T12563] logitech: probe of 0003:046D:C20E.00D2 failed with error -22 [ 3210.134338][ T8489] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 3210.143392][ T8489] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3210.152446][ T8489] usb 2-1: config 0 descriptor?? [ 3210.433634][ T8489] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3210.443600][ T8489] asix: probe of 2-1:0.0 failed with error -71 [ 3210.450637][ T8489] usb 2-1: USB disconnect, device number 63 [ 3210.700426][T17657] device syzkaller0 entered promiscuous mode [ 3210.755718][T12050] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00D1/input/input148 [ 3210.776940][T12050] uclogic 0003:256C:006D.00D1: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 3210.806119][T17661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17661 comm=syz.4.15181 [ 3210.968148][T18700] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3210.980725][ T8489] usb 4-1: USB disconnect, device number 67 [ 3211.592105][T17683] netlink: 'syz.3.15190': attribute type 4 has an invalid length. [ 3211.641884][T18700] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 3211.651152][T18700] usb 1-1: config 0 has no interface number 0 [ 3211.657422][T18700] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3211.668454][T18700] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3211.678359][T18700] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3211.687389][T18700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3211.706943][T18700] usb 1-1: config 0 descriptor?? [ 3211.905834][T20096] usb 3-1: USB disconnect, device number 81 [ 3211.956528][T17696] loop2: detected capacity change from 0 to 256 [ 3211.994798][T17696] exfat: Unknown parameter '' [ 3212.005277][T12050] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 3212.075201][T17696] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 3212.146395][T17700] netlink: 276 bytes leftover after parsing attributes in process `syz.2.15197'. [ 3212.220494][T18700] uclogic 0003:256C:006D.00D3: No inputs registered, leaving [ 3212.228298][T18700] uclogic 0003:256C:006D.00D3: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input25 [ 3212.239664][ T2677] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 3212.390076][T12050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3212.400837][T12050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3212.410369][T12050] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3212.419534][T12050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.431879][T12050] usb 4-1: config 0 descriptor?? [ 3212.439346][T18700] usb 1-1: USB disconnect, device number 60 [ 3212.546594][T17716] loop2: detected capacity change from 0 to 128 [ 3212.657339][ T2677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3212.668080][ T2677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3212.677579][ T2677] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3212.686765][ T2677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3212.695601][ T2677] usb 2-1: config 0 descriptor?? [ 3212.704447][T17717] netlink: 'syz.2.15204': attribute type 9 has an invalid length. [ 3212.712245][T17717] netlink: 'syz.2.15204': attribute type 6 has an invalid length. [ 3213.418214][T17692] loop1: detected capacity change from 0 to 16 [ 3213.481289][T17692] erofs: (device loop1): mounted with root inode @ nid 36. [ 3213.494953][ T30] kauditd_printk_skb: 175 callbacks suppressed [ 3213.494969][ T30] audit: type=1326 audit(2000000152.045:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.524742][ T30] audit: type=1326 audit(2000000152.054:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.550164][T17692] erofs: (device loop1): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 3213.559504][ T30] audit: type=1326 audit(2000000152.073:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.561514][T17692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.15193'. [ 3213.592283][ T30] audit: type=1326 audit(2000000152.073:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.616577][ T30] audit: type=1326 audit(2000000152.073:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.640944][ T30] audit: type=1326 audit(2000000152.073:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.655413][T17728] loop2: detected capacity change from 0 to 256 [ 3213.665304][ T30] audit: type=1326 audit(2000000152.073:5632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.694393][ T30] audit: type=1326 audit(2000000152.073:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.720080][ T30] audit: type=1326 audit(2000000152.073:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.744341][ T30] audit: type=1326 audit(2000000152.073:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17724 comm="syz.2.