last executing test programs: 3.233976459s ago: executing program 3 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) close(r3) 3.177657063s ago: executing program 3 (id=522): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.78827546s ago: executing program 4 (id=534): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000e8f4fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_pid(r0, &(0x7f0000000400), 0x20000412) 2.727923003s ago: executing program 4 (id=536): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb96, &(0x7f0000002c00)="$eJzs3M1vVFUbAPDn3n5QaF9a3rx53xdiYhODGI1DoUQTVuDaqIkuWDK2U9J0+LBTE9uwKLhXF8a4IDH8CSbuxYUrExe4UPwLiJEYohtwUXPno4x0pq0ww4Hy+yWn95yedp7nmZuZe04ydwJ4ak0WP/KI/RFxOosYb/4+j4jhem8kYrXxd3dvX5wpWhZra2//lkUWEXduX5xpPVbWPI42ByMRcf21LP794ca4teWVhXK1Wllsjg8vnb1wuLa88vL82fKZypnKuWPTrx6bfmV6uoe13rzw7ufP/PDG85evfjT15md7v8viRIw159rr6JXJmFx/TtoNRkS518ESGWjW015nNpgwIQAANpW3reH+G+MxEPcWb+Px7Y9JkwMAAAB6Ym0gYg0AAADY4TL7fwAAANjhWp8DuHP74kyrpf1EwqN162RETDTqb93f3JgZjNX6cSSGImLP71m039aaNf7toU0Wkb76vlK06NN9yJtZvRQR/+90/rN6/RP1u7g31p9HxFQP4k/eN36S6j/Rg/id6x/uwSMDQHfXTjYuZBuvf/n6+ic6XP8GO1y7HkTq639r/Xd3w/rvXv0DXdZ/b20zxoE/X7zeba59/Xfq459ni/jF8aGK+gduXYo4MNip/my9/qxL/ae3GWN05uaVbnNF/UW9rfao61+7GnEwOtffkm32/USH5+arlanGzy4xDn5z6lC3+O3nv2hF/NZe4FEozv+eLvVvdf4vbDPGxP9+3d9tbuv681+Gs3fqvdaq+IPy0tLikYjh7PX6i/dvvz+6eS6tv2k9RlH/C89t/vrvVH/xnrDafB6KvcCl5rEYX74v5ujBo18+eP39VdQ/+4Dn/5Ntxvji6yvvdZvrWH/W8WuzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiK5RExFlleWu/neakUMRoR/4k9efV8bemlufPvn5st5iImYiifm69WpiJivDHOivGRev/e+Oh94+mI2BcRn47vro9LM+ers6mLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN1oRIxFlpciIo+IP8bzvFRKnRUAAADQcxOpEwAAAAD6zv4fAAAAdj77fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPps37PXbmQRsXp8d70VhptzQ0kzA/otT50AkMxA6gSAZAZTJwAkY48PZFvMj3Sd2dXzXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4fB3af+1GFhGrx3fXW2G4OTeUNDOg3/LUCQDJDKROAEhmMHUCQDL2+EC2xfxI15ldPc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMfXWL1leSki8no/z0uliH9FxEQMZXPz1cpUROyNiJ/Gh3YV4yOpkwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDnassrC+VqtbK4wzt5RDwGaejoPCGd1O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACkUFteWShXq5XFWupMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNRqyysL5Wq1stjHTuoaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABI568AAAD//29HAok=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='ext4_ext_rm_leaf\x00', r0}, 0x10) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0xb) fallocate(r1, 0x0, 0x0, 0x1001f0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 2.644039589s ago: executing program 4 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 2.610555482s ago: executing program 1 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 2.567046695s ago: executing program 1 (id=541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xc906, &(0x7f0000000940)={[{@nobarrier}, {@noblock_validity}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@errors_remount}, {@init_itable}, {@noauto_da_alloc}, {@resgid={'resgid', 0x3d, 0xee01}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1e, 0x4e1, &(0x7f0000000a40)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2.286615734s ago: executing program 1 (id=542): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x4000, 0x100000001}) 2.285844694s ago: executing program 4 (id=551): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.941256797s ago: executing program 4 (id=553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x81) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.920712319s ago: executing program 1 (id=543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x5}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 1.880497062s ago: executing program 1 (id=544): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "58f9bca2"}, @main=@item_4={0x3, 0x0, 0x0, "775cb096"}]}}, 0x0}, 0x0) 1.099062445s ago: executing program 4 (id=545): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f00000003c0)) 1.095340005s ago: executing program 3 (id=546): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = dup(r0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x200}, 0x10) bind$tipc(r0, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 455.527349ms ago: executing program 0 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 401.247692ms ago: executing program 0 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file2\x00') fchmodat(r0, &(0x7f00000000c0)='./bus\x00', 0x0) 381.895704ms ago: executing program 0 (id=572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020a000902"], 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0) 362.080575ms ago: executing program 0 (id=573): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 308.612439ms ago: executing program 2 (id=574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x1000049) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004005, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0010000000000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 294.79342ms ago: executing program 0 (id=575): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 277.683551ms ago: executing program 2 (id=576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8c18cffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000008c0)=ANY=[@ANYBLOB='system_u::bject_r:ptch0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x67) 254.693342ms ago: executing program 2 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7}, {0x0, 0x2}], 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 254.150832ms ago: executing program 3 (id=578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000007540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x40106726, 0x20000000) 232.729184ms ago: executing program 3 (id=579): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000540)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 173.970108ms ago: executing program 3 (id=580): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 58.967816ms ago: executing program 2 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 56.261627ms ago: executing program 0 (id=591): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000002800)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$cgroup_pid(r2, &(0x7f00000031c0), 0x12) 24.609418ms ago: executing program 2 (id=582): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f00000001c0)="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", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0), 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080), 0x8) write$binfmt_aout(r0, 0x0, 0x0) 957.57µs ago: executing program 2 (id=583): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 1 (id=584): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x200) sendfile(r1, r2, 0x0, 0xe066) kernel console output (not intermixed with test programs): e_1 entered promiscuous mode [ 30.564079][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.570930][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.578084][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.585072][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.592291][ T382] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 30.599093][ T382] cdc_ncm 2-1:1.0: dwNtbInMaxSize=12 is too small. Using 2048 [ 30.609574][ T382] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 30.616149][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.624593][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.631719][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.643274][ T60] itetech 0003:048D:8595.0008: unknown main item tag 0x0 [ 30.653078][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.661367][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.668253][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.675852][ T311] hid-rmi 0003:06CB:81A7.0009: unknown main item tag 0x0 [ 30.683046][ T60] itetech 0003:048D:8595.0008: unknown main item tag 0x0 [ 30.689911][ T60] itetech 0003:048D:8595.0008: unknown main item tag 0x0 [ 30.697279][ T60] itetech 0003:048D:8595.0008: unknown main item tag 0x0 [ 30.704375][ T311] hid-rmi 0003:06CB:81A7.0009: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 30.715538][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.724761][ T60] itetech 0003:048D:8595.0008: unknown main item tag 0x0 [ 30.732338][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.739182][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.746564][ T60] itetech 0003:048D:8595.0008: hidraw1: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.0-1/input0 [ 30.771287][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.779453][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.795222][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.807021][ T554] device veth0_vlan entered promiscuous mode [ 30.813653][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.821559][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.828955][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.845353][ T382] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 30.864043][ T26] usb 3-1: USB disconnect, device number 4 [ 30.866547][ T554] device veth1_macvtap entered promiscuous mode [ 30.889078][ T382] usb 2-1: USB disconnect, device number 3 [ 30.895183][ T382] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 30.915374][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.929322][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.938470][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.948280][ T45] device bridge_slave_1 left promiscuous mode [ 30.954783][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.964310][ T45] device bridge_slave_0 left promiscuous mode [ 30.970434][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.979440][ T45] device veth1_macvtap left promiscuous mode [ 30.985579][ T45] device veth0_vlan left promiscuous mode [ 31.362319][ T60] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.380327][ T598] device bridge0 entered promiscuous mode [ 31.386324][ T598] device macsec1 entered promiscuous mode [ 31.392991][ T598] device bridge0 left promiscuous mode [ 31.612246][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 31.702524][ T382] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 31.752329][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.763185][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.772751][ T60] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 31.781723][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.782525][ T293] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.792781][ T60] usb 4-1: config 0 descriptor?? [ 31.972241][ T382] usb 2-1: Using ep0 maxpacket: 16 [ 32.102502][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.113361][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.116713][ T614] netlink: 92 bytes leftover after parsing attributes in process `syz.4.106'. [ 32.123335][ T382] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.123466][ T382] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.123491][ T382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.127573][ T382] usb 2-1: config 0 descriptor?? [ 32.172321][ T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.183481][ T293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.196213][ T293] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.205047][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.216094][ T293] usb 3-1: config 0 descriptor?? [ 32.263267][ T60] savu 0003:1E7D:2D5A.000A: item fetching failed at offset 2/5 [ 32.270864][ T60] savu 0003:1E7D:2D5A.000A: parse failed [ 32.276393][ T60] savu: probe of 0003:1E7D:2D5A.000A failed with error -22 [ 32.431293][ T39] usb 1-1: USB disconnect, device number 4 [ 32.437472][ T445] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.464383][ T60] usb 4-1: USB disconnect, device number 4 [ 32.617232][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 32.617248][ T30] audit: type=1400 audit(1726499506.247:277): avc: denied { mounton } for pid=621 comm="syz.0.109" path="/18/file0" dev="incremental-fs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.654912][ T30] audit: type=1400 audit(1726499506.287:278): avc: denied { read } for pid=621 comm="syz.0.109" name="file0" dev="incremental-fs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.686336][ T30] audit: type=1400 audit(1726499506.287:279): avc: denied { open } for pid=621 comm="syz.0.109" path="/18/file0/file0" dev="incremental-fs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.700846][ T382] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input8 [ 32.711223][ T293] plantronics 0003:047F:FFFF.000C: collection stack underflow [ 32.724690][ T30] audit: type=1400 audit(1726499506.287:280): avc: denied { write } for pid=621 comm="syz.0.109" path="/18/file0/file0" dev="incremental-fs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.728971][ T293] plantronics 0003:047F:FFFF.000C: item 0 4 0 12 parsing failed [ 32.759658][ T293] plantronics 0003:047F:FFFF.000C: parse failed [ 32.765883][ T293] plantronics: probe of 0003:047F:FFFF.000C failed with error -22 [ 32.783487][ T382] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 32.842356][ T445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.853143][ T445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.862655][ T445] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 32.871539][ T445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.880646][ T445] usb 5-1: config 0 descriptor?? [ 32.896229][ T293] usb 2-1: USB disconnect, device number 4 [ 32.926727][ T26] usb 3-1: USB disconnect, device number 5 [ 32.952443][ T39] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.063164][ T30] audit: type=1400 audit(1726499506.697:281): avc: denied { create } for pid=637 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.065551][ T638] tipc: Started in network mode [ 33.088025][ T638] tipc: Node identity 101, cluster identity 4711 [ 33.094116][ T30] audit: type=1400 audit(1726499506.697:282): avc: denied { write } for pid=637 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.094148][ T30] audit: type=1400 audit(1726499506.697:283): avc: denied { read } for pid=637 comm="syz.3.