last executing test programs: 14.570128717s ago: executing program 2 (id=976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x0, 0x745, 0x101}) 14.515863052s ago: executing program 2 (id=977): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x7) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') pread64(r2, &(0x7f0000001880)=""/4096, 0x1000, 0x100) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) 14.515689072s ago: executing program 2 (id=978): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@mblk_io_submit}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x8cc40, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) 14.410055511s ago: executing program 2 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 14.224265076s ago: executing program 2 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x9, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r5, 0x1, 0x0, 0x0, {0x1e}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 13.3612542s ago: executing program 2 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 8.357099517s ago: executing program 1 (id=1021): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) write$char_usb(r1, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0xde, &(0x7f0000007680)=""/222) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 8.356761087s ago: executing program 4 (id=1022): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='alloc_mode=default,resgid=', @ANYRESHEX=0x0, @ANYBLOB=',background_gc=off,resgid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\b'], 0x1, 0x5501, &(0x7f0000005880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 7.245952932s ago: executing program 4 (id=1024): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000001000)={0x0, 0x0, 0x4, "da3c8d23"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.040678795s ago: executing program 3 (id=1026): r0 = socket(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2002, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) 4.734068566s ago: executing program 0 (id=1027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.733496496s ago: executing program 1 (id=1028): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.733140926s ago: executing program 3 (id=1029): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0xb, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 3.320876827s ago: executing program 0 (id=1030): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000005340), 0x0, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000780)={0x40010}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 3.320666867s ago: executing program 1 (id=1031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="f2abf0fe830a0026de010fc72b65660f3a61787d000fc75ba966b8010000000f01d90f08ba6100b0ccee67f08177000c20", 0x31}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10d000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.320329137s ago: executing program 3 (id=1032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) wait4(0x0, 0x0, 0x0, 0x0) 3.319683286s ago: executing program 4 (id=1034): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 1.814078045s ago: executing program 0 (id=1035): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0x7) 1.813566465s ago: executing program 1 (id=1036): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1.813359735s ago: executing program 3 (id=1037): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 1.813230815s ago: executing program 4 (id=1038): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x0) readv(r1, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) 203.285022ms ago: executing program 0 (id=1039): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 202.761582ms ago: executing program 1 (id=1040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') 202.459982ms ago: executing program 3 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ftruncate(r1, 0x20cf01) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000002600)}, 0x10) 202.125182ms ago: executing program 4 (id=1042): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 112.34876ms ago: executing program 0 (id=1043): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x586, &(0x7f0000000e80)="$eJzs3d9rU1ccAPDvTRt/b1YQ2fYwCj7M4Uxtux8O9uAexyYTttfRhTQWaWqkScV2wvRhvuxlyGCMCWN/wN59lD3sdX+FMAUZUubDXjpuetPGJmlrjbY2nw9Ez7nn3pz7zT3n9NychATQt4bTf3IRr0fED0nE4ZaywcgKh5f3W3x0rZQ+klha+uKfJJJsW3P/JPv/YJZ5LSL++C7iZK693tr8wnSxUinPZvmR+szlkdr8wqmLM8Wp8lT50tj4+Jn3xsc+/OD9tmMn9m4t1rfPP/7587ufnPn++OJPvz84ciuJs3EoK2uN4xlcb80Mx3D2muTj7JodR3tQ2U6SbPcJsCUDWT/PRzoGHI6BrNd35CLDrvJtRCwBfSrR/6FPNecBzXv7Ht0HvzQefrx8A9Qe/+DyeyOxr3FvdGAxeeLOKL0VGupB/Wkdd+7fvpU+onfvQwBs6PqNiDg9ONg+/iXZ+Ld1pzexz9o6jH/w4txN5z/vdJr/5FbmP9Fh/nOwQ9/dio37f+5Bl0O3uAr0pHT+91HH+e/KotXQQJZ7pTHnyycXLlbK6dj2akSciPzeNL/ees6ZxXtL3cpa53937t/+8/Gja6XmXDA7jweDayKdLNaLzxJzq4c3It7oOP9NVq5/0uH6p6/H+fZQOjpWvv1mt7I18d9abIv/+Vr6LeKtjtd/dbEjWX99cqTRHkaaraLdvzeP/bWayz9R9pTx93wFJr3+B9aPfyhpXa+tPX0dv+77r9ytbOP4O7f/PcmXjfSebNvVYr0+OxqxJ/msffvY6rHNfHP/NP4Tx9cf/zq1//0R8fUm47959GbXXbe7/afxT27++qcvQZpIt6+0iI0S9z795pdu9a8T/8DyHun1f7eROpEds5nxbzPntbXWDAAAAAAAADtXLiIORZIrrKRzuUJh+fMdR+NArlKt1U9eqM5dmozGd2WHIp9rrnQfbvk8xGj2edhmfmxNfjwijkTEjwP7G/lCqVqZ3O7gAQAAAAAAAAAAAAAAAAAAYIc4GLGv0/f/U38PbPfZAc/dOj/5Dexy3ft/VtKLX3oCdiR//6F/6f/Qv/R/6F/6P/Qv/R/6l/4P/Uv/h/6l/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPnT93Ln0sLT66Vkrzk1fm56arV05NlmvThZm5UqFUnb1cmKpWpyrlQqk6s9HzVarVy6NjMXd1pF6u1Udq8wsTM9W5S/WJizPFqfJEOf9CogIAAAAAAAAAAAAAAAAAAICXS21+YbpYqZRnJXZfIokXUNfgTohU4quI6OkTbvfIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACr/g8AAP//yZ4z2A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000008c0)="10", 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x127842, 0x0) write$UHID_INPUT(r2, &(0x7f0000002040)={0x8, {"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", 0x1000}}, 0x1006) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x0) 112.03142ms ago: executing program 1 (id=1044): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000440)="6b3d70279569fc97fcb1e9413cf1d4d98d5cb4aab914a2a43f85ce79e87a27ca7b9fce", 0x0}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 103.391521ms ago: executing program 4 (id=1045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.861776ms ago: executing program 0 (id=1046): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbmon(&(0x7f00000000c0), 0xae, 0x80041) socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 0s ago: executing program 3 (id=1047): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.408343][ T493] device bridge_slave_1 left promiscuous mode [ 60.414297][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.415084][ T999] syz-executor: attempt to access beyond end of device [ 60.415084][ T999] loop4: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 60.434993][ T999] F2FS-fs (loop4): Issue discard(5637, 5637, 1) failed, ret: -5 [ 60.435066][ T493] device bridge_slave_0 left promiscuous mode [ 60.448545][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.456414][ T493] device veth1_macvtap left promiscuous mode [ 60.470883][ T493] device veth0_vlan left promiscuous mode [ 60.607662][ T59] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 60.636638][ T1522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.422'. [ 60.645806][ T1522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 60.657650][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 60.669166][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.679165][ T435] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.691945][ T435] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 60.700978][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.709435][ T435] usb 1-1: config 0 descriptor?? [ 60.787594][ T39] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 60.867578][ T59] usb 3-1: Using ep0 maxpacket: 8 [ 60.907870][ T1535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 60.916790][ T1535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 61.007601][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.018413][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.027975][ T59] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 61.036780][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.045394][ T59] usb 3-1: config 0 descriptor?? [ 61.167657][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.178518][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.189342][ T435] uclogic 0003:5543:0003.001A: unknown main item tag 0x0 [ 61.196195][ T435] uclogic 0003:5543:0003.001A: unknown main item tag 0x0 [ 61.203121][ T298] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 61.210466][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 61.219339][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.227287][ T435] uclogic 0003:5543:0003.001A: unknown main item tag 0x0 [ 61.234161][ T435] uclogic 0003:5543:0003.001A: unknown main item tag 0x0 [ 61.241294][ T39] usb 5-1: config 0 descriptor?? [ 61.246101][ T435] uclogic 0003:5543:0003.001A: unknown main item tag 0x0 [ 61.253109][ T435] uclogic 0003:5543:0003.001A: No inputs registered, leaving [ 61.261068][ T435] uclogic 0003:5543:0003.001A: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 61.390370][ T435] usb 1-1: USB disconnect, device number 9 [ 61.457553][ T298] usb 4-1: Using ep0 maxpacket: 16 [ 61.528271][ T59] kone 0003:1E7D:2CED.001B: collection stack underflow [ 61.534979][ T59] kone 0003:1E7D:2CED.001B: item 0 1 0 12 parsing failed [ 61.542104][ T59] kone 0003:1E7D:2CED.001B: parse failed [ 61.547655][ T59] kone: probe of 0003:1E7D:2CED.001B failed with error -22 [ 61.627586][ T298] usb 4-1: unable to get BOS descriptor or descriptor too short [ 61.708651][ T298] usb 4-1: config 4 has an invalid interface number: 38 but max is 0 [ 61.716565][ T298] usb 4-1: config 4 has no interface number 0 [ 61.722526][ T298] usb 4-1: config 4 interface 38 has no altsetting 0 [ 61.730961][ T623] usb 3-1: USB disconnect, device number 8 [ 61.897616][ T298] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 61.906614][ T298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.914474][ T298] usb 4-1: Product: syz [ 61.918549][ T298] usb 4-1: Manufacturer: syz [ 61.922957][ T298] usb 4-1: SerialNumber: syz [ 62.167565][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 62.307595][ T298] usb 4-1: Found UVC 0.00 device syz (19ab:1000) [ 62.313762][ T298] usb 4-1: No valid video chain found. [ 62.320685][ T298] usb 4-1: USB disconnect, device number 12 [ 62.517572][ T623] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 62.527852][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 62.538775][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 62.618287][ T39] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001C/input/input23 [ 62.633870][ T39] uclogic 0003:256C:006D.001C: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 62.686355][ T1548] loop3: detected capacity change from 0 to 256 [ 62.703944][ T1548] Disabled LAPIC found during irq injection [ 62.709890][ T19] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 62.719789][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.727684][ T19] usb 1-1: Product: syz [ 62.731673][ T19] usb 1-1: Manufacturer: syz [ 62.736007][ T19] usb 1-1: SerialNumber: syz [ 62.741059][ T19] usb 1-1: config 0 descriptor?? [ 62.757718][ T1541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 62.823954][ T606] usb 5-1: USB disconnect, device number 11 [ 62.877648][ T623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.888427][ T623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.898363][ T623] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 62.907197][ T623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.918453][ T623] usb 3-1: config 0 descriptor?? [ 62.985301][ T1561] loop3: detected capacity change from 0 to 512 [ 62.994102][ T1561] EXT4-fs error (device loop3): __ext4_iget:5046: inode #11: block 1: comm syz.3.437: invalid block [ 63.004955][ T1561] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.437: couldn't read orphan inode 11 (err -117) [ 63.006729][ T19] usb 1-1: USB disconnect, device number 10 [ 63.031264][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 63.398437][ T623] cp2112 0003:10C4:EA90.001D: unknown main item tag 0x0 [ 63.410153][ T623] cp2112 0003:10C4:EA90.001D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 63.486687][ T1575] loop4: detected capacity change from 0 to 40427 [ 63.493396][ T1575] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 63.500987][ T1575] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 63.518916][ T1578] loop0: detected capacity change from 0 to 512 [ 63.519038][ T1575] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.544718][ T1578] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.442: Unimplemented hash flags: 0x0001 [ 63.556470][ T1578] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.442: Corrupt directory, running e2fsck is recommended [ 63.562341][ T1575] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 63.569656][ T1578] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.442: Unimplemented hash flags: 0x0001 [ 63.576334][ T1575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 63.587358][ T1578] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.442: Corrupt directory, running e2fsck is recommended [ 63.607649][ T623] cp2112 0003:10C4:EA90.001D: Part Number: 0x82 Device Version: 0xFE [ 63.615794][ T1578] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.442: Unimplemented hash flags: 0x0001 [ 63.627303][ T1578] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.442: Corrupt directory, running e2fsck is recommended [ 63.641005][ T1578] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.442: Unimplemented hash flags: 0x0001 [ 63.652274][ T1578] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.442: Corrupt directory, running e2fsck is recommended [ 63.665311][ T1578] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz.0.442: Unimplemented hash flags: 0x0001 [ 63.676645][ T1578] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.442: Corrupt directory, running e2fsck is recommended [ 63.689326][ T1578] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.442: path /6/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 63.744009][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 63.744021][ T28] audit: type=1400 audit(1724902083.489:516): avc: denied { bind } for pid=1584 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.786916][ T28] audit: type=1400 audit(1724902083.519:517): avc: denied { setopt } for pid=1584 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.813834][ T28] audit: type=1400 audit(1724902083.519:518): avc: denied { write } for pid=1584 comm="syz.0.