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a63ba6ef9 code=0x7ffc0000 [ 3213.748978][T17728] FAT-fs (loop2): invalid media value (0x29) [ 3213.773891][T17728] FAT-fs (loop2): Can't find a valid FAT filesystem [ 3213.953370][T12050] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.00D4/input/input149 [ 3214.000546][T12050] uclogic 0003:256C:006D.00D4: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 3214.100955][ T2677] uclogic 0003:256C:006D.00D5: failed retrieving string descriptor #200: -71 [ 3214.109805][ T2677] uclogic 0003:256C:006D.00D5: failed retrieving pen parameters: -71 [ 3214.118054][ T2677] uclogic 0003:256C:006D.00D5: failed probing pen v2 parameters: -71 [ 3214.126320][ T2677] uclogic 0003:256C:006D.00D5: failed probing parameters: -71 [ 3214.134142][ T2677] uclogic: probe of 0003:256C:006D.00D5 failed with error -71 [ 3214.142677][ T2677] usb 2-1: USB disconnect, device number 64 [ 3214.154919][T17738] netlink: 276 bytes leftover after parsing attributes in process `syz.0.15210'. [ 3214.180942][T20096] usb 4-1: USB disconnect, device number 68 [ 3214.181013][T17740] netlink: 'syz.2.15212': attribute type 10 has an invalid length. [ 3214.359877][T17746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17746 comm=syz.0.15214 [ 3214.682551][T17765] EXT4-fs warning (device sda1): ext4_resize_fs:1981: can't read last block, resize aborted [ 3215.112794][T17794] device bridge0 left promiscuous mode [ 3215.126051][T17794] device bridge0 entered promiscuous mode [ 3215.144488][T17792] loop1: detected capacity change from 0 to 512 [ 3215.254933][T17800] loop1: detected capacity change from 0 to 512 [ 3215.298327][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15235'. [ 3215.342676][T17800] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3215.383082][T17800] EXT4-fs (loop1): 1 truncate cleaned up [ 3215.394250][T17800] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 3215.445080][T17820] netlink: 296 bytes leftover after parsing attributes in process `syz.0.15244'. [ 3215.483692][T17824] device bridge0 left promiscuous mode [ 3215.519193][T17824] device bridge0 entered promiscuous mode [ 3215.618581][ T2677] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 3216.174475][ T2677] usb 3-1: Using ep0 maxpacket: 32 [ 3216.306295][T17918] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 3216.324263][ T2677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3216.345515][ T2677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3216.371654][ T2677] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3216.382396][ T2677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3216.394646][ T2677] usb 3-1: config 0 descriptor?? [ 3216.420414][T17810] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 3216.446628][ T2677] hub 3-1:0.0: USB hub found [ 3216.458030][T17922] bridge0: port 2(bridge_slave_1) entered disabled state [ 3216.465141][T17922] bridge0: port 1(bridge_slave_0) entered disabled state [ 3216.477025][T17922] bridge0: port 2(bridge_slave_1) entered blocking state [ 3216.483911][T17922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3216.491084][T17922] bridge0: port 1(bridge_slave_0) entered blocking state [ 3216.497960][T17922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3216.505592][T17922] device bridge0 entered promiscuous mode [ 3216.677073][ T2677] hub 3-1:0.0: 2 ports detected [ 3216.687608][T18700] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 