last executing test programs: 3.20744578s ago: executing program 2 (id=801): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) 1.823182099s ago: executing program 3 (id=802): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.772058224s ago: executing program 2 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 1.668766504s ago: executing program 3 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 1.668149474s ago: executing program 2 (id=806): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x14) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0xfffffffffffffffe]}) 1.667826324s ago: executing program 3 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 1.667524694s ago: executing program 3 (id=808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000220000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x5, {0x5, 0x0, "a809df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.60449151s ago: executing program 3 (id=810): r0 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') readlinkat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/58, 0xd) 1.407816688s ago: executing program 2 (id=817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="0f062ef2670fbfab0020000067f3360f017d000f20e06635080000000f22e0f0f65a6dd33cba2000ec0f01c5e3002e0f7931", 0xffffff73}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.208316657s ago: executing program 2 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='ext4_alloc_da_blocks\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x9}}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}, {@sysvgroups}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfaef}}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x0) 1.155828031s ago: executing program 4 (id=821): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000020000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 1.029838753s ago: executing program 4 (id=824): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x147042, 0x0) 843.87874ms ago: executing program 0 (id=827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r2, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) accept$inet6(r2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) 727.252331ms ago: executing program 4 (id=829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) 675.498706ms ago: executing program 0 (id=830): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000002400010000000000000000000000000006000300005600002b7f9d726e1933a3acf6a2f1e924c2ab3f139a81e949ed4add0d8c61a97cfaeba14652506ba5a17467dcfcc0e39b915689398dffc849471eaa2cde2ecae02dd96779204a427b12d8ea5ba7c0e3b7330067495f5fe7a782459541111fc8c19e8c90092936b5cd5242eabdfe"], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) readlink(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000080)=""/167, 0xa7) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) 675.170947ms ago: executing program 4 (id=831): accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 670.928457ms ago: executing program 1 (id=832): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 648.870609ms ago: executing program 1 (id=833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 639.06776ms ago: executing program 1 (id=834): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="98"], 0x298) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 632.47762ms ago: executing program 0 (id=835): socket$inet6(0xa, 0x1, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000240)=[{}], 0x1, 0x7ff) ppoll(&(0x7f0000000080)=[{r0, 0xc011}], 0x1, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000001}) 586.157505ms ago: executing program 3 (id=811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 514.645211ms ago: executing program 1 (id=836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x10) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0x0, 0x0) 139.138607ms ago: executing program 0 (id=837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) 138.775177ms ago: executing program 1 (id=838): syz_emit_ethernet(0x5a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000008b4f1f56c52ad500000000000000000000000000aafe8000000000000000000000000000aa00004e22be4a89d5d69df4"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 138.533896ms ago: executing program 2 (id=828): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2], 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x141, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) 131.870817ms ago: executing program 4 (id=839): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 55.111184ms ago: executing program 4 (id=840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014001100b7030000000000698500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00030c788b000c03512bfb61ffcbbc56dccf587e9e281d5adeabda60a6f254b142d3"], 0x0, 0x0}, 0x0) 54.124164ms ago: executing program 0 (id=841): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0x22ce5cf0a1c62340) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 36.220036ms ago: executing program 0 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x22, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 0s ago: executing program 1 (id=843): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[]) kernel console output (not intermixed with test programs): ady [ 58.452604][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.464910][ T1271] device veth0_vlan entered promiscuous mode [ 58.471221][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.479335][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.487497][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.494630][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.507578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.516254][ T1271] device veth1_macvtap entered promiscuous mode [ 58.529175][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.537344][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.573501][ T1279] tipc: Started in network mode [ 58.574239][ T1280] loop2: detected capacity change from 0 to 1024 [ 58.578484][ T1279] tipc: Node identity 128998b8a6da, cluster identity 4711 [ 58.590523][ T1280] EXT4-fs: Ignoring removed orlov option [ 58.597547][ T1280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.597746][ T1279] tipc: Enabled bearer , priority 0 [ 58.618632][ T1280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.618882][ T1277] tipc: Disabling bearer [ 58.657197][ T1280] loop2: detected capacity change from 1024 to 64 [ 58.669883][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.683494][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.697529][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.715630][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.729189][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.742611][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.746056][ T1284] loop4: detected capacity change from 0 to 1024 [ 58.756151][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.776449][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.776769][ T1284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.789982][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.809728][ T1271] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 58.823748][ T43] device bridge_slave_1 left promiscuous mode [ 58.830412][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.839309][ T1284] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 58.848415][ T43] device bridge_slave_0 left promiscuous mode [ 58.870462][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.881721][ T43] device veth1_macvtap left promiscuous mode [ 58.888013][ T43] device veth0_vlan left promiscuous mode [ 58.895213][ T833] EXT4-fs (loop4): unmounting filesystem. [ 59.058488][ T1271] EXT4-fs (loop2): unmounting filesystem. [ 59.065149][ T1281] kmmpd-loop2: attempt to access beyond end of device [ 59.065149][ T1281] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 59.078519][ T1281] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 59.267778][ T732] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 59.483524][ T296] usb 2-1: USB disconnect, device number 10 [ 59.556072][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.563070][ T1306] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.570346][ T1306] device bridge_slave_0 entered promiscuous mode [ 59.579117][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.586032][ T1306] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.593299][ T1306] device bridge_slave_1 entered promiscuous mode [ 59.632908][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.639763][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.646830][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.653653][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.672225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.679658][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.686709][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.694781][ T43] device bridge_slave_1 left promiscuous mode [ 59.700792][ T732] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 59.706814][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.711816][ T732] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 59.729748][ T732] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 59.729884][ T43] device bridge_slave_0 left promiscuous mode [ 59.738585][ T732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.752326][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.759887][ T43] device veth1_macvtap left promiscuous mode [ 59.765687][ T43] device veth0_vlan left promiscuous mode [ 59.767031][ T1301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 59.848296][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.856210][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.862969][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.870163][ T296] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 59.878465][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.886644][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.893491][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.900670][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.908454][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.922998][ T1306] device veth0_vlan entered promiscuous mode [ 59.929256][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.937580][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.945232][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.952464][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.964361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.973273][ T1306] device veth1_macvtap entered promiscuous mode [ 59.982056][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.993669][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.257050][ T296] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 60.267018][ T296] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 60.347252][ T296] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 60.356116][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 60.363959][ T296] usb 2-1: SerialNumber: syz [ 60.627592][ T296] usb 2-1: 0:2 : does not exist [ 60.697042][ T732] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 60.704322][ T732] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input15 [ 60.905877][ T296] usb 5-1: USB disconnect, device number 11 [ 61.050101][ T39] usb 2-1: USB disconnect, device number 11 [ 61.485320][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 61.485335][ T28] audit: type=1400 audit(1727869840.828:296): avc: denied { relabelfrom } for pid=1322 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.511508][ T28] audit: type=1400 audit(1727869840.828:297): avc: denied { relabelto } for pid=1322 comm="syz.4.389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 61.866962][ T39] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 61.874447][ T732] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 61.992878][ T28] audit: type=1400 audit(1727869841.338:298): avc: denied { mounton } for pid=1337 comm="syz.3.399" path="/proc/79/task" dev="proc" ino=23445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 61.993736][ T1338] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups) [ 62.093671][ T1341] device syzkaller0 entered promiscuous mode [ 62.127053][ T732] usb 3-1: Using ep0 maxpacket: 16 [ 62.247106][ T39] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 62.257852][ T732] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 62.266706][ T732] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 62.276187][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.287040][ T732] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 62.296591][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.306195][ T732] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 62.315710][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 62.328498][ T732] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 62.338050][ T39] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 62.346847][ T732] usb 3-1: config 1 interface 0 has no altsetting 0 [ 62.353310][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.353961][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.361094][ T732] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 62.361118][ T732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.362214][ T39] usb 5-1: config 0 descriptor?? [ 62.368203][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.396740][ T1347] device bridge_slave_0 entered promiscuous mode [ 62.403478][ T732] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 62.411532][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.418604][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.425838][ T1347] device bridge_slave_1 entered promiscuous mode [ 62.471478][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.478338][ T1347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.485397][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.492235][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.500752][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.507851][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.527295][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.534545][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.542854][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.550983][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.558956][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.565792][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.575436][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.583579][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.591995][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.598847][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.612587][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.620870][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.630442][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.638384][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.648628][ T732] ums-sddr09: probe of 3-1:1.0 failed with error -22 [ 62.658945][ T732] usb 3-1: USB disconnect, device number 10 [ 62.666685][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.674925][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.685365][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.693209][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.704105][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.711363][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.718980][ T1347] device veth0_vlan entered promiscuous mode [ 62.728383][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.736276][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.745078][ T1347] device veth1_macvtap entered promiscuous mode [ 62.755675][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.763036][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.771140][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.780120][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.788418][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.797227][ T8] device bridge_slave_1 left promiscuous mode [ 62.803159][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.810510][ T8] device bridge_slave_0 left promiscuous mode [ 62.816517][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.824275][ T8] device veth1_macvtap left promiscuous mode [ 62.830167][ T8] device veth0_vlan left promiscuous mode [ 62.858724][ T39] nintendo 0003:057E:2009.0016: unknown main item tag 0x0 [ 62.865753][ T39] nintendo 0003:057E:2009.0016: unknown main item tag 0x0 [ 62.872702][ T39] nintendo 0003:057E:2009.0016: item fetching failed at offset 2/5 [ 62.880487][ T39] nintendo 0003:057E:2009.0016: HID parse failed [ 62.886717][ T39] nintendo 0003:057E:2009.0016: probe - fail = -22 [ 62.893016][ T39] nintendo: probe of 0003:057E:2009.0016 failed with error -22 [ 62.995171][ T1369] request_module fs-autofs succeeded, but still no fs? [ 63.003127][ T1369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'. [ 63.012819][ T28] audit: type=1326 audit(1727869842.358:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341537dff9 code=0x7ffc0000 [ 63.036108][ T28] audit: type=1326 audit(1727869842.358:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341537dff9 code=0x7ffc0000 [ 63.059596][ T28] audit: type=1326 audit(1727869842.358:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f341537dff9 code=0x7ffc0000 [ 63.062501][ T39] usb 5-1: USB disconnect, device number 12 [ 63.082987][ T28] audit: type=1326 audit(1727869842.358:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341537dff9 code=0x7ffc0000 [ 63.111439][ T28] audit: type=1326 audit(1727869842.358:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f341537dff9 code=0x7ffc0000 [ 63.134679][ T28] audit: type=1326 audit(1727869842.358:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f341537dff9 code=0x7ffc0000 [ 63.157935][ T28] audit: type=1326 audit(1727869842.358:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1368 comm="syz.1.411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f341537dff9 code=0x7ffc0000 [ 63.210573][ T1376] syz.2.414[1376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.210623][ T1376] syz.2.414[1376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.223749][ T1376] device wg2 entered promiscuous mode [ 63.247324][ T413] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 63.359350][ T1386] loop2: detected capacity change from 0 to 1024 [ 63.366969][ T732] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 63.368963][ T1386] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.419: casefold flag without casefold feature [ 63.387401][ T1386] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 63.397472][ T1386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.419100][ T1306] EXT4-fs (loop2): unmounting filesystem. [ 63.607380][ T1395] loop4: detected capacity change from 0 to 16 [ 63.614026][ T1395] erofs: (device loop4): mounted with root inode @ nid 36. [ 63.621248][ T413] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.628953][ T1395] syz.4.422: attempt to access beyond end of device [ 63.628953][ T1395] loop4: rw=524288, sector=524984, nr_sectors = 8 limit=16 [ 63.631198][ T413] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.645562][ T1395] syz.4.422: attempt to access beyond end of device [ 63.645562][ T1395] loop4: rw=524288, sector=296, nr_sectors = 8 limit=16 [ 63.666641][ T1395] syz.4.422: attempt to access beyond end of device [ 63.666641][ T1395] loop4: rw=524288, sector=1049344, nr_sectors = 8 limit=16 [ 63.680382][ T1395] syz.4.422: attempt to access beyond end of device [ 63.680382][ T1395] loop4: rw=524288, sector=688, nr_sectors = 8 limit=16 [ 63.693661][ T1395] syz.4.422: attempt to access beyond end of device [ 63.693661][ T1395] loop4: rw=524288, sector=525096, nr_sectors = 8 limit=16 [ 63.707315][ T1395] syz.4.422: attempt to access beyond end of device [ 63.707315][ T1395] loop4: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 63.720694][ T1395] syz.4.422: attempt to access beyond end of device [ 63.720694][ T1395] loop4: rw=524288, sector=525136, nr_sectors = 8 limit=16 [ 63.734231][ T1395] syz.4.422: attempt to access beyond end of device [ 63.734231][ T1395] loop4: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 63.747830][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 63.748291][ T1395] syz.4.422: attempt to access beyond end of device [ 63.748291][ T1395] loop4: rw=524288, sector=19320, nr_sectors = 8 limit=16 [ 63.755242][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.779347][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.789122][ T732] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 63.798038][ T732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.798106][ T413] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 63.814749][ T413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 63.817400][ T732] usb 2-1: config 0 descriptor?? [ 63.822779][ T413] usb 4-1: SerialNumber: syz [ 63.986984][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 64.087792][ T413] usb 4-1: 0:2 : does not exist [ 64.267050][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 64.275953][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.283834][ T24] usb 3-1: Product: syz [ 64.287874][ T24] usb 3-1: Manufacturer: syz [ 64.292234][ T24] usb 3-1: SerialNumber: syz [ 64.297171][ T24] usb 3-1: config 0 descriptor?? [ 64.525297][ T39] usb 4-1: USB disconnect, device number 10 [ 64.946970][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 64.997975][ T24] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 65.199627][ T313] usb 3-1: USB disconnect, device number 11 [ 65.228478][ T732] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0017/input/input16 [ 65.241628][ T732] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0017/input/input17 [ 65.255697][ T732] uclogic 0003:256C:006D.0017: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 65.327033][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.337973][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.347635][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 65.356431][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.364946][ T60] usb 5-1: config 0 descriptor?? [ 65.366940][ T296] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 65.478693][ T732] usb 2-1: USB disconnect, device number 12 [ 65.536001][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.542930][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.550064][ T1435] device bridge_slave_0 entered promiscuous mode [ 65.556665][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.564047][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.571307][ T1435] device bridge_slave_1 entered promiscuous mode [ 65.610785][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.617647][ T1435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.624701][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.631534][ T1435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.651358][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.658912][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.665965][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.673008][ T296] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 65.684400][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.692503][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.699349][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.712954][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.721247][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.728112][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.750742][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.758643][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.775373][ T1435] device veth0_vlan entered promiscuous mode [ 65.782815][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.790951][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.799560][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.806670][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.819101][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.827957][ T1435] device veth1_macvtap entered promiscuous mode [ 65.836699][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.846281][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.857215][ T60] hid (null): bogus close delimiter [ 66.077017][ T60] usb 5-1: language id specifier not provided by device, defaulting to English [ 66.098513][ T334] device bridge_slave_1 left promiscuous mode [ 66.104428][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.111786][ T334] device bridge_slave_0 left promiscuous mode [ 66.117791][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.125269][ T334] device veth1_macvtap left promiscuous mode [ 66.131534][ T334] device veth0_vlan left promiscuous mode [ 66.147051][ T6] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 66.367227][ T296] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 66.376447][ T296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.387016][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 66.436993][ T313] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 66.466983][ T732] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 66.516992][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.528077][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.537678][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 66.546536][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.555290][ T6] usb 3-1: config 0 descriptor?? [ 66.558524][ T60] uclogic 0003:256C:006D.0018: interface is invalid, ignoring [ 66.597441][ T6] hub 3-1:0.0: USB hub found [ 66.778105][ T312] usb 5-1: USB disconnect, device number 13 [ 66.817075][ T6] hub 3-1:0.0: 1 port detected [ 66.827238][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.838115][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.847026][ T296] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 66.847978][ T732] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 66.854722][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.863534][ T732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.874695][ T296] usb 4-1: No valid video chain found. [ 66.887521][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.890443][ T732] usb 2-1: config 0 descriptor?? [ 66.898543][ T313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.914511][ T313] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 66.923389][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.931902][ T313] usb 1-1: config 0 descriptor?? [ 67.085802][ T312] usb 4-1: USB disconnect, device number 11 [ 67.378293][ T732] isku 0003:1E7D:319C.