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.837661][ T623] cp2112 0003:10C4:EA90.001D: error requesting SMBus config [ 63.846914][ T623] cp2112: probe of 0003:10C4:EA90.001D failed with error -5 [ 63.968049][ T298] kernel write not supported for file /vcs (pid: 298 comm: kworker/1:3) [ 64.069434][ T298] usb 3-1: USB disconnect, device number 9 [ 64.091966][ T1603] loop0: detected capacity change from 0 to 512 [ 64.098683][ T1603] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.110026][ T1603] EXT4-fs (loop0): 1 orphan inode deleted [ 64.115547][ T1603] EXT4-fs (loop0): 1 truncate cleaned up [ 64.121078][ T1603] EXT4-fs mount: 6 callbacks suppressed [ 64.121092][ T1603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 64.138671][ T28] audit: type=1400 audit(1724902083.889:519): avc: denied { read write } for pid=1602 comm="syz.0.450" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.161274][ T28] audit: type=1400 audit(1724902083.889:520): avc: denied { open } for pid=1602 comm="syz.0.450" path="/12/bus/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.193097][ T1427] EXT4-fs (loop0): unmounting filesystem. [ 64.197615][ T623] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 64.215908][ T28] audit: type=1400 audit(1724902083.959:521): avc: denied { relabelfrom } for pid=1605 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.235457][ T28] audit: type=1400 audit(1724902083.959:522): avc: denied { relabelto } for pid=1605 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 64.254956][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 64.305818][ T1609] syz.0.452[1609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.305888][ T1609] syz.0.452[1609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.318158][ T1609] syz.0.452[1609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.329261][ T1609] syz.0.452[1609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.347865][ T435] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 64.450503][ T28] audit: type=1400 audit(1724902084.199:523): avc: denied { unmount } for pid=1427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.477442][ T28] audit: type=1400 audit(1724902084.219:524): avc: denied { connect } for pid=1621 comm="syz.0.459" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.497869][ T28] audit: type=1400 audit(1724902084.219:525): avc: denied { write } for pid=1621 comm="syz.0.459" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.597633][ T623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.616279][ T623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.625947][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.627533][ T435] usb 5-1: Using ep0 maxpacket: 16 [ 64.636693][ T623] usb 4-1: New USB device found, idVendor=056a, idProduct=00d1, bcdDevice= 0.00 [ 64.650903][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.660510][ T623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.668248][ T19] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 64.677077][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.685431][ T623] usb 4-1: config 0 descriptor?? [ 64.690613][ T19] usb 2-1: config 0 descriptor?? [ 64.736453][ T1637] loop0: detected capacity change from 0 to 512 [ 64.742976][ T1637] EXT4-fs: Ignoring removed i_version option [ 64.749153][ T1637] EXT4-fs: Ignoring removed nobh option [ 64.756432][ T1637] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.767657][ T435] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 64.768880][ T1637] EXT4-fs (loop0): 1 truncate cleaned up [ 64.781005][ T435] usb 5-1: config 0 has no interface number 0 [ 64.783015][ T1637] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 64.790251][ T435] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 64.799435][ T1642] incfs_lookup_dentry err:-13 [ 64.809168][ T1642] Error opening source file [ 64.823502][ T1637] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 64.823882][ T435] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 64.848924][ T1427] EXT4-fs (loop0): unmounting filesystem. [ 64.863442][ T1644] device pim6reg1 entered promiscuous mode [ 64.967608][ T435] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 64.976553][ T435] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 64.985364][ T435] usb 5-1: Product: syz [ 64.989561][ T435] usb 5-1: SerialNumber: syz [ 64.995230][ T435] usb 5-1: config 0 descriptor?? [ 65.158543][ T19] pantherlord 0003:0F30:0111.001E: item fetching failed at offset 6/7 [ 65.167927][ T623] wacom 0003:056A:00D1.001F: unknown main item tag 0x0 [ 65.174830][ T623] wacom 0003:056A:00D1.001F: Unknown device_type for 'HID 056a:00d1'. Assuming pen. [ 65.184322][ T19] pantherlord 0003:0F30:0111.001E: parse failed [ 65.190429][ T19] pantherlord: probe of 0003:0F30:0111.001E failed with error -22 [ 65.198731][ T623] wacom 0003:056A:00D1.001F: hidraw0: USB HID v0.00 Device [HID 056a:00d1] on usb-dummy_hcd.3-1/input0 [ 65.210874][ T623] input: Wacom Bamboo 2FG 4x5 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00D1.001F/input/input24 [ 65.269959][ T435] snd-usb-audio: probe of 5-1:0.2 failed with error -12 [ 65.279748][ T435] usb 5-1: USB disconnect, device number 12 [ 65.284308][ T402] udevd[402]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.361592][ T298] usb 2-1: USB disconnect, device number 11 [ 65.375194][ T623] usb 4-1: USB disconnect, device number 13 [ 65.798435][ T1664] device pim6reg1 entered promiscuous mode [ 65.918073][ T1680] loop1: detected capacity change from 0 to 128 [ 65.924909][ T1680] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.983015][ T1683] loop2: detected capacity change from 0 to 512 [ 65.989631][ T1683] EXT4-fs: Ignoring removed orlov option [ 65.995521][ T1683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.006805][ T1683] EXT4-fs (loop2): 1 truncate cleaned up [ 66.012383][ T1683] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.044644][ T1436] EXT4-fs (loop2): unmounting filesystem. [ 66.097584][ T435] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 66.143565][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 66.152653][ T1704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 66.183493][ T1708] device pim6reg1 entered promiscuous mode [ 66.189290][ T298] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 66.196713][ T39] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 66.319499][ T1719] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 66.337780][ T435] usb 5-1: Using ep0 maxpacket: 16 [ 66.477649][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.488608][ T435] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.498512][ T435] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 66.510467][ T435] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.518860][ T435] usb 5-1: config 0 descriptor?? [ 66.577621][ T39] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.587587][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.598217][ T39] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 66.606896][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.616768][ T298] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 66.624789][ T1737] loop1: detected capacity change from 0 to 512 [ 66.625861][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.640839][ T298] usb 1-1: config 0 descriptor?? [ 66.648729][ T1737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.657758][ T1737] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038 (0x7fffffff) [ 66.672964][ T1737] syz.1.507: attempt to access beyond end of device [ 66.672964][ T1737] loop1: rw=2051, sector=6857472328, nr_sectors = 44 limit=512 [ 66.687746][ T39] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 66.697253][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 66.705081][ T39] usb 4-1: SerialNumber: syz [ 66.769897][ T1152] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1) [ 66.786331][ T505] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 66.800379][ T1152] EXT4-fs (loop1): unmounting filesystem. [ 66.806573][ T1152] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 66.819415][ T1152] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 66.828786][ T1152] EXT4-fs error (device loop1): ext4_quota_off:7053: inode #3: comm syz-executor: mark_inode_dirty error [ 66.840296][ T1152] EXT4-fs error (device loop1): __ext4_get_inode_loc:4497: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 66.853115][ T1152] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 66.862473][ T1152] EXT4-fs error (device loop1): ext4_quota_off:7053: inode #4: comm syz-executor: mark_inode_dirty error [ 66.968247][ T39] usb 4-1: 0:2 : does not exist [ 66.997220][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.998320][ T435] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 67.004127][ T1741] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.012588][ T435] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 67.018269][ T1741] device bridge_slave_0 entered promiscuous mode [ 67.024818][ T435] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 67.031595][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.037751][ T435] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 67.044452][ T1741] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.058244][ T435] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 67.058608][ T1741] device bridge_slave_1 entered promiscuous mode [ 67.071478][ T435] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 67.113968][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.120824][ T1741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.127783][ T298] hid (null): bogus close delimiter [ 67.127927][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.139915][ T1741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.170813][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.178574][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.185617][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.214113][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.222017][ T435] cp2112 0003:10C4:EA90.0020: Part Number: 0x00 Device Version: 0x00 [ 67.229998][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.236824][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.245085][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.253255][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.260117][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.267390][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.275140][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.289992][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.298592][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.308835][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.316590][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.326201][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.333704][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.340841][ T298] usb 1-1: language id specifier not provided by device, defaulting to English [ 67.350343][ T1741] device veth0_vlan entered promiscuous mode [ 67.361137][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.369108][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.377946][ T1741] device veth1_macvtap entered promiscuous mode [ 67.387617][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.395054][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.403171][ T315] usb 4-1: USB disconnect, device number 14 [ 67.403655][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.417047][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.425307][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.528112][ T505] device bridge_slave_1 left promiscuous mode [ 67.534024][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.541690][ T505] device bridge_slave_0 left promiscuous mode [ 67.547732][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.555353][ T505] device veth1_macvtap left promiscuous mode [ 67.561323][ T505] device veth0_vlan left promiscuous mode [ 67.717573][ T1051] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 67.778632][ T298] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0021/input/input27 [ 67.791190][ T298] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0021/input/input28 [ 67.803700][ T298] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0021/input/input29 [ 67.817153][ T298] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0021/input/input30 [ 67.830534][ T298] uclogic 0003:256C:006D.0021: input,hiddev96,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 67.847623][ T435] cp2112 0003:10C4:EA90.0020: error reading lock byte: 0 [ 67.922920][ T1754] loop3: detected capacity change from 0 to 128 [ 67.930862][ T1754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 67.939413][ T1754] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 67.977601][ T1051] usb 2-1: Using ep0 maxpacket: 32 [ 67.992910][ T1084] EXT4-fs (loop3): unmounting filesystem. [ 68.008996][ T315] usb 1-1: USB disconnect, device number 11 [ 68.025899][ T1761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 68.075052][ T298] usb 5-1: USB disconnect, device number 13 [ 68.137664][ T1051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.149431][ T1051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.159078][ T1051] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.167998][ T1051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.171093][ T1767] loop3: detected capacity change from 0 to 16 [ 68.176773][ T1051] usb 2-1: config 0 descriptor?? [ 68.189104][ T1767] erofs: (device loop3): mounted with root inode @ nid 36. [ 68.217597][ T435] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 