3217.436143][T18700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3217.447095][T18700] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3217.456854][T18700] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3217.465776][T18700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3217.474288][T18700] usb 2-1: config 0 descriptor?? [ 3217.553682][T20096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3217.676424][T17978] bridge0: port 2(bridge_slave_1) entered disabled state [ 3217.683470][T17978] bridge0: port 1(bridge_slave_0) entered disabled state [ 3217.690426][T17978] device bridge0 left promiscuous mode [ 3217.708611][T17978] bridge0: port 2(bridge_slave_1) entered blocking state [ 3217.715519][T17978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3217.722611][T17978] bridge0: port 1(bridge_slave_0) entered blocking state [ 3217.729514][T17978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3217.737885][T17978] device bridge0 entered promiscuous mode [ 3217.765057][T17986] syz.3.15312[17986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3217.765144][T17986] syz.3.15312[17986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3218.160534][T18700] hid (null): bogus close delimiter [ 3218.248808][T18700] usb 2-1: string descriptor 0 read error: -22 [ 3218.718892][T18700] uclogic 0003:256C:006D.00D6: failed retrieving string descriptor #100: -71 [ 3218.727522][T18700] uclogic 0003:256C:006D.00D6: failed retrieving pen parameters: -71 [ 3218.735819][T18700] uclogic 0003:256C:006D.00D6: failed probing pen v1 parameters: -71 [ 3218.749332][T18700] uclogic 0003:256C:006D.00D6: failed probing parameters: -71 [ 3218.756911][T18700] uclogic: probe of 0003:256C:006D.00D6 failed with error -71 [ 3218.770513][T18700] usb 2-1: USB disconnect, device number 65 [ 3219.129461][T18014] bridge0: port 2(bridge_slave_1) entered disabled state [ 3219.136419][T18014] bridge0: port 1(bridge_slave_0) entered disabled state [ 3219.144034][T18014] device bridge0 left promiscuous mode [ 3219.160875][T18014] bridge0: port 2(bridge_slave_1) entered blocking state [ 3219.167785][T18014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3219.174872][T18014] bridge0: port 1(bridge_slave_0) entered blocking state [ 3219.182271][T18014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3219.197452][T18014] device bridge0 entered promiscuous mode [ 3219.274341][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 3219.274358][ T30] audit: type=1326 audit(2000000157.442:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.305270][ T30] audit: type=1326 audit(2000000157.451:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.329380][ T30] audit: type=1326 audit(2000000157.470:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.367255][ T30] audit: type=1326 audit(2000000157.470:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.391023][ T30] audit: type=1326 audit(2000000157.470:5847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.419057][ T30] audit: type=1326 audit(2000000157.498:5848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.444088][ T30] audit: type=1326 audit(2000000157.498:5849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.467822][ T30] audit: type=1326 audit(2000000157.498:5850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.501817][ T30] audit: type=1326 audit(2000000157.517:5851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.531376][ T30] audit: type=1326 audit(2000000157.517:5852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18026 comm="syz.3.15330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc222e1ef9 code=0x7ffc0000 [ 3219.599278][T18046] device bridge0 left promiscuous mode [ 3219.607310][T18046] device bridge0 entered promiscuous mode [ 3219.627810][ T2677] usb 3-1-port2: over-current condition [ 3219.650530][T18051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15341'. [ 3219.815269][T18075] device bridge0 left promiscuous mode [ 3219.823325][T18075] device bridge0 entered promiscuous mode [ 3219.857827][T18068] ------------[ cut here ]------------ [ 3219.864065][T18068] WARNING: CPU: 0 PID: 18068 at mm/page_alloc.c:5754 __alloc_pages+0x770/0x8f0 [ 3219.873064][T18068] Modules linked in: [ 3219.874578][ T2677] usb 3-1-port2: config error [ 3219.877325][T18068] CPU: 0 PID: 18068 Comm: syz.3.15349 