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.134469][ T638] tipc: Node number set to 257 [ 33.139295][ T638] tipc: Cannot configure node identity twice [ 33.181959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 33.322270][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.342216][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.351790][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 33.372216][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.392440][ T39] usb 1-1: config 0 descriptor?? [ 33.461013][ T645] syz.1.119[645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.461110][ T645] syz.1.119[645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.565657][ T653] incfs: Error accessing: ./bus. [ 33.581523][ T653] incfs: mount failed -20 [ 35.062169][ C0] sched: RT throttling activated [ 35.082821][ T445] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 35.096581][ T445] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 35.132406][ T322] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.155557][ T666] incfs: Options parsing error. -22 [ 35.160869][ T666] incfs: mount failed -22 [ 35.178103][ T30] audit: type=1326 audit(1726499508.807:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300648ef9 code=0x7ffc0000 [ 35.208226][ T30] audit: type=1326 audit(1726499508.807:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300648ef9 code=0x7ffc0000 [ 35.245926][ T672] serio: Serial port ptm0 [ 35.247772][ T30] audit: type=1326 audit(1726499508.837:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=667 comm="syz.1.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5300648ef9 code=0x7ffc0000 [ 35.286950][ T445] usb 5-1: USB disconnect, device number 4 [ 35.294134][ T39] isku 0003:1E7D:319C.000E: item fetching failed at offset 5/7 [ 35.301800][ T39] isku 0003:1E7D:319C.000E: parse failed [ 35.308840][ T39] isku: probe of 0003:1E7D:319C.000E failed with error -22 [ 35.392313][ T322] usb 3-1: Using ep0 maxpacket: 8 [ 35.495829][ T39] usb 1-1: USB disconnect, device number 5 [ 35.512326][ T322] usb 3-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 35.521300][ T322] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.530149][ T322] usb 3-1: config 0 descriptor?? [ 35.572861][ T322] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 35.712323][ T60] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.792309][ T322] usb 3-1: Detected FT232BM [ 35.838973][ T690] 8021q: VLANs not supported on lo [ 35.879514][ T694] loop4: detected capacity change from 0 to 256 [ 35.952262][ T60] usb 4-1: Using ep0 maxpacket: 8 [ 35.960253][ T694] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 36.012271][ T322] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 36.032288][ T322] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 36.039877][ T322] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.049608][ T322] usb 3-1: USB disconnect, device number 6 [ 36.061224][ T322] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.072032][ T322] ftdi_sio 3-1:0.0: device disconnected [ 36.082275][ T60] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 36.099629][ T60] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 36.110809][ T60] usb 4-1: config 135 has no interface number 0 [ 36.144270][ T60] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 36.190483][ T718] loop4: detected capacity change from 0 to 128 [ 36.238835][ T721] syz.1.154[721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.238894][ T721] syz.1.154[721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.342362][ T60] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 36.362305][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.370141][ T60] usb 4-1: Product: syz [ 36.374238][ T60] usb 4-1: Manufacturer: syz [ 36.378688][ T60] usb 4-1: SerialNumber: syz [ 36.423102][ T60] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 36.429458][ T60] usb 4-1: No valid video chain found. [ 36.452213][ T491] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.472240][ T382] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 36.630822][ T60] usb 4-1: USB disconnect, device number 5 [ 36.862304][ T382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.873162][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.889272][ T491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.899199][ T382] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.909044][ T491] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 36.918130][ T382] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 36.927160][ T491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.935185][ T382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.948978][ T491] usb 1-1: config 0 descriptor?? [ 36.957920][ T382] usb 5-1: config 0 descriptor?? [ 37.234779][ T745] loop3: detected capacity change from 0 to 512 [ 37.277041][ T749] loop1: detected capacity change from 0 to 512 [ 37.304509][ T745] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.164: bad orphan inode 17 [ 37.314786][ T745] ext4_test_bit(bit=16, block=4) = 1 [ 37.321197][ T745] is_bad_inode(inode)=0 [ 37.325503][ T745] NEXT_ORPHAN(inode)=0 [ 37.329436][ T745] max_ino=32 [ 37.332536][ T745] i_nlink=1 [ 37.333329][ T749] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.335619][ T745] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 37.342800][ T749] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.166: bg 0: block 248: padding at end of block bitmap is not set [ 37.372668][ T749] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.166: Failed to acquire dquot type 1 [ 37.388259][ T745] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.164: bg 0: block 7: invalid block bitmap [ 37.401067][ T749] EXT4-fs (loop1): 1 truncate cleaned up [ 37.407086][ T749] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 37.463423][ T749] syz.1.166 (749) used greatest stack depth: 19824 bytes left [ 37.486439][ T754] xt_hashlimit: max too large, truncated to 1048576 [ 37.508881][ T756] loop1: detected capacity change from 0 to 512 [ 37.535846][ T762] loop2: detected capacity change from 0 to 1024 [ 37.536685][ T756] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 37.549339][ T382] usbhid 5-1:0.0: can't add hid device: -71 [ 37.555137][ T382] usbhid: probe of 5-1:0.0 failed with error -71 [ 37.561795][ T382] usb 5-1: USB disconnect, device number 5 [ 37.564737][ T756] EXT4-fs (loop1): mounted filesystem without journal. Opts: nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 37.579857][ T756] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 37.584912][ T762] EXT4-fs (loop2): Ignoring removed nobh option [ 37.613558][ T762] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,nobh,inode_readahead_blks=0x0000000000000200,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x00000000000007b1,jqfmt=vfsv1,min_batch_time=0x000000000000088d,delalloc,discard,errors=continue. Quota mode: none. [ 37.649812][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 37.649828][ T30] audit: type=1400 audit(1726499511.277:315): avc: denied { map } for pid=761 comm="syz.2.171" path="/30/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.677794][ T30] audit: type=1400 audit(1726499511.277:316): avc: denied { execute } for pid=761 comm="syz.2.171" path="/30/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.720729][ T30] audit: type=1400 audit(1726499511.347:317): avc: denied { read write } for pid=769 comm="syz.1.173" name="uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.722586][ T6] hid-generic 0000:0000:0000.0010: unknown main item tag 0x4 [ 37.745686][ T30] audit: type=1400 audit(1726499511.347:318): avc: denied { open } for pid=769 comm="syz.1.173" path="/dev/uhid" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.754943][ T770] loop1: detected capacity change from 0 to 512 [ 37.780273][ T6] hid-generic 0000:0000:0000.0010: unknown main item tag 0x2 [ 37.792467][ T6] hid-generic 0000:0000:0000.0010: unknown main item tag 0x3 [ 37.801076][ T6] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 37.812210][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 37.814881][ T770] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 37.828028][ T770] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.173: invalid indirect mapped block 2683928664 (level 1) [ 37.842153][ T770] EXT4-fs (loop1): Remounting filesystem read-only [ 37.848861][ T770] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 37.863549][ T770] EXT4-fs (loop1): 1 truncate cleaned up [ 37.875396][ T770] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 37.902864][ T491] hid-led 0003:27B8:01ED.000F: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 37.925014][ T491] hid-led 0003:27B8:01ED.000F: ThingM blink(1) initialized [ 37.986239][ T30] audit: type=1400 audit(1726499511.617:319): avc: denied { unmount } for pid=554 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.058802][ T781] loop4: detected capacity change from 0 to 2048 [ 38.072346][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 38.077838][ T781] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 38.088197][ T781] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.099635][ T781] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 38.115059][ T382] usb 1-1: USB disconnect, device number 6 [ 38.121554][ T781] EXT4-fs (loop4): group descriptors corrupted! [ 38.202324][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 38.213401][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 38.235113][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 38.244276][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.255964][ T311] usb 4-1: config 0 descriptor?? [ 38.282300][ T760] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 38.302802][ T311] hub 4-1:0.0: USB hub found [ 38.312270][ T491] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.512289][ T311] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 38.572250][ T491] usb 2-1: Using ep0 maxpacket: 16 [ 38.592235][ T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 38.692390][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.708252][ T491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.832276][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 38.832296][ T311] usbhid 4-1:0.0: can't add hid device: -71 [ 38.832357][ T311] usbhid: probe of 4-1:0.0 failed with error -71 [ 38.882317][ T491] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 38.891311][ T491] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 38.899895][ T311] usb 4-1: USB disconnect, device number 6 [ 38.906697][ T491] usb 2-1: Product: syz [ 38.910689][ T491] usb 2-1: Manufacturer: syz [ 38.915796][ T491] usb 2-1: config 0 descriptor?? [ 38.952360][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.982288][ T322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 39.122297][ T26] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 39.131414][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.139338][ T26] usb 5-1: Product: syz [ 39.143380][ T26] usb 5-1: Manufacturer: syz [ 39.147805][ T26] usb 5-1: SerialNumber: syz [ 39.153296][ T26] usb 5-1: config 0 descriptor?? [ 39.342370][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.353172][ T322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.362759][ T322] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.371565][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.380363][ T322] usb 1-1: config 0 descriptor?? [ 39.383369][ T491] kovaplus 0003:1E7D:2D50.0011: item fetching failed at offset 5/7 [ 39.393247][ T491] kovaplus 0003:1E7D:2D50.0011: parse failed [ 39.399065][ T491] kovaplus: probe of 0003:1E7D:2D50.0011 failed with error -22 [ 39.522239][ T626] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 39.572239][ T39] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.591519][ T491] usb 2-1: USB disconnect, device number 5 [ 39.632282][ T26] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 39.638473][ T26] usb 5-1: No valid video chain found. [ 39.834707][ T26] usb 5-1: USB disconnect, device number 6 [ 39.862559][ T322] hid (null): bogus close delimiter [ 39.882741][ T626] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.893706][ T626] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.903383][ T626] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 39.912254][ T626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.932444][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.943274][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.953637][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.966374][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.975211][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.983675][ T39] usb 3-1: config 0 descriptor?? [ 40.362323][ T322] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71 [ 40.370942][ T322] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 40.379546][ T626] logitech-hidpp-device 0003:046D:C086.0013: unexpected long global item [ 40.387859][ T322] uclogic: probe of 0003:256C:006D.0012 failed with error -71 [ 40.395553][ T626] logitech-hidpp-device 0003:046D:C086.0013: hidpp_probe:parse failed [ 40.404259][ T626] logitech-hidpp-device: probe of 0003:046D:C086.0013 failed with error -22 [ 40.413101][ T322] usb 1-1: USB