68.238794][ T1051] hub 2-1:0.0: USB hub found [ 68.447597][ T1051] hub 2-1:0.0: 1 port detected [ 68.467568][ T435] usb 3-1: Using ep0 maxpacket: 16 [ 68.588055][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.602013][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.614009][ T435] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.627029][ T435] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 68.636060][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.648133][ T435] usb 3-1: config 0 descriptor?? [ 68.667985][ T59] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 68.847557][ T623] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 69.037596][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.048352][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.057851][ T59] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 69.066683][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.075191][ T59] usb 4-1: config 0 descriptor?? [ 69.087546][ T623] usb 1-1: Using ep0 maxpacket: 16 [ 69.097610][ T1051] hub 2-1:0.0: activate --> -90 [ 69.138254][ T435] koneplus 0003:1E7D:2E22.0022: item fetching failed at offset 0/2 [ 69.146278][ T435] koneplus 0003:1E7D:2E22.0022: parse failed [ 69.152114][ T435] koneplus: probe of 0003:1E7D:2E22.0022 failed with error -22 [ 69.207616][ T623] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 69.215469][ T623] usb 1-1: config 0 has no interface number 0 [ 69.221383][ T623] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 69.340516][ T435] usb 3-1: USB disconnect, device number 10 [ 69.347656][ T623] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 69.356703][ T623] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 69.364446][ T623] usb 1-1: Product: syz [ 69.368492][ T623] usb 1-1: SerialNumber: syz [ 69.373530][ T623] usb 1-1: config 0 descriptor?? [ 69.397641][ T1784] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 69.558366][ T59] uclogic 0003:5543:0042.0023: item fetching failed at offset 0/3 [ 69.566148][ T59] uclogic 0003:5543:0042.0023: parse failed [ 69.571901][ T59] uclogic: probe of 0003:5543:0042.0023 failed with error -22 [ 69.658068][ T623] usb 1-1: invalid MIDI in EP 0 [ 69.664784][ T623] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 69.672314][ T623] usb 1-1: USB disconnect, device number 12 [ 69.678877][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.726859][ T1812] syz.4.539[1812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.726900][ T1812] syz.4.539[1812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.760996][ T435] usb 4-1: USB disconnect, device number 15 [ 69.789485][ T1816] loop4: detected capacity change from 0 to 512 [ 69.796141][ T1816] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.808569][ T1816] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.541: casefold flag without casefold feature [ 69.821186][ T1816] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.541: missing EA_INODE flag [ 69.832758][ T1816] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.541: error while reading EA inode 12 err=-117 [ 69.845073][ T1816] EXT4-fs (loop4): 1 orphan inode deleted [ 69.851073][ T1816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.869098][ T1816] Trying to write to read-only block-device loop4 [ 69.875550][ T1816] Trying to write to read-only block-device loop4 [ 69.882235][ T1816] Trying to write to read-only block-device loop4 [ 69.888737][ T1816] Trying to write to read-only block-device loop4 [ 69.895137][ T1816] Trying to write to read-only block-device loop4 [ 69.901578][ T1816] Trying to write to read-only block-device loop4 [ 69.908304][ T1816] EXT4-fs (loop4): discard request in group:0 block:39 count:1 failed with -1 [ 69.916997][ T1816] Trying to write to read-only block-device loop4 [ 69.927887][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 69.927899][ T28] audit: type=1400 audit(1724902089.679:552): avc: denied { unmount } for pid=999 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.954011][ T999] Trying to write to read-only block-device loop4 [ 69.960574][ T999] Trying to write to read-only block-device loop4 [ 69.967048][ T999] Trying to write to read-only block-device loop4 [ 69.973832][ T999] EXT4-fs (loop4): discard request in group:0 block:253 count:1 failed with -1 [ 69.982906][ T999] EXT4-fs (loop4): discard request in group:0 block:252 count:1 failed with -1 [ 69.991820][ T999] EXT4-fs (loop4): discard request in group:0 block:254 count:1 failed with -1 [ 70.001653][ T999] EXT4-fs (loop4): unmounting filesystem. [ 70.067685][ T28] audit: type=1400 audit(1724902089.819:553): avc: denied { create } for pid=1825 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.087917][ T28] audit: type=1400 audit(1724902089.819:554): avc: denied { write } for pid=1825 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.121941][ T28] audit: type=1400 audit(1724902089.819:555): avc: denied { bind } for pid=1825 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.144525][ T28] audit: type=1400 audit(1724902089.819:556): avc: denied { name_bind } for pid=1825 comm="syz.2.544" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 70.166454][ T28] audit: type=1400 audit(1724902089.819:557): avc: denied { node_bind } for pid=1825 comm="syz.2.544" src=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 70.190335][ T623] usb 2-1: USB disconnect, device number 12 [ 70.197462][ T28] audit: type=1400 audit(1724902089.939:558): avc: denied { ioctl } for pid=1831 comm="syz.4.547" path="socket:[27307]" dev="sockfs" ino=27307 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.197681][ T1832] netem: change failed [ 70.222137][ T1051] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 70.238581][ T1051] usb 2-1-port1: config error [ 70.271620][ T1841] loop2: detected capacity change from 0 to 512 [ 70.296561][ T1845] syz.0.552[1845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.296629][ T1845] syz.0.552[1845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.302687][ T1841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.331878][ T1841] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 70.364860][ T28] audit: type=1400 audit(1724902090.109:559): avc: denied { mounton } for pid=1840 comm="syz.2.551" path="/35/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.410872][ T28] audit: type=1400 audit(1724902090.159:560): avc: denied { rmdir } for pid=1436 comm="syz-executor" name=6C6F73742B0F6F756E64 dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.443449][ T28] audit: type=1400 audit(1724902090.159:561): avc: denied { unmount } for pid=1436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.500591][ T1436] EXT4-fs (loop2): unmounting filesystem. [ 70.571357][ T1868] loop3: detected capacity change from 0 to 16 [ 70.592817][ T1868] erofs: (device loop3): mounted with root inode @ nid 36. [ 70.660895][ T1869] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.667930][ T1869] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.675072][ T1869] device bridge_slave_0 entered promiscuous mode [ 70.683190][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.690162][ T1869] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.697422][ T1869] device bridge_slave_1 entered promiscuous mode [ 70.710402][ T1880] loop1: detected capacity change from 0 to 512 [ 70.720089][ T1880] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.568: bg 0: block 393: padding at end of block bitmap is not set [ 70.734348][ T1880] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 70.746789][ T1880] EXT4-fs (loop1): 2 truncates cleaned up [ 70.752401][ T1880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.776733][ T1741] EXT4-fs (loop1): unmounting filesystem. [ 70.817602][ T315] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 70.872529][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.875169][ T1898] loop3: detected capacity change from 0 to 128 [ 70.879417][ T1869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.879501][ T1869] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.879514][ T1869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.896833][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.913195][ T1898] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 70.922133][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.922497][ T1898] ext4 filesystem being mounted at /66/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 70.960162][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.981195][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.985316][ T1898] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 70.989357][ T617] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.002138][ T617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.009317][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.017212][ T617] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.024057][ T617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.045205][ T1898] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 71.051809][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.064649][ T1084] EXT4-fs (loop3): unmounting filesystem. [ 71.070877][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.078476][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 71.090883][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.110529][ T1905] loop3: detected capacity change from 0 to 512 [ 71.112124][ T1869] device veth0_vlan entered promiscuous mode [ 71.123713][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.132030][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.139688][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.148224][ T8] device bridge_slave_1 left promiscuous mode [ 71.154221][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.162258][ T1905] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 71.170478][ T8] device bridge_slave_0 left promiscuous mode [ 71.176913][ T1905] EXT4-fs (loop3): 1 truncate cleaned up [ 71.182898][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.190344][ T1905] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.199617][ T315] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 71.219133][ T8] device veth1_macvtap left promiscuous mode [ 71.224959][ T315] usb 1-1: config 0 has no interface number 0 [ 71.225924][ T8] device veth0_vlan left promiscuous mode [ 71.230961][ T315] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 71.282754][ T1084] EXT4-fs (loop3): unmounting filesystem. [ 71.357584][ T315] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 71.366445][ T315] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 71.374502][ T315] usb 1-1: Product: syz [ 71.379079][ T315] usb 1-1: SerialNumber: syz [ 71.387658][ T315] usb 1-1: config 0 descriptor?? [ 71.389123][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.401727][ T1869] device veth1_macvtap entered promiscuous mode [ 71.407878][ T1866] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 71.411511][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.426232][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.448987][ T1914] loop2: detected capacity change from 0 to 1024 [ 71.459357][ T1914] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002] [ 71.467562][ T1914] System zones: 0-1, 3-12 [ 71.471977][ T1914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 71.488961][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 71.567556][ T623] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 71.649458][ T1920] loop1: detected capacity change from 0 to 512 [ 71.659474][ T1920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 71.668188][ T315] usb 1-1: invalid MIDI in EP 0 [ 71.668410][ T1920] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 71.682492][ T315] snd-usb-audio: probe of 1-1:0.2 failed with error -22 [ 71.684326][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.706395][ T315] usb 1-1: USB disconnect, device number 13 [ 71.711187][ T1741] EXT4-fs (loop1): unmounting filesystem. [ 71.767578][ T617] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 71.867137][ T1924] loop1: detected capacity change from 0 to 40427 [ 71.874501][ T1924] F2FS-fs (loop1): invalid crc value [ 71.881165][ T1924] F2FS-fs (loop1): Found nat_bits in checkpoint [ 71.905473][ T1924] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 71.927212][ T505] kworker/u4:5: attempt to access beyond end of device [ 71.927212][ T505] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 71.941123][ T623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.945541][ T1741] syz-executor: attempt to access beyond end of device [ 71.945541][ T1741] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 71.952022][ T623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.967191][ T1741] syz-executor: attempt to access beyond end of device [ 71.967191][ T1741] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 71.975651][ T623] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.998162][ T623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.007511][ T623] usb 4-1: config 0 descriptor?? [ 72.113348][ T1943] loop4: detected capacity change from 0 to 2048 [ 72.125374][ T1943] /dev/loop4: Can't open blockdev [ 72.147617][ T617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.164251][ T1943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.590'. [ 72.173095][ T617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.189811][ T617] usb 3-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 72.205692][ T1947] loop4: detected capacity change from 0 to 1024 [ 72.210140][ T617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.221510][ T1947] /dev/loop4: Can't open blockdev [ 72.228782][ T617] usb 3-1: config 0 descriptor?? [ 72.283353][ T1947] loop4: detected capacity change from 0 to 512 [ 72.294948][ T1947] /dev/loop4: Can't open blockdev [ 72.360653][ T1952] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.368262][ T1952] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.375825][ T1952] device bridge_slave_0 entered promiscuous mode [ 72.383923][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.390956][ T1952] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.398848][ T1952] device bridge_slave_1 entered promiscuous mode [ 72.442568][ T1952] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.449421][ T1952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.456505][ T1952] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.463305][ T1952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.486057][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.493875][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.501173][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.509938][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.520828][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.527697][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.534916][ T606] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 72.549404][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.557322][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.564158][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.571430][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.590158][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.600089][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.612277][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.621050][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.628611][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.638980][ T1952] device veth0_vlan entered promiscuous mode [ 72.648838][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.656762][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.666231][ T1952] device veth1_macvtap entered promiscuous mode [ 72.676952][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.684516][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.693040][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.701656][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.710359][ T617] pantherlord 0003:0F30:0111.0025: item fetching failed at offset 6/7 [ 72.718704][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.726685][ T617] pantherlord 0003:0F30:0111.0025: parse failed [ 72.733194][ T617] pantherlord: probe of 0003:0F30:0111.0025 failed with error -22 [ 72.897618][ T606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.908500][ T606] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.918388][ T1912] syz.3.579[1912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.918458][ T1912] syz.3.579[1912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.918667][ T1051] usb 3-1: USB disconnect, device number 11 [ 72.929911][ T606] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 72.955119][ T606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.964932][ T606] usb 1-1: config 0 descriptor?? [ 73.077985][ T8] device bridge_slave_1 left promiscuous mode [ 73.084004][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.091345][ T8] device bridge_slave_0 left promiscuous mode [ 73.097291][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.104907][ T8] device veth1_macvtap left promiscuous mode [ 73.110795][ T8] device veth0_vlan left promiscuous mode [ 73.448355][ T606] petalynx 0003:18B1:0037.0026: unknown main item tag 0x0 [ 73.455349][ T606] petalynx 0003:18B1:0037.0026: unknown main item tag 0x0 [ 73.462874][ T606] petalynx 0003:18B1:0037.0026: unknown main item tag 0x0 [ 73.470007][ T606] petalynx 0003:18B1:0037.0026: unknown main item tag 0x0 [ 73.476967][ T606] petalynx 0003:18B1:0037.0026: unknown main item tag 0x0 [ 73.484843][ T606] petalynx 0003:18B1:0037.0026: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.0-1/input0 [ 73.507630][ T623] uclogic 0003:256C:006D.0024: v1 frame probing failed: -71 [ 73.514769][ T623] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 73.524089][ T623] uclogic: probe of 0003:256C:006D.0024 failed with error -71 [ 73.534711][ T623] usb 4-1: USB disconnect, device number 16 [ 73.603679][ T1988] loop4: detected capacity change from 0 to 512 [ 73.611292][ T1988] EXT4-fs: Ignoring removed bh option [ 73.622521][ T1988] /dev/loop4: Can't open blockdev [ 73.679096][ T1051] usb 1-1: USB disconnect, device number 14 [ 73.708218][ T1998] device pim6reg1 entered promiscuous mode [ 73.887678][ T315] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 73.997584][ T606] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 74.127558][ T315] usb 3-1: Using ep0 maxpacket: 32 [ 74.157527][ T59] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 74.257660][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.268525][ T315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.279048][ T315] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 74.288242][ T315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.309163][ T315] usb 3-1: config 0 descriptor?? [ 74.339177][ T2026] device pim6reg1 entered promiscuous mode [ 74.347944][ T315] hub 3-1:0.0: USB hub found [ 74.357600][ T606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.368524][ T606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.378367][ T606] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 74.387358][ T606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.395883][ T606] usb 5-1: config 0 descriptor?? [ 74.408884][ T2030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 74.494968][ T2041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 74.517635][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 74.527138][ T59] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 74.557641][ T315] hub 3-1:0.0: 1 port detected [ 74.564390][ T2049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 74.687702][ T59] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 74.696698][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.704592][ T59] usb 2-1: Product: syz [ 74.708606][ T59] usb 2-1: Manufacturer: syz [ 74.713028][ T59] usb 2-1: SerialNumber: syz [ 74.721190][ T59] usb 2-1: config 0 descriptor?? [ 74.868689][ T606] lg-g15 0003:046D:C222.0027: unknown main item tag 0x1 [ 74.875498][ T606] lg-g15 0003:046D:C222.0027: unbalanced delimiter at end of report description [ 74.897758][ T606] lg-g15: probe of 0003:046D:C222.0027 failed with error -22 [ 74.985338][ T59] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 75.002682][ T59] usb 2-1: USB disconnect, device number 13 [ 75.003625][ T399] udevd[399]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 75.036562][ T2061] loop3: detected capacity change from 0 to 512 [ 75.054275][ T2061] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 75.063251][ T2061] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff) [ 75.078082][ T606] usb 5-1: USB disconnect, device number 14 [ 75.088937][ T2061] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.641: corrupted inode contents [ 75.101595][ T2061] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.641: mark_inode_dirty error [ 75.113483][ T2061] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.641: corrupted inode contents [ 75.125253][ T2061] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.641: mark_inode_dirty error [ 75.138618][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 75.138632][ T28] audit: type=1400 audit(1724902094.889:580): avc: denied { create } for pid=2060 comm="syz.3.641" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 75.165837][ T28] audit: type=1400 audit(1724902094.889:581): avc: denied { rename } for pid=2060 comm="syz.3.641" name="file0" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 75.166440][ T1084] EXT4-fs (loop3): unmounting filesystem. [ 75.191285][ T28] audit: type=1400 audit(1724902094.889:582): avc: denied { rename } for pid=2060 comm="syz.3.641" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 75.215175][ T315] hub 3-1:0.0: activate --> -90 [ 75.220496][ T28] audit: type=1400 audit(1724902094.889:583): avc: denied { reparent } for pid=2060 comm="syz.3.641" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 75.242407][ T28] audit: type=1400 audit(1724902094.889:584): avc: denied { unlink } for pid=2060 comm="syz.3.641" name="file0" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 75.537642][ T59] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 75.539629][ T606] usb 3-1: USB disconnect, device number 12 [ 75.567619][ T315] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 75.787536][ T59] usb 4-1: Using ep0 maxpacket: 32 [ 75.907681][ T59] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 75.916223][ T59] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 75.926823][ T59] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 75.936288][ T59] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.977582][ T435] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 76.097847][ T59] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.106970][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.116497][ T28] audit: type=1400 audit(1724902095.869:585): avc: denied { create } for pid=2103 comm="syz.2.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.118908][ T59] usb 4-1: Product: syz [ 76.140773][ T59] usb 4-1: Manufacturer: syz [ 76.145146][ T59] usb 4-1: SerialNumber: syz [ 76.170414][ T2108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 76.179721][ T28] audit: type=1400 audit(1724902095.929:586): avc: denied { create } for pid=2107 comm="syz.2.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.206179][ T2110] loop2: detected capacity change from 0 to 512 [ 76.214114][ T2110] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.217561][ T435] usb 2-1: Using ep0 maxpacket: 16 [ 76.226368][ T2110] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.660: Unimplemented hash flags: 0x0001 [ 76.238713][ T2110] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.660: Corrupt directory, running e2fsck is recommended [ 76.252605][ T2110] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.660: Unimplemented hash flags: 0x0001 [ 76.263846][ T2110] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.660: Corrupt directory, running e2fsck is recommended [ 76.276862][ T2110] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.660: Unimplemented hash flags: 0x0001 [ 76.288122][ T2110] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.660: Corrupt directory, running e2fsck is recommended [ 76.301138][ T2110] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.660: Unimplemented hash flags: 0x0001 [ 76.312744][ T2110] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.660: Corrupt directory, running e2fsck is recommended [ 76.328851][ T2110] EXT4-fs warning (device loop2): dx_probe:868: inode #2: comm syz.2.660: Unimplemented hash flags: 0x0001 [ 76.344067][ T2110] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.660: Corrupt directory, running e2fsck is recommended [ 76.358580][ T2110] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.660: path /11/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 76.407285][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 76.429413][ T28] audit: type=1400 audit(1724902096.179:587): avc: denied { mounton } for pid=2122 comm="syz.0.666" path="/63/file0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 76.467814][ T59] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 76.480252][ T59] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 76.487798][ T59] usb 4-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 76.496658][ T59] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 76.527621][ T435] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 76.536526][ T435] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.545549][ T435] usb 2-1: Product: syz [ 76.549589][ T435] usb 2-1: Manufacturer: syz [ 76.553947][ T435] usb 2-1: SerialNumber: syz [ 76.560098][ T435] usb 2-1: config 0 descriptor?? [ 76.587789][ T59] usb 4-1: USB disconnect, device number 17 [ 76.603996][ T435] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 76.614719][ T435] usb 2-1: Detected FT232H [ 76.725824][ T2143] mmap: syz.0.674 (2143) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.777594][ T623] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 76.817583][ T435] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 76.874699][ T28] audit: type=1400 audit(1724902096.619:588): avc: denied { write } for pid=2152 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.895160][ T28] audit: type=1400 audit(1724902096.619:589): avc: denied { nlmsg_write } for pid=2152 comm="syz.0.