Tainted: G W 5.15.160-syzkaller-00026-ge6fb3b0fa87f #0 [ 3219.893316][T18068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 3219.909701][T18068] RIP: 0010:__alloc_pages+0x770/0x8f0 [ 3219.915293][T18068] Code: df e9 aa fb ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ba fb ff ff e8 0f 13 05 00 48 ba 00 00 00 00 00 fc ff df e9 a6 fb ff ff <0f> 0b 45 31 e4 e9 73 fc ff ff 48 8d 4c 24 40 80 e1 07 80 c1 03 38 [ 3219.938075][T18068] RSP: 0018:ffffc90000a77a20 EFLAGS: 00010246 [ 3219.944161][T18068] RAX: 0000000000000004 RBX: 0000000000040dc0 RCX: ffffc90000a77a03 [ 3219.952588][T18068] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffc90000a77ab8 [ 3219.962738][T18068] RBP: ffffc90000a77b30 R08: dffffc0000000000 R09: ffffc90000a77a90 [ 3219.972096][T18068] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 3219.980130][T18068] R13: 1ffff9200014ef4c R14: 1ffff9200014ef4e R15: 1ffff9200014ef48 [ 3220.017978][T18068] FS: 00007efc20f5b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3220.046357][T18068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3220.052868][T18068] CR2: ffffffffdfa50000 CR3: 0000000111f58000 CR4: 00000000003506b0 [ 3220.075829][T18068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3220.084044][T18068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3220.092409][T18068] Call Trace: [ 3220.095575][T18068] [ 3220.100695][T18068] ? show_regs+0x58/0x60 [ 3220.105062][T18068] ? __warn+0x160/0x2f0 [ 3220.109360][T18068] ? __alloc_pages+0x770/0x8f0 [ 3220.114082][T18068] ? report_bug+0x3d9/0x5b0 [ 3220.118595][T18068] ? __alloc_pages+0x770/0x8f0 [ 3220.126148][T20096] usb 3-1: USB disconnect, device number 82 [ 3220.132301][T18068] ? handle_bug+0x41/0x70 [ 3220.136588][T18068] ? exc_invalid_op+0x1b/0x50 [ 3220.141497][T18068] ? asm_exc_invalid_op+0x1b/0x20 [ 3220.146608][T18068] ? __alloc_pages+0x770/0x8f0 [ 3220.151259][T18068] ? prep_new_page+0x110/0x110 [ 3220.160446][T18068] ? do_vfs_ioctl+0xbc1/0x2a80 [ 3220.166504][T18068] kmalloc_order+0x4a/0x160 [ 3220.170909][T18068] kmalloc_order_trace+0x1a/0xb0 [ 3220.175753][T18068] __kmalloc+0x19c/0x270 [ 3220.179902][T18068] input_mt_init_slots+0xcf/0xa50 [ 3220.189428][T18068] ? mutex_lock_interruptible+0xb6/0x1e0 [ 3220.195000][T18068] uinput_create_device+0x522/0x630 [ 3220.199994][T18068] uinput_ioctl_handler+0xa63/0x16a0 [ 3220.207453][T18068] ? selinux_file_ioctl+0x3cc/0x540 [ 3220.212812][T18068] ? uinput_release+0x50/0x50 [ 3220.217907][T18068] ? __fget_files+0x31e/0x380 [ 3220.222861][T18068] uinput_ioctl+0x28/0x30 [ 3220.228353][T18068] ? uinput_poll+0x120/0x120 [ 3220.247563][T18068] __se_sys_ioctl+0x114/0x190 [ 3220.254316][T18068] __x64_sys_ioctl+0x7b/0x90 [ 3220.275906][T18068] x64_sys_call+0x98/0x9a0 [ 3220.281995][T18068] do_syscall_64+0x3b/0xb0 [ 3220.286842][T18068] ? clear_bhb_loop+0x35/0x90 [ 3220.295380][T18068] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 3220.302320][T18068] RIP: 0033:0x7efc222e1ef9 [ 3220.307410][T18068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3220.329370][T18068] RSP: 002b:00007efc20f5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3220.343526][T18068] RAX: ffffffffffffffda RBX: 00007efc22499f80 RCX: 00007efc222e1ef9 [ 3220.353462][T18068] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 3220.363402][T18068] RBP: 00007efc22354b76 R08: 0000000000000000 R09: 0000000000000000 [ 3220.398015][T18068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3220.417298][T18068] R13: 0000000000000000 R14: 00007efc22499f80 R15: 00007ffcb20f1698 [ 3220.427713][T18068] [ 3220.441256][T18068] ---[ end trace 28de8ea0b066747b ]--- [ 3220.657578][T18111] xt_SECMARK: invalid security context 'system_u:object_r:devicekit_exec_t:s0' [ 3220.713492][T18120] device bridge0 left promiscuous mode [ 3220.873568][T18120] device bridge0 entered promiscuous mode [ 3221.180638][T18151] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3221.260733][T18152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15374'. [ 3221.682885][T18160] netlink: 296 bytes leftover after parsing attributes in process `syz.4.15386'. [ 3221.872548][ T1164] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 3221.872578][ T2677] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3221.925412][T18165] device bridge0 left promiscuous mode [ 3221.933052][T18165] device bridge0 entered promiscuous mode [ 3222.258018][ T1164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3222.293488][ T1164] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3222.340744][ T1164] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3222.362566][ T1164] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3222.379492][ T1164] usb 3-1: config 0 descriptor?? [ 3222.407106][ T2677] usb 1-1: Using ep0 maxpacket: 32 [ 3222.424687][T18188] device bridge0 left promiscuous mode [ 3222.436934][T18188] device bridge0 entered promiscuous mode [ 3222.473337][T18192] netlink: 296 bytes leftover after parsing attributes in process `syz.3.15398'. [ 3222.546161][ T2677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3222.557252][ T2677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3222.568267][ T2677] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3222.577169][ T2677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3222.585894][ T2677] usb 1-1: config 0 descriptor?? [ 3222.610289][T18157] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 3222.632327][ T2677] hub 1-1:0.0: USB hub found [ 3222.866866][ T2677] hub 1-1:0.0: 2 ports detected [ 3222.977215][T18207] EXT4-fs (sda1): shut down requested (1) [ 3222.986949][T18207] Aborting journal on device sda1-8. [ 3223.562892][T18227] bridge0: port 2(bridge_slave_1) entered disabled state [ 3223.569852][T18227] bridge0: port 1(bridge_slave_0) entered disabled state [ 3223.577527][T18227] device bridge0 left promiscuous mode [ 3223.586407][T18227] bridge0: port 2(bridge_slave_1) entered blocking state [ 3223.593291][T18227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3223.600431][T18227] bridge0: port 1(bridge_slave_0) entered blocking state [ 3223.600454][T18227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3223.600718][T18227] device bridge0 entered promiscuous mode [ 3223.626758][T18231] netlink: 'syz.4.15416': attribute type 9 has an invalid length. [ 3223.634760][T18231] netlink: 'syz.4.15416': attribute type 6 has an invalid length. [ 3223.947981][ T1164] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00D7/input/input151 [ 3223.961961][ T1164] uclogic 0003:256C:006D.00D7: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 3224.163075][ T8562] usb 3-1: USB disconnect, device number 83 [ 3224.261267][T18244] loop1: detected capacity change from 0 to 128 [ 3224.355217][T18244] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 3224.367406][T18244] ext4 filesystem being mounted at /556/mnt supports timestamps until 2038 (0x7fffffff) [ 3224.728939][T18257] loop1: detected capacity change from 0 to 128 [ 3224.737676][ T1164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3224.772787][ T30] kauditd_printk_skb: 161 callbacks suppressed [ 3224.772804][ T30] audit: type=1326 audit(2000000162.587:6014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3224.803623][ T30] audit: type=1326 audit(2000000162.587:6015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3224.828508][ T30] audit: type=1326 audit(2000000162.587:6016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3224.952119][ T30] audit: type=1326 audit(2000000162.587:6017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3225.117908][T18257] netlink: 'syz.1.15433': attribute type 9 has an invalid length. [ 3225.175255][T18257] netlink: 'syz.1.15433': attribute type 6 has an invalid length. [ 3225.221434][ T30] audit: type=1326 audit(2000000162.587:6018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3225.246335][ T30] audit: type=1326 audit(2000000162.587:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3225.270435][ T30] audit: type=1326 audit(2000000162.587:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3225.294503][ T30] audit: type=1326 audit(2000000162.587:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3225.323626][ T30] audit: type=1326 audit(2000000162.587:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3225.347958][ T30] audit: type=1326 audit(2000000162.587:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18262 