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 67.418377][ T313] holtek_mouse 0003:04D9:A070.001A: item fetching failed at offset 1/5 [ 67.426786][ T313] holtek_mouse 0003:04D9:A070.001A: hid parse failed: -22 [ 67.433763][ T313] holtek_mouse: probe of 0003:04D9:A070.001A failed with error -22 [ 67.457077][ T387] hub 3-1:0.0: activate --> -90 [ 67.601101][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 67.601117][ T28] audit: type=1400 audit(1727869846.948:323): avc: denied { map } for pid=1477 comm="syz.3.443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.634232][ T28] audit: type=1400 audit(1727869846.948:324): avc: denied { write } for pid=1477 comm="syz.3.443" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23985 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.661629][ T313] usb 1-1: USB disconnect, device number 11 [ 67.709308][ T732] usb 3-1: USB disconnect, device number 12 [ 67.727165][ T387] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 67.752813][ T1478] loop3: detected capacity change from 0 to 40427 [ 67.759694][ T1478] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 67.767426][ T1478] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 67.776141][ T1478] F2FS-fs (loop3): invalid crc value [ 67.782530][ T1478] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.822522][ T1478] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 67.829547][ T1478] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.837106][ T387] usb 2-1: USB disconnect, device number 13 [ 67.849616][ T28] audit: type=1400 audit(1727869847.198:325): avc: denied { setattr } for pid=1477 comm="syz.3.443" name=".pending_reads" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.617006][ T387] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 68.705953][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'. [ 68.715054][ T1514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.457'. [ 68.723848][ T732] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 68.739414][ T28] audit: type=1400 audit(1727869848.088:326): avc: denied { bind } for pid=1515 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.763898][ T28] audit: type=1400 audit(1727869848.108:327): avc: denied { listen } for pid=1515 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.783296][ T28] audit: type=1400 audit(1727869848.108:328): avc: denied { shutdown } for pid=1515 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.977049][ T732] usb 2-1: Using ep0 maxpacket: 16 [ 69.087034][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.097717][ T732] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 69.097748][ T732] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.097771][ T732] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 69.129101][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.138739][ T387] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.147578][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.155892][ T387] usb 3-1: config 0 descriptor?? [ 69.207708][ T313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 69.256983][ T732] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.265981][ T732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.274440][ T732] usb 2-1: Product: syz [ 69.278824][ T732] usb 2-1: Manufacturer: syz [ 69.283223][ T732] usb 2-1: SerialNumber: syz [ 69.525790][ T28] audit: type=1400 audit(1727869848.868:329): avc: denied { mounton } for pid=1541 comm="syz.0.469" path="/8/file0" dev="tmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 69.617062][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.628255][ T313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.638838][ T313] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.647698][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.655994][ T313] usb 4-1: config 0 descriptor?? [ 69.746972][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 69.767178][ T732] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 70.106999][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.117996][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.127596][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.136471][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.137185][ T313] hid (null): bogus close delimiter [ 70.147631][ T60] usb 5-1: config 0 descriptor?? [ 70.377362][ T313] usb 4-1: language id specifier not provided by device, defaulting to English [ 70.537889][ T387] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001B/input/input18 [ 70.550461][ T387] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.001B/input/input19 [ 70.563750][ T387] uclogic 0003:256C:006D.001B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 70.647032][ T732] usb 2-1: 2:1: cannot get freq at ep 0x82 [ 70.669278][ T732] usb 2-1: USB disconnect, device number 14 [ 70.679635][ T506] udevd[506]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 70.696980][ T312] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 70.742054][ T296] usb 3-1: USB disconnect, device number 13 [ 70.818102][ T313] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input20 [ 70.830523][ T313] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input21 [ 70.843127][ T313] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input22 [ 70.846994][ T60] usb 5-1: string descriptor 0 read error: -22 [ 70.856473][ T313] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input23 [ 70.874656][ T313] uclogic 0003:256C:006D.001C: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 71.031796][ T296] usb 4-1: USB disconnect, device number 12 [ 71.057093][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.067880][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.078098][ T312] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.086980][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.095768][ T312] usb 1-1: config 0 descriptor?? [ 71.117850][ T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001D/input/input24 [ 71.130879][ T60] uclogic 0003:256C:006D.001D: input,hiddev97,hidraw1: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 71.161598][ T1556] syz.1.473[1556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.161663][ T1556] syz.1.473[1556] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.204239][ T1560] loop1: detected capacity change from 0 to 1024 [ 71.229136][ T1560] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.301070][ T894] EXT4-fs (loop1): unmounting filesystem. [ 71.322076][ T60] usb 5-1: USB disconnect, device number 14 [ 71.569351][ T1573] loop1: detected capacity change from 0 to 1024 [ 71.577236][ T312] hid (null): bogus close delimiter [ 71.587258][ T1573] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.478: casefold flag without casefold feature [ 71.601897][ T1573] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 71.612014][ T1573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 71.636548][ T894] EXT4-fs (loop1): unmounting filesystem. [ 71.676889][ T28] audit: type=1400 audit(1727869851.018:330): avc: denied { create } for pid=1581 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 71.797168][ T312] usb 1-1: string descriptor 0 read error: -22 [ 71.808402][ T1593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1593 comm=syz.1.485 [ 71.812351][ T28] audit: type=1400 audit(1727869851.158:331): avc: denied { ioctl } for pid=1590 comm="syz.3.484" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 72.046995][ T312] uclogic 0003:256C:006D.001E: interface is invalid, ignoring [ 72.087034][ T313] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 72.248320][ T296] usb 1-1: USB disconnect, device number 12 [ 72.326968][ T313] usb 2-1: Using ep0 maxpacket: 16 [ 72.447010][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.457919][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.467474][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.480123][ T313] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 72.488908][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.497553][ T313] usb 2-1: config 0 descriptor?? [ 72.768248][ T1611] loop3: detected capacity change from 0 to 1024 [ 72.778083][ T1611] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.492: casefold flag without casefold feature [ 72.791895][ T1611] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 72.802283][ T1611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 72.832382][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 72.845568][ T1620] loop3: detected capacity change from 0 to 512 [ 72.857974][ T1620] EXT4-fs: Ignoring removed bh option [ 72.869068][ T1620] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #16: comm syz.3.494: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 72.887670][ T1620] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.494: couldn't read orphan inode 16 (err -117) [ 72.899461][ T1620] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 72.908350][ T1620] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 72.921818][ T28] audit: type=1400 audit(1727869852.268:332): avc: denied { rename } for pid=1619 comm="syz.3.494" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.944878][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 72.967696][ T6] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 72.978439][ T313] wacom 0003:056A:0022.001F: collection stack underflow [ 72.992222][ T313] wacom 0003:056A:0022.001F: item 0 2 0 12 parsing failed [ 72.999462][ T313] wacom 0003:056A:0022.001F: parse failed [ 73.005077][ T313] wacom: probe of 0003:056A:0022.001F failed with error -22 [ 73.180486][ T312] usb 2-1: USB disconnect, device number 15 [ 73.327055][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.337791][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.347404][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 73.356232][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.364653][ T6] usb 5-1: config 0 descriptor?? [ 73.516966][ T60] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 73.756982][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 73.839113][ T6] hid (null): bogus close delimiter [ 73.874605][ T1647] syz.1.507[1647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.874681][ T1647] syz.1.507[1647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.885923][ T60] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 73.908064][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 73.919921][ T28] audit: type=1400 audit(1727869853.268:333): avc: denied { watch } for pid=1650 comm="syz.0.508" path="/20" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.942393][ T1651] process 'syz.0.508' launched './file0' with NULL argv: empty string added [ 73.952063][ T28] audit: type=1400 audit(1727869853.308:334): avc: denied { execute_no_trans } for pid=1650 comm="syz.0.508" path="/20/file0" dev="tmpfs" ino=129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.057062][ T6] usb 5-1: language id specifier not provided by device, defaulting to English [ 74.117018][ T60] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 74.125983][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.134967][ T60] usb 4-1: Product: syz [ 74.138986][ T60] usb 4-1: Manufacturer: syz [ 74.143445][ T60] usb 4-1: SerialNumber: syz [ 74.326964][ T312] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 74.407021][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 74.416991][ T732] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 74.498114][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0020/input/input25 [ 74.510579][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0020/input/input26 [ 74.523458][ T6] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0020/input/input27 [ 74.536520][ T6] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0020/input/input28 [ 74.549852][ T6] uclogic 0003:256C:006D.0020: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 74.627042][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 74.633250][ T60] r8152-cfgselector 4-1: bad CDC descriptors [ 74.657020][ T732] usb 2-1: Using ep0 maxpacket: 8 [ 74.661936][ T60] r8152-cfgselector 4-1: Unknown version 0x0000 [ 74.668686][ T60] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 74.687030][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.698224][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.705289][ T6] usb 5-1: USB disconnect, device number 15 [ 74.707810][ T312] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 74.707834][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.708419][ T312] usb 1-1: config 0 descriptor?? [ 74.777005][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.787787][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.797483][ T732] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 74.806343][ T732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.814702][ T732] usb 2-1: config 0 descriptor?? [ 75.128658][ T1668] loop3: detected capacity change from 0 to 1024 [ 75.139315][ T1668] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.155167][ T10] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 75.170198][ T10] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 75.182449][ T10] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.182449][ T10] [ 75.192453][ T10] EXT4-fs (loop3): Total free blocks count 0 [ 75.198302][ T10] EXT4-fs (loop3): Free/Dirty block details [ 75.204038][ T10] EXT4-fs (loop3): free_blocks=68451041280 [ 75.208623][ T312] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 75.209858][ T10] EXT4-fs (loop3): dirty_blocks=64 [ 75.225368][ T10] EXT4-fs (loop3): Block reservation details [ 75.231200][ T10] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 