disconnect, device number 7 [ 40.463186][ T39] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 40.470649][ T39] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 40.481840][ T39] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 40.581494][ T6] usb 4-1: USB disconnect, device number 7 [ 41.093311][ T30] audit: type=1400 audit(1726499514.727:320): avc: denied { ioctl } for pid=828 comm="syz.3.197" path="socket:[17612]" dev="sockfs" ino=17612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.212272][ T322] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 41.219768][ T39] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 41.232356][ T30] audit: type=1326 audit(1726499514.867:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c50f8ef9 code=0x7ffc0000 [ 41.256506][ T30] audit: type=1326 audit(1726499514.867:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f88c50f8ef9 code=0x7ffc0000 [ 41.280333][ T30] audit: type=1326 audit(1726499514.867:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c50f8ef9 code=0x7ffc0000 [ 41.309256][ T30] audit: type=1400 audit(1726499514.907:324): avc: denied { map } for pid=848 comm="syz.4.207" path="/dev/ashmem" dev="devtmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.399133][ T626] hid-generic 0000:0000:0000.0015: unknown main item tag 0x4 [ 41.406749][ T855] loop4: detected capacity change from 0 to 512 [ 41.406987][ T626] hid-generic 0000:0000:0000.0015: unknown main item tag 0x2 [ 41.420410][ T626] hid-generic 0000:0000:0000.0015: unknown main item tag 0x3 [ 41.428531][ T626] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz0] on syz0 [ 41.432127][ T855] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 41.446121][ T855] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.210: invalid indirect mapped block 2683928664 (level 1) [ 41.460082][ T855] EXT4-fs (loop4): Remounting filesystem read-only [ 41.466681][ T855] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 41.481287][ T855] EXT4-fs (loop4): 1 truncate cleaned up [ 41.486770][ T6] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.487385][ T855] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 41.592283][ T322] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 41.603478][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.619768][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.629890][ T322] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 41.641250][ T39] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 41.650197][ T322] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 41.659074][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.671686][ T322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.683682][ T39] usb 2-1: config 0 descriptor?? [ 41.702380][ T819] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 41.702626][ T810] usb 3-1: string descriptor 0 read error: -2 [ 41.747910][ T869] loop4: detected capacity change from 0 to 1024 [ 41.822649][ T869] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 41.843733][ T869] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,dioread_nolock,,errors=continue. Quota mode: none. [ 41.882340][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.893196][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.902741][ T6] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 41.911670][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.925019][ T873] loop4: detected capacity change from 0 to 512 [ 41.935567][ T6] usb 4-1: config 0 descriptor?? [ 41.944223][ T873] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 41.955685][ T873] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 42.030452][ T877] loop4: detected capacity change from 0 to 512 [ 42.113912][ T877] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue. Quota mode: writeback. [ 42.129909][ T877] ext4 filesystem being mounted at /35/bus supports timestamps until 2038 (0x7fffffff) [ 42.242503][ T886] loop2: detected capacity change from 0 to 512 [ 42.312672][ T886] EXT4-fs (loop2): Ignoring removed nobh option [ 42.318897][ T886] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 42.318897][ T886] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.318897][ T886] [ 42.337496][ T886] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 42.345498][ T886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=780e801c, mo2=0002] [ 42.353660][ T886] System zones: 1-12 [ 42.357766][ T886] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 42.367415][ T886] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 42.376642][ T886] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noinit_itable,usrquota,nobh,data_err=abort,usrquota,discard,barrier=0x000000000000d960,nouser_xattr,,errors=continue. Quota mode: writeback. [ 42.406982][ T886] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 42.415189][ T886] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 42.429801][ T6] pyra 0003:1E7D:2CF6.0017: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 42.612809][ T39] hid-led 0003:27B8:01ED.0016: hidraw2: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 42.624042][ T322] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 42.631664][ T322] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input9 [ 42.643082][ T39] hid-led 0003:27B8:01ED.0016: ThingM blink(1) initialized [ 42.816068][ T322] usb 2-1: USB disconnect, device number 6 [ 42.832246][ T311] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 42.840257][ T382] usb 1-1: USB disconnect, device number 8 [ 42.842237][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 43.068259][ T892] loop4: detected capacity change from 0 to 512 [ 43.081565][ T892] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.223: bg 0: block 288: padding at end of block bitmap is not set [ 43.095921][ T892] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem [ 43.104971][ T892] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.223: attempt to clear invalid blocks 1024 len 1 [ 43.118287][ T892] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.223: invalid indirect mapped block 1819239214 (level 0) [ 43.132445][ T892] EXT4-fs (loop4): 1 truncate cleaned up [ 43.137895][ T892] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 43.151065][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 43.151079][ T30] audit: type=1400 audit(1726499516.777:328): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.179604][ T30] audit: type=1400 audit(1726499516.777:329): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.182339][ T311] usb 3-1: device firmware changed [ 43.201830][ T30] audit: type=1400 audit(1726499516.777:330): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.226782][ T626] usb 3-1: USB disconnect, device number 7 [ 43.335380][ T30] audit: type=1400 audit(1726499516.967:331): avc: denied { write } for pid=898 comm="syz.4.226" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.382522][ T626] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 43.394320][ T901] loop1: detected capacity change from 0 to 4096 [ 43.401349][ T30] audit: type=1400 audit(1726499517.027:332): avc: denied { write } for pid=904 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.433295][ T901] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 43.442877][ T901] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable=0x0000000000000005,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 43.532732][ T6] pyra 0003:1E7D:2CF6.0017: couldn't init struct pyra_device [ 43.542407][ T6] pyra 0003:1E7D:2CF6.0017: couldn't install mouse [ 43.554092][ T6] pyra: probe of 0003:1E7D:2CF6.0017 failed with error -71 [ 43.566494][ T6] usb 4-1: USB disconnect, device number 8 [ 43.752321][ T626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.763146][ T626] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.773286][ T626] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 43.782305][ T322] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 43.789550][ T626] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.798011][ T626] usb 3-1: config 0 descriptor?? [ 44.012428][ T39] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 44.142307][ T322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.153304][ T322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.162960][ T322] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 44.171853][ T322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.180569][ T322] usb 5-1: config 0 descriptor?? [ 44.239123][ T927] syz.0.237[927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.239190][ T927] syz.0.237[927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.272247][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 44.288848][ T626] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 44.296489][ T626] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 44.302320][ T382] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 44.412400][ T39] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 44.420727][ T39] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 44.431671][ T39] usb 2-1: config 135 has no interface number 0 [ 44.437803][ T39] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 44.492346][ T626] cp2112 0003:10C4:EA90.0018: error requesting version [ 44.499613][ T626] cp2112: probe of 0003:10C4:EA90.0018 failed with error -5 [ 44.542356][ T311] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 44.602313][ T39] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 44.611252][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.619030][ T39] usb 2-1: Product: syz [ 44.623026][ T39] usb 2-1: Manufacturer: syz [ 44.627414][ T39] usb 2-1: SerialNumber: syz [ 44.672557][ T322] hid (null): global environment stack underflow [ 44.679373][ T39] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 44.686562][ T322] logitech-djreceiver 0003:046D:C71B.0019: global environment stack underflow [ 44.692339][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.706186][ T39] usb 2-1: No valid video chain found. [ 44.707613][ T382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.712098][ T322] logitech-djreceiver 0003:046D:C71B.0019: item 0 2 1 11 parsing failed [ 44.727406][ T382] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 44.729699][ T322] logitech-djreceiver 0003:046D:C71B.0019: logi_dj_probe: parse failed [ 44.738432][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.746777][ T322] logitech-djreceiver: probe of 0003:046D:C71B.0019 failed with error -22 [ 44.759226][ T382] usb 4-1: config 0 descriptor?? [ 44.767493][ T491] usb 3-1: USB disconnect, device number 8 [ 44.782329][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 44.877130][ T322] usb 2-1: USB disconnect, device number 7 [ 44.887517][ T39] usb 5-1: USB disconnect, device number 7 [ 44.922749][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.933579][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.943151][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.955742][ T311] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 44.964576][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.973206][ T311] usb 1-1: config 0 descriptor?? [ 45.411482][ T935] syz.1.240[935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.411568][ T935] syz.1.240[935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.453418][ T311] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 45.481187][ T311] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 45.497312][ T311] koneplus 0003:1E7D:2E22.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 45.508902][ T942] syz.4.243[942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.508984][ T942] syz.4.243[942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.524058][ T30] audit: type=1400 audit(1726499519.157:333): avc: denied { read write } for pid=940 comm="syz.4.243" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 45.581567][ T30] audit: type=1400 audit(1726499519.157:334): avc: denied { open } for pid=940 comm="syz.4.243" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 45.659501][ T30] audit: type=1326 audit(1726499519.287:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300648ef9 code=0x7ffc0000 [ 45.692520][ T311] koneplus 0003:1E7D:2E22.001B: couldn't init struct koneplus_device [ 45.706074][ T30] audit: type=1326 audit(1726499519.317:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f5300648ef9 code=0x7ffc0000 [ 45.708943][ T382] hid-led 0003:27B8:01ED.001A: hidraw1: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 45.729729][ T30] audit: type=1326 audit(1726499519.317:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=951 comm="syz.1.