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.966816][ T2162] input: syz0 as /devices/virtual/input/input31 [ 77.135103][ T2171] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 77.197600][ T623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.208487][ T623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.218101][ T623] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 77.226882][ T623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.235427][ T623] usb 5-1: config 0 descriptor?? [ 77.287700][ T435] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 77.294575][ T435] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.303625][ T435] usb 2-1: USB disconnect, device number 14 [ 77.309963][ T435] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.319268][ T435] ftdi_sio 2-1:0.0: device disconnected [ 77.507557][ T315] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 77.667591][ T59] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 77.708239][ T623] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 77.715529][ T623] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 77.877664][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.888439][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.897927][ T315] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.906748][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.917918][ T315] usb 1-1: config 0 descriptor?? [ 77.927821][ T623] cp2112 0003:10C4:EA90.0028: Part Number: 0x82 Device Version: 0xFE [ 78.007014][ T2201] overlayfs: missing 'lowerdir' [ 78.027613][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.039115][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.048800][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.061780][ T59] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.070663][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.082553][ T59] usb 3-1: config 0 descriptor?? [ 78.088706][ T606] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 78.272757][ T2211] syz.3.704[2211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.272805][ T2211] syz.3.704[2211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.313695][ T2213] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 78.357604][ T623] cp2112 0003:10C4:EA90.0028: error setting SMBus config [ 78.364473][ T606] usb 2-1: Using ep0 maxpacket: 8 [ 78.369801][ T623] cp2112: probe of 0003:10C4:EA90.0028 failed with error -71 [ 78.383296][ T623] usb 5-1: USB disconnect, device number 15 [ 78.494142][ T2220] loop3: detected capacity change from 0 to 512 [ 78.500310][ T606] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 78.511280][ T606] usb 2-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 78.518821][ T2220] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 78.520944][ T606] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 78.535925][ T2220] EXT4-fs (loop3): mount failed [ 78.544637][ T606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.607613][ T315] usb 1-1: language id specifier not provided by device, defaulting to English [ 78.698523][ T2234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2234 comm=syz.3.714 [ 78.817625][ T59] usbhid 3-1:0.0: can't add hid device: -71 [ 78.823921][ T59] usbhid: probe of 3-1:0.0 failed with error -71 [ 78.831201][ T59] usb 3-1: USB disconnect, device number 13 [ 78.857865][ T606] usb 2-1: string descriptor 0 read error: -71 [ 78.874493][ T606] hub 2-1:32.0: USB hub found [ 78.881273][ T2247] loop3: detected capacity change from 0 to 128 [ 78.892107][ T2247] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 78.919412][ T2249] usb usb5: usbfs: process 2249 (syz.4.721) did not claim interface 0 before use [ 78.925161][ T2247] syz.3.720: attempt to access beyond end of device [ 78.925161][ T2247] loop3: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 78.941848][ T2247] syz.3.720: attempt to access beyond end of device [ 78.941848][ T2247] loop3: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 78.957743][ T606] hub 2-1:32.0: config failed, can't read hub descriptor (err -22) [ 78.999086][ T606] usb 2-1: USB disconnect, device number 15 [ 79.041318][ T2257] device syzkaller0 entered promiscuous mode [ 79.041406][ T2259] loop4: detected capacity change from 0 to 512 [ 79.057449][ T2259] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.063977][ T2259] /dev/loop4: Can't open blockdev [ 79.107647][ T315] uclogic 0003:256C:006D.0029: interface is invalid, ignoring [ 79.141561][ T315] usb 1-1: USB disconnect, device number 15 [ 79.144321][ T2263] loop4: detected capacity change from 0 to 512 [ 79.153657][ T2263] EXT4-fs: Ignoring removed i_version option [ 79.159913][ T2263] EXT4-fs: Ignoring removed nobh option [ 79.165425][ T2263] /dev/loop4: Can't open blockdev [ 79.179955][ T2266] loop3: detected capacity change from 0 to 2048 [ 79.189580][ T2266] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.216124][ T1084] EXT4-fs (loop3): unmounting filesystem. [ 79.376488][ T2289] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.390046][ T2289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.738'. [ 79.399601][ T2289] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.408031][ T2289] device bridge_slave_0 left promiscuous mode [ 79.413954][ T2289] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.487102][ T2297] syz.1.741[2297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.487151][ T2297] syz.1.741[2297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.596273][ T2302] device syzkaller0 entered promiscuous mode [ 79.697561][ T606] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 79.866497][ T2315] loop1: detected capacity change from 0 to 512 [ 79.879137][ T2315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 79.887914][ T2315] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 79.902144][ T2315] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #19: comm syz.1.749: corrupted inode contents [ 79.914078][ T2315] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #19: comm syz.1.749: mark_inode_dirty error [ 79.925495][ T2315] EXT4-fs error (device loop1): ext4_do_update_inode:5212: inode #19: comm syz.1.749: corrupted inode contents [ 79.937292][ T2315] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #19: comm syz.1.749: mark_inode_dirty error [ 79.937678][ T59] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 79.949578][ T2315] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2958: inode #19: comm syz.1.749: mark inode dirty (error -117) [ 79.969056][ T2315] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 80.107626][ T606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.118621][ T606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.131670][ T606] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 80.144488][ T606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.154079][ T606] usb 5-1: config 0 descriptor?? [ 80.162273][ T2324] loop2: detected capacity change from 0 to 2048 [ 80.175137][ T2324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.179158][ T2330] loop3: detected capacity change from 0 to 512 [ 80.188699][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 80.188712][ T28] audit: type=1400 audit(1724902099.929:604): avc: denied { create } for pid=2323 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.215572][ T28] audit: type=1400 audit(1724902099.949:605): avc: denied { connect } for pid=2323 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 80.216329][ T2330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.234921][ T28] audit: type=1400 audit(1724902099.949:606): avc: denied { lock } for pid=2323 comm="syz.2.751" path="/newroot/20/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.256049][ T2324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.269264][ T28] audit: type=1400 audit(1724902099.949:607): avc: denied { setattr } for pid=2323 comm="syz.2.751" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.270325][ T2330] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.753: invalid block [ 80.278894][ T2324] EXT4-fs (loop2): changing journal_checksum during remount not supported; ignoring [ 80.300077][ T2330] EXT4-fs (loop3): Remounting filesystem read-only [ 80.326686][ T2330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.753: invalid indirect mapped block 4294967295 (level 1) [ 80.340551][ T2330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.753: invalid indirect mapped block 4294967295 (level 1) [ 80.340618][ T2324] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 80.354650][ T2330] EXT4-fs (loop3): 2 truncates cleaned up [ 80.360866][ T59] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.366452][ T2330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.394117][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.402444][ T2330] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.753: bg 0: block 5: invalid block bitmap [ 80.405069][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.426607][ T59] usb 1-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 80.427696][ T2330] EXT4-fs (loop3): Remounting filesystem read-only [ 80.435701][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.450358][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 80.459758][ T59] usb 1-1: config 0 descriptor?? [ 80.462494][ T1084] EXT4-fs (loop3): unmounting filesystem. [ 80.505971][ T2340] loop3: detected capacity change from 0 to 128 [ 80.513144][ T2340] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.653613][ T1952] EXT4-fs (loop1): unmounting filesystem. [ 80.667206][ T2346] syz.1.758 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 80.677670][ T606] hid (null): unknown global tag 0xc [ 80.685631][ T606] hid-steam 0003:28DE:1142.002A: unknown main item tag 0x1 [ 80.701796][ T606] hid-steam 0003:28DE:1142.002A: unknown global tag 0xc [ 80.704778][ T28] audit: type=1400 audit(1724902100.449:608): avc: denied { mount } for pid=2349 comm="syz.3.760" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.708942][ T606] hid-steam 0003:28DE:1142.002A: item 0 1 1 12 parsing failed [ 80.730352][ T28] audit: type=1400 audit(1724902100.449:609): avc: denied { mounton } for pid=2349 comm="syz.3.760" path="/116/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 80.738706][ T606] hid-steam 0003:28DE:1142.002A: steam_probe:parse of hid interface failed [ 80.760076][ T435] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 80.768420][ T606] hid-steam: probe of 0003:28DE:1142.002A failed with error -22 [ 80.884895][ T606] usb 5-1: USB disconnect, device number 16 [ 80.957669][ T319] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 80.997775][ T59] hid (null): report_id 0 is invalid [ 81.003973][ T59] wacom 0003:056A:4001.002B: report_id 0 is invalid [ 81.010525][ T59] wacom 0003:056A:4001.002B: item 0 2 1 8 parsing failed [ 81.017450][ T59] wacom 0003:056A:4001.002B: parse failed [ 81.022945][ T59] wacom: probe of 0003:056A:4001.002B failed with error -22 [ 81.127572][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.138310][ T435] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.147814][ T435] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 81.156652][ T435] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.165224][ T435] usb 3-1: config 0 descriptor?? [ 81.221254][ T606] usb 1-1: USB disconnect, device number 16 [ 81.327573][ T319] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.497597][ T319] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 81.506482][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.514292][ T319] usb 2-1: Product: syz [ 81.518287][ T319] usb 2-1: Manufacturer: syz [ 81.522667][ T319] usb 2-1: SerialNumber: syz [ 81.527770][ T319] usb 2-1: config 0 descriptor?? [ 81.556702][ T2358] tipc: Started in network mode [ 81.561430][ T2358] tipc: Node identity 1, cluster identity 4711 [ 81.567414][ T2358] tipc: Node number set to 1 [ 81.648157][ T435] hid-multitouch 0003:1FD2:6007.002C: unknown main item tag 0x0 [ 81.655684][ T435] hid-multitouch 0003:1FD2:6007.002C: unknown main item tag 0x0 [ 81.663134][ T435] hid-multitouch 0003:1FD2:6007.002C: unknown main item tag 0x0 [ 81.670612][ T435] hid-multitouch 0003:1FD2:6007.002C: unknown main item tag 0x0 [ 81.677536][ T315] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 81.678049][ T435] hid-multitouch 0003:1FD2:6007.002C: unknown main item tag 0x0 [ 81.693363][ T435] hid-multitouch 0003:1FD2:6007.002C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 81.765731][ T2369] loop3: detected capacity change from 0 to 128 [ 81.789068][ T319] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 81.790469][ T2369] syz.3.768: attempt to access beyond end of device [ 81.790469][ T2369] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 81.796388][ T319] usb 2-1: USB disconnect, device number 16 [ 81.816998][ T343] udevd[343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.831427][ T2369] syz.3.768: attempt to access beyond end of device [ 81.831427][ T2369] loop3: rw=0, sector=177, nr_sectors = 1 limit=128 [ 81.846363][ T2368] syz.3.768: attempt to access beyond end of device [ 81.846363][ T2368] loop3: rw=0, sector=177, nr_sectors = 1 limit=128 [ 81.859517][ T2368] Buffer I/O error on dev loop3, logical block 177, async page read [ 81.865261][ T6] usb 3-1: USB disconnect, device number 14 [ 81.867445][ T2368] syz.3.768: attempt to access beyond end of device [ 81.867445][ T2368] loop3: rw=0, sector=178, nr_sectors = 1 limit=128 [ 81.886084][ T2368] Buffer I/O error on dev loop3, logical block 178, async page read [ 81.894036][ T2368] syz.3.768: attempt to access beyond end of device [ 81.894036][ T2368] loop3: rw=0, sector=179, nr_sectors = 1 limit=128 [ 81.906992][ T2368] Buffer I/O error on dev loop3, logical block 179, async page read [ 81.914905][ T2368] syz.3.768: attempt to access beyond end of device [ 81.914905][ T2368] loop3: rw=0, sector=180, nr_sectors = 1 limit=128 [ 81.927962][ T2368] Buffer I/O error on dev loop3, logical block 180, async page read [ 81.935849][ T2368] syz.3.768: attempt to access beyond end of device [ 81.935849][ T2368] loop3: rw=0, sector=181, nr_sectors = 1 limit=128 [ 81.948983][ T2368] Buffer I/O error on dev loop3, logical block 181, async page read [ 81.956788][ T2368] syz.3.768: attempt to access beyond end of device [ 81.956788][ T2368] loop3: rw=0, sector=182, nr_sectors = 1 limit=128 [ 81.969842][ T2368] Buffer I/O error on dev loop3, logical block 182, async page read [ 81.977582][ T2368] Buffer I/O error on dev loop3, logical block 183, async page read [ 81.985362][ T2368] Buffer I/O error on dev loop3, logical block 184, async page read [ 81.993275][ T2368] Buffer I/O error on dev loop3, logical block 177, async page read [ 82.001005][ T2368] Buffer I/O error on dev loop3, logical block 178, async page read [ 82.019069][ T435] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 82.087742][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.098731][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.108314][ T315] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.117115][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.125686][ T315] usb 5-1: config 0 descriptor?? [ 82.287562][ T606] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 82.380414][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.391225][ T435] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.401077][ T435] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 82.410511][ T435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.417247][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 82.419246][ T435] usb 1-1: config 0 descriptor?? [ 82.537540][ T606] usb 4-1: Using ep0 maxpacket: 16 [ 82.577537][ T298] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 82.657639][ T606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.668672][ T606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.678226][ T606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 82.690846][ T606] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 82.699659][ T606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.710308][ T606] usb 4-1: config 0 descriptor?? [ 82.809383][ T2408] syz.2.784[2408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.809438][ T2408] syz.2.784[2408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.827649][ T315] usb 5-1: language id specifier not provided by device, defaulting to English [ 82.908946][ T435] hid-led 0003:0FC5:B080.002E: unknown main item tag 0x0 [ 82.937631][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.949212][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.959183][ T298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.972093][ T298] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 82.981152][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.989724][ T298] usb 2-1: config 0 descriptor?? [ 83.079474][ T2420] serio: Serial port ptm0 [ 83.188614][ T606] microsoft 0003:045E:07DA.002F: No inputs registered, leaving [ 83.196370][ T606] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 83.208923][ T606] microsoft 0003:045E:07DA.002F: no inputs found [ 83.215318][ T606] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 83.269003][ T315] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input33 [ 83.282408][ T315] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input34 [ 83.292412][ T28] audit: type=1400 audit(1724902103.039:610): avc: denied { map } for pid=2426 comm="syz.2.792" path="socket:[30432]" dev="sockfs" ino=30432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 83.295173][ T315] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input35 [ 83.327628][ T435] hid-led: probe of 0003:0FC5:B080.002E failed with error -71 [ 83.330705][ T315] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input36 [ 83.341599][ T435] usb 1-1: USB disconnect, device number 17 [ 83.367600][ T315] uclogic 0003:256C:006D.002D: input,hiddev96,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 83.391621][ T315] usb 4-1: USB disconnect, device number 18 [ 83.468751][ T298] wacom 0003:056A:0094.0030: unknown main item tag 0x0 [ 83.477120][ T298] wacom 0003:056A:0094.0030: unknown main item tag 0x0 [ 83.484216][ T298] wacom 0003:056A:0094.0030: unknown main item tag 0x0 [ 83.491188][ T298] wacom 0003:056A:0094.0030: unknown main item tag 0x0 [ 83.498111][ T298] wacom 0003:056A:0094.0030: unknown main item tag 0x0 [ 83.504895][ T298] wacom 0003:056A:0094.0030: unknown main item tag 0x0 [ 83.508692][ T606] usb 5-1: USB disconnect, device number 17 [ 83.511971][ T298] wacom 0003:056A:0094.0030: unknown main item tag 0x0 [ 83.524311][ T298] wacom 0003:056A:0094.0030: Using device in hidraw-only mode [ 83.532996][ T298] wacom 0003:056A:0094.0030: hidraw0: USB HID v0.00 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 83.675052][ T298] usb 2-1: USB disconnect, device number 17 [ 84.200727][ T28] audit: type=1400 audit(1724902103.949:611): avc: denied { setopt } for pid=2471 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.235504][ T2479] loop2: detected capacity change from 0 to 2048 [ 84.259029][ T2479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.267575][ T606] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 84.269715][ T28] audit: type=1400 audit(1724902104.019:612): avc: denied { mount } for pid=2478 comm="syz.2.813" name="/" dev="configfs" ino=13045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 84.378135][ T28] audit: type=1400 audit(1724902104.129:613): avc: denied { unmount } for pid=1869 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 84.402813][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 84.507581][ T315] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 84.537545][ T606] usb 4-1: Using ep0 maxpacket: 16 [ 84.707610][ T606] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.777592][ T315] usb 1-1: Using ep0 maxpacket: 8 [ 84.797632][ T606] usb 4-1: config 4 has an invalid interface number: 38 but max is 0 [ 84.805612][ T606] usb 4-1: config 4 has no interface number 0 [ 84.811636][ T606] usb 4-1: config 4 interface 38 has no altsetting 0 [ 84.917623][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.928383][ T315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.937865][ T315] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 84.946700][ T315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.955370][ T315] usb 1-1: config 0 descriptor?? [ 85.007645][ T606] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 85.016496][ T606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.024935][ T606] usb 4-1: Product: syz [ 85.029070][ T606] usb 4-1: Manufacturer: syz [ 85.033546][ T606] usb 4-1: SerialNumber: syz [ 85.107585][ T6] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 85.357611][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 85.387654][ T606] usb 4-1: Found UVC 0.00 device syz (19ab:1000) [ 85.393820][ T606] usb 4-1: No valid video chain found. [ 85.400862][ T606] usb 4-1: USB disconnect, device number 19 [ 85.420691][ T2537] loop4: detected capacity change from 0 to 2048 [ 85.427034][ T2537] /dev/loop4: Can't open blockdev [ 85.437844][ T315] hid (null): unknown global tag 0xe [ 85.444599][ T315] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 85.454937][ T315] playstation 0003:054C:0CE6.0031: unknown global tag 0xe [ 85.463036][ T315] playstation 0003:054C:0CE6.0031: item 0 0 1 14 parsing failed [ 85.470789][ T315] playstation 0003:054C:0CE6.0031: Parse failed [ 85.476929][ T315] playstation: probe of 0003:054C:0CE6.0031 failed with error -22 [ 85.537608][ T6] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.617682][ T6] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 85.625766][ T6] usb 3-1: config 4 has no interface number 0 [ 85.631924][ T6] usb 3-1: config 4 interface 38 has no altsetting 0 [ 85.645485][ T606] usb 1-1: USB disconnect, device number 18 [ 85.817600][ T6] usb 3-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 85.826591][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.834953][ T6] usb 3-1: Product: syz [ 85.839183][ T6] usb 3-1: Manufacturer: syz [ 85.843615][ T6] usb 3-1: SerialNumber: syz [ 85.862047][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 85.862061][ T28] audit: type=1400 audit(1724902105.609:618): avc: denied { create } for pid=2543 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 85.887610][ T28] audit: type=1400 audit(1724902105.609:619): avc: denied { create } for pid=2543 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 85.908295][ T28] audit: type=1400 audit(1724902105.609:620): avc: denied { write } for pid=2543 comm="syz.4.835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 85.929272][ T28] audit: type=1400 audit(1724902105.609:621): avc: denied { sendto } for pid=2543 comm="syz.4.835" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_dgram_socket permissive=1 [ 86.227867][ T6] usb 3-1: Found UVC 0.00 device syz (19ab:1000) [ 86.234084][ T6] usb 3-1: No valid video chain found. [ 86.240645][ T6] usb 3-1: USB disconnect, device number 15 [ 87.022883][ T2601] netlink: 88 bytes leftover after parsing attributes in process `syz.4.858'. [ 87.187552][ T298] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 87.427531][ T298] usb 2-1: Using ep0 maxpacket: 8 [ 87.507536][ T6] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 87.707692][ T298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 87.716599][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.724479][ T298] usb 2-1: Product: syz [ 87.728376][ T298] usb 2-1: Manufacturer: syz [ 87.732778][ T298] usb 2-1: SerialNumber: syz [ 87.814903][ T2612] device pim6reg1 entered promiscuous mode [ 87.907589][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.918318][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.927847][ T6] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 87.936774][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.945617][ T6] usb 1-1: config 0 descriptor?? [ 87.998304][ T298] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 88.167556][ T435] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 88.198307][ T28] audit: type=1400 audit(1724902107.949:622): avc: denied { read write } for pid=2597 comm="syz.1.857" name="lp0" dev="devtmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 88.221735][ T28] audit: type=1400 audit(1724902107.949:623): avc: denied { open } for pid=2597 comm="syz.1.857" path="/dev/usb/lp0" dev="devtmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 88.250248][ T298] usb 2-1: USB disconnect, device number 18 [ 88.267523][ C0] usblp0: nonzero write bulk status received: -108 [ 88.274300][ T298] usblp0: removed [ 88.418634][ T6] isku 0003:1E7D:319C.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 88.537576][ T435] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 88.547435][ T435] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 88.676455][ T2622] loop2: detected capacity change from 0 to 512 [ 88.689107][ T2622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 88.697877][ T2622] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 88.707600][ T435] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 88.716445][ T435] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.724676][ T435] usb 5-1: Product: syz [ 88.728696][ T435] usb 5-1: Manufacturer: syz [ 88.733070][ T435] usb 5-1: SerialNumber: syz [ 88.740076][ T435] usb 5-1: config 0 descriptor?? [ 88.745467][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 88.757602][ T2618] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 88.764634][ T2618] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 88.779951][ T2629] random: crng reseeded on system resumption [ 88.781645][ T28] audit: type=1400 audit(1724902108.529:624): avc: denied { write } for pid=2628 comm="syz.2.868" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.809378][ T28] audit: type=1400 audit(1724902108.529:625): avc: denied { open } for pid=2628 comm="syz.2.868" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.832905][ T59] usb 1-1: USB disconnect, device number 19 [ 88.978993][ T2618] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 88.986236][ T2618] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 89.077562][ T298] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 89.317547][ T298] usb 2-1: Using ep0 maxpacket: 8 [ 89.437659][ T435] dm9601: No valid MAC address in EEPROM, using e2:89:2f:c7:0e:15 [ 89.597695][ T298] usb 2-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=e0.4e [ 89.606560][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.615080][ T298] usb 2-1: Product: syz [ 89.619251][ T298] usb 2-1: Manufacturer: syz [ 89.623680][ T298] usb 2-1: SerialNumber: syz [ 89.631410][ T298] usb 2-1: config 0 descriptor?? [ 89.657661][ T435] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 89.667241][ T435] usb 5-1: USB disconnect, device number 18 [ 89.881253][ T2631] fuse: Bad value for 'fd' [ 89.888544][ T493] device bridge_slave_1 left promiscuous mode [ 89.896443][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.903787][ T2631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.913453][ T493] device bridge_slave_0 left promiscuous mode [ 89.919846][ T2631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.927731][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.948620][ T315] usb 2-1: USB disconnect, device number 19 [ 89.962775][ T493] device veth1_macvtap left promiscuous mode [ 89.968667][ T493] device veth0_vlan left promiscuous mode [ 93.874177][ T28] audit: type=1400 audit(1724902113.619:626): avc: denied { map } for pid=2688 comm="syz.4.894" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.898176][ T28] audit: type=1400 audit(1724902113.629:627): avc: denied { read write } for pid=2688 comm="syz.4.894" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.945510][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.952496][ T2675] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.959747][ T2675] device bridge_slave_0 entered promiscuous mode [ 93.966655][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.973586][ T2675] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.981437][ T2675] device bridge_slave_1 entered promiscuous mode [ 93.997024][ T28] audit: type=1400 audit(1724902113.739:628): avc: denied { bind } for pid=2697 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.017059][ T28] audit: type=1400 audit(1724902113.749:629): avc: denied { listen } for pid=2697 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.036748][ T28] audit: type=1400 audit(1724902113.749:630): avc: denied { accept } for pid=2697 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.056502][ T28] audit: type=1400 audit(1724902113.799:631): avc: denied { shutdown } for pid=2697 comm="syz.2.