comm="syz.4.15428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00d18b0ef9 code=0x7ffc0000 [ 3225.371496][T18274] device bridge0 left promiscuous mode [ 3225.379822][T18274] device bridge0 entered promiscuous mode [ 3225.741978][T18301] device bridge0 left promiscuous mode [ 3225.750001][T18301] device bridge0 entered promiscuous mode [ 3225.764067][T18700] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 3225.860205][ T2677] usb 1-1-port2: over-current condition [ 3225.980426][T18311] netlink: 'syz.4.15447': attribute type 9 has an invalid length. [ 3225.988115][T18311] netlink: 'syz.4.15447': attribute type 6 has an invalid length. [ 3226.012637][T18313] netlink: 'syz.4.15448': attribute type 9 has an invalid length. [ 3226.020335][T18313] netlink: 'syz.4.15448': attribute type 6 has an invalid length. [ 3226.043888][T18315] fuse: Bad value for 'fd' [ 3226.095570][ T2677] usb 1-1-port2: config error [ 3226.314531][ T1164] usb 1-1: USB disconnect, device number 61 [ 3226.469626][T18700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3226.481350][T18700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3226.491352][T18700] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3226.491882][T18331] device bridge0 left promiscuous mode [ 3226.500720][T18700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3226.511956][T18331] device bridge0 entered promiscuous mode [ 3226.520553][T18700] usb 3-1: config 0 descriptor?? [ 3226.710585][T18340] netlink: 'syz.4.15459': attribute type 9 has an invalid length. [ 3226.718518][T18340] netlink: 'syz.4.15459': attribute type 6 has an invalid length. [ 3226.774159][T18346] fuse: Bad value for 'fd' [ 3226.988567][T18372] fuse: Bad value for 'fd' [ 3226.988754][T18370] loop0: detected capacity change from 0 to 128 [ 3227.021620][T18360] kvm [18359]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1e [ 3227.032550][T18360] kvm [18359]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x42 [ 3227.045018][T18360] kvm [18359]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8a7 [ 3227.066985][T18360] kvm [18359]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x138 [ 3227.088308][T18376] loop1: detected capacity change from 0 to 512 [ 3227.562663][T18399] fuse: Bad value for 'fd' [ 3227.737916][T18415] bridge0: port 2(bridge_slave_1) entered disabled state [ 3227.744846][T18415] bridge0: port 1(bridge_slave_0) entered disabled state [ 3227.751817][T18415] device bridge0 left promiscuous mode [ 3227.760965][T18415] bridge0: port 2(bridge_slave_1) entered blocking state [ 3227.767850][T18415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3227.774953][T18415] bridge0: port 1(bridge_slave_0) entered blocking state SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 3227.781694][T18415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3227.789003][T18415] device bridge0 entered promiscuous mode [ 3228.137445][T18700] uclogic 0003:256C:006D.00D8: v1 buttonpad probing failed: -71 [ 3228.144938][T18700] uclogic 0003:256C:006D.00D8: failed probing parameters: -71 [ 3228.152841][T18700] uclogic: probe of 0003:256C:006D.00D8 failed with error -71 [ 3228.170434][T18700] usb 3-1: USB disconnect, device number 84 [ 3228.822526][T28069] device bridge_slave_1 left promiscuous mode [ 3228.828478][T28069] bridge0: port 2(bridge_slave_1) entered disabled state [ 3228.835859][T28069] device bridge_slave_0 left promiscuous mode [ 3228.841784][T28069] bridge0: port 1(bridge_slave_0) entered disabled state [ 3228.849798][T28069] device veth1_macvtap left promiscuous mode [ 3228.855636][T28069] device veth0_vlan left promiscuous mode [ 3229.358509][T28069] tipc: Disabling bearer [ 3229.363676][T28069] tipc: Left network mode [ 3230.277405][T28069] device veth1_macvtap left promiscuous mode [ 3230.283232][T28069] device veth0_vlan left promiscuous mode [ 3230.289117][T28069] device veth1_macvtap left promiscuous mode [ 3230.294928][T28069] device veth0_vlan left promiscuous mode [ 3230.300707][T28069] device veth1_macvtap left promiscuous mode [ 3230.306857][T28069] device veth1_macvtap left promiscuous mode [ 3230.313010][T28069] device veth0_vlan left promiscuous mode