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300648ef9 code=0x7ffc0000 [ 45.750298][ T311] koneplus 0003:1E7D:2E22.001B: couldn't install mouse [ 45.773382][ T311] koneplus: probe of 0003:1E7D:2E22.001B failed with error -5 [ 45.801176][ T382] hid-led 0003:27B8:01ED.001A: ThingM blink(1) initialized [ 45.932531][ T382] usb 1-1: USB disconnect, device number 9 [ 45.969334][ T491] usb 4-1: USB disconnect, device number 9 [ 45.977071][ T322] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 46.072326][ T967] loop2: detected capacity change from 0 to 512 [ 46.173794][ T967] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 46.184749][ T967] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 46.362309][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.373151][ T322] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.382749][ T322] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 46.391648][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.412951][ T322] usb 2-1: config 0 descriptor?? [ 46.489391][ T976] loop3: detected capacity change from 0 to 16 [ 46.545743][ T976] erofs: (device loop3): mounted with root inode @ nid 36. [ 46.552939][ T491] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 46.588710][ T976] overlayfs: failed to set xattr on upper [ 46.895899][ T322] hid-led 0003:1D34:000A.001C: unknown main item tag 0x0 [ 46.902901][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 46.942284][ T491] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.952875][ T491] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.963823][ T491] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.973705][ T491] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.980160][ T491] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 46.989019][ T491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.997627][ T491] usb 3-1: config 0 descriptor?? [ 47.088682][ T988] loop4: detected capacity change from 0 to 40427 [ 47.122818][ T322] hid-led 0003:1D34:000A.001C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 47.134829][ T322] hid-led 0003:1D34:000A.001C: Dream Cheeky Webmail Notifier initialized [ 47.184136][ T988] F2FS-fs (loop4): invalid crc value [ 47.190965][ T988] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.223144][ T988] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.262283][ T39] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 47.272576][ T39] usb 4-1: config 0 has no interfaces? [ 47.278138][ T39] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 47.287043][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.299819][ T39] usb 4-1: config 0 descriptor?? [ 47.305261][ T554] attempt to access beyond end of device [ 47.305261][ T554] loop4: rw=2049, want=45104, limit=40427 [ 47.345634][ T382] usb 2-1: USB disconnect, device number 8 [ 47.504691][ T1012] loop4: detected capacity change from 0 to 512 [ 47.523357][ T491] zeroplus 0003:0C12:0005.001D: item fetching failed at offset 1/5 [ 47.531399][ T491] zeroplus 0003:0C12:0005.001D: parse failed [ 47.541331][ T491] zeroplus: probe of 0003:0C12:0005.001D failed with error -22 [ 47.555265][ T1012] EXT4-fs (loop4): Ignoring removed nobh option [ 47.561431][ T1012] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 47.561431][ T1012] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 47.561431][ T1012] [ 47.580267][ T1012] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.588589][ T1012] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=780e801c, mo2=0002] [ 47.597117][ T1012] System zones: 1-12 [ 47.601338][ T1012] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 47.610995][ T1012] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 47.619763][ T1012] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noinit_itable,usrquota,nobh,data_err=abort,usrquota,discard,barrier=0x000000000000d960,nouser_xattr,,errors=continue. Quota mode: writeback. [ 47.651737][ T1012] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 47.674002][ T491] usb 4-1: USB disconnect, device number 10 [ 47.680872][ T1012] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 47.727022][ T382] usb 3-1: USB disconnect, device number 9 [ 47.804411][ T1020] loop4: detected capacity change from 0 to 4096 [ 47.877164][ T1020] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 47.895393][ T1020] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable=0x0000000000000005,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 47.940651][ T1026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=1026 comm=syz.1.277 [ 48.043414][ T1030] loop1: detected capacity change from 0 to 512 [ 48.126347][ T1030] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.280: corrupted inode contents [ 48.144074][ T1030] EXT4-fs error (device loop1): ext4_dirty_inode:6024: inode #16: comm syz.1.280: mark_inode_dirty error [ 48.160561][ T1030] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.280: corrupted inode contents [ 48.173519][ T1030] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.280: mark_inode_dirty error [ 48.185205][ T1030] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.280: corrupted inode contents [ 48.197212][ T1030] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 48.205990][ T1030] EXT4-fs error (device loop1): ext4_do_update_inode:5191: inode #16: comm syz.1.280: corrupted inode contents [ 48.217960][ T1030] EXT4-fs error (device loop1): ext4_truncate:4292: inode #16: comm syz.1.280: mark_inode_dirty error [ 48.236646][ T1030] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 48.259675][ T1030] EXT4-fs (loop1): 1 truncate cleaned up [ 48.272331][ T1030] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 48.289003][ T1030] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038 (0x7fffffff) [ 48.318072][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 48.318088][ T30] audit: type=1400 audit(1726499521.947:352): avc: denied { map } for pid=1029 comm="syz.1.280" path="/58/file1/bus" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.369450][ T30] audit: type=1400 audit(1726499521.997:353): avc: denied { create } for pid=1029 comm="syz.1.280" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 48.414517][ T1030] EXT4-fs error (device loop1): ext4_find_dest_de:2112: inode #2: block 3: comm syz.1.280: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=3988, size=4084 fake=0 [ 48.467636][ T30] audit: type=1400 audit(1726499522.097:354): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.487707][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.511006][ T30] audit: type=1400 audit(1726499522.117:355): avc: denied { remove_name } for pid=289 comm="syz-executor" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.534025][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.552273][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 48.559061][ T1054] loop3: detected capacity change from 0 to 4096 [ 48.566398][ T30] audit: type=1400 audit(1726499522.167:356): avc: denied { unlink } for pid=289 comm="syz-executor" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.588775][ T289] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 48.601267][ T289] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 48.610424][ T289] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 48.632291][ T289] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 48.641391][ T289] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 48.653686][ T289] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop1 ino=15 [ 48.663932][ T1054] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 48.674616][ T30] audit: type=1400 audit(1726499522.307:357): avc: denied { unlink } for pid=289 comm="syz-executor" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.702757][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.719687][ T1054] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable=0x0000000000000005,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 48.737781][ T289] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor: corrupted xattr block 19 [ 48.766337][ T289] EXT4-fs warning (device loop1): ext4_evict_inode:303: xattr delete (err -74) [ 48.791800][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.812374][ T289] EXT4-fs error (device loop1): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum [ 48.847574][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.863093][ T30] audit: type=1400 audit(1726499522.477:358): avc: denied { rmdir } for pid=289 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.885475][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum [ 48.898432][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.913996][ T289] EXT4-fs error (device loop1): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum [ 48.922533][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.942390][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 48.958649][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.966110][ T289] EXT4-fs error (device loop1): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum [ 48.969879][ T39] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 48.990815][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.990927][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 49.014466][ T39] usb 3-1: config 0 descriptor?? [ 49.034995][ T30] audit: type=1400 audit(1726499522.667:359): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 49.036196][ T289] EXT4-fs error (device loop1): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum [ 49.075899][ T289] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 49.246083][ T30] audit: type=1326 audit(1726499522.877:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1074 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88c50f8ef9 code=0x7ffc0000 [ 49.295825][ T30] audit: type=1326 audit(1726499522.877:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1074 comm="syz.4.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f88c50f8ef9 code=0x7ffc0000 [ 49.472140][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.495676][ T39] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 49.511527][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.527935][ T1081] device bridge_slave_0 entered promiscuous mode [ 49.545239][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.560960][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.577084][ T1081] device bridge_slave_1 entered promiscuous mode [ 49.714999][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.721876][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.728977][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.735754][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.793392][ T8] device bridge_slave_1 left promiscuous mode [ 49.800508][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.816400][ T8] device bridge_slave_0 left promiscuous mode [ 49.829007][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.845866][ T8] device veth1_macvtap left promiscuous mode [ 49.858512][ T8] device veth0_vlan left promiscuous mode [ 50.032805][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.042638][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.059684][ T382] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.084845][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.096361][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.103255][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.122084][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.130804][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.162539][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.175782][ T1081] device veth0_vlan entered promiscuous mode [ 50.184022][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.191803][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.209874][ T1081] device veth1_macvtap entered promiscuous mode [ 50.217503][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.226247][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.233595][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.246823][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.255182][ T382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.292226][ T626] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 50.293437][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.310082][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.319133][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.327540][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.353899][ T1102] process 'syz.4.309' launched './file0' with NULL argv: empty string added [ 50.401845][ T1112] loop4: detected capacity change from 0 to 512 [ 50.435812][ T1112] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 50.446904][ T1112] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff) [ 50.467988][ T1112] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #19: comm syz.4.314: corrupted inode contents [ 50.480033][ T1112] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #19: comm syz.4.314: mark_inode_dirty error [ 50.491844][ T1112] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #19: comm syz.4.314: corrupted inode contents [ 50.504040][ T1112] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2954: inode #19: comm syz.4.314: mark_inode_dirty error [ 50.516147][ T1112] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2957: inode #19: comm syz.4.314: mark inode dirty (error -117) [ 50.528724][ T1112] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 50.532215][ T626] usb 1-1: Using ep0 maxpacket: 32 [ 50.582623][ T39] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 50.589850][ T39] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 50.602935][ T39] pyra: probe of 0003:1E7D:2CF6.001E failed with error -71 [ 50.622515][ T39] usb 3-1: USB disconnect, device number 10 [ 50.672298][ T626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 50.692208][ T626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 50.712229][ T626] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 50.721188][ T626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.743006][ T626] usb 1-1: config 0 descriptor?? [ 50.762271][ T1090] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 50.782816][ T626] hub 1-1:0.0: USB hub found [ 50.867668][ T1127] loop4: detected capacity change from 0 to 128 [ 50.967114][ T1127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 50.980514][ T1127] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 51.022252][ T626] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 51.312286][ T626] usbhid 1-1:0.0: can't add hid device: -71 [ 51.318106][ T626] usbhid: probe of 1-1:0.0 failed with error -71 [ 51.362590][ T626] usb 1-1: USB disconnect, device number 10 [ 51.408947][ T1147] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 51.794098][ T6] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 51.939666][ T1177] loop0: detected capacity change from 0 to 512 [ 51.967840][ T1182] loop2: detected capacity change from 0 to 512 [ 51.994065][ T1177] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.005082][ T1177] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038 (0x7fffffff) [ 52.018749][ T1182] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.033361][ T1182] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 52.042716][ T1182] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 52.051653][ T1182] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 52.059885][ T1182] System zones: 0-2, 18-18, 34-34 [ 52.065787][ T1182] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.080451][ T1182] EXT4-fs (loop2): 1 truncate cleaned up [ 52.086018][ T1182] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 52.117196][ T1187] loop0: detected capacity change from 0 to 512 [ 52.168694][ T1187] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #16: comm syz.0.343: corrupted inode contents [ 52.180720][ T1187] EXT4-fs error (device loop0): ext4_dirty_inode:6024: inode #16: comm syz.0.343: mark_inode_dirty error [ 52.196283][ T1187] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #16: comm syz.0.343: corrupted inode contents [ 52.208386][ T1187] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.343: mark_inode_dirty error [ 52.219648][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 52.220295][ T1187] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #16: comm syz.0.343: corrupted inode contents [ 52.230862][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 52.242814][ T1187] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 52.261598][ T1187] EXT4-fs error (device loop0): ext4_do_update_inode:5191: inode #16: comm syz.0.343: corrupted inode contents [ 52.273526][ T1187] EXT4-fs error (device loop0): ext4_truncate:4292: inode #16: comm syz.0.343: mark_inode_dirty error [ 52.284630][ T1187] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 52.293950][ T1187] EXT4-fs (loop0): 1 truncate cleaned up [ 52.299456][ T1187] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 52.310293][ T1187] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038 (0x7fffffff) [ 52.342343][ T1187] EXT4-fs error (device loop0): ext4_find_dest_de:2112: inode #2: block 3: comm syz.0.343: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=3988, size=4084 fake=0 [ 52.368420][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.384268][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.399669][ T290] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 52.411744][ T290] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 52.420738][ T290] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 52.433042][ T290] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 52.433254][ T6] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 52.441956][ T290] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #15: comm syz-executor: corrupted xattr block 19 [ 52.450758][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.463152][ T290] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop0 ino=15 [ 52.470198][ T6] usb 5-1: Product: syz [ 52.479704][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_set:426: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.482906][ T6] usb 5-1: Manufacturer: syz [ 52.498599][ T290] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #15: comm syz-executor: corrupted xattr block 19 [ 52.502860][ T6] usb 5-1: SerialNumber: syz [ 52.515623][ T290] EXT4-fs warning (device loop0): ext4_evict_inode:303: xattr delete (err -74) [ 52.520016][ T6] usb 5-1: config 0 descriptor?? [ 52.532664][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.548165][ T290] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum [ 52.552300][ T1151] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 52.561475][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.583349][ T290] EXT4-fs error (device loop0): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum [ 52.595873][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.611401][ T290] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum [ 52.624597][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.640209][ T290] EXT4-fs error (device loop0): ext4_empty_dir:3093: inode #12: comm syz-executor: Directory block failed checksum [ 52.652571][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.668060][ T290] EXT4-fs error (device loop0): htree_dirblock_to_tree:1082: inode #12: comm syz-executor: Directory block failed checksum [ 52.681173][ T290] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #12: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 52.806164][ T6] usb 5-1: USB disconnect, device number 8 [ 52.819365][ T403] udevd[403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.912254][ T311] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 52.936144][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.943054][ T1200] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.950254][ T1200] device bridge_slave_0 entered promiscuous mode [ 52.957318][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.964510][ T1200] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.971745][ T1200] device bridge_slave_1 entered promiscuous mode [ 53.025395][ T1200] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.032285][ T1200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.039348][ T1200] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.046167][ T1200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.067444][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.075267][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.082855][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.093867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.102088][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.108957][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.124030][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.132083][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.138963][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.146629][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.154816][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.172872][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.183685][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.191785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.199532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.210042][ T1200] device veth0_vlan entered promiscuous mode [ 53.221608][ T1200] device veth1_macvtap entered promiscuous mode [ 53.228630][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.242998][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.251232][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.291990][ T1208] loop0: detected capacity change from 0 to 16 [ 53.298166][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.312150][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.314630][ T1208] erofs: (device loop0): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 53.321989][ T311] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 53.343932][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.354978][ T311] usb 2-1: config 0 descriptor?? [ 53.372811][ T10] device bridge_slave_1 left promiscuous mode [ 53.378786][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.410671][ T10] device bridge_slave_0 left promiscuous mode [ 53.423992][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.431098][ T1218] loop0: detected capacity change from 0 to 128 [ 53.439877][ T10] device veth1_macvtap left promiscuous mode [ 53.447574][ T10] device veth0_vlan left promiscuous mode [ 53.509420][ T1220] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 53.517532][ T1220] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 53.548346][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 53.548360][ T30] audit: type=1400 audit(1726499527.177:403): avc: denied { create } for pid=1222 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.580684][ T30] audit: type=1400 audit(1726499527.177:404): avc: denied { connect } for pid=1222 comm="syz.4.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.600604][ T30] audit: type=1400 audit(1726499527.177:405): avc: denied { write } for pid=1222 comm="syz.4.356" path="socket:[19698]" dev="sockfs" ino=19698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.652756][ T30] audit: type=1400 audit(1726499527.287:406): avc: denied { wake_alarm } for pid=1228 comm="syz.4.360" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.682298][ T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 53.725913][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 53.832499][ T311] hid (null): bogus close delimiter [ 54.052398][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.063258][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.072862][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 54.081660][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.090152][ T39] usb 4-1: config 0 descriptor?? [ 54.102616][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.113449][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.122978][ T26] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 54.131804][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.141241][ T26] usb 1-1: config 0 descriptor?? [ 54.332422][ T311] uclogic 0003:256C:006D.001F: failed retrieving Huion firmware version: -71 [ 54.341245][ T311] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 54.348654][ T311] uclogic: probe of 0003:256C:006D.001F failed with error -71 [ 54.357069][ T311] usb 2-1: USB disconnect, device number 9 [ 54.582693][ T39] hid (null): global environment stack underflow [ 54.590488][ T39] logitech-djreceiver 0003:046D:C71B.0020: global environment stack underflow [ 54.599607][ T39] logitech-djreceiver 0003:046D:C71B.0020: item 0 2 1 11 parsing failed [ 54.607994][ T39] logitech-djreceiver 0003:046D:C71B.0020: logi_dj_probe: parse failed [ 54.616146][ T39] logitech-djreceiver: probe of 0003:046D:C71B.0020 failed with error -22 [ 54.702299][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 54.708220][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 54.715587][ T26] usb 1-1: USB disconnect, device number 11 [ 54.785673][ T39] usb 4-1: USB disconnect, device number 11 [ 55.176864][ T30] audit: type=1400 audit(1726499528.807:407): avc: denied { bind } for pid=1239 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.245251][ T1244] loop0: detected capacity change from 0 to 4096 [ 55.259847][ T1250] loop2: detected capacity change from 0 to 16 [ 55.268987][ T30] audit: type=1326 audit(1726499528.907:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a01e5ef9 code=0x7ffc0000 [ 55.292310][ T30] audit: type=1326 audit(1726499528.907:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a01e5ef9 code=0x7ffc0000 [ 55.293009][ T1252] loop1: detected capacity change from 0 to 128 [ 55.326326][ T30] audit: type=1326 audit(1726499528.907:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa5a01e5ef9 code=0x7ffc0000 [ 55.326731][ T1250] erofs: (device loop2): mounted with root inode @ nid 36. [ 55.349644][ T1244] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 55.373750][ T30] audit: type=1326 audit(1726499528.907:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa5a01e5f33 code=0x7ffc0000 [ 55.405630][ T1250] overlayfs: failed to set xattr on upper [ 55.413156][ T30] audit: type=1326 audit(1726499528.907:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1251 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5a01e49df code=0x7ffc0000 [ 55.443645][ T1244] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable=0x0000000000000005,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 55.506180][ T1260] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 55.532416][ T26] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 55.604446][ T1266] netlink: 277 bytes leftover after parsing attributes in process `syz.3.377'. [ 55.705093][ T1262] loop2: detected capacity change from 0 to 40427 [ 55.758576][ T1262] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 55.767461][ T1262] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 55.784714][ T1262] F2FS-fs (loop2): invalid crc value [ 55.796768][ T1262] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.832290][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 55.838695][ T1279] loop3: detected capacity change from 0 to 256 [ 55.840332][ T1262] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 55.853228][ T1262] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.881291][ T1262] attempt to access beyond end of device [ 55.881291][ T1262] loop2: rw=2049, want=45112, limit=40427 [ 55.901081][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 55.912440][ T10] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 55.945251][ T1279] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.962241][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.972659][ T26] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.012295][ T26] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.022247][ T26] usb 5-1: config 0 interface 0 has no altsetting 0 [ 56.028716][ T26] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 56.042328][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.057991][ T26] usb 5-1: config 0 descriptor?? [ 56.072223][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 56.190056][ T1295] IPv6: NLM_F_CREATE should be specified when creating new route [ 56.198619][ T1295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 56.205721][ T1295] IPv6: NLM_F_CREATE should be set when creating new route [ 56.207185][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 