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.120136][ T2675] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.127030][ T2675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.134119][ T2675] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.140897][ T2675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.168642][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.176064][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.184062][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.191528][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.208381][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.216563][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.223437][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.231633][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.239843][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.246715][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.261563][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.269820][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.283091][ T2675] device veth0_vlan entered promiscuous mode [ 94.289593][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.297856][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.305540][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.313060][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.324875][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.333826][ T2675] device veth1_macvtap entered promiscuous mode [ 94.342867][ T606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.352788][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.537671][ T6] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 94.788834][ T28] audit: type=1400 audit(1724902114.539:632): avc: denied { getopt } for pid=2721 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.913884][ T2737] input: syz0 as /devices/virtual/input/input37 [ 94.957625][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.968426][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.978429][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.987386][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.996517][ T6] usb 3-1: config 0 descriptor?? [ 95.002932][ T2742] binder: 2741:2742 ioctl 4018620d 0 returned -22 [ 95.017586][ T298] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 95.177547][ T1051] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 95.297600][ T298] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 95.417585][ T1051] usb 4-1: Using ep0 maxpacket: 32 [ 95.467726][ T6] hid (null): bogus close delimiter [ 95.537598][ T1051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.548402][ T1051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.558100][ T1051] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.566863][ T1051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.575441][ T1051] usb 4-1: config 0 descriptor?? [ 95.617975][ T1051] hub 4-1:0.0: USB hub found [ 95.678157][ T6] usb 3-1: string descriptor 0 read error: -22 [ 95.837693][ T1051] hub 4-1:0.0: 1 port detected [ 95.850605][ T2754] loop4: detected capacity change from 0 to 1024 [ 95.857025][ T2754] /dev/loop4: Can't open blockdev [ 95.936429][ T2763] loop4: detected capacity change from 0 to 512 [ 95.947586][ T298] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 95.949942][ T2763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 95.956633][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.964435][ T2763] System zones: 1-12 [ 95.976211][ T2763] EXT4-fs (loop4): write access unavailable, skipping orphan cleanup [ 95.984443][ T2763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.004699][ T999] EXT4-fs (loop4): unmounting filesystem. [ 96.027346][ T2769] loop4: detected capacity change from 0 to 2048 [ 96.033825][ T2769] /dev/loop4: Can't open blockdev [ 96.063162][ T2771] device pim6reg1 entered promiscuous mode [ 96.126255][ T28] audit: type=1400 audit(1724902115.869:633): avc: denied { ioctl } for pid=2775 comm="syz.0.924" path="socket:[33514]" dev="sockfs" ino=33514 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 96.151113][ T6] uclogic 0003:256C:006D.0033: failed retrieving string descriptor #100: -71 [ 96.159910][ T6] uclogic 0003:256C:006D.0033: failed retrieving pen parameters: -71 [ 96.168354][ T6] uclogic 0003:256C:006D.0033: failed probing pen v1 parameters: -71 [ 96.176269][ T6] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 96.183823][ T6] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 96.192650][ T6] usb 3-1: USB disconnect, device number 16 [ 96.203895][ T2782] loop4: detected capacity change from 0 to 128 [ 96.232864][ T2782] /dev/loop4: Can't open blockdev [ 96.447599][ T298] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 96.454431][ T298] usb 2-1: No valid video chain found. [ 96.487575][ T59] hub 4-1:0.0: activate --> -90 [ 96.557532][ T606] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 96.661570][ T298] usb 2-1: USB disconnect, device number 20 [ 96.676640][ T2805] loop2: detected capacity change from 0 to 512 [ 96.689374][ T2805] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.940: corrupted inode contents [ 96.701078][ T2805] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.940: mark_inode_dirty error [ 96.712553][ T2805] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.940: corrupted inode contents [ 96.724290][ T2805] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.940: mark_inode_dirty error [ 96.735637][ T2805] Quota error (device loop2): write_blk: dquota write failed [ 96.742872][ T2805] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 96.754493][ T2805] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.940: Failed to acquire dquot type 0 [ 96.765885][ T2805] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.940: corrupted inode contents [ 96.777792][ T2805] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.940: mark_inode_dirty error [ 96.789082][ T2805] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.940: corrupted inode contents [ 96.800995][ T2805] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.940: mark_inode_dirty error [ 96.812278][ T2805] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.940: corrupted inode contents [ 96.823988][ T2805] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 96.832699][ T2805] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.940: corrupted inode contents [ 96.844464][ T2805] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.940: mark_inode_dirty error [ 96.855439][ T2805] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 96.864710][ T2805] EXT4-fs (loop2): 1 truncate cleaned up [ 96.870193][ T2805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.879119][ T2805] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038 (0x7fffffff) [ 96.896047][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 96.927642][ T606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.938421][ T606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.948675][ T606] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.958160][ T606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.967025][ T606] usb 5-1: config 0 descriptor?? [ 97.457704][ T606] hid (null): bogus close delimiter [ 97.568211][ T435] usb 4-1: USB disconnect, device number 20 [ 97.587611][ T59] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 97.594239][ T59] usb 4-1-port1: config error [ 97.951941][ T2823] loop1: detected capacity change from 0 to 40427 [ 97.959555][ T2823] F2FS-fs (loop1): invalid crc value [ 97.966328][ T2823] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.977672][ T606] usb 5-1: string descriptor 0 read error: -71 [ 97.992589][ T2823] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 98.007582][ T606] uclogic 0003:256C:006D.0034: failed retrieving string descriptor #200: -71 [ 98.016260][ T606] uclogic 0003:256C:006D.0034: failed retrieving pen parameters: -71 [ 98.024132][ T606] uclogic 0003:256C:006D.0034: failed probing pen v2 parameters: -71 [ 98.032127][ T606] uclogic 0003:256C:006D.0034: failed probing parameters: -71 [ 98.036689][ T1952] bio_check_eod: 218 callbacks suppressed [ 98.036702][ T1952] syz-executor: attempt to access beyond end of device [ 98.036702][ T1952] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 98.039591][ T606] uclogic: probe of 0003:256C:006D.0034 failed with error -71 [ 98.045366][ T1952] syz-executor: attempt to access beyond end of device [ 98.045366][ T1952] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 98.060226][ T606] usb 5-1: USB disconnect, device number 19 [ 98.090025][ T1952] syz-executor: attempt to access beyond end of device [ 98.090025][ T1952] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.167584][ T435] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 98.340691][ T2839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.347669][ T2839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.354950][ T2839] device bridge_slave_0 entered promiscuous mode [ 98.362325][ T2839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.369388][ T2839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.376741][ T2839] device bridge_slave_1 entered promiscuous mode [ 98.440848][ T2839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.447737][ T2839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.454796][ T2839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.461618][ T2839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.487545][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.495134][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.502686][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.520979][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.529106][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.535945][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.543656][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.551547][ T435] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.562725][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.569589][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.577053][ T435] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 98.587905][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.607685][ T435] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 98.621453][ T2839] device veth0_vlan entered promiscuous mode [ 98.634586][ T435] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 98.645625][ T2839] device veth1_macvtap entered promiscuous mode [ 98.651757][ T435] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 98.671895][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.680975][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.689623][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.698407][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.706320][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.713922][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.722100][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.731279][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.827627][ T435] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.840318][ T435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.858189][ T435] usb 3-1: Product: syz [ 98.867072][ T435] usb 3-1: Manufacturer: syz [ 98.871968][ T435] usb 3-1: SerialNumber: syz [ 98.897569][ T2827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.118770][ T2827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.125701][ T2827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.397345][ T2864] syz.1.961[2864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.397434][ T2864] syz.1.961[2864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.428058][ T2864] syz.1.961[2864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.439311][ T2864] syz.1.961[2864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.451637][ T2864] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.469596][ T2864] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.533130][ T2875] loop3: detected capacity change from 0 to 256 [ 99.549740][ T2875] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 99.568776][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 99.568789][ T28] audit: type=1400 audit(1724902119.319:635): avc: denied { write } for pid=2874 comm="syz.3.965" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.599671][ T28] audit: type=1400 audit(1724902119.319:636): avc: denied { add_name } for pid=2874 comm="syz.3.965" name="blkio.bfq.io_wait_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.622887][ T28] audit: type=1400 audit(1724902119.319:637): avc: denied { associate } for pid=2874 comm="syz.3.965" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.646831][ T28] audit: type=1400 audit(1724902119.319:638): avc: denied { append } for pid=2874 comm="syz.3.965" path="/141/file0/blkio.bfq.io_wait_time_recursive" dev="loop3" ino=1048685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.817536][ T59] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 99.867550][ T298] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 99.987745][ T2827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 99.994769][ T2827] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 100.007577][ T6] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 100.107564][ T298] usb 2-1: Using ep0 maxpacket: 16 [ 100.177597][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.188408][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.198034][ T59] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 100.206783][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.215262][ T59] usb 5-1: config 0 descriptor?? [ 100.227636][ T435] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 100.234938][ T435] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 100.252729][ T28] audit: type=1400 audit(1724902119.999:639): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 100.273630][ T28] audit: type=1400 audit(1724902119.999:640): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.294808][ T28] audit: type=1400 audit(1724902119.999:641): avc: denied { read } for pid=140 comm="dhcpcd" name="n17" dev="tmpfs" ino=6687 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.316197][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 100.321201][ T28] audit: type=1400 audit(1724902119.999:642): avc: denied { open } for pid=140 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=6687 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.343894][ T28] audit: type=1400 audit(1724902119.999:643): avc: denied { getattr } for pid=140 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=6687 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 100.366970][ T28] audit: type=1400 audit(1724902120.029:644): avc: denied { read } for pid=2888 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=299 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.397653][ T298] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 100.406790][ T298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.415377][ T298] usb 2-1: Product: syz [ 100.419372][ T298] usb 2-1: Manufacturer: syz [ 100.423759][ T298] usb 2-1: SerialNumber: syz [ 100.429657][ T606] usb 3-1: USB disconnect, device number 17 [ 100.432206][ T298] usb 2-1: config 0 descriptor?? [ 100.447628][ T606] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 100.457712][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.472180][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.479537][ T298] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 100.483245][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.494128][ T298] usb 2-1: Detected FT232H [ 100.504304][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 