75.240509][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 75.288093][ T732] kone 0003:1E7D:2CED.0022: collection stack underflow [ 75.295535][ T732] kone 0003:1E7D:2CED.0022: item 0 1 0 12 parsing failed [ 75.302786][ T732] kone 0003:1E7D:2CED.0022: parse failed [ 75.309864][ T732] kone: probe of 0003:1E7D:2CED.0022 failed with error -22 [ 75.417014][ T312] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 75.424250][ T312] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 75.432982][ T312] pyra: probe of 0003:1E7D:2CF6.0021 failed with error -71 [ 75.441815][ T312] usb 1-1: USB disconnect, device number 13 [ 75.506998][ T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 75.514720][ T296] usb 2-1: USB disconnect, device number 16 [ 75.538726][ T1693] device pim6reg1 entered promiscuous mode [ 75.596989][ T6] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 75.886998][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.897733][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.907247][ T60] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 75.916060][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.917000][ T387] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 75.925800][ T60] usb 5-1: config 0 descriptor?? [ 76.017024][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.027892][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.037600][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 76.049624][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.058452][ T6] usb 4-1: config 0 descriptor?? [ 76.142755][ T1704] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 76.317016][ T312] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 76.317075][ T387] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 76.335135][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.345989][ T387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.355487][ T387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 76.368282][ T387] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 76.377126][ T387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.385580][ T387] usb 3-1: config 0 descriptor?? [ 76.527153][ T6] hid (null): bogus close delimiter [ 76.637104][ T60] usb 5-1: string descriptor 0 read error: -22 [ 76.677418][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.688201][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.697722][ T312] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 76.706507][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.714901][ T312] usb 2-1: config 0 descriptor?? [ 76.747094][ T6] usb 4-1: language id specifier not provided by device, defaulting to English [ 76.858261][ T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0023/input/input29 [ 76.871132][ T60] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0023/input/input30 [ 76.878500][ T387] nintendo 0003:057E:2009.0025: unknown main item tag 0x0 [ 76.883997][ T60] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0023/input/input31 [ 76.889971][ T387] nintendo 0003:057E:2009.0025: unknown main item tag 0x0 [ 76.903123][ T60] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0023/input/input32 [ 76.909143][ T387] nintendo 0003:057E:2009.0025: item fetching failed at offset 2/5 [ 76.922104][ T60] uclogic 0003:256C:006D.0023: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 76.928998][ T387] nintendo 0003:057E:2009.0025: HID parse failed [ 76.946946][ T387] nintendo 0003:057E:2009.0025: probe - fail = -22 [ 76.970374][ T387] nintendo: probe of 0003:057E:2009.0025 failed with error -22 [ 77.063597][ T60] usb 5-1: USB disconnect, device number 16 [ 77.102910][ T387] usb 3-1: USB disconnect, device number 14 [ 77.197128][ T312] hid (null): bogus close delimiter [ 77.227071][ T6] uclogic 0003:256C:006D.0024: interface is invalid, ignoring [ 77.417357][ T312] usb 2-1: language id specifier not provided by device, defaulting to English [ 77.428329][ T387] usb 4-1: USB disconnect, device number 14 [ 77.575227][ T1709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 77.584334][ T1709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 77.858157][ T312] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0026/input/input33 [ 77.870677][ T312] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0026/input/input34 [ 77.883154][ T312] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0026/input/input35 [ 77.896321][ T312] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0026/input/input36 [ 77.909982][ T312] uclogic 0003:256C:006D.0026: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 77.927048][ T387] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 78.062657][ T312] usb 2-1: USB disconnect, device number 17 [ 78.216974][ T345] Bluetooth: hci0: command 0x1003 tx timeout [ 78.216996][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 78.252334][ T1732] netlink: 'syz.0.541': attribute type 12 has an invalid length. [ 78.347015][ T387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.357760][ T387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.367456][ T387] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 78.376332][ T387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.384664][ T387] usb 5-1: config 0 descriptor?? [ 78.526982][ T732] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 78.766996][ T732] usb 1-1: Using ep0 maxpacket: 8 [ 78.805335][ T1737] syz.3.543[1737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.805428][ T1737] syz.3.543[1737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.870946][ T28] audit: type=1400 audit(1727869858.218:335): avc: denied { read write } for pid=1749 comm="syz.2.548" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.907004][ T732] usb 1-1: config 0 has no interfaces? [ 78.908394][ T28] audit: type=1400 audit(1727869858.218:336): avc: denied { open } for pid=1749 comm="syz.2.548" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 78.912721][ T732] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 78.946045][ T732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.954952][ T732] usb 1-1: config 0 descriptor?? [ 79.015316][ T1757] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 79.022888][ T1757] netlink: 17 bytes leftover after parsing attributes in process `syz.1.551'. [ 79.035548][ T1757] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 79.043347][ T1757] netlink: 17 bytes leftover after parsing attributes in process `syz.1.551'. [ 79.052954][ T1757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 79.107011][ T6] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 79.317006][ T296] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 79.477031][ T6] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 79.487674][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.498472][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.508078][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 79.520904][ T6] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 79.529769][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.538162][ T6] usb 4-1: config 0 descriptor?? [ 79.556982][ T296] usb 3-1: Using ep0 maxpacket: 8 [ 79.726993][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.737785][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.748315][ T387] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0027/input/input37 [ 79.759875][ T296] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 79.768964][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.777408][ T387] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0027/input/input38 [ 79.789898][ T296] usb 3-1: config 0 descriptor?? [ 79.796403][ T387] uclogic 0003:256C:006D.0027: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 79.952188][ T387] usb 5-1: USB disconnect, device number 17 [ 80.018300][ T6] nintendo 0003:057E:2009.0028: unknown main item tag 0x0 [ 80.025242][ T6] nintendo 0003:057E:2009.0028: unknown main item tag 0x0 [ 80.032321][ T6] nintendo 0003:057E:2009.0028: item fetching failed at offset 2/5 [ 80.040179][ T6] nintendo 0003:057E:2009.0028: HID parse failed [ 80.046378][ T6] nintendo 0003:057E:2009.0028: probe - fail = -22 [ 80.052910][ T6] nintendo: probe of 0003:057E:2009.0028 failed with error -22 [ 80.221123][ T6] usb 4-1: USB disconnect, device number 15 [ 80.242006][ T1759] loop2: detected capacity change from 0 to 512 [ 80.248718][ T1759] EXT4-fs (loop2): Test dummy encryption mode enabled [ 80.255816][ T1759] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.552: casefold flag without casefold feature [ 80.268646][ T1759] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 80.278511][ T1759] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 80.307684][ T296] logitech 0003:046D:C298.0029: invalid report_size 29542 [ 80.314675][ T296] logitech 0003:046D:C298.0029: item 0 2 1 7 parsing failed [ 80.322013][ T296] logitech 0003:046D:C298.0029: parse failed [ 80.327924][ T296] logitech: probe of 0003:046D:C298.0029 failed with error -22 [ 80.510063][ T732] usb 3-1: USB disconnect, device number 15 [ 81.015589][ T1306] EXT4-fs (loop2): unmounting filesystem. [ 81.097156][ T28] audit: type=1400 audit(1727869860.448:337): avc: denied { map } for pid=1781 comm="syz.4.559" path="socket:[25990]" dev="sockfs" ino=25990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.139104][ T28] audit: type=1400 audit(1727869860.488:338): avc: denied { execute } for pid=1785 comm="syz.4.561" path="/66/file0/bus" dev="ramfs" ino=26006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 81.218631][ T1799] tipc: Failed to remove unknown binding: 66,1,1/0:3919906328/3919906330 [ 81.227033][ T1799] tipc: Failed to remove unknown binding: 66,1,1/0:3919906328/3919906330 [ 81.261992][ T24] usb 1-1: USB disconnect, device number 14 [ 81.317002][ T732] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 81.348294][ T28] audit: type=1400 audit(1727869860.698:339): avc: denied { getopt } for pid=1818 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.379010][ T1821] loop3: detected capacity change from 0 to 128 [ 81.395185][ T1821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.403693][ T1821] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 81.452242][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 81.487502][ T28] audit: type=1400 audit(1727869860.838:340): avc: denied { write } for pid=1835 comm="syz.4.582" path="socket:[26088]" dev="sockfs" ino=26088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.533461][ T28] audit: type=1400 audit(1727869860.858:341): avc: denied { accept } for pid=1835 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.553313][ T28] audit: type=1400 audit(1727869860.858:342): avc: denied { read } for pid=1835 comm="syz.4.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.602544][ T1847] syz.3.587[1847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.602614][ T1847] syz.3.587[1847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.614626][ T1847] syz.3.587[1847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.626096][ T1847] syz.3.587[1847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.654367][ T1853] loop3: detected capacity change from 0 to 512 [ 81.673597][ T1853] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.590: bad orphan inode 17 [ 81.683506][ T1853] ext4_test_bit(bit=16, block=4) = 1 [ 81.688669][ T1853] is_bad_inode(inode)=0 [ 81.692585][ T1853] NEXT_ORPHAN(inode)=0 [ 81.696550][ T1853] max_ino=32 [ 81.699733][ T1853] i_nlink=1 [ 81.702657][ T1853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.707013][ T732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.721641][ T732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.731186][ T732] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 81.740048][ T732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.751326][ T1853] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.590: bg 0: block 7: invalid block bitmap [ 81.761005][ T732] usb 3-1: config 0 descriptor?? [ 81.772809][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 81.772887][ T1856] tipc: Cannot configure node identity twice [ 81.794088][ T1858] loop3: detected capacity change from 0 to 512 [ 81.802681][ T1858] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.592: inline data xattr refers to an external xattr inode [ 81.817522][ T1858] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.592: couldn't read orphan inode 12 (err -117) [ 81.829402][ T1858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.843931][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 81.866979][ T413] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 81.974871][ T1861] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.981792][ T1861] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.989352][ T1861] device bridge_slave_0 entered promiscuous mode [ 81.997616][ T1861] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.004447][ T1861] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.011914][ T1861] device bridge_slave_1 entered promiscuous mode [ 82.051393][ T1861] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.058280][ T1861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.065307][ T1861] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.072154][ T1861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.080506][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.087894][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.107991][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.115199][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.123351][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.131563][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.140094][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.146956][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.161625][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.169798][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.178039][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.184870][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.192142][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.200582][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.208475][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.209058][ T28] audit: type=1400 audit(1727869861.558:343): avc: denied { unlink } for pid=85 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.216334][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.253239][ T1861] device veth0_vlan entered promiscuous mode [ 82.257011][ T413] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 82.259344][ T732] hid (null): bogus close delimiter [ 82.267250][ T413] usb 1-1: config 0 has no interface number 0 [ 82.273875][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.278090][ T413] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 82.286142][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.305520][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.313243][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.321152][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.328443][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.340847][ T1861] device veth1_macvtap entered promiscuous mode [ 82.347830][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.355898][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.363865][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.377711][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.385819][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.394202][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.402679][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.447026][ T413] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 82.455924][ T413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.463898][ T413] usb 1-1: Product: syz [ 82.468091][ T413] usb 1-1: Manufacturer: syz [ 82.472477][ T413] usb 1-1: SerialNumber: syz [ 82.480799][ T413] usb 1-1: config 0 descriptor?? [ 82.487067][ T732] usb 3-1: language id specifier not provided by device, defaulting to English [ 82.507042][ T1845] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 82.514309][ T334] device bridge_slave_1 left promiscuous mode [ 82.520526][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.527990][ T413] usb-storage 1-1:0.20: USB Mass Storage device detected [ 82.536437][ T413] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 82.544424][ T334] device bridge_slave_0 left promiscuous mode [ 82.550473][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.558467][ T334] device veth1_macvtap left promiscuous mode [ 82.564600][ T334] device veth0_vlan left promiscuous mode [ 82.633130][ T1879] kvm: vcpu 0: requested 88 ns lapic timer period limited to 200000 ns [ 82.737138][ T413] scsi host1: usb-storage 1-1:0.20 [ 82.747589][ T413] usb 1-1: USB disconnect, device number 15 [ 82.908422][ T732] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002A/input/input39 [ 82.920788][ T732] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002A/input/input40 [ 82.933167][ T732] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002A/input/input41 [ 82.946421][ T732] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.002A/input/input42 [ 82.959496][ T732] uclogic 0003:256C:006D.002A: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 83.122818][ T732] usb 3-1: USB disconnect, device number 16 [ 83.211863][ T28] audit: type=1326 audit(1727869862.558:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1890 comm="syz.4.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c0317dff9 code=0x0 [ 83.645770][ T1901] netlink: 'syz.3.608': attribute type 2 has an invalid length. [ 83.646922][ T1899] loop2: detected capacity change from 0 to 1024 [ 83.671342][ T1899] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.705845][ T8] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 83.707809][ T1907] kvm: pic: non byte read [ 83.721591][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 83.739004][ T8] EXT4-fs (loop2): This should not happen!! Data will be lost [ 83.739004][ T8] [ 83.748571][ T8] EXT4-fs (loop2): Total free blocks count 0 [ 83.754360][ T8] EXT4-fs (loop2): Free/Dirty block details [ 83.760149][ T8] EXT4-fs (loop2): free_blocks=68451041280 [ 83.765728][ T8] EXT4-fs (loop2): dirty_blocks=64 [ 83.770856][ T8] EXT4-fs (loop2): Block reservation details [ 83.776710][ T8] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 83.783196][ T1306] EXT4-fs (loop2): unmounting filesystem. [ 83.932677][ T28] audit: type=1400 audit(1727869863.278:345): avc: denied { mount } for pid=1920 comm="syz.0.616" name="/" dev="pstore" ino=13451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 83.960616][ T28] audit: type=1400 audit(1727869863.308:346): avc: denied { mounton } for pid=1920 comm="syz.0.616" path="/32/file0" dev="pstore" ino=13451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 83.987851][ T28] audit: type=1400 audit(1727869863.308:347): avc: denied { unmount } for pid=1435 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 84.021339][ T1923] loop2: detected capacity change from 0 to 512 [ 84.028033][ T1923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.039362][ T1923] EXT4-fs (loop2): 1 truncate cleaned up [ 84.047100][ T1923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 84.107482][ T1923] loop2: detected capacity change from 512 to 11 [ 84.130072][ T1306] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 84.139388][ T1306] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 84.151338][ T1306] EXT4-fs (loop2): unmounting filesystem. [ 84.167020][ T313] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 84.179571][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.186738][ T1929] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.194820][ T1929] device bridge_slave_0 entered promiscuous mode [ 84.201827][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.208971][ T1929] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.216261][ T1929] device bridge_slave_1 entered promiscuous mode [ 84.291898][ T1929] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.298948][ T1929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.305995][ T1929] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.312838][ T1929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.326983][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 84.363822][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.371241][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.379527][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.397686][ T1935] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.404565][ T1935] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.407066][ T313] usb 4-1: Using ep0 maxpacket: 16 [ 84.411861][ T1935] device bridge_slave_0 entered promiscuous mode [ 84.425514][ T1935] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.432797][ T1935] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.440069][ T1935] device bridge_slave_1 entered promiscuous mode [ 84.446847][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.457124][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.499651][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.527465][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.535346][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.537038][ T313] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 84.543047][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.551180][ T313] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 84.567914][ T313] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 84.577533][ T313] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 84.589539][ T1929] device veth0_vlan entered promiscuous mode [ 84.595390][ T313] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 84.604965][ T313] usb 4-1: config 1 interface 0 has no altsetting 0 [ 84.611472][ T313] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 84.620363][ T313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.640375][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.650893][ T1929] device veth1_macvtap entered promiscuous mode [ 84.664159][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.677420][ T313] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 84.684620][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.692676][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.703543][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.714852][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.723784][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.732839][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.740491][ T6] usb 5-1: config 0 descriptor?? [ 84.740827][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.753258][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.760101][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.772694][ T43] device bridge_slave_1 left promiscuous mode [ 84.778978][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.786526][ T43] device bridge_slave_0 left promiscuous mode [ 84.792703][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.799700][ T732] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 84.807807][ T43] device veth1_macvtap left promiscuous mode [ 84.813650][ T43] device veth0_vlan left promiscuous mode [ 84.887818][ T313] scsi host1: usb-storage 4-1:1.0 [ 84.909053][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.916419][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.924413][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.931295][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.947501][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.955188][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.969876][ T1935] device veth0_vlan entered promiscuous mode [ 84.977152][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.985294][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.993619][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.000957][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.011917][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.020688][ T1935] device veth1_macvtap entered promiscuous mode [ 85.030318][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.040554][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.095441][ T1950] loop2: detected capacity change from 0 to 512 [ 85.102973][ T1950] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 85.114130][ T1950] EXT4-fs (loop2): invalid journal inode [ 85.119971][ T1950] EXT4-fs (loop2): can't get journal size [ 85.127778][ T313] usb 4-1: USB disconnect, device number 16 [ 85.127996][ T1950] EXT4-fs (loop2): 1 truncate cleaned up [ 85.139088][ T1950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 85.155705][ T1950] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 85.155715][ T28] audit: type=1400 audit(1727869864.498:348): avc: denied { ioctl } for pid=1949 comm="syz.2.632" path="/0/file0/file1" dev="loop2" ino=15 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.201395][ T1935] EXT4-fs (loop2): unmounting filesystem. [ 85.207347][ T6] hid (null): bogus close delimiter [ 85.237001][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.247960][ T732] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.257697][ T732] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 85.266673][ T732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.278641][ T732] usb 2-1: config 0 descriptor?? [ 85.427079][ T6] usb 5-1: language id specifier not provided by device, defaulting to English [ 85.750583][ T43] device bridge_slave_1 left promiscuous mode [ 85.757938][ T732] hid-multitouch 0003:1FD2:6007.002C: unknown main item tag 0x0 [ 85.772585][ T732] hid-multitouch 0003:1FD2:6007.002C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 85.784760][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.797365][ T43] device bridge_slave_0 left promiscuous mode [ 85.807015][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.823869][ T43] device veth1_macvtap left promiscuous mode [ 85.829811][ T43] device veth0_vlan left promiscuous mode [ 85.869150][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002B/input/input43 [ 85.885610][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002B/input/input44 [ 85.898179][ T6] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002B/input/input45 [ 85.911220][ T6] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002B/input/input46 [ 85.924220][ T6] uclogic 0003:256C:006D.002B: input,hiddev96,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 85.970975][ T6] usb 2-1: USB disconnect, device number 18 [ 86.072294][ T413] usb 5-1: USB disconnect, device number 18 [ 88.955068][ T28] audit: type=1400 audit(1727869868.298:349): avc: denied { ioctl } for pid=2000 comm="syz.2.646" path="socket:[27946]" dev="sockfs" ino=27946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.979431][ T28] audit: type=1400 audit(1727869868.298:350): avc: denied { bind } for pid=2000 