56.212723][ T1295] IPv6: NLM_F_CREATE should be set when creating new route [ 56.231258][ T39] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 56.261215][ T1302] loop0: detected capacity change from 0 to 1024 [ 56.263694][ T1299] loop2: detected capacity change from 0 to 4096 [ 56.272204][ T39] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 56.283073][ T39] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 56.292893][ T39] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 56.302703][ T39] usb 2-1: config 1 interface 0 has no altsetting 0 [ 56.310419][ T39] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 56.319780][ T1299] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 56.326945][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.339579][ T1299] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable=0x0000000000000005,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 56.358959][ T1302] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 56.382795][ T39] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 56.441212][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.452061][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.463407][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.474034][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.484718][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.496895][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.507735][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.547202][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.560455][ T1314] loop3: detected capacity change from 0 to 512 [ 56.583218][ T26] zeroplus 0003:0C12:0005.0021: item fetching failed at offset 1/5 [ 56.591273][ T26] zeroplus 0003:0C12:0005.0021: parse failed [ 56.600173][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.611252][ T26] zeroplus: probe of 0003:0C12:0005.0021 failed with error -22 [ 56.619124][ T1200] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size [ 56.635240][ T39] scsi host1: usb-storage 2-1:1.0 [ 56.650273][ T1314] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.395: casefold flag without casefold feature [ 56.663111][ T1314] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.395: missing EA_INODE flag [ 56.674728][ T1314] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.395: error while reading EA inode 12 err=-117 [ 56.687098][ T1314] EXT4-fs (loop3): 1 orphan inode deleted [ 56.693152][ T1314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.816503][ T491] usb 5-1: USB disconnect, device number 9 [ 56.848273][ T311] usb 2-1: USB disconnect, device number 10 [ 56.947442][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.987271][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.994395][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.001753][ T1322] device bridge_slave_0 entered promiscuous mode [ 57.011516][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.018862][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.026401][ T1322] device bridge_slave_1 entered promiscuous mode [ 57.102254][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.109151][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.116273][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.123119][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.156547][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.169920][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.177466][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.191770][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.199941][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.206821][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.214422][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.222647][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.229494][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.248365][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.261287][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.276756][ T1335] loop3: detected capacity change from 0 to 128 [ 57.282958][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.296451][ T1322] device veth0_vlan entered promiscuous mode [ 57.303170][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.319451][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.326763][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.337009][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.346847][ T1322] device veth1_macvtap entered promiscuous mode [ 57.355412][ T8] device bridge_slave_1 left promiscuous mode [ 57.371583][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.387130][ T8] device bridge_slave_0 left promiscuous mode [ 57.410588][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.473035][ T8] device veth1_macvtap left promiscuous mode [ 57.479048][ T8] device veth0_vlan left promiscuous mode [ 58.982961][ T26] Bluetooth: hci0: command 0x1003 tx timeout [ 58.992530][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 59.081778][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.090805][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.108715][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.117817][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.151272][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 59.151291][ T30] audit: type=1107 audit(1726499532.777:472): pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 59.179145][ T1360] loop1: detected capacity change from 0 to 512 [ 59.233817][ T1360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.244880][ T1360] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 59.257484][ T1360] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 3: comm syz.1.412: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 59.280446][ T30] audit: type=1400 audit(1726499532.917:473): avc: denied { mount } for pid=1358 comm="syz.1.412" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 59.296539][ T1081] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 59.350185][ T1372] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 59.358915][ T1372] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 59.367256][ T1081] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 59.389949][ T1081] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 59.412752][ T1081] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.440135][ T1377] tipc: Started in network mode [ 59.450396][ T1377] tipc: Node identity 2, cluster identity 4711 [ 59.456787][ T1377] tipc: Node number set to 2 [ 59.461767][ T1081] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 59.483758][ T1081] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 59.509965][ T1081] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /15/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 59.530638][ T1081] EXT4-fs error (device loop1): ext4_map_blocks:602: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 59.546732][ T30] audit: type=1400 audit(1726499533.187:474): avc: denied { rmdir } for pid=1081 comm="syz-executor" name="file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.569343][ T1081] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 3: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=16444, inode=113, rec_len=0, size=2048 fake=0 [ 59.638562][ T30] audit: type=1107 audit(1726499533.267:475): pid=1387 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 59.666405][ T1391] loop0: detected capacity change from 0 to 512 [ 59.781576][ T1397] loop4: detected capacity change from 0 to 16 [ 59.812368][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.818147][ T1397] erofs: (device loop4): erofs_read_inode: unsupported chunk format 7fff of nid 36 [ 59.828617][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.838111][ T1394] device bridge_slave_0 entered promiscuous mode [ 59.847262][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.854183][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.861343][ T1394] device bridge_slave_1 entered promiscuous mode [ 59.913410][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.920300][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.927431][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.934398][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.979497][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.988533][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.996005][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.014662][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.022916][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.029768][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.037374][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.045972][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.052832][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.081046][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.089414][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.097845][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.111667][ T1412] loop4: detected capacity change from 0 to 512 [ 60.118483][ T1394] device veth0_vlan entered promiscuous mode [ 60.129514][ T30] audit: type=1400 audit(1726499533.767:476): avc: denied { create } for pid=1409 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.158975][ T30] audit: type=1400 audit(1726499533.787:477): avc: denied { connect } for pid=1409 comm="syz.0.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 60.162271][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.191347][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.210962][ T1419] loop0: detected capacity change from 0 to 256 [ 60.217353][ T1412] EXT4-fs (loop4): Ignoring removed orlov option [ 60.225268][ T1412] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.239136][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.250225][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.252255][ T1412] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 60.258553][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.276529][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.285825][ T1412] EXT4-fs (loop4): 1 orphan inode deleted [ 60.292421][ T1412] EXT4-fs (loop4): 1 truncate cleaned up [ 60.297961][ T1412] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x0000000000000008,orlov,dioread_nolock,,errors=continue. Quota mode: none. [ 60.320339][ T1394] device veth1_macvtap entered promiscuous mode [ 60.331781][ T1419] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 60.346649][ T1412] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.369681][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.379836][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.388390][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.396624][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.404825][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.414105][ T327] device bridge_slave_1 left promiscuous mode [ 60.420510][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.428193][ T327] device bridge_slave_0 left promiscuous mode [ 60.434735][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.446508][ T327] device veth1_macvtap left promiscuous mode [ 60.453294][ T327] device veth0_vlan left promiscuous mode [ 60.538522][ T1429] loop0: detected capacity change from 0 to 256 [ 60.603288][ T30] audit: type=1400 audit(1726499534.237:478): avc: denied { mounton } for pid=1428 comm="syz.0.436" path="/10/file0/file0" dev="loop0" ino=1048607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 60.637863][ T1322] FAT-fs (loop0): error, invalid access to FAT (entry 0x000004ff) [ 60.647245][ T1322] FAT-fs (loop0): Filesystem has been set read-only [ 60.684175][ T1442] tipc: Started in network mode [ 60.694925][ T1442] tipc: Node identity 2, cluster identity 4711 [ 60.701076][ T1442] tipc: Node number set to 2 [ 60.720246][ T1448] loop4: detected capacity change from 0 to 512 [ 60.804283][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.804326][ T1448] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.811299][ T1450] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.830187][ T1448] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038 (0x7fffffff) [ 60.830654][ T1450] device bridge_slave_0 entered promiscuous mode [ 60.852580][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.859517][ T1450] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.862885][ T1448] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.447: corrupted inode contents [ 60.867389][ T1450] device bridge_slave_1 entered promiscuous mode [ 60.878987][ T1448] EXT4-fs error (device loop4): ext4_dirty_inode:6024: inode #2: comm syz.4.447: mark_inode_dirty error [ 60.895628][ T1448] EXT4-fs error (device loop4): ext4_do_update_inode:5191: inode #2: comm syz.4.447: corrupted inode contents [ 60.907619][ T1448] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.447: mark_inode_dirty error [ 60.927114][ T1448] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 60.952269][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 60.959813][ T322] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 60.994959][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.001949][ T1450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.009088][ T1450] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.015951][ T1450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.036523][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.044138][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.051552][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.061542][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.069705][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.076580][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.076611][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 