100.514808][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.531445][ T6] usb 4-1: config 0 descriptor?? [ 100.698224][ T59] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 100.705266][ T298] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 100.712119][ T59] cp2112 0003:10C4:EA90.0035: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 100.907600][ T59] cp2112 0003:10C4:EA90.0035: Part Number: 0x82 Device Version: 0xFE [ 100.967610][ T298] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 100.977658][ T298] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 101.028441][ T6] koneplus 0003:1E7D:2E22.0036: unknown main item tag 0x0 [ 101.036055][ T6] koneplus 0003:1E7D:2E22.0036: hidraw1: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 101.127576][ T59] cp2112 0003:10C4:EA90.0035: error requesting SMBus config [ 101.138738][ T59] cp2112: probe of 0003:10C4:EA90.0035 failed with error -5 [ 101.174963][ T59] usb 2-1: USB disconnect, device number 21 [ 101.184500][ T59] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 101.194483][ T59] ftdi_sio 2-1:0.0: device disconnected [ 101.320001][ T2935] loop2: detected capacity change from 0 to 128 [ 101.331846][ T435] usb 5-1: USB disconnect, device number 20 [ 101.333641][ T2935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.346039][ T2935] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 101.387203][ T2935] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 101.401990][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 101.451394][ T59] usb 4-1: USB disconnect, device number 21 [ 101.719726][ T2949] loop2: detected capacity change from 0 to 512 [ 101.731965][ T2949] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.738549][ T2949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.750308][ T2949] EXT4-fs (loop2): 1 truncate cleaned up [ 101.758000][ T2949] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.798977][ T505] EXT4-fs error (device loop2): __ext4_get_inode_loc:4497: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 101.812190][ T2949] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 101.836040][ T1869] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 101.850567][ T1869] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 101.869659][ T1869] EXT4-fs (loop2): unmounting filesystem. [ 102.048685][ T2967] loop4: detected capacity change from 0 to 512 [ 102.071139][ T2967] EXT4-fs: Ignoring removed orlov option [ 102.076927][ T2967] /dev/loop4: Can't open blockdev [ 102.201833][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.208796][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.216047][ T2968] device bridge_slave_0 entered promiscuous mode [ 102.223871][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.230783][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.247161][ T2968] device bridge_slave_1 entered promiscuous mode [ 102.287536][ T606] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 102.401341][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.408227][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.415311][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.422112][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.442549][ T2985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 102.472940][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.482081][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.494690][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.513656][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.539111][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.545984][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.553815][ T2991] syz.0.998[2991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.553881][ T2991] syz.0.998[2991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.565280][ T435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.584353][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.591216][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.608529][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.616343][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.639344][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.648268][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.656104][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.663638][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.672540][ T2968] device veth0_vlan entered promiscuous mode [ 102.677570][ T606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.685309][ T2968] device veth1_macvtap entered promiscuous mode [ 102.697535][ T606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.697601][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.715455][ T606] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 102.724449][ T606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.734308][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.737884][ T606] usb 4-1: config 0 descriptor?? [ 102.745047][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.919717][ T3009] loop4: detected capacity change from 0 to 512 [ 102.931586][ T3009] /dev/loop4: Can't open blockdev [ 103.218378][ T606] logitech-djreceiver 0003:046D:C71B.0037: item fetching failed at offset 5/7 [ 103.227145][ T606] logitech-djreceiver 0003:046D:C71B.0037: logi_dj_probe: parse failed [ 103.235214][ T606] logitech-djreceiver: probe of 0003:046D:C71B.0037 failed with error -22 [ 103.398661][ T493] device bridge_slave_1 left promiscuous mode [ 103.404595][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.412113][ T493] device bridge_slave_0 left promiscuous mode [ 103.418146][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.426174][ T493] device veth1_macvtap left promiscuous mode [ 103.432147][ T493] device veth0_vlan left promiscuous mode [ 103.438351][ T606] usb 4-1: USB disconnect, device number 22 [ 105.457562][ T606] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 105.817601][ T606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.828541][ T606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.838086][ T606] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 105.846912][ T606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.855285][ T606] usb 2-1: config 0 descriptor?? [ 106.247749][ T6] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 106.339276][ T606] hid-steam 0003:28DE:1142.0038: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 106.540869][ T606] usb 2-1: USB disconnect, device number 22 [ 106.647649][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.658440][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.667998][ T6] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 106.676836][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.685208][ T6] usb 4-1: config 0 descriptor?? [ 107.178286][ T6] hid-led 0003:0FC5:B080.0039: unknown main item tag 0x0 [ 107.617656][ T6] hid-led: probe of 0003:0FC5:B080.0039 failed with error -71 [ 107.625771][ T6] usb 4-1: USB disconnect, device number 23 [ 107.983400][ T3060] loop4: detected capacity change from 0 to 40427 [ 108.037807][ T2861] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.167703][ T6] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 108.527569][ T6] usb 2-1: config 1 interface 0 has no altsetting 0 [ 108.687608][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.696447][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.704416][ T6] usb 2-1: Product: syz [ 108.708373][ T6] usb 2-1: Manufacturer: syz [ 108.712779][ T6] usb 2-1: SerialNumber: syz [ 109.267525][ T623] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 109.418617][ T6] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 109.507604][ T623] usb 5-1: Using ep0 maxpacket: 32 [ 109.627617][ T623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.638393][ T623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.647956][ T623] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.656771][ T623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.665388][ T623] usb 5-1: config 0 descriptor?? [ 109.708005][ T623] hub 5-1:0.0: USB hub found [ 109.927567][ T623] hub 5-1:0.0: 1 port detected [ 109.938387][ T6] usb 2-1: USB disconnect, device number 23 [ 109.944618][ T6] usblp0: removed [ 110.557569][ T623] hub 5-1:0.0: activate --> -90 [ 111.628310][ T59] usb 5-1: USB disconnect, device number 21 [ 111.647566][ T623] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 111.654204][ T623] usb 5-1-port1: config error [ 112.961734][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 112.961749][ T28] audit: type=1400 audit(1724902132.709:659): avc: denied { getopt } for pid=3093 comm="syz.4.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.994385][ T28] audit: type=1400 audit(1724902132.719:660): avc: denied { write } for pid=3089 comm="syz.0.1030" name="ptp0" dev="devtmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 113.020100][ T3091] kvm: emulating exchange as write [ 114.448745][ T3108] input: syz0 as /devices/virtual/input/input38 [ 116.066271][ T3119] loop3: detected capacity change from 0 to 2048 [ 116.088867][ T3119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 116.106431][ T3119] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.121488][ T3119] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 116.133539][ T3119] EXT4-fs (loop3): This should not happen!! Data will be lost [ 116.133539][ T3119] [ 116.147730][ T3119] EXT4-fs (loop3): Total free blocks count 0 [ 116.153539][ T3119] EXT4-fs (loop3): Free/Dirty block details [ 116.164282][ T3119] EXT4-fs (loop3): free_blocks=2415919104 [ 116.169888][ T3119] EXT4-fs (loop3): dirty_blocks=16 [ 116.174827][ T3119] EXT4-fs (loop3): Block reservation details [ 116.186854][ T3119] EXT4-fs (loop3): i_reserved_data_blocks=1 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=986 state=1 status=67 (errno 9: Bad file descriptor) [ 116.206090][ T505] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 116.221307][ T28] audit: type=1326 audit(1724902135.969:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3136 comm="syz.0.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda9c779ef9 code=0x0 [ 116.290273][ T28] audit: type=1400 audit(1724902135.999:662): avc: denied { write } for pid=283 comm="syz-executor" path="pipe:[13796]" dev="pipefs" ino=13796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 116.455043][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.462029][ T3141] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.469229][ T3141] device bridge_slave_0 entered promiscuous mode [ 116.475872][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.482984][ T3141] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.490612][ T3141] device bridge_slave_1 entered promiscuous mode [ 116.531065][ T3141] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.537922][ T3141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.544973][ T3141] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.551834][ T3141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.569744][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.577130][ T298] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.585379][ T298] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.606256][ T3141] device veth0_vlan entered promiscuous mode [ 116.612968][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.621262][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.629822][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.636948][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.644154][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.652069][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.658926][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.666023][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.674040][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.680894][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.688013][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.695636][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.709812][ T3141] device veth1_macvtap entered promiscuous mode [ 116.718124][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.727032][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.736158][ T1051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.927905][ T493] device bridge_slave_1 left promiscuous mode [ 116.933817][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.941063][ T493] device bridge_slave_0 left promiscuous mode [ 116.946963][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.954508][ T493] device veth1_macvtap left promiscuous mode [ 116.960382][ T493] device veth0_vlan left promiscuous mode [ 117.300500][ T493] tipc: Left network mode [ 117.858378][ T493] device bridge_slave_1 left promiscuous mode [ 117.864321][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.871755][ T493] device bridge_slave_0 left promiscuous mode [ 117.877765][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.885263][ T493] device bridge_slave_1 left promiscuous mode [ 117.891245][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.898610][ T493] device bridge_slave_0 left promiscuous mode [ 117.904518][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.912192][ T493] device bridge_slave_1 left promiscuous mode [ 117.918302][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.925483][ T493] device bridge_slave_0 left promiscuous mode [ 117.931528][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.939321][ T493] device bridge_slave_1 left promiscuous mode [ 117.945207][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.952521][ T493] device bridge_slave_0 left promiscuous mode [ 117.958695][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.966736][ T493] device veth1_macvtap left promiscuous mode [ 117.972617][ T493] device veth0_vlan left promiscuous mode [ 117.978477][ T493] device veth1_macvtap left promiscuous mode [ 117.984277][ T493] device veth0_vlan left promiscuous mode [ 117.990178][ T493] device veth1_macvtap left promiscuous mode [ 117.995983][ T493] device veth0_vlan left promiscuous mode [ 118.001893][ T493] device veth1_macvtap left promiscuous mode [ 118.007828][ T493] device veth0_vlan left promiscuous mode