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 88.998606][ T28] audit: type=1400 audit(1727869868.298:351): avc: denied { read } for pid=2000 comm="syz.2.646" path="socket:[27946]" dev="sockfs" ino=27946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.031207][ T28] audit: type=1400 audit(1727869868.368:352): avc: denied { setopt } for pid=2000 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.055004][ T28] audit: type=1400 audit(1727869868.368:353): avc: denied { map } for pid=2000 comm="syz.2.646" path="socket:[27946]" dev="sockfs" ino=27946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 89.096104][ T2007] device syzkaller0 entered promiscuous mode [ 89.146954][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 89.157040][ T413] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 89.235091][ T2016] loop2: detected capacity change from 0 to 16 [ 89.246551][ T2016] erofs: (device loop2): mounted with root inode @ nid 36. [ 89.254418][ T2016] bio_check_eod: 281 callbacks suppressed [ 89.254434][ T2016] syz.2.653: attempt to access beyond end of device [ 89.254434][ T2016] loop2: rw=0, sector=14552337248, nr_sectors = 16 limit=16 [ 89.274254][ T2020] syz.1.654[2020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.274336][ T2020] syz.1.654[2020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.376188][ T2030] loop2: detected capacity change from 0 to 256 [ 89.386957][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 89.400585][ T2030] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 89.412634][ T2030] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 89.425431][ T28] audit: type=1400 audit(1727869868.768:354): avc: denied { mounton } for pid=2029 comm="syz.2.658" path="/16/file2/file0/bus" dev="loop2" ino=1048741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.450653][ T1935] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x61616161) [ 89.460938][ T1935] exFAT-fs (loop2): Filesystem has been set read-only [ 89.467629][ T1935] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x61616161) [ 89.526977][ T24] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 89.535067][ T24] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 89.543574][ T24] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 89.552610][ T24] usb 5-1: config 250 has no interface number 0 [ 89.558844][ T24] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 89.566989][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.570432][ T24] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 89.581045][ T413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.601094][ T413] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 89.602327][ T24] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 89.610161][ T413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.631238][ T413] usb 1-1: config 0 descriptor?? [ 89.640408][ T24] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 89.650642][ T24] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 89.664113][ T24] usb 5-1: config 250 interface 228 has no altsetting 0 [ 89.680176][ T2033] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.687137][ T2033] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.694175][ T2033] device bridge_slave_0 entered promiscuous mode [ 89.701032][ T2033] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.707965][ T2033] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.715082][ T2033] device bridge_slave_1 entered promiscuous mode [ 89.765895][ T2033] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.772764][ T2033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.779862][ T2033] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.786624][ T2033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.807052][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 89.812068][ T2040] loop3: detected capacity change from 0 to 512 [ 89.815910][ T24] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 89.815933][ T24] usb 5-1: Product: syz [ 89.835109][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.836082][ T24] usb 5-1: SerialNumber: syz [ 89.848047][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.848734][ T2040] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.663: inline data xattr refers to an external xattr inode [ 89.869621][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.869633][ T2040] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.663: couldn't read orphan inode 12 (err -117) [ 89.888646][ T24] hub 5-1:250.228: bad descriptor, ignoring hub [ 89.889791][ T2040] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 89.894722][ T24] hub: probe of 5-1:250.228 failed with error -5 [ 89.914520][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.922624][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.929490][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.936723][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.944940][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.951809][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.965393][ T1861] EXT4-fs (loop3): unmounting filesystem. [ 89.967010][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.979095][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.986788][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.994647][ T732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.013052][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.021701][ T2044] loop3: detected capacity change from 0 to 2048 [ 90.022078][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.038483][ T2044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.040421][ T2033] device veth0_vlan entered promiscuous mode [ 90.067497][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.075147][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.083038][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.091892][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.100163][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.107841][ T24] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 90.108410][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.142706][ T2033] device veth1_macvtap entered promiscuous mode [ 90.153689][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.161202][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.169283][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.180699][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.189032][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.189193][ T1861] EXT4-fs (loop3): unmounting filesystem. [ 90.238121][ T28] audit: type=1400 audit(1727869869.588:355): avc: denied { bind } for pid=2048 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.257188][ T28] audit: type=1400 audit(1727869869.588:356): avc: denied { read } for pid=2048 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.329994][ T28] audit: type=1400 audit(1727869869.678:357): avc: denied { read write } for pid=1982 comm="syz.4.639" name="lp0" dev="devtmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 90.353269][ T28] audit: type=1400 audit(1727869869.678:358): avc: denied { open } for pid=1982 comm="syz.4.639" path="/dev/usb/lp0" dev="devtmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 90.767181][ T1983] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 91.037919][ T413] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002D/input/input47 [ 91.050356][ T413] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002D/input/input48 [ 91.407983][ T413] uclogic 0003:256C:006D.002D: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 91.423762][ T413] usb 1-1: USB disconnect, device number 16 [ 91.707030][ T60] usb 5-1: USB disconnect, device number 19 [ 91.713842][ T60] usblp0: removed [ 91.773804][ T2063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 91.786792][ T2063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 91.822072][ T2070] loop1: detected capacity change from 0 to 512 [ 91.831683][ T2070] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 91.840673][ T2070] EXT4-fs (loop1): invalid journal inode [ 91.846199][ T2070] EXT4-fs (loop1): can't get journal size [ 91.861106][ T2070] EXT4-fs (loop1): 1 truncate cleaned up [ 91.866679][ T2070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.877749][ T2070] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 91.922127][ T894] EXT4-fs (loop1): unmounting filesystem. [ 91.965582][ T2083] netlink: 'syz.3.676': attribute type 4 has an invalid length. [ 91.971561][ T2085] loop1: detected capacity change from 0 to 1024 [ 91.973329][ T2083] netlink: 17 bytes leftover after parsing attributes in process `syz.3.676'. [ 91.987519][ T2085] EXT4-fs: Ignoring removed orlov option [ 91.997864][ T2085] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.001672][ T2083] netlink: 'syz.3.676': attribute type 4 has an invalid length. [ 92.006430][ T2085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.012516][ T2083] netlink: 17 bytes leftover after parsing attributes in process `syz.3.676'. [ 92.039724][ T2083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 92.073325][ T894] EXT4-fs (loop1): unmounting filesystem. [ 92.095934][ T2092] loop1: detected capacity change from 0 to 1024 [ 92.130157][ T2092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.138972][ T2092] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038 (0x7fffffff) [ 92.155126][ T2100] device syzkaller0 entered promiscuous mode [ 92.187012][ T60] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 92.196979][ T894] EXT4-fs (loop1): unmounting filesystem. [ 92.244800][ T2111] loop1: detected capacity change from 0 to 512 [ 92.251338][ T2111] EXT4-fs: Ignoring removed i_version option [ 92.257400][ T2111] EXT4-fs: Ignoring removed nobh option [ 92.263090][ T2111] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.274062][ T2111] EXT4-fs (loop1): 1 truncate cleaned up [ 92.279634][ T2111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.298960][ T2114] loop4: detected capacity change from 0 to 512 [ 92.305558][ T2114] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 92.311998][ T2111] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 92.314303][ T2114] EXT4-fs (loop4): invalid journal inode [ 92.333675][ T2114] EXT4-fs (loop4): can't get journal size [ 92.340646][ T2114] EXT4-fs (loop4): 1 truncate cleaned up [ 92.340757][ T894] EXT4-fs (loop1): unmounting filesystem. [ 92.346141][ T2114] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.372144][ T2114] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 92.386079][ T2117] loop1: detected capacity change from 0 to 2048 [ 92.398744][ T833] EXT4-fs (loop4): unmounting filesystem. [ 92.410027][ T2117] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.422923][ T2117] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 92.437736][ T2117] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 12 with max blocks 6 with error 28 [ 92.449852][ T2117] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.449852][ T2117] [ 92.459552][ T2117] EXT4-fs (loop1): Total free blocks count 0 [ 92.465412][ T2117] EXT4-fs (loop1): Free/Dirty block details [ 92.471248][ T2117] EXT4-fs (loop1): free_blocks=2415919104 [ 92.476831][ T2117] EXT4-fs (loop1): dirty_blocks=32 [ 92.481781][ T2117] EXT4-fs (loop1): Block reservation details [ 92.487607][ T2117] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 92.498577][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 92.523868][ T2125] loop1: detected capacity change from 0 to 1024 [ 92.530335][ T2125] EXT4-fs: Ignoring removed nobh option [ 92.535793][ T2125] EXT4-fs: Ignoring removed orlov option [ 92.547123][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.549041][ T2125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.558430][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.571227][ T2125] EXT4-fs error (device loop1): __ext4_remount:6412: comm syz.1.692: Abort forced by user [ 92.590929][ T2125] EXT4-fs (loop1): Remounting filesystem read-only [ 92.592969][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.600770][ T2130] loop4: detected capacity change from 0 to 256 [ 92.606224][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.616966][ T2130] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 92.625299][ T60] usb 1-1: config 0 descriptor?? [ 92.645897][ T894] EXT4-fs (loop1): unmounting filesystem. [ 92.873017][ T2139] loop1: detected capacity change from 0 to 40427 [ 92.884204][ T2139] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 92.890977][ T2139] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 92.904235][ T2139] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.934832][ T2139] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 92.942103][ T2139] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.959283][ T2139] syz.1.697: attempt to access beyond end of device [ 92.959283][ T2139] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.970567][ T2145] loop4: detected capacity change from 0 to 40427 [ 92.980815][ T2139] syz.1.697: attempt to access beyond end of device [ 92.980815][ T2139] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 92.994425][ T2145] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 92.995044][ T2139] syz.1.697: attempt to access beyond end of device [ 92.995044][ T2139] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 93.001496][ T2145] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 93.014981][ T2139] syz.1.697: attempt to access beyond end of device [ 