61.089498][ T1327] Bluetooth: hci0: sending frame failed (-49) [ 61.092588][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.103999][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.111946][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.118834][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.137123][ T1450] device veth0_vlan entered promiscuous mode [ 61.144314][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.152554][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.160360][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.168299][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.176222][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.184456][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.192642][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.200338][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.208563][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.215944][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.228887][ T1450] device veth1_macvtap entered promiscuous mode [ 61.236526][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.244669][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.253263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.263997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.272136][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.283868][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.292211][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.320599][ T30] audit: type=1400 audit(1726499534.947:479): avc: denied { validate_trans } for pid=1458 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.364115][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.374945][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.386387][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.396012][ T322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.405555][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.418474][ T322] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 61.427827][ T322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.437239][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.450089][ T322] usb 4-1: config 0 descriptor?? [ 61.455000][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.467527][ T26] usb 2-1: config 0 descriptor?? [ 61.772252][ T311] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 61.783041][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 61.924167][ T322] hid-steam 0003:28DE:1142.0022: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 61.963261][ T26] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 61.970742][ T26] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 61.979691][ T26] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.125593][ T26] usb 4-1: USB disconnect, device number 12 [ 62.142307][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.153171][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.163865][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.173829][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.183565][ T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 62.192525][ T311] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 62.201398][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.209242][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.218073][ T327] tipc: Left network mode [ 62.218169][ T311] usb 5-1: config 0 descriptor?? [ 62.228314][ T60] usb 1-1: config 0 descriptor?? [ 62.663480][ T327] device bridge_slave_1 left promiscuous mode [ 62.669549][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.676968][ T327] device bridge_slave_0 left promiscuous mode [ 62.683152][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.691430][ T327] device veth1_macvtap left promiscuous mode [ 62.697442][ T327] device veth0_vlan left promiscuous mode [ 62.703845][ T311] hid-steam 0003:28DE:1142.0024: item fetching failed at offset 4/5 [ 62.711970][ T311] hid-steam 0003:28DE:1142.0024: steam_probe:parse of hid interface failed [ 62.721808][ T60] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 62.729282][ T60] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 62.736236][ T311] hid-steam: probe of 0003:28DE:1142.0024 failed with error -22 [ 62.744636][ T60] arvo 0003:1E7D:30D4.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 62.905052][ T6] usb 5-1: USB disconnect, device number 10 [ 63.072260][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 63.133734][ T6] usb 1-1: USB disconnect, device number 12 [ 63.142489][ T322] Bluetooth: hci0: command 0x1009 tx timeout [ 63.192443][ T1445] usb 2-1: string descriptor 0 read error: -2 [ 63.312349][ T311] usb 4-1: Using ep0 maxpacket: 8 [ 63.432371][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.443995][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.453818][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 63.466745][ T311] usb 4-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 63.475748][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.483603][ T30] audit: type=1400 audit(1726499537.107:480): avc: denied { bind } for pid=1484 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.507144][ T311] usb 4-1: config 0 descriptor?? [ 63.722438][ T1491] loop1: detected capacity change from 0 to 512 [ 63.817411][ T1491] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 63.828402][ T1491] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 63.966249][ T30] audit: type=1400 audit(1726499537.597:481): avc: denied { create } for pid=1502 comm="syz.0.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 63.986848][ T311] ntrig 0003:1B96:0010.0026: item fetching failed at offset 5/7 [ 64.000081][ T311] ntrig 0003:1B96:0010.0026: parse failed [ 64.014202][ T60] usb 2-1: USB disconnect, device number 11 [ 64.029048][ T311] ntrig: probe of 0003:1B96:0010.0026 failed with error -22 [ 64.188852][ T322] usb 4-1: USB disconnect, device number 13 [ 64.502253][ T60] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 64.592232][ T311] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 64.707720][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 64.707737][ T30] audit: type=1326 audit(1726499538.337:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.736991][ T30] audit: type=1326 audit(1726499538.337:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.742317][ T60] usb 2-1: Using ep0 maxpacket: 32 [ 64.760939][ T30] audit: type=1326 audit(1726499538.337:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.788678][ T30] audit: type=1326 audit(1726499538.337:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.812009][ T30] audit: type=1326 audit(1726499538.337:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.835422][ T311] usb 5-1: Using ep0 maxpacket: 16 [ 64.840776][ T30] audit: type=1326 audit(1726499538.337:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.864497][ T30] audit: type=1326 audit(1726499538.337:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.887995][ T30] audit: type=1326 audit(1726499538.337:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.911715][ T30] audit: type=1326 audit(1726499538.337:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.935173][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 64.946659][ T30] audit: type=1326 audit(1726499538.337:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1516 comm="syz.3.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a3fbfeef9 code=0x7ffc0000 [ 64.974633][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 64.985850][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.997170][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.007125][ T60] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 65.016214][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.029371][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.037479][ T311] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 65.047323][ T60] usb 2-1: config 0 descriptor?? [ 65.052511][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.064371][ T311] usb 5-1: config 0 descriptor?? [ 65.072388][ T1509] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 65.092754][ T60] hub 2-1:0.0: USB hub found [ 65.123745][ T1529] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 65.134921][ T1529] EXT4-fs (loop0): unable to read superblock [ 65.156907][ T1533] loop0: detected capacity change from 0 to 512 [ 65.201371][ T1533] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 65.209310][ T1533] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.224821][ T1533] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 65.239470][ T1533] EXT4-fs (loop0): Remounting filesystem read-only [ 65.246208][ T1533] EXT4-fs error (device loop0): ext4_acquire_dquot:6187: comm syz.0.479: Failed to acquire dquot type 0 [ 65.257918][ T1533] EXT4-fs (loop0): 1 orphan inode deleted [ 65.264011][ T1533] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,mblk_io_submit,barrier=0x0000000000000003,errors=remount-ro,init_itable,noauto_da_alloc,resgid=0x000000000000ee01,resgid=0x000000000000ee002. Quota mode: writeback. [ 65.292808][ T1533] EXT4-fs error (device loop0): ext4_remount:5845: comm syz.0.479: Abort forced by user [ 65.312336][ T60] hub 2-1:0.0: 2 ports detected [ 65.317541][ T1533] EXT4-fs (loop0): Remounting filesystem read-only [ 65.354308][ T1547] loop3: detected capacity change from 0 to 16 [ 65.424267][ T1547] erofs: (device loop3): mounted with root inode @ nid 36. [ 65.494341][ T1561] input: syz1 as /devices/virtual/input/input10 [ 65.543342][ T311] koneplus 0003:1E7D:2E22.0027: item fetching failed at offset 0/2 [ 65.551266][ T311] koneplus 0003:1E7D:2E22.0027: parse failed [ 65.558217][ T311] koneplus: probe of 0003:1E7D:2E22.0027 failed with error -22 [ 65.639284][ T1569] SELinux: failed to load policy [ 65.750530][ T39] usb 5-1: USB disconnect, device number 11 [ 65.812295][ T60] hub 2-1:0.0: set hub depth failed [ 65.820265][ T1581] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.827969][ T1581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.835001][ T1581] IPv6: NLM_F_CREATE should be set when creating new route [ 65.842061][ T1581] IPv6: NLM_F_CREATE should be set when creating new route [ 65.854153][ T60] usb 2-1: USB disconnect, device number 12 [ 65.863705][ T1583] SELinux: Context system_u:object_r:mail_spool_t:s0 is not valid (left unmapped). [ 65.917867][ T1588] loop0: detected capacity change from 0 to 512 [ 66.004162][ T1588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.015169][ T1588] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 66.295304][ T1605] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.444081][ T1625] loop1: detected capacity change from 0 to 4096 [ 66.463386][ T1625] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 66.489727][ T1625] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable=0x0000000000000005,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 66.654562][ T1646] loop4: detected capacity change from 0 to 512 [ 66.722840][ T1646] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 66.730993][ T1646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 66.738849][ T1646] System zones: 1-12 [ 66.755932][ T1646] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz.4.526: corrupted in-inode xattr [ 66.768418][ T1646] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.526: couldn't read orphan inode 15 (err -117) [ 66.780409][ T1646] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 66.832242][ T60] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 66.886121][ T1659] input: syz0 as /devices/virtual/input/input11 [ 67.018372][ T1667] loop4: detected capacity change from 0 to 4096 [ 67.047281][ T1667] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 67.072214][ T60] usb 4-1: Using ep0 maxpacket: 32 [ 67.124327][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.131521][ T1670] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.141921][ T1670] device bridge_slave_0 entered promiscuous mode [ 67.155306][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.163804][ T1670] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.171120][ T1670] device bridge_slave_1 entered promiscuous mode [ 67.182072][ T1682] loop1: detected capacity change from 0 to 512 [ 67.192376][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 67.204768][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 67.219009][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 67.228019][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.236572][ T60] usb 4-1: config 0 descriptor?? [ 67.252390][ T1643] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.260121][ T1682] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 67.268548][ T1682] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.279430][ T60] hub 4-1:0.0: USB hub found [ 67.283953][ T311] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 67.307960][ T1682] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 67.322855][ T1682] EXT4-fs (loop1): Remounting filesystem read-only [ 67.329352][ T1682] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.541: Failed to acquire dquot type 0 [ 67.340804][ T1682] EXT4-fs (loop1): 1 orphan inode deleted [ 67.346548][ T1682] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,mblk_io_submit,barrier=0x0000000000000003,errors=remount-ro,init_itable,noauto_da_alloc,resgid=0x000000000000ee01,resgid=0x000000000000ee002. Quota mode: writeback. [ 67.375662][ T1682] EXT4-fs error (device loop1): ext4_remount:5845: comm syz.1.541: Abort forced by user [ 67.385496][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.388210][ T1682] EXT4-fs (loop1): Remounting filesystem read-only [ 67.392376][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.392478][ T1670] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.412599][ T1670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.447772][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.455333][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.471709][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.482405][ T60] hub 4-1:0.0: 2 ports detected [ 67.493386][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.501382][ T626] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.508264][ T626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.515434][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.522336][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 67.525235][ T626] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.535426][ T626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.535682][ T1689] loop1: detected capacity change from 0 to 512 [ 67.542881][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.556617][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.577202][ T1670] device veth0_vlan entered promiscuous mode [ 67.584775][ T1689] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 67.586747][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.593374][ T1689] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b816c118, mo2=0002] [ 67.600589][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.607902][ T1689] System zones: 1-12 [ 67.615917][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.619295][ T1689] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2213: inode #15: comm syz.1.542: corrupted in-inode xattr [ 67.626386][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.637861][ T1689] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.542: couldn't read orphan inode 15 (err -117) [ 67.655935][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.656147][ T1689] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 67.674592][ T1670] device veth1_macvtap entered promiscuous mode [ 67.694127][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.703663][ T311] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 67.719970][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.733061][ T311] usb 1-1: config 0 descriptor?? [ 67.738176][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.746577][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.755931][ T491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.791283][ T1694] loop2: detected capacity change from 0 to 16 [ 67.853068][ T1694] erofs: (device loop2): mounted with root inode @ nid 36. [ 67.864737][ T49] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000] [ 67.889991][ T1694] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192] [ 68.072276][ T60] hub 4-1:0.0: set hub depth failed [ 68.102303][ T626] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 68.113702][ T60] usb 4-1: USB disconnect, device number 14 [ 68.213195][ T311] greenasia 0003:0E8F:0012.0028: item fetching failed at offset 0/3 [ 68.221592][ T311] greenasia 0003:0E8F:0012.0028: parse failed [ 68.227683][ T311] greenasia: probe of 0003:0E8F:0012.0028 failed with error -22 [ 68.262814][ T327] device bridge_slave_1 left promiscuous mode [ 68.268913][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.276384][ T327] device bridge_slave_0 left promiscuous mode [ 68.282462][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.290458][ T327] device veth1_macvtap left promiscuous mode [ 68.296340][ T327] device veth0_vlan left promiscuous mode [ 68.362240][ T626] usb 2-1: Using ep0 maxpacket: 8 [ 68.415868][ T311] usb 1-1: USB disconnect, device number 13 [ 68.482363][ T626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.493130][ T626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.502782][ T626] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 68.515537][ T626] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 68.524417][ T626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.533202][ T626] usb 2-1: config 0 descriptor?? [ 68.630963][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 68.664729][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 68.713370][ T1714] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 68.724565][ T1714] EXT4-fs (loop2): unable to read superblock [ 68.744326][ T1716] loop2: detected capacity change from 0 to 512 [ 68.775073][ T1716] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 68.794174][ T1716] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,usrjquota=,,errors=continue. Quota mode: writeback. [ 68.811728][ T1716] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 68.872022][ T1721] Illegal XDP return value 408687552, expect packet loss! [ 68.983987][ T1732] loop0: detected capacity change from 0 to 128 [ 68.993062][ T626] ntrig 0003:1B96:0010.0029: item fetching failed at offset 5/7 [ 69.000721][ T626] ntrig 0003:1B96:0010.0029: parse failed [ 69.006785][ T626] ntrig: probe of 0003:1B96:0010.0029 failed with error -22 [ 69.073414][ T1732] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 69.089054][ T1732] attempt to access beyond end of device [ 69.089054][ T1732] loop0: rw=3, want=6952, limit=128 [ 69.099856][ T1732] attempt to access beyond end of device [ 69.099856][ T1732] loop0: rw=2051, want=7894, limit=128 [ 69.119384][ T1738] loop2: detected capacity change from 0 to 256 [ 69.150752][ T1740] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=1740 comm=syz.0.563 [ 69.196574][ T491] usb 2-1: USB disconnect, device number 13 [ 69.197137][ T1746] loop2: detected capacity change from 0 to 256 [ 69.242309][ T1746] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 69.361689][ T1760] loop0: detected capacity change from 0 to 1024 [ 69.375262][ T1760] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 69.471308][ T1768] loop0: detected capacity change from 0 to 512 [ 69.514250][ T1768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 69.525236][ T1768] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038 (0x7fffffff) [ 69.551491][ T1768] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 69.565931][ T1768] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 69.578235][ T1768] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.578235][ T1768] [ 69.587802][ T1768] EXT4-fs (loop0): Total free blocks count 0 [ 69.593644][ T1768] EXT4-fs (loop0): Free/Dirty block details [ 69.599367][ T1768] EXT4-fs (loop0): free_blocks=65280 [ 69.604613][ T1768] EXT4-fs (loop0): dirty_blocks=2 [ 69.609482][ T1768] EXT4-fs (loop0): Block reservation details [ 69.615325][ T1768] EXT4-fs (loop0): i_reserved_data_blocks=11 [ 69.621380][ T1780] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 11 with error 28 [ 69.633626][ T1780] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.633626][ T1780] [ 69.722241][ T30] kauditd_printk_skb: 133 callbacks suppressed [ 69.722257][ T30] audit: type=1404 audit(1726499543.347:628): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 69.744456][ T1790] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 69.756001][ T1790] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 69.764239][ T1790] CPU: 1 PID: 1790 Comm: syz.1.584 Not tainted 5.15.161-syzkaller-00425-gb92c0d35d015 #0 [ 69.773876][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 69.783771][ T1790] RIP: 0010:bpf_check+0x9514/0x12bf0 [ 69.788906][ T1790] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 56 b8 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 2e b8 30 00 48 8b 1b 48 85 db 0f 84 [ 69.808339][ T1790] RSP: 0018:ffffc90000a174e0 EFLAGS: 00010246 [ 69.814235][ T1790] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 69.822217][ T1790] RDX: ffff88811bb33b40 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 69.830034][ T1790] RBP: ffffc90000a17bb0 R08: ffffffff817c2a7a R09: ffffed103ee265e7 [ 69.837842][ T1790] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000029a12 [ 69.845649][ T1790] R13: ffff888125940008 R14: ffffffff817be3a0 R15: ffffc9000014d094 [ 69.853464][ T1790] FS: 00007f2ca61eb6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 69.862317][ T1790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.868736][ T1790] CR2: 00007f2ca61eaf98 CR3: 000000010e150000 CR4: 00000000003506a0 [ 69.876552][ T1790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.884366][ T1790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.892176][ T1790] Call Trace: [ 69.895310][ T1790] [ 69.898092][ T1790] ? __die_body+0x62/0xb0 [ 69.902238][ T1790] ? die_addr+0x9f/0xd0 [ 69.906232][ T1790] ? exc_general_protection+0x311/0x4b0 [ 69.911617][ T1790] ? asm_exc_general_protection+0x27/0x30 [ 69.917166][ T1790] ? tracing_prog_func_proto+0x300/0x300 [ 69.922636][ T1790] ? bpf_tracing_func_proto+0x25a/0x4a0 [ 69.928021][ T1790] ? bpf_check+0x9514/0x12bf0 [ 69.932544][ T1790] ? bpf_get_btf_vmlinux+0x60/0x60 [ 69.937477][ T1790] ? arch_stack_walk+0xf3/0x140 [ 69.942166][ T1790] ? stack_trace_save+0x113/0x1c0 [ 69.947027][ T1790] ? stack_trace_snprint+0xf0/0xf0 [ 69.951974][ T1790] ? ____kasan_kmalloc+0xed/0x110 [ 69.956836][ T1790] ? ____kasan_kmalloc+0xdb/0x110 [ 69.961692][ T1790] ? __kasan_kmalloc+0x9/0x10 [ 69.966209][ T1790] ? kmem_cache_alloc_trace+0x115/0x210 [ 69.971585][ T1790] ? selinux_bpf_prog_alloc+0x51/0x140 [ 69.976881][ T1790] ? security_bpf_prog_alloc+0x62/0x90 [ 69.982176][ T1790] ? bpf_prog_load+0x9ee/0x1b50 [ 69.986860][ T1790] ? __sys_bpf+0x4bc/0x760 [ 69.991114][ T1790] ? __x64_sys_bpf+0x7c/0x90 [ 69.995541][ T1790] ? x64_sys_call+0x87f/0x9a0 [ 70.000057][ T1790] ? do_syscall_64+0x3b/0xb0 [ 70.004480][ T1790] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.010393][ T1790] ? __kasan_kmalloc+0x9/0x10 [ 70.014896][ T1790] ? memset+0x35/0x40 [ 70.018715][ T1790] ? bpf_obj_name_cpy+0x196/0x1e0 [ 70.023585][ T1790] bpf_prog_load+0x12ac/0x1b50 [ 70.028178][ T1790] ? map_freeze+0x370/0x370 [ 70.032519][ T1790] ? selinux_bpf+0xcb/0x100 [ 70.036856][ T1790] ? security_bpf+0x82/0xb0 [ 70.041212][ T1790] __sys_bpf+0x4bc/0x760 [ 70.045308][ T1790] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 70.050486][ T1790] __x64_sys_bpf+0x7c/0x90 [ 70.054736][ T1790] x64_sys_call+0x87f/0x9a0 [ 70.059074][ T1790] do_syscall_64+0x3b/0xb0 [ 70.063327][ T1790] ? clear_bhb_loop+0x35/0x90 [ 70.067839][ T1790] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.073567][ T1790] RIP: 0033:0x7f2ca7571ef9 [ 70.077822][ T1790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.097265][ T1790] RSP: 002b:00007f2ca61eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.105530][ T1790] RAX: ffffffffffffffda RBX: 00007f2ca7729f80 RCX: 00007f2ca7571ef9 [ 70.113319][ T1790] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 70.121129][ T1790] RBP: 00007f2ca75e4b76 R08: 0000000000000000 R09: 0000000000000000 [ 70.128953][ T1790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.136758][ T1790] R13: 0000000000000001 R14: 00007f2ca7729f80 R15: 00007ffc26934018 [ 70.144571][ T1790] [ 70.147428][ T1790] Modules linked in: [ 70.152551][ T311] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 70.161186][ T30] audit: type=1400 audit(1726499543.377:629): avc: denied { confidentiality } for pid=1789 comm="syz.1.584" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=0 [ 70.185393][ T1790] ---[ end trace 26c4016ab8751fc7 ]--- [ 70.190766][ T1790] RIP: 0010:bpf_check+0x9514/0x12bf0 [ 70.200482][ T30] audit: type=1400 audit(1726499543.377:630): avc: denied { prog_load } for pid=1787 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.202857][ T1790] Code: 24 70 80 3c 08 00 74 08 4c 89 ef e8 56 b8 30 00 49 8b 75 00 89 df 41 ff d6 48 89 c3 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 2e b8 30 00 48 8b 1b 48 85 db 0f 84 [ 70.240444][ T1790] RSP: 0018:ffffc90000a174e0 EFLAGS: 00010246 [ 70.246594][ T1790] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 70.255097][ T1790] RDX: ffff88811bb33b40 RSI: 00000000fffffff3 RDI: 0000000000000000 [ 70.256093][ T30] audit: type=1404 audit(1726499543.827:631): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 70.278089][ T1790] RBP: ffffc90000a17bb0 R08: ffffffff817c2a7a R09: ffffed103ee265e7 [ 70.286203][ T1790] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000029a12 [ 70.294048][ T30] audit: type=1400 audit(1726499543.827:632): avc: denied { ioctl } for pid=1778 comm="syz.3.580" path="/dev/raw-gadget" dev="devtmpfs" ino=162 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.294402][ T1790] R13: ffff888125940008 R14: ffffffff817be3a0 R15: ffffc9000014d094 [ 70.326561][ T1790] FS: 00007f2ca61eb6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 70.335379][ T30] audit: type=1400 audit(1726499543.827:633): avc: denied { read write } for pid=1670 comm="syz-executor" name="loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.337718][ T1790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.360728][ T1792] loop1: detected capacity change from 0 to 256 [ 70.367208][ T1790] CR2: 00007f965beee178 CR3: 000000010e150000 CR4: 00000000003506a0 [ 70.379803][ T1790] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 70.387976][ T30] audit: type=1400 audit(1726499543.827:634): avc: denied { open } for pid=1670 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.388076][ T1790] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 70.411921][ T30] audit: type=1400 audit(1726499543.827:635): avc: denied { ioctl } for pid=1670 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=114 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.420172][ T1790] Kernel panic - not syncing: Fatal exception [ 70.445071][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 70.451007][ T1790] Kernel Offset: disabled [ 70.460086][ T1790] Rebooting in 86400 seconds..