93.014981][ T2139] loop1: rw=2049, sector=45112, nr_sectors = 48 limit=40427 [ 93.023540][ T2145] F2FS-fs (loop4): invalid crc value [ 93.037165][ T2139] syz.1.697: attempt to access beyond end of device [ 93.037165][ T2139] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.056981][ T413] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 93.060859][ T2145] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.070540][ T2154] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.077571][ T2154] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.092476][ T2154] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.098850][ T894] syz-executor: attempt to access beyond end of device [ 93.098850][ T894] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 93.099336][ T2154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.117976][ T2145] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 93.120167][ T2154] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.127285][ T2145] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.133772][ T2154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.134202][ T60] hid (null): bogus close delimiter [ 93.162142][ T2154] device bridge0 entered promiscuous mode [ 93.174752][ T833] syz-executor: attempt to access beyond end of device [ 93.174752][ T833] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 93.189337][ T833] syz-executor: attempt to access beyond end of device [ 93.189337][ T833] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 93.219622][ T833] syz-executor: attempt to access beyond end of device [ 93.219622][ T833] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 93.342584][ T2166] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 93.367009][ T60] usb 1-1: language id specifier not provided by device, defaulting to English [ 93.388479][ T8] tipc: Left network mode [ 93.457069][ T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.469263][ T413] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.479013][ T413] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 93.501749][ T413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.514011][ T413] usb 3-1: config 0 descriptor?? [ 93.534426][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.541437][ T2172] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.548958][ T2172] device bridge_slave_0 entered promiscuous mode [ 93.555948][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.562833][ T2172] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.570854][ T2172] device bridge_slave_1 entered promiscuous mode [ 93.611136][ T296] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 93.616801][ T2184] loop3: detected capacity change from 0 to 512 [ 93.638503][ T2184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.647636][ T2184] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 93.669351][ T1861] EXT4-fs (loop3): unmounting filesystem. [ 93.670278][ T2172] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.681757][ T2172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.688857][ T2172] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.695628][ T2172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.725924][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.736423][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.743741][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.765127][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.773248][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.780102][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.787381][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.795284][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.802034][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.808616][ T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002E/input/input49 [ 93.809645][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.822407][ T60] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002E/input/input50 [ 93.841233][ T60] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002E/input/input51 [ 93.853922][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.854675][ T60] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.002E/input/input52 [ 93.861851][ T296] usb 2-1: Using ep0 maxpacket: 32 [ 93.875449][ T60] uclogic 0003:256C:006D.002E: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 93.879333][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.920421][ T2172] device veth0_vlan entered promiscuous mode [ 93.928730][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.936528][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.943879][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.954197][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.965017][ T2172] device veth1_macvtap entered promiscuous mode [ 93.975976][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.993145][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.036978][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 94.037092][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 94.061160][ T296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 94.065089][ T312] usb 1-1: USB disconnect, device number 17 [ 94.072190][ T296] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 94.086948][ T296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.095357][ T296] usb 2-1: config 0 descriptor?? [ 94.107701][ T8] device bridge_slave_1 left promiscuous mode [ 94.113674][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.120884][ T8] device bridge_slave_0 left promiscuous mode [ 94.126810][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.133896][ T2164] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 94.141791][ T8] device veth1_macvtap left promiscuous mode [ 94.148000][ T8] device veth0_vlan left promiscuous mode [ 94.148091][ T296] hub 2-1:0.0: USB hub found [ 94.335594][ T2214] mmap: syz.4.724 (2214) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.373330][ T2218] loop4: detected capacity change from 0 to 512 [ 94.380523][ T2218] EXT4-fs: Ignoring removed i_version option [ 94.386421][ T2218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.394192][ T2218] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.726: bad orphan inode 1 [ 94.404103][ T2218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.407256][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.424310][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.433960][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 94.433972][ T28] audit: type=1400 audit(1727869873.778:363): avc: denied { create } for pid=2217 comm="syz.4.726" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 94.481720][ T28] audit: type=1400 audit(1727869873.778:364): avc: denied { append } for pid=2217 comm="syz.4.726" name="loop4" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.481896][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 94.505952][ T296] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 94.522113][ T28] audit: type=1400 audit(1727869873.788:365): avc: denied { read } for pid=2217 comm="syz.4.726" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 94.524998][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.573546][ T24] usb 4-1: config 0 descriptor?? [ 94.617349][ T2218] loop4: detected capacity change from 512 to 489 [ 94.631495][ T2172] EXT4-fs error (device loop4): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 94.655865][ T2172] EXT4-fs (loop4): unmounting filesystem. [ 94.726185][ T2231] syz.0.734[2231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.726261][ T2231] syz.0.734[2231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.727064][ T413] uclogic 0003:256C:006D.002F: interface is invalid, ignoring [ 94.808164][ T296] hid-generic 0003:046D:C314.0030: unknown main item tag 0x0 [ 94.816635][ T296] hid-generic 0003:046D:C314.0030: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0 [ 94.844879][ T2235] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.851778][ T2235] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.859414][ T2235] device bridge_slave_0 entered promiscuous mode [ 94.869489][ T2235] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.876340][ T2235] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.883591][ T2235] device bridge_slave_1 entered promiscuous mode [ 94.926348][ T2235] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.933189][ T2235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.940316][ T2235] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.947083][ T2235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.957346][ T413] usb 3-1: USB disconnect, device number 17 [ 94.971302][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.979793][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.987257][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.988370][ T28] audit: type=1400 audit(1727869874.338:366): avc: denied { create } for pid=2240 comm="syz.0.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.032868][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.041510][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.048370][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.055537][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.057853][ T24] arvo 0003:1E7D:30D4.0031: unknown main item tag 0x0 [ 95.063869][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.074494][ T24] arvo 0003:1E7D:30D4.0031: unknown main item tag 0x0 [ 95.076853][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.077131][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.098380][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.111014][ T28] audit: type=1400 audit(1727869874.458:367): avc: denied { map } for pid=2244 comm="syz.0.738" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.140457][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.148046][ T28] audit: type=1400 audit(1727869874.458:368): avc: denied { execute } for pid=2244 comm="syz.0.738" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 95.152639][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.181558][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.188928][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.196646][ T2235] device veth0_vlan entered promiscuous mode [ 95.203294][ T24] arvo 0003:1E7D:30D4.0031: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 95.224981][ T2235] device veth1_macvtap entered promiscuous mode [ 95.232967][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.247008][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.247093][ T732] usb 2-1: USB disconnect, device number 19 [ 95.255209][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.291401][ T28] audit: type=1400 audit(1727869874.638:369): avc: denied { mounton } for pid=2235 comm="syz-executor" path="/root/syzkaller.iCYZpb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 95.321647][ T28] audit: type=1400 audit(1727869874.638:370): avc: denied { read } for pid=2253 comm="syz.0.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.467564][ T8] device bridge_slave_1 left promiscuous mode [ 95.473555][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.493759][ T8] device bridge_slave_0 left promiscuous mode [ 95.505232][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.513135][ T8] device veth1_macvtap left promiscuous mode [ 95.519940][ T8] device veth0_vlan left promiscuous mode [ 95.551027][ T28] audit: type=1400 audit(1727869874.898:371): avc: denied { write } for pid=2267 comm="syz.2.746" name="fd" dev="proc" ino=29967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.584067][ T2270] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 95.591067][ T28] audit: type=1400 audit(1727869874.898:372): avc: denied { add_name } for pid=2267 comm="syz.2.746" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 95.621451][ T60] usb 4-1: USB disconnect, device number 17 [ 95.803935][ T2292] loop4: detected capacity change from 0 to 256 [ 95.821524][ T2292] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xcf532d90, utbl_chksum : 0xe619d30d) [ 95.857970][ T2298] netem: change failed [ 95.873334][ T2304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.762'. [ 95.997010][ T413] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 96.050901][ T2335] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 96.059959][ T2335] exFAT-fs (loop4): unable to read boot sector [ 96.065973][ T2335] exFAT-fs (loop4): failed to read boot sector [ 96.071981][ T2335] exFAT-fs (loop4): failed to recognize exfat type [ 96.106959][ T296] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 96.146294][ T2340] loop3: detected capacity change from 0 to 512 [ 96.158568][ T2340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 96.167355][ T2340] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff) [ 96.276992][ T732] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 96.407175][ T413] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 96.417889][ T413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.428619][ T413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.438215][ T413] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 96.446954][ T60] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 96.451136][ T413] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 96.467320][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.476517][ T413] usb 2-1: config 0 descriptor?? [ 96.486999][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.497694][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.507258][ T296] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.516063][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.517096][ T732] usb 1-1: Using ep0 maxpacket: 16 [ 96.525897][ T296] usb 3-1: config 0 descriptor?? [ 96.647127][ T732] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.657858][ T732] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 96.667414][ T732] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 96.680157][ T732] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.688977][ T732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.717029][ T2327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 96.737416][ T732] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 96.816996][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.827890][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.837399][ T60] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 96.846232][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.854625][ T60] usb 4-1: config 0 descriptor?? [ 96.958069][ T732] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 96.971027][ T413] wacom 0003:056A:0331.0032: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 96.974759][ T732] usb 1-1: USB disconnect, device number 18 [ 97.175850][ T24] usb 2-1: USB disconnect, device number 20 [ 97.337550][ T60] belkin 0003:1020:0006.0034: report_id 0 is invalid [ 97.344090][ T60] belkin 0003:1020:0006.0034: item 0 0 1 8 parsing failed [ 97.351176][ T60] belkin 0003:1020:0006.0034: parse failed [ 97.356812][ T60] belkin: probe of 0003:1020:0006.0034 failed with error -22 [ 97.366969][ T312] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 97.449929][ T2365] syz.0.789[2365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.449979][ T2365] syz.0.789[2365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.461915][ T2365] syz.0.789[2365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.473062][ T2365] syz.0.789[2365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.539286][ T39] usb 4-1: USB disconnect, device number 18 [ 97.607054][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 97.741887][ T2375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 97.751078][ T2375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 97.759939][ T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 97.782819][ T2379] input: syz0 as /devices/virtual/input/input56 [ 97.887055][ T312] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 97.896127][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.904505][ T312] usb 5-1: Product: syz [ 97.908522][ T312] usb 5-1: Manufacturer: syz [ 97.908794][ T296] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input57 [ 97.912911][ T312] usb 5-1: SerialNumber: syz [ 97.916976][ T312] usb 5-1: config 0 descriptor?? [ 97.925812][ T296] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0033/input/input58 [ 97.946782][ T296] uclogic 0003:256C:006D.0033: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 97.971847][ T312] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 97.979650][ T312] usb 5-1: Detected FT232H [ 98.048687][ T1861] EXT4-fs (loop3): unmounting filesystem. [ 98.125669][ T296] usb 3-1: USB disconnect, device number 18 [ 98.127454][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 98.140474][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.148762][ T24] usb 1-1: config 0 descriptor?? [ 98.176973][ T312] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 98.436991][ T312] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 98.447417][ T312] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 98.642533][ T296] usb 5-1: USB disconnect, device number 20 [ 98.651769][ T296] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 98.671141][ T296] ftdi_sio 5-1:0.0: device disconnected [ 98.686298][ T2391] netem: change failed [ 100.077308][ T2394] device wg2 entered promiscuous mode [ 100.086574][ T2398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 100.097770][ T2398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'. [ 100.136180][ T2403] loop2: detected capacity change from 0 to 1024 [ 100.147063][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 100.153901][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 100.159415][ T2403] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.161227][ T24] usb 1-1: USB disconnect, device number 19 [ 100.176398][ T2403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f014c01c, mo2=0002] [ 100.186607][ T2403] System zones: 0-1, 3-36 [ 100.193175][ T2403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.307991][ T2410] loop2: detected capacity change from 1024 to 11 [ 100.334969][ T2403] syz.2.806: attempt to access beyond end of device [ 100.334969][ T2403] loop2: rw=14337, sector=44, nr_sectors = 2 limit=11 [ 100.367101][ T2403] Buffer I/O error on dev loop2, logical block 22, lost sync page write [ 100.377393][ T2403] EXT4-fs error (device loop2): ext4_write_inode:5324: inode #18: block 22: comm syz.2.806: IO error syncing inode [ 100.447755][ T2033] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5870: Out of memory [ 100.456665][ T2033] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz-executor: mark_inode_dirty error [ 100.470151][ T2033] EXT4-fs (loop2): unmounting filesystem. [ 100.491462][ T2421] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.498575][ T2421] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.505820][ T2421] device bridge_slave_0 entered promiscuous mode [ 100.512926][ T2421] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.520048][ T2421] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.527428][ T2421] device bridge_slave_1 entered promiscuous mode [ 100.569288][ T2421] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.576143][ T2421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.583291][ T2421] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.590150][ T2421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.615705][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.631188][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.642443][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.674924][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.692585][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.699465][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.727285][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.735349][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.742220][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.784036][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.792022][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.806614][ T2421] device veth0_vlan entered promiscuous mode [ 100.829056][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.829256][ T2442] loop4: detected capacity change from 0 to 512 [ 100.837431][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.850008][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.857831][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.883191][ T2421] device veth1_macvtap entered promiscuous mode [ 100.890326][ T2442] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.824: bad orphan inode 17 [ 100.901965][ T2442] ext4_test_bit(bit=16, block=4) = 1 [ 100.908879][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.916625][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 100.916639][ T28] audit: type=1326 audit(1727869880.258:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5948f7dff9 code=0x7ffc0000 [ 100.922659][ T2442] is_bad_inode(inode)=0 [ 100.949749][ T2442] NEXT_ORPHAN(inode)=0 [ 100.953724][ T2442] max_ino=32 [ 100.956747][ T2442] i_nlink=1 [ 100.959775][ T2442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.968353][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.968647][ T28] audit: type=1326 audit(1727869880.258:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f5948f7dff9 code=0x7ffc0000 [ 100.978760][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.001450][ T28] audit: type=1326 audit(1727869880.258:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5948f7dff9 code=0x7ffc0000 [ 101.034156][ T28] audit: type=1326 audit(1727869880.298:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2446 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5948f7dff9 code=0x7ffc0000 [ 101.057574][ T334] device bridge_slave_1 left promiscuous mode [ 101.065049][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.072561][ T334] device bridge_slave_0 left promiscuous mode [ 101.073104][ T2442] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.824: bg 0: block 7: invalid block bitmap [ 101.078807][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.099946][ T334] device veth1_macvtap left promiscuous mode [ 101.105852][ T334] device veth0_vlan left promiscuous mode [ 101.116356][ T2235] EXT4-fs (loop4): unmounting filesystem. [ 101.273362][ T2436] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.286948][ T2436] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.304392][ T2436] device bridge_slave_0 entered promiscuous mode [ 101.322076][ T2436] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.336201][ T2436] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.348275][ T2436] device bridge_slave_1 entered promiscuous mode [ 101.396375][ T2436] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.403245][ T2436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.410341][ T2436] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.417114][ T2436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.435187][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.442459][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.451853][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.459094][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.473753][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.481724][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.488565][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.495928][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.503951][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.510783][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.527513][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.536076][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.544097][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.553742][ T2436] device veth0_vlan entered promiscuous mode [ 101.560043][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.568159][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.575395][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.588231][ T2436] device veth1_macvtap entered promiscuous mode [ 101.597571][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.605644][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.614034][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=811 state=1 status=67 (errno 9: Bad file descriptor) [ 101.846993][ T28] audit: type=1326 audit(1727869881.188:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2516 comm="syz.1.843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f341537dff9 code=0x0 [ 102.017033][ T39] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 102.287491][ T334] device bridge_slave_1 left promiscuous mode [ 102.293403][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.300734][ T334] device bridge_slave_0 left promiscuous mode [ 102.306631][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.314189][ T334] device bridge_slave_1 left promiscuous mode [ 102.320169][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.327299][ T334] device bridge_slave_0 left promiscuous mode [ 102.333193][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.340919][ T334] device veth1_macvtap left promiscuous mode [ 102.346716][ T334] device veth0_vlan left promiscuous mode [ 102.352680][ T334] device veth1_macvtap left promiscuous mode [ 102.358529][ T334] device veth0_vlan left promiscuous mode [ 103.397831][ T334] device bridge_slave_1 left promiscuous mode [ 103.403741][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.410970][ T334] device bridge_slave_0 left promiscuous mode [ 103.416866][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.424397][ T334] device bridge_slave_1 left promiscuous mode [ 103.430474][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.437738][ T334] device bridge_slave_0 left promiscuous mode [ 103.443632][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.451398][ T334] device bridge_slave_1 left promiscuous mode [ 103.457426][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.464492][ T334] device bridge_slave_0 left promiscuous mode [ 103.470497][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.477967][ T334] device bridge_slave_1 left promiscuous mode [ 103.483853][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.491100][ T334] device bridge_slave_0 left promiscuous mode [ 103.497058][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.504826][ T334] device veth1_macvtap left promiscuous mode [ 103.510709][ T334] device veth0_vlan left promiscuous mode [ 103.516321][ T334] device veth1_macvtap left promiscuous mode [ 103.522230][ T334] device veth0_vlan left promiscuous mode [ 103.527965][ T334] device veth1_macvtap left promiscuous mode [ 103.533752][ T334] device veth0_vlan left promiscuous mode [ 103.539705][ T334] device veth1_macvtap left promiscuous mode [ 103.545500][ T